$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json) Hash identifier: RSWIrbhH0V/MkFXdKUA36h2cD979QGY0SK3a01nhBOU= Subject key identifier: 30:BB:DD:9A:1A:91:06:58:B8:B1:77:68:E3:34:44:1D:92:87:E3:D5 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019874503C6E491F11162682321512967813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft Manifest number: 168A Signing time: Mon 04 Aug 2025 09:01:11 +0000 Manifest this update: Mon 04 Aug 2025 09:01:11 +0000 Manifest next update: Tue 05 Aug 2025 09:01:11 +0000 Files and hashes: 1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=) 2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=) 3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=) 4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=) 5: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=) 6: 8WOfV91hbQYdAjxlTShs8uS2qZo.roa (hash: qdOgiq3j/uyZoQiWebZOCQ+/u3LpOi/JdsIzY2Q5Yjw=) 7: AtXlOawZdjPmm3puVBv7GZMWlfQ.roa (hash: vVuVIrsjIYBLs2LghbKeETLKvGp7KVL3rCFnfZ3++Ng=) 8: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=) 9: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: cvXTVlOOtV+gkB/auo5aTPeWnGs6dklxISis2MP0T9E=) 10: F2_wmuIlF_Fr4vPu8BktVcIEbJc.roa (hash: C0sIjHqlElpVFUnaeluaj4Gkav9vDU7HqpMYLEQ16Xw=) 11: IZW8Cqwr_D-Po8j-rY2wg4gV9R4.roa (hash: faXsZmEmW7RzlcMaOmIqHP7qeNNDTUksCHYYQluTIl0=) 12: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=) 13: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=) 14: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=) 15: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=) 16: Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa (hash: M4QfE5BRH6sL/kzaNewIcbpvUYFUCu0wLgQkXw6CEIw=) 17: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=) 18: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=) 19: S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa (hash: kXDSSLoM6qJEx5/HbAZQ1hKhZOVmnkuIzLWPNIFvHc8=) 20: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=) 21: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=) 22: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=) 23: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=) 24: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=) 25: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=) 26: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=) 27: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=) 28: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=) 29: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=) 30: x9hv5VI53E9lfmCoCZYbXA2hByU.roa (hash: /EpYHmEUvDFytn2JV2b/puVDndIWdyEA5WbCaF8KMCM=) 31: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:50:3c:6e:49:1f:11:16:26:82:32:15:12:96:78:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Aug 4 09:01:11 2025 GMT Not After : Aug 5 09:01:11 2025 GMT Subject: CN=30bbdd9a1a910658b8b17768e334441d9287e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:f0:3b:f8:eb:06:99:58:7c:ca:55:a3:2d: 9a:e0:0f:6e:be:54:26:db:41:45:78:ee:79:8d:a6: 21:52:f5:63:ee:af:9d:91:cd:94:8b:cb:50:60:d1: a4:b2:74:6b:63:23:d2:aa:fd:ab:b5:a3:75:00:f7: 6a:ab:e6:15:e0:e1:54:d5:01:0c:12:5f:99:37:f7: 5e:0d:45:63:79:04:0a:32:da:cc:b1:4e:ea:1d:83: 9e:9e:f7:c1:71:78:f8:e3:9d:08:75:a0:03:53:24: c2:fd:07:3b:72:1d:17:db:d3:b5:2d:4b:0a:d4:50: 6c:fb:8e:09:57:78:d4:e5:05:b8:8a:71:cc:fb:c9: f3:54:eb:a0:2a:96:0e:0a:df:a4:48:ce:4e:5e:8c: b8:9a:6d:c5:e5:33:c6:61:f4:b8:48:04:2b:65:44: 0b:94:e6:13:18:bb:78:75:e6:9b:88:9a:3e:1a:5a: 15:72:f3:f4:c4:c7:5c:ec:c2:cc:f0:68:12:68:48: 0e:2a:e1:b7:e7:43:6b:2c:58:c1:e7:af:84:8c:d4: e1:bd:eb:bd:ea:a7:06:53:2b:d9:c9:bd:1f:45:e2: 99:8d:20:8f:3a:d5:66:65:8e:d9:0f:2e:54:10:8f: 45:bf:70:92:13:1d:06:7b:82:ed:5b:aa:97:f3:48: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BB:DD:9A:1A:91:06:58:B8:B1:77:68:E3:34:44:1D:92:87:E3:D5 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7b:dc:6a:13:25:04:29:e4:a2:22:03:43:2e:87:89:4a:94: d2:72:f2:5e:96:67:74:8b:52:bc:3a:9d:a0:eb:8a:4b:ea:b9: 73:fb:ef:61:6b:37:e4:ab:5d:d3:39:27:07:d3:21:1d:83:59: 31:2b:00:2e:ab:1d:83:fc:b5:85:8c:fc:34:4c:62:3c:7b:e0: 1b:61:c1:00:3b:84:14:a1:05:e6:bb:08:9c:d8:8f:24:70:08: 20:a7:46:62:42:c7:e7:5a:70:85:89:14:bd:32:a3:a7:40:ec: 84:58:34:fd:62:e3:91:cd:7d:1b:de:43:dd:95:0d:08:05:38: 95:d7:89:c8:08:55:1e:7a:fc:a2:ea:3d:c6:36:f7:ae:69:96: 46:0a:08:8e:1b:d6:4b:93:fa:3f:b3:2a:28:5c:10:4e:fd:6b: 63:63:dc:26:d2:76:3f:ed:c1:26:db:6c:08:14:21:c0:e4:b2: 20:97:64:9b:9d:03:ac:98:59:fb:22:38:94:37:11:29:57:ff: 0c:d1:e6:d9:5d:e3:fe:76:ac:b4:b5:ef:59:a3:78:2d:40:78: c3:6c:86:d9:86:3c:26:bd:d3:53:fd:a3:ed:37:f1:aa:a7:a5: a9:eb:0e:34:6a:28:2a:c3:cf:fc:f1:63:fd:97:55:7e:99:d1: 51:1f:bd:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0UDxuSR8RFiaCMhUSlngTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjUwODA0MDkwMTExWhcNMjUwODA1MDkwMTExWjAzMTEwLwYDVQQD EygzMGJiZGQ5YTFhOTEwNjU4YjhiMTc3NjhlMzM0NDQxZDkyODdlM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2zwO/jrBplYfMpVoy2a4A9uvlQm 20FFeO55jaYhUvVj7q+dkc2Ui8tQYNGksnRrYyPSqv2rtaN1APdqq+YV4OFU1QEM El+ZN/deDUVjeQQKMtrMsU7qHYOenvfBcXj4450IdaADUyTC/Qc7ch0X29O1LUsK 1FBs+44JV3jU5QW4inHM+8nzVOugKpYOCt+kSM5OXoy4mm3F5TPGYfS4SAQrZUQL lOYTGLt4deabiJo+GloVcvP0xMdc7MLM8GgSaEgOKuG350NrLFjB56+EjNThveu9 6qcGUyvZyb0fReKZjSCPOtVmZY7ZDy5UEI9Fv3CSEx0Ge4LtW6qX80i4PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDC73ZoakQZYuLF3aOM0RB2Sh+PVMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHvcahMl BCnkoiIDQy6HiUqU0nLyXpZndItSvDqdoOuKS+q5c/vvYWs35Ktd0zknB9MhHYNZ MSsALqsdg/y1hYz8NExiPHvgG2HBADuEFKEF5rsInNiPJHAIIKdGYkLH51pwhYkU vTKjp0DshFg0/WLjkc19G95D3ZUNCAU4ldeJyAhVHnr8ouo9xjb3rmmWRgoIjhvW S5P6P7MqKFwQTv1rY2PcJtJ2P+3BJttsCBQhwOSyIJdkm50DrJhZ+yI4lDcRKVf/ DNHm2V3j/nastLXvWaN4LUB4w2yG2YY8Jr3TU/2j7TfxqqelqesONGooKsPP/PFj /ZdVfpnRUR+9HQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:30 2025 by rpki-client