$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft File: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json) Hash identifier: /AzIW1mms6q0CFxwEXdLzqDHW3ANTM4VAp/e5OXhfxE= Subject key identifier: 2C:78:BD:D1:06:2A:4B:6E:29:8B:2C:D2:F0:7F:3E:2F:8E:1B:7D:3F Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 01987526BBDA8B342A6F1678E52200585AE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft Manifest number: 1725 Signing time: Mon 04 Aug 2025 12:55:29 +0000 Manifest this update: Mon 04 Aug 2025 12:55:29 +0000 Manifest next update: Tue 05 Aug 2025 12:55:29 +0000 Files and hashes: 1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=) 2: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=) 3: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=) 4: 56ynW-tMrHzaNsG7sH1wdFERI2s.roa (hash: IKfB0xjiL+k3DgvsHtHSeQu4uN+X+KGo7/petrFvOV0=) 5: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=) 6: 7MZR3mjsAfILO-kcvcAwJd6d2Ao.roa (hash: 34KPCBnRe8nkhxBNb/c94bJh+NIbMikAhxDsnW5Rhtk=) 7: 8_e44fwq9kNvIUDAMmdWVKedXYc.roa (hash: JPJXoz7dEfpt3vFSPPlkHuJK7aTOFYsiRL4CidoV47o=) 8: 9HEZa5qCfE-i-viyFzuLFjDXw2A.roa (hash: EpNMwEon27kK973TfZZ8kBFg9KuenuIkIxjrgr3/5HU=) 9: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=) 10: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=) 11: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: JWDrF7BlQKoNkXvLTaipbLGf1Mh2U0YNrX444RX5W+o=) 12: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=) 13: Kopeu70g1kU-3eX8ZIc2mReesIY.roa (hash: ztR/+a52TTIyYf3p/JslJHcz82LQOgwps87F/37JYEg=) 14: OCPVGl1peHlEh5xCGuK3bL8qTL8.roa (hash: ODjW3HaeaPU7MMPg1i99Po/ddkSUNUhgFTUigxFDscw=) 15: OaJSkzPg47mQ4rIOwkpdoPx8kX4.roa (hash: UyojqcoIyduZyG+Ubu8/4tRZIqXeRa/61802aE+vRWM=) 16: PDCQ_tcZw8HWtOvB4qdfFfnGv2w.roa (hash: rOsSzp/2Qn7zzipRULSHdV5Ez72cOtvODtaM0ekkqKs=) 17: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=) 18: Rh_lGayRGbOt5ieswPshE5gVHRQ.roa (hash: mC9VCpAqF4feJF5prCrA3SZDDjWRV8WzJ74r+/aLdvg=) 19: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=) 20: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=) 21: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=) 22: W5sBzYpoHJtI8NA-fUrPIcsYmxw.roa (hash: Zjyo8aebwmo43iU7YPG0Rw8SBj65vOSaN9AeZRmqyVE=) 23: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=) 24: XHgKjO38pNfBvguSYH5AzB6NU48.roa (hash: cLraLK0HrBC1+uwEoZJlLzb/oO0jxC4wj9o4Xo8AIII=) 25: dO_3_lkuSpBs0k3VpIoZr4eK7Vw.roa (hash: lHo729eN1pX0e/RrJWQ+8UBamk/XXCDCZHjnQE1bNfw=) 26: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=) 27: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=) 28: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=) 29: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=) 30: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=) 31: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=) 32: ucJ6oZ-NcbAXdgi6HJYOVyk08OA.roa (hash: n6wJOnNyXxPTy5zNsySY3nXhHxZ2SIbrK7swKaWaEp4=) 33: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=) 34: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=) 35: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:26:bb:da:8b:34:2a:6f:16:78:e5:22:00:58:5a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Aug 4 12:55:29 2025 GMT Not After : Aug 5 12:55:29 2025 GMT Subject: CN=2c78bdd1062a4b6e298b2cd2f07f3e2f8e1b7d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:0b:23:63:76:b4:31:43:a3:73:81:55:86: 20:e2:97:14:48:61:ef:7b:ca:df:7d:f2:23:af:6a: 41:59:6a:24:42:79:bb:c8:b0:55:be:5a:eb:6d:e8: 5a:02:c0:72:30:f3:85:16:f1:7b:64:b4:39:98:61: 3d:a3:a2:b4:d6:e4:e2:ec:6c:68:3d:40:55:cf:e3: e4:74:30:8c:76:b8:b7:95:b0:19:32:0d:53:36:d5: 26:18:94:8e:53:a0:13:2f:be:84:48:69:3d:fe:c6: f9:8e:7c:45:e6:6c:a6:9d:62:af:6d:4c:60:d1:bf: a6:93:18:1d:13:a8:4b:c8:b3:dd:f9:c6:ab:79:bd: 57:88:45:2b:38:3d:e6:0b:fc:82:27:e9:3a:65:54: 12:01:61:21:54:11:07:25:6e:52:59:f3:34:30:fb: f3:4e:9f:3b:60:e4:5f:78:41:a5:6d:ad:19:be:c2: 28:52:78:93:7c:de:0f:6a:21:cf:e0:f5:d7:a7:8c: 9b:f2:41:59:61:90:7d:bd:59:53:b6:db:1d:b4:a7: 61:13:a7:91:11:b6:d6:8e:48:00:29:cf:8c:4c:4d: 4a:a7:98:d0:19:c9:05:3d:48:93:53:f9:84:26:f2: f5:83:b3:bb:77:85:39:b5:bd:c0:c0:20:62:55:8a: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:78:BD:D1:06:2A:4B:6E:29:8B:2C:D2:F0:7F:3E:2F:8E:1B:7D:3F X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:78:3a:f6:d8:de:45:9a:bf:10:d8:4e:29:dc:ad:f8:e4:d2: 42:18:00:c4:a3:b8:23:4e:a2:65:5a:a4:01:c5:19:9e:42:d2: d4:d1:94:ce:90:a9:c5:e5:8a:9d:a6:14:eb:fb:6e:06:b9:c5: 59:56:84:73:8d:13:2b:b1:2b:8f:b5:24:1c:e5:53:c7:39:f7: 23:3e:2c:5e:46:73:fb:2a:55:b7:88:15:3b:d1:7b:73:98:aa: fc:f3:a9:77:4e:d1:b8:f5:43:6e:35:9c:b6:3d:72:88:b7:c7: e1:b0:65:4b:e7:4c:ec:84:97:78:09:cb:43:2f:9d:6d:87:2d: 1d:49:3f:1c:a1:90:18:92:4a:70:49:66:7b:5a:7c:86:06:50: e2:f8:96:34:72:4e:b7:c1:b8:80:6e:0c:03:67:9b:be:b1:48: 08:db:56:24:3a:b2:83:a3:81:b0:80:4d:85:55:e7:1d:da:ad: 0e:e3:b6:37:b7:dc:f7:97:b4:2a:a6:8e:35:c0:1d:dd:bd:f3: d8:68:da:5b:29:10:e8:eb:81:d5:d7:72:8b:60:65:51:11:0b: 75:5d:6d:d8:90:19:4d:f8:6c:de:32:c2:9b:ce:56:7e:79:54: 3f:3c:d6:81:e7:74:e4:9a:ec:bb:65:dc:dd:c3:2d:26:cb:da: 9e:40:fb:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1JrvaizQqbxZ45SIAWFroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUwODA0MTI1NTI5WhcNMjUwODA1MTI1NTI5WjAzMTEwLwYDVQQD EygyYzc4YmRkMTA2MmE0YjZlMjk4YjJjZDJmMDdmM2UyZjhlMWI3ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB8LI2N2tDFDo3OBVYYg4pcUSGHv e8rfffIjr2pBWWokQnm7yLBVvlrrbehaAsByMPOFFvF7ZLQ5mGE9o6K01uTi7Gxo PUBVz+PkdDCMdri3lbAZMg1TNtUmGJSOU6ATL76ESGk9/sb5jnxF5mymnWKvbUxg 0b+mkxgdE6hLyLPd+careb1XiEUrOD3mC/yCJ+k6ZVQSAWEhVBEHJW5SWfM0MPvz Tp87YORfeEGlba0ZvsIoUniTfN4PaiHP4PXXp4yb8kFZYZB9vVlTttsdtKdhE6eR EbbWjkgAKc+MTE1Kp5jQGckFPUiTU/mEJvL1g7O7d4U5tb3AwCBiVYpwawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCx4vdEGKktuKYss0vB/Pi+OG30/MB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQng69tje RZq/ENhOKdyt+OTSQhgAxKO4I06iZVqkAcUZnkLS1NGUzpCpxeWKnaYU6/tuBrnF WVaEc40TK7Erj7UkHOVTxzn3Iz4sXkZz+ypVt4gVO9F7c5iq/POpd07RuPVDbjWc tj1yiLfH4bBlS+dM7ISXeAnLQy+dbYctHUk/HKGQGJJKcElme1p8hgZQ4viWNHJO t8G4gG4MA2ebvrFICNtWJDqyg6OBsIBNhVXnHdqtDuO2N7fc95e0KqaONcAd3b3z 2GjaWykQ6OuB1ddyi2BlURELdV1t2JAZTfhs3jLCm85WfnlUPzzWged05Jrsu2Xc 3cMtJsvankD7Cw== -----END CERTIFICATE-----Generated at Mon Aug 4 18:30:21 2025 by rpki-client