$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: 221mOZR2U8rmLkGiZNRbaf0hzPH9WQZnv7OK7qCJX6Y= Subject key identifier: 48:E6:25:96:8F:C8:FC:0B:7E:EC:B7:7E:B5:5F:72:D1:C0:2C:3F:93 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019776E530BBD174E4A2ABECB7065FDF9A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0BEB Signing time: Mon 16 Jun 2025 04:00:21 +0000 Manifest this update: Mon 16 Jun 2025 04:00:21 +0000 Manifest next update: Tue 17 Jun 2025 04:00:21 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: C8wby0kyFYfDFzl6VjUMTr8/zm2x7/wixttFt/iGB7g=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=) 11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:e5:30:bb:d1:74:e4:a2:ab:ec:b7:06:5f:df:9a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jun 16 04:00:21 2025 GMT Not After : Jun 17 04:00:21 2025 GMT Subject: CN=48e625968fc8fc0b7eecb77eb55f72d1c02c3f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:a5:b6:ae:8b:98:ed:c5:27:55:b7:e1:73: 7c:ac:eb:57:d5:7b:6c:e6:b4:69:76:6a:be:bb:9d: 89:e2:89:c0:73:07:56:b2:4d:df:a1:76:f2:35:d5: 5a:ac:a3:82:f9:5b:a0:03:04:3d:61:4f:5c:85:ee: 4a:12:5b:c5:ec:55:02:7a:42:a5:d0:98:dd:27:ad: 0a:1a:cb:6e:ed:75:e5:a9:a8:5b:18:20:9b:be:fc: 29:33:7c:92:83:ae:2d:68:cb:bb:59:64:5f:f4:7f: e3:3d:31:77:17:db:22:b3:b3:c0:66:6a:5e:11:12: 27:7a:2c:75:df:78:fb:79:34:42:b9:63:57:06:f7: af:24:7b:38:3f:e8:36:16:76:fc:73:6c:10:f8:e1: 88:08:23:b5:3b:e2:74:e8:e0:da:90:f5:81:c7:0b: 68:0a:1e:8a:78:e1:73:c6:e5:e6:3e:23:06:5d:d9: 7b:10:ef:26:46:47:81:ca:e1:d7:87:7c:94:db:e8: 68:44:b2:35:40:ee:be:34:fa:85:07:f2:50:db:eb: 10:90:66:1b:47:a0:f3:6e:65:14:43:0f:c6:af:5d: f6:28:5f:85:25:6f:b9:f5:95:a3:c6:5b:47:2e:65: f8:16:41:44:5b:41:c1:48:06:6a:e7:ea:10:53:b0: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E6:25:96:8F:C8:FC:0B:7E:EC:B7:7E:B5:5F:72:D1:C0:2C:3F:93 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:33:64:24:f2:0b:87:4a:a9:4f:5b:a6:14:2a:9c:0b:3f:72: 75:b5:4c:60:89:77:38:5e:01:04:44:30:15:bd:3c:64:1c:9c: f8:4a:2d:49:1b:3e:46:e2:65:86:2d:40:ed:f0:ac:5d:ed:c2: 05:77:3e:d5:25:a8:2b:14:1e:5e:2d:89:6b:47:32:3c:dd:43: 32:16:09:87:56:23:a5:2a:1c:71:9b:04:1b:04:3e:52:53:40: de:9a:be:78:c6:54:e9:ce:f6:62:c5:a5:bd:d3:dc:9a:6e:9d: 58:2c:c0:57:a7:cf:5f:1b:1e:6f:b0:aa:3b:78:28:29:7d:7d: 53:1e:c3:ee:64:9d:e4:65:8e:35:f0:b4:e5:44:c6:83:a9:a7: a0:d8:20:0c:0a:9d:aa:d1:c2:6e:e1:fb:b1:59:06:ae:58:a0: 61:c1:e3:0c:56:c2:a2:1d:64:05:c4:d8:c8:32:4b:27:d9:02: 51:3e:43:19:b3:8d:f5:95:3d:ae:f9:40:92:1a:41:18:de:04: 35:c6:66:80:10:50:11:ef:08:75:67:81:b7:33:a5:3d:95:d4: 81:48:21:fd:c5:ef:f2:87:fd:38:13:4c:64:be:93:6f:71:ad: d7:26:71:02:e1:4c:c8:5d:ad:56:35:e2:0a:f6:ad:26:82:24: a9:9b:8a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd25TC70XTkoqvstwZf35pdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwNjE2MDQwMDIxWhcNMjUwNjE3MDQwMDIxWjAzMTEwLwYDVQQD Eyg0OGU2MjU5NjhmYzhmYzBiN2VlY2I3N2ViNTVmNzJkMWMwMmMzZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZGltq6LmO3FJ1W34XN8rOtX1Xts 5rRpdmq+u52J4onAcwdWsk3foXbyNdVarKOC+VugAwQ9YU9che5KElvF7FUCekKl 0JjdJ60KGstu7XXlqahbGCCbvvwpM3ySg64taMu7WWRf9H/jPTF3F9sis7PAZmpe ERIneix133j7eTRCuWNXBvevJHs4P+g2Fnb8c2wQ+OGICCO1O+J06ODakPWBxwto Ch6KeOFzxuXmPiMGXdl7EO8mRkeByuHXh3yU2+hoRLI1QO6+NPqFB/JQ2+sQkGYb R6DzbmUUQw/Gr132KF+FJW+59ZWjxltHLmX4FkFEW0HBSAZq5+oQU7AGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjmJZaPyPwLfuy3frVfctHALD+TMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjNkJPIL h0qpT1umFCqcCz9ydbVMYIl3OF4BBEQwFb08ZByc+EotSRs+RuJlhi1A7fCsXe3C BXc+1SWoKxQeXi2Ja0cyPN1DMhYJh1YjpSoccZsEGwQ+UlNA3pq+eMZU6c72YsWl vdPcmm6dWCzAV6fPXxseb7CqO3goKX19Ux7D7mSd5GWONfC05UTGg6mnoNggDAqd qtHCbuH7sVkGrligYcHjDFbCoh1kBcTYyDJLJ9kCUT5DGbON9ZU9rvlAkhpBGN4E NcZmgBBQEe8IdWeBtzOlPZXUgUgh/cXv8of9OBNMZL6Tb3Gt1yZxAuFMyF2tVjXi CvatJoIkqZuKnA== -----END CERTIFICATE-----Generated at Mon Jun 16 08:09:29 2025 by rpki-client