$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: 5OuJTjTDbqOUqFCncFdomAE4Zoy1mpAFx6YwhhcAJRk= Subject key identifier: 98:AD:FA:22:03:90:62:18:44:5F:EE:2E:38:E8:8E:65:06:A9:1C:E5 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019874BD84F8059DEF2BD4642294257B4AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 1628 Signing time: Mon 04 Aug 2025 11:00:34 +0000 Manifest this update: Mon 04 Aug 2025 11:00:34 +0000 Manifest next update: Tue 05 Aug 2025 11:00:34 +0000 Files and hashes: 1: 3mF0o8ObxMG1vPes91bWbw0tnsA.roa (hash: UJhMkfjPft/QeBcE4Z26qo9FCGStMKR3bjVpARVrtgI=) 2: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (hash: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: aDHwtgDAQ0LghcYv5nqKxYb/KmJbmUT4qhA5+E5kaqE=) 4: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (hash: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=) 5: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (hash: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=) 6: YMGBAXPMmaM-UVPjn2WwHTw99Dg.roa (hash: sho3Yzk1N5vFpwylHlhAFYtjqhBGr18UkAS7r1nBk5k=) 7: Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (hash: 57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=) 8: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (hash: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=) 9: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (hash: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=) 10: tkwaNKS943lqIrcwP4wFPu7CmLA.roa (hash: LUFlc4a0Hl1DhNUuKnQE9p25tD0hoETIl0Xrym01FDA=) 11: xiXR5CA0LknEtnJqptzk0g7U8nI.roa (hash: hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:bd:84:f8:05:9d:ef:2b:d4:64:22:94:25:7b:4a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Aug 4 11:00:34 2025 GMT Not After : Aug 5 11:00:34 2025 GMT Subject: CN=98adfa2203906218445fee2e38e88e6506a91ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:33:7d:42:46:43:42:88:e8:92:cb:eb:ef: 26:ca:38:01:5d:50:8b:98:ed:c6:63:7d:89:3a:b9: c5:46:2f:f7:a9:de:a2:80:de:4d:52:a3:2e:95:22: 62:e3:2a:0c:2d:14:bb:ef:54:9e:6e:f1:95:af:6d: a2:14:f6:5a:3d:73:46:ca:11:d5:2b:8f:2f:15:38: c5:98:c2:3a:ad:a7:9d:54:21:28:72:f1:47:c6:30: 8b:b0:7a:c0:5f:6a:a3:a8:08:3f:6d:1c:b9:d0:90: 5a:d9:80:b7:88:78:f2:3d:a5:77:ad:09:f6:b5:cb: 90:2b:89:14:e3:cf:52:b5:14:b3:6d:79:55:81:96: d8:1c:9f:5f:a9:72:70:cd:ae:7e:f1:ae:a5:73:94: f7:6e:c1:a8:5a:a9:24:08:e9:98:4c:7a:e0:21:69: 16:29:3c:00:07:af:6a:80:30:28:20:e6:da:67:7c: 38:8e:fe:af:9c:38:5a:84:d9:f9:d9:a5:24:0d:7f: 94:9c:dd:da:27:5f:f2:52:24:bc:e4:08:c5:21:c8: 3f:c2:5d:12:a3:a1:0d:bc:d4:f2:9d:5a:fe:4e:4e: 97:13:3e:93:4a:7f:69:d0:a3:4f:b8:42:5f:c1:b5: 2c:24:e2:08:9e:80:ce:e9:36:ae:5b:7f:9b:36:97: ac:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AD:FA:22:03:90:62:18:44:5F:EE:2E:38:E8:8E:65:06:A9:1C:E5 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:aa:af:d3:8e:9e:d6:fb:58:23:7e:df:6e:98:b0:59:b8:5b: a0:96:ed:68:c8:b2:6e:be:d5:cb:71:74:0e:cb:16:50:ce:9d: 32:1b:5a:b7:85:0e:04:67:e0:fb:ea:ad:69:c4:dc:11:be:1f: 52:10:2f:30:f8:62:81:f8:29:76:d0:20:26:b4:8d:15:f7:9a: f6:3b:f9:f7:76:21:d3:7f:82:f8:98:8d:c3:30:8c:6a:2e:6d: 16:74:d6:45:bd:a1:76:b1:06:99:39:9c:8b:6b:a3:9c:06:3d: d5:ba:d6:ca:f6:78:e4:02:30:18:4f:ec:33:76:62:31:c3:05: 4a:22:55:0d:e6:21:e6:ee:64:1c:f9:de:e4:1f:aa:28:be:15: 11:59:69:aa:27:87:f5:4a:9a:9b:40:97:b8:70:c8:6f:f3:ff: 66:01:67:d2:87:fb:86:79:10:6d:ed:4d:e3:fc:7b:1d:42:75: 62:54:8a:83:47:ef:95:3a:eb:24:0f:76:43:93:28:5f:bc:23: 55:29:01:66:1d:d6:aa:6a:32:a9:b3:9a:f7:85:0a:34:b4:d1: ab:9a:e3:9e:92:dc:71:9a:a9:bb:5e:f7:e4:07:fa:cf:aa:1b: 5d:9b:7b:96:01:61:83:7d:df:d5:7e:92:f6:de:33:65:33:62: ea:31:a1:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0vYT4BZ3vK9RkIpQle0rQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUwODA0MTEwMDM0WhcNMjUwODA1MTEwMDM0WjAzMTEwLwYDVQQD Eyg5OGFkZmEyMjAzOTA2MjE4NDQ1ZmVlMmUzOGU4OGU2NTA2YTkxY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZIzfUJGQ0KI6JLL6+8myjgBXVCL mO3GY32JOrnFRi/3qd6igN5NUqMulSJi4yoMLRS771SebvGVr22iFPZaPXNGyhHV K48vFTjFmMI6raedVCEocvFHxjCLsHrAX2qjqAg/bRy50JBa2YC3iHjyPaV3rQn2 tcuQK4kU489StRSzbXlVgZbYHJ9fqXJwza5+8a6lc5T3bsGoWqkkCOmYTHrgIWkW KTwAB69qgDAoIObaZ3w4jv6vnDhahNn52aUkDX+UnN3aJ1/yUiS85AjFIcg/wl0S o6ENvNTynVr+Tk6XEz6TSn9p0KNPuEJfwbUsJOIInoDO6TauW3+bNpes+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJit+iIDkGIYRF/uLjjojmUGqRzlMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKqv046e 1vtYI37fbpiwWbhboJbtaMiybr7Vy3F0DssWUM6dMhtat4UOBGfg++qtacTcEb4f UhAvMPhigfgpdtAgJrSNFfea9jv593Yh03+C+JiNwzCMai5tFnTWRb2hdrEGmTmc i2ujnAY91brWyvZ45AIwGE/sM3ZiMcMFSiJVDeYh5u5kHPne5B+qKL4VEVlpqieH 9Uqam0CXuHDIb/P/ZgFn0of7hnkQbe1N4/x7HUJ1YlSKg0fvlTrrJA92Q5MoX7wj VSkBZh3WqmoyqbOa94UKNLTRq5rjnpLccZqpu1735Af6z6obXZt7lgFhg33f1X6S 9t4zZTNi6jGhNg== -----END CERTIFICATE-----Generated at Mon Aug 4 18:34:58 2025 by rpki-client