$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: k5yqLVeCAsxyG7ulggZ6kSKgEXCP3P1sEDpyC3k6jbc= Subject key identifier: 4D:1F:19:6D:B6:A7:15:90:6F:C9:EA:CE:B8:7D:43:6D:4F:B2:59:D2 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 01987863AE129BFE35172B5649CA4E48CFC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1631 Signing time: Tue 05 Aug 2025 04:00:55 +0000 Manifest this update: Tue 05 Aug 2025 04:00:55 +0000 Manifest next update: Wed 06 Aug 2025 04:00:55 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 6: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 7: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 8: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 9: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 10: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 11: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 12: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 13: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 14: aTKoAcJI3FXVrw8kkI8TnAJjwsw.roa (hash: o921TO0oKHyxKUzXhR4Rw3JAqYi3aDFIH1je791fzRQ=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: RPvOWBXSYF6cuTIlEiLz4jBujOThwEDYK6AM+ZDU0YQ=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 00:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:78:63:ae:12:9b:fe:35:17:2b:56:49:ca:4e:48:cf:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Aug 5 04:00:55 2025 GMT Not After : Aug 6 04:00:55 2025 GMT Subject: CN=4d1f196db6a715906fc9eaceb87d436d4fb259d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:04:e0:e1:06:eb:21:fe:52:a2:ed:7e:04: be:2f:28:ad:22:45:23:33:46:46:87:ff:b6:0c:5b: 7d:07:db:7c:48:1c:25:7d:fd:5a:56:60:52:94:3a: fe:4a:af:5f:3b:e3:76:69:a3:46:d1:e9:46:94:82: cb:8e:47:a4:a2:08:bb:91:4e:76:7b:dc:13:34:8e: b0:1a:87:fe:03:11:0b:b9:fb:67:33:ac:c2:2f:03: 94:42:c9:63:ed:e3:ba:6f:a7:d9:ae:ec:cb:d0:98: 15:f3:3a:28:cd:2b:c3:12:1c:fb:16:7d:ea:22:79: 3e:a3:12:e1:ce:c5:03:d2:bb:89:23:64:3b:2e:99: 0a:e4:8a:24:87:3b:07:9f:24:5d:31:83:b3:55:8e: 96:08:2b:de:87:1f:16:14:a0:40:aa:cd:fa:09:fc: b0:03:52:ac:ee:3e:4e:d9:d3:3e:1c:57:33:5f:d3: 32:e8:3c:1e:52:c1:b6:3a:a2:bc:a9:e3:5a:57:ec: 46:9c:a8:a7:61:b7:a9:12:28:87:03:d1:08:df:2f: 91:fc:0e:bd:4b:24:6a:e3:5f:01:62:79:35:04:3b: ec:cc:b1:c7:7b:4e:8e:cd:4d:b4:4c:e9:a0:f3:69: 2a:1e:fa:3a:a4:04:ce:cd:38:3d:a4:f9:51:94:29: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:19:6D:B6:A7:15:90:6F:C9:EA:CE:B8:7D:43:6D:4F:B2:59:D2 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ee:1e:5e:97:00:53:11:e5:01:f8:a6:58:2f:35:b3:84:cf: 4a:2b:fd:9f:11:b6:d1:73:d0:94:ed:e0:e8:50:87:d0:67:83: 62:74:aa:3f:b6:4a:80:31:b1:91:31:2d:9c:9e:1c:e2:3a:fe: 61:ce:84:80:54:f4:cd:62:31:a0:f9:42:59:35:28:51:a9:a9: 3b:01:cb:6b:d6:a8:40:bb:7c:32:bf:62:13:b6:e9:85:50:fd: 79:77:87:ab:eb:d9:15:18:bb:a8:d2:6a:e2:77:84:85:5d:6a: 68:e8:92:69:69:18:3b:60:32:ee:f0:98:08:ac:62:13:9a:30: fb:9a:83:fb:c8:92:f9:f5:e8:ee:9d:a6:08:03:82:fb:62:04: 6d:d9:35:e8:5a:74:2a:37:0a:47:af:bd:e7:0b:05:99:ad:93: ed:90:c0:ff:42:c9:20:98:68:00:7b:aa:7e:b1:68:d5:5e:48: bd:91:48:ff:b9:15:d4:6a:40:c6:af:4f:3e:f0:60:a9:63:70: c2:fc:3e:1b:ad:9a:29:d2:66:7f:1a:d5:3b:c4:46:74:13:eb: 9f:12:9e:85:7d:2c:b5:62:5f:a8:82:08:d5:01:50:98:54:6a: 82:8f:ff:44:d0:59:53:54:b6:60:4a:ac:a4:a5:d4:49:3c:2a: b4:f4:8d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh4Y64Sm/41FytWScpOSM/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUwODA1MDQwMDU1WhcNMjUwODA2MDQwMDU1WjAzMTEwLwYDVQQD Eyg0ZDFmMTk2ZGI2YTcxNTkwNmZjOWVhY2ViODdkNDM2ZDRmYjI1OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuYE4OEG6yH+UqLtfgS+LyitIkUj M0ZGh/+2DFt9B9t8SBwlff1aVmBSlDr+Sq9fO+N2aaNG0elGlILLjkekogi7kU52 e9wTNI6wGof+AxELuftnM6zCLwOUQslj7eO6b6fZruzL0JgV8zoozSvDEhz7Fn3q Ink+oxLhzsUD0ruJI2Q7LpkK5IokhzsHnyRdMYOzVY6WCCvehx8WFKBAqs36Cfyw A1Ks7j5O2dM+HFczX9My6DweUsG2OqK8qeNaV+xGnKinYbepEiiHA9EI3y+R/A69 SyRq418BYnk1BDvszLHHe06OzU20TOmg82kqHvo6pATOzTg9pPlRlCnqFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0fGW22pxWQb8nqzrh9Q21PslnSMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu4eXpcA UxHlAfimWC81s4TPSiv9nxG20XPQlO3g6FCH0GeDYnSqP7ZKgDGxkTEtnJ4c4jr+ Yc6EgFT0zWIxoPlCWTUoUampOwHLa9aoQLt8Mr9iE7bphVD9eXeHq+vZFRi7qNJq 4neEhV1qaOiSaWkYO2Ay7vCYCKxiE5ow+5qD+8iS+fXo7p2mCAOC+2IEbdk16Fp0 KjcKR6+95wsFma2T7ZDA/0LJIJhoAHuqfrFo1V5IvZFI/7kV1GpAxq9PPvBgqWNw wvw+G62aKdJmfxrVO8RGdBPrnxKehX0stWJfqIII1QFQmFRqgo//RNBZU1S2YEqs pKXUSTwqtPSNJA== -----END CERTIFICATE-----Generated at Tue Aug 5 08:18:22 2025 by rpki-client