$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: Ostn/vYNlU73PSSbuyENBTYqgsRK8keu1B0ZemrJrq4= Subject key identifier: 0E:04:A3:BE:85:C7:72:19:6B:BF:C0:ED:68:0A:E1:8E:ED:58:F4:DB Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 01988BB31E79B2A907A7BEDE14159B06B40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 16FA Signing time: Fri 08 Aug 2025 22:00:28 +0000 Manifest this update: Fri 08 Aug 2025 22:00:28 +0000 Manifest next update: Sat 09 Aug 2025 22:00:28 +0000 Files and hashes: 1: 00MgoZoYQtZGwQrOezTGMFJxBeQ.roa (hash: yEhoJZzpLJl/SN7s0GnAIUxYjWxoW/1J4yfFxR29F7o=) 2: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 3: 2Zg9bkLjb6sjh-SBcD_if8J6YZA.roa (hash: G9tlD2FnArJ5VM3PyNYxLaU80PpwuhOOdJmcIcyOv4M=) 4: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 5: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: Fd8mJDNpeMfmqDjebkkfyG7kwNfVqOnSZJmC8Mn+bEA=) 6: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 7: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 8: R6Licv6NLP_I82IT8tFbLXICQ9A.roa (hash: Uu3NP/ojc9yaRMHIV+iAnhtCoc/HxBSte3ffN6gxVGU=) 9: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 10: ke7Pxta8VpaoIZehaqEkUOxJVjY.roa (hash: /w8HaARGeZYUDrzIiinqB3uzBNqHoroNWtdxiuibk3g=) 11: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 12: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 13: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:b3:1e:79:b2:a9:07:a7:be:de:14:15:9b:06:b4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Aug 8 22:00:28 2025 GMT Not After : Aug 9 22:00:28 2025 GMT Subject: CN=0e04a3be85c772196bbfc0ed680ae18eed58f4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:28:ad:c4:21:f5:28:bd:28:c4:46:92:9b:d9: 83:fb:7b:3e:d8:d7:0d:d4:ec:10:89:1e:b0:85:f5: 28:8c:da:12:0a:d4:1f:be:9f:7b:0d:94:73:c6:bc: 9f:1a:e0:c2:9e:69:12:18:5a:65:94:d9:a7:23:cc: 16:e0:91:2b:6a:c6:a9:26:0b:f5:c9:d7:02:70:0b: d1:03:49:5b:fb:81:ec:4c:05:c4:57:e0:e9:39:ef: 83:e3:cf:17:be:ca:93:c7:90:81:f2:a2:a2:92:d0: 8e:86:aa:8f:68:ac:7d:43:d3:ff:44:bd:d9:ec:bf: 1d:32:1a:68:bf:45:7f:d4:04:37:6b:d2:28:01:f4: 4f:b5:53:96:75:c5:19:94:e4:83:47:c1:fb:0b:c6: 57:5a:dc:8f:3c:c7:17:4f:51:97:c3:5f:1f:71:aa: f3:ea:2c:1d:fb:7d:f5:40:b2:4c:c7:47:a8:de:3a: 9f:8e:33:a1:3a:c9:d9:3a:03:d0:b4:5a:bc:38:16: e9:4f:51:14:d1:53:4a:38:64:c9:4a:b7:78:76:b4: 62:bd:dd:30:e3:24:24:4b:02:20:6b:1d:e8:a6:d2: 7a:20:69:ee:91:cc:c2:41:18:44:6a:7a:fd:0e:0f: e8:40:28:ef:33:e9:c0:83:a7:c1:f9:42:77:c2:b3: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:A3:BE:85:C7:72:19:6B:BF:C0:ED:68:0A:E1:8E:ED:58:F4:DB X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:85:93:3c:33:e6:80:e9:7c:87:0b:b5:64:b9:75:f3:39:d1: 95:52:24:1e:a1:07:d9:79:9d:8e:42:dd:f6:5b:4e:c1:14:e6: 47:de:2e:4c:82:5e:7c:66:32:82:37:d4:93:c5:b6:3f:7f:c8: 75:b1:1b:1a:85:40:73:ea:5c:7a:51:e9:f3:0b:6b:60:c6:04: f6:00:8d:91:1f:4a:80:e0:36:84:c1:d8:59:90:88:a6:fe:1a: 42:71:a5:72:fc:21:61:bc:9d:f6:89:16:1c:18:5e:59:46:e9: 7d:2a:dc:2c:0d:b9:0c:d6:5c:af:28:4b:33:14:90:81:24:30: 5b:a4:cc:1a:68:1c:45:a8:63:d0:30:99:a5:83:b6:35:0f:73: 0a:07:b5:4b:e7:b0:03:90:34:82:d9:e6:51:dd:e0:7a:5f:09: 63:36:bd:e5:28:a5:96:df:c5:12:72:82:11:d8:e9:f9:1d:85: 6a:63:ac:dd:87:f7:a9:36:57:d5:99:a3:a7:d2:d4:ce:da:48: 8d:4f:fd:78:11:c0:42:20:7f:ef:3e:8e:28:63:92:cc:b6:7d: b1:81:60:ce:92:38:f8:87:40:03:4e:4f:d7:98:92:6e:d8:7d: 55:75:e4:99:9a:8f:03:40:ac:14:02:a2:ee:4c:02:91:20:2d: 61:6f:d5:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiLsx55sqkHp77eFBWbBrQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwODA4MjIwMDI4WhcNMjUwODA5MjIwMDI4WjAzMTEwLwYDVQQD EygwZTA0YTNiZTg1Yzc3MjE5NmJiZmMwZWQ2ODBhZTE4ZWVkNThmNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiitxCH1KL0oxEaSm9mD+3s+2NcN 1OwQiR6whfUojNoSCtQfvp97DZRzxryfGuDCnmkSGFpllNmnI8wW4JErasapJgv1 ydcCcAvRA0lb+4HsTAXEV+DpOe+D488XvsqTx5CB8qKiktCOhqqPaKx9Q9P/RL3Z 7L8dMhpov0V/1AQ3a9IoAfRPtVOWdcUZlOSDR8H7C8ZXWtyPPMcXT1GXw18fcarz 6iwd+331QLJMx0eo3jqfjjOhOsnZOgPQtFq8OBbpT1EU0VNKOGTJSrd4drRivd0w 4yQkSwIgax3optJ6IGnukczCQRhEanr9Dg/oQCjvM+nAg6fB+UJ3wrOBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4Eo76Fx3IZa7/A7WgK4Y7tWPTbMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYWTPDPm gOl8hwu1ZLl18znRlVIkHqEH2XmdjkLd9ltOwRTmR94uTIJefGYygjfUk8W2P3/I dbEbGoVAc+pcelHp8wtrYMYE9gCNkR9KgOA2hMHYWZCIpv4aQnGlcvwhYbyd9okW HBheWUbpfSrcLA25DNZcryhLMxSQgSQwW6TMGmgcRahj0DCZpYO2NQ9zCge1S+ew A5A0gtnmUd3gel8JYza95Sillt/FEnKCEdjp+R2FamOs3Yf3qTZX1Zmjp9LUztpI jU/9eBHAQiB/7z6OKGOSzLZ9sYFgzpI4+IdAA05P15iSbth9VXXkmZqPA0CsFAKi 7kwCkSAtYW/VJg== -----END CERTIFICATE-----Generated at Sat Aug 9 05:39:21 2025 by rpki-client