$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: 7gFCGzO4QjsOOIuLheT0WsmmqmzIST9lxreGEknO9Jo= Subject key identifier: AD:B8:08:5E:EA:8E:2E:C1:6F:9F:F9:E4:98:00:4D:5E:56:45:CE:50 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019886564053149292B797FB7533FAF4CD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0FBC Signing time: Thu 07 Aug 2025 21:00:56 +0000 Manifest this update: Thu 07 Aug 2025 21:00:56 +0000 Manifest next update: Fri 08 Aug 2025 21:00:56 +0000 Files and hashes: 1: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 2: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 3: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=) 4: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: aD3VWgA2s6kYl3mp3WhB80r/txPE8hrQfI1Y0tEWDus=) 5: GWboZrvlBziZoBcX3EIZ1oPONJw.roa (hash: AivjmWkJZRMdojRH4kleqZQJ33BcMzsWC3Fh1Qo8D3Q=) 6: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=) 7: Jfbp60TqKTaaXrwQL7LgGpAWEpg.roa (hash: 77aXq5T/xLpRDc/RPjSdhF/Q92mfSJbZ1p52uiAiKLY=) 8: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 9: SRcQTsQI-tcWDkKInxMrE24Ysok.roa (hash: Ahr9YcByWBXusMBM+n1pwDVQOVjVHUrt6dCBioyhQio=) 10: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=) 11: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 12: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 13: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 14: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 15: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 16: jCupyTailD4J3l_LQLBvtP05gjk.roa (hash: D5HBTRbrPgt5UiMToMLoELxSS8TE8kgjWsHI9+xY4kE=) 17: lw1Zlz6QKCraxjr64P-Bxwdv55U.roa (hash: 5LWrcVrad4qCaReJlnte0zGH6a0kztBoWFWkcvEC9G4=) 18: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=) 19: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:86:56:40:53:14:92:92:b7:97:fb:75:33:fa:f4:cd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Aug 7 21:00:56 2025 GMT Not After : Aug 8 21:00:56 2025 GMT Subject: CN=adb8085eea8e2ec16f9ff9e498004d5e5645ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:81:39:ff:d2:b8:62:f0:df:57:7a:08:69: 35:a9:53:12:4f:b2:fe:84:9c:45:fe:06:de:ae:93: 5a:0b:66:5a:5a:2e:df:5b:ab:8a:c3:5f:36:bc:05: 49:25:50:bc:a1:45:97:c0:90:f9:8e:09:77:15:f8: 35:13:c4:0f:0b:5a:3d:a5:f2:c3:f3:06:6f:82:a4: 65:92:ed:5c:77:dd:01:21:8e:98:58:3a:68:8c:53: 6f:bf:f3:e2:bd:6d:db:5d:a7:2b:52:d1:38:ab:03: ea:02:f6:56:a1:fa:61:99:24:8a:5e:a6:dc:7c:fe: ce:8f:df:07:e1:ed:c6:9b:1a:ce:20:b3:62:f2:b5: 94:af:a6:15:3a:ec:7c:e3:86:ee:c2:7a:93:33:8f: ec:12:9a:90:e1:fa:2c:db:12:e0:70:99:1d:1e:2f: 36:2d:80:39:8f:3c:de:4b:c1:13:80:c8:87:1e:3c: 25:f2:d6:bc:eb:61:2f:29:ce:6a:14:1b:ae:00:49: 39:ee:55:12:c9:58:03:60:39:36:51:c1:f1:ca:11: 4d:46:00:28:65:41:f8:30:47:b9:af:d7:0d:b4:3f: e3:f0:18:0d:52:99:36:a7:71:f9:a1:1a:bb:fb:5d: 35:09:c4:80:65:c3:9b:30:ab:da:67:e7:9e:92:11: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:08:5E:EA:8E:2E:C1:6F:9F:F9:E4:98:00:4D:5E:56:45:CE:50 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:43:5d:8d:8f:bf:aa:b6:6b:55:20:e9:07:32:93:2f:a1:84: f5:66:db:e9:c2:9b:f6:03:7b:3a:31:7b:2e:9a:11:8c:b0:9e: f0:ad:74:ae:c6:b1:56:e8:63:c0:9b:b2:3b:a3:60:e4:4f:4f: 64:37:b9:86:09:92:28:a8:85:64:f9:ac:72:3e:d9:d7:62:d2: 7d:13:d5:ab:d6:4a:da:4a:3d:c8:e7:9a:fb:80:69:bd:30:a3: 8d:12:81:56:5b:82:38:ee:a0:43:f7:32:cc:19:02:1c:ea:c9: be:e5:d8:29:c3:22:83:32:92:6e:ca:34:d2:73:03:de:0b:d3: 9e:70:97:21:87:5c:9e:16:4e:4c:d8:f6:76:80:94:10:98:b4: 34:94:9c:0c:9e:c0:7e:5f:24:90:eb:db:b9:c9:b2:26:78:08: 2f:6a:61:45:45:31:46:9a:f9:5f:b0:e6:cf:35:06:68:08:81: c2:48:67:5c:c2:c9:c5:89:e8:18:ce:73:71:11:bd:7b:35:97: 1c:96:ef:9a:8e:77:dc:54:fb:4f:f6:7d:9f:b5:30:eb:f5:f1: 58:8d:92:b9:b7:2e:f6:fd:23:e3:fd:f2:17:59:74:af:50:25: 9b:54:6c:6a:2c:3a:eb:e1:33:c5:48:bd:ea:aa:e0:aa:ea:61: 11:9f:a7:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiGVkBTFJKSt5f7dTP69M1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUwODA3MjEwMDU2WhcNMjUwODA4MjEwMDU2WjAzMTEwLwYDVQQD EyhhZGI4MDg1ZWVhOGUyZWMxNmY5ZmY5ZTQ5ODAwNGQ1ZTU2NDVjZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0leBOf/SuGLw31d6CGk1qVMST7L+ hJxF/gberpNaC2ZaWi7fW6uKw182vAVJJVC8oUWXwJD5jgl3Ffg1E8QPC1o9pfLD 8wZvgqRlku1cd90BIY6YWDpojFNvv/PivW3bXacrUtE4qwPqAvZWofphmSSKXqbc fP7Oj98H4e3GmxrOILNi8rWUr6YVOux844buwnqTM4/sEpqQ4fos2xLgcJkdHi82 LYA5jzzeS8ETgMiHHjwl8ta862EvKc5qFBuuAEk57lUSyVgDYDk2UcHxyhFNRgAo ZUH4MEe5r9cNtD/j8BgNUpk2p3H5oRq7+101CcSAZcObMKvaZ+eekhEs2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK24CF7qji7Bb5/55JgATV5WRc5QMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0NdjY+/ qrZrVSDpBzKTL6GE9Wbb6cKb9gN7OjF7LpoRjLCe8K10rsaxVuhjwJuyO6Ng5E9P ZDe5hgmSKKiFZPmscj7Z12LSfRPVq9ZK2ko9yOea+4BpvTCjjRKBVluCOO6gQ/cy zBkCHOrJvuXYKcMigzKSbso00nMD3gvTnnCXIYdcnhZOTNj2doCUEJi0NJScDJ7A fl8kkOvbucmyJngIL2phRUUxRpr5X7DmzzUGaAiBwkhnXMLJxYnoGM5zcRG9ezWX HJbvmo533FT7T/Z9n7Uw6/XxWI2Subcu9v0j4/3yF1l0r1Alm1Rsaiw66+EzxUi9 6qrgquphEZ+nsQ== -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:26 2025 by rpki-client