$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: b4eHEclyW8bFxrEXbFa+C3WJWl7u6VheCp2rK8l0KG0= Subject key identifier: 04:22:2C:B8:16:6F:04:85:43:0D:B8:3D:59:B7:E8:A2:3F:F0:0E:83 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019872CF476BEC1E7EC9E3163403C9226497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 08CA Signing time: Mon 04 Aug 2025 02:00:43 +0000 Manifest this update: Mon 04 Aug 2025 02:00:43 +0000 Manifest next update: Tue 05 Aug 2025 02:00:43 +0000 Files and hashes: 1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=) 2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=) 3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=) 4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: cAT5iuweCr0kIV/PBRrY0CryarLNti98FNIyNE43vXY=) 6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=) 7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=) 8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=) 9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=) 10: WOeiegJydkxVE1vjiwGx6ATuFEY.roa (hash: QQ0/7N7W7DkOMFKnzycHP6yPRCFiGEALp7b0CpA3RZ0=) 11: XaybEw_MkTY28IquFGQbHrSpM7k.roa (hash: TwRW1DKYPixpCJP4Q5rOfw8R+B/zkE9LC0Lipg8NmYQ=) 12: bRbW8P3bIsKJRNWaiMr-Kb4NIoQ.roa (hash: v77US+PxQpF7B60vIVmGcjZu9Cj7y5UanTIDHgPIp4M=) 13: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (hash: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=) 14: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=) 15: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=) 16: zhgXsJzHOSwZ2vW5K0nW1lO6VOU.roa (hash: Yt6DAu9pUe7VspoY5/vTE3HMguhU3RqgQubcaVH+tIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:47:6b:ec:1e:7e:c9:e3:16:34:03:c9:22:64:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Aug 4 02:00:43 2025 GMT Not After : Aug 5 02:00:43 2025 GMT Subject: CN=04222cb8166f0485430db83d59b7e8a23ff00e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:1a:41:8c:52:42:30:0a:59:4a:47:e3:e9: 8b:5e:9c:43:c0:97:c0:a9:3e:1b:d8:81:d5:b9:0b: c9:53:c6:36:b9:46:5a:71:5b:e4:30:5c:fe:1f:ff: 71:47:4f:56:2a:ac:12:f7:fa:0f:de:e0:0f:a1:4e: 5b:79:8d:25:ca:12:c5:b3:ef:fa:a9:7f:f8:ee:c1: 9f:40:e6:c9:42:ea:cc:f3:fe:a2:7a:16:9f:34:cf: 78:b7:13:6d:87:10:a8:25:9d:c5:00:61:88:a1:2e: e7:d6:30:b7:ad:30:0f:7b:dc:90:8d:fd:02:2b:43: 1a:8f:b5:af:06:42:e3:eb:18:2d:d7:9d:04:e9:1a: 8e:a2:06:05:6d:87:b5:2a:1b:00:1b:cf:a1:1f:b6: 18:48:d4:3d:35:64:4a:ec:80:e9:61:a6:0b:b0:39: 96:b5:80:34:b9:e7:ad:a5:06:3b:35:41:41:51:90: 9a:76:52:28:e0:29:77:c0:da:c9:a3:64:85:90:3b: 13:5e:26:de:a6:c9:01:f3:d4:31:3a:1d:c2:34:13: bd:7f:c4:93:62:75:4e:67:14:29:97:cd:a3:16:fe: f8:d6:98:aa:a3:0a:4a:63:36:77:d0:f5:0b:50:d1: 08:60:9f:2b:36:d3:05:ec:50:6c:f0:75:e8:a7:0f: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:22:2C:B8:16:6F:04:85:43:0D:B8:3D:59:B7:E8:A2:3F:F0:0E:83 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ab:1a:8d:b4:0c:3f:0c:22:84:ac:1a:d9:37:87:48:bd:43: 0c:4e:a0:1a:02:0f:32:aa:74:93:a4:99:56:30:da:05:94:74: 59:dc:ac:f5:c3:61:b0:04:63:10:cd:05:0b:19:44:7c:69:dc: fd:66:8f:5e:a9:6a:a4:b7:a1:6b:45:d4:ee:22:34:1b:b0:29: 87:77:76:53:a7:d3:98:0a:ba:2b:25:c8:b2:7c:ee:23:6b:1d: d3:44:90:b9:e1:51:00:7f:f5:7e:07:dd:de:33:6b:07:24:e3: 11:fd:74:36:cb:85:f5:1a:85:50:34:21:93:9c:3c:2f:08:ad: 62:95:28:f8:e4:9b:68:84:8b:96:1b:d6:95:4f:d0:88:76:bb: 00:33:10:c8:90:d1:00:25:bb:ad:20:43:8c:f6:9c:c7:b1:1c: 52:1b:be:9b:f4:49:37:a8:02:06:03:24:0c:1e:1f:9d:6d:07: 79:70:44:9a:09:9e:d7:17:8b:af:d2:52:e0:2e:4e:bf:f4:54: ae:79:ef:13:b0:63:20:09:30:fb:08:27:0e:b1:fd:e3:2d:26: 77:e4:17:d6:f6:82:6e:84:f5:91:f5:f5:c4:c2:0b:b9:09:88: be:0b:2d:fb:84:27:fd:c2:76:ed:f7:3d:f4:83:a8:74:7e:2b: c8:b3:dc:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz0dr7B5+yeMWNAPJImSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjUwODA0MDIwMDQzWhcNMjUwODA1MDIwMDQzWjAzMTEwLwYDVQQD EygwNDIyMmNiODE2NmYwNDg1NDMwZGI4M2Q1OWI3ZThhMjNmZjAwZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvokaQYxSQjAKWUpH4+mLXpxDwJfA qT4b2IHVuQvJU8Y2uUZacVvkMFz+H/9xR09WKqwS9/oP3uAPoU5beY0lyhLFs+/6 qX/47sGfQObJQurM8/6iehafNM94txNthxCoJZ3FAGGIoS7n1jC3rTAPe9yQjf0C K0Maj7WvBkLj6xgt150E6RqOogYFbYe1KhsAG8+hH7YYSNQ9NWRK7IDpYaYLsDmW tYA0ueetpQY7NUFBUZCadlIo4Cl3wNrJo2SFkDsTXibepskB89QxOh3CNBO9f8ST YnVOZxQpl82jFv741piqowpKYzZ30PULUNEIYJ8rNtMF7FBs8HXopw+7xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQiLLgWbwSFQw24PVm36KI/8A6DMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALasajbQM PwwihKwa2TeHSL1DDE6gGgIPMqp0k6SZVjDaBZR0Wdys9cNhsARjEM0FCxlEfGnc /WaPXqlqpLeha0XU7iI0G7Aph3d2U6fTmAq6KyXIsnzuI2sd00SQueFRAH/1fgfd 3jNrByTjEf10NsuF9RqFUDQhk5w8LwitYpUo+OSbaISLlhvWlU/QiHa7ADMQyJDR ACW7rSBDjPacx7EcUhu+m/RJN6gCBgMkDB4fnW0HeXBEmgme1xeLr9JS4C5Ov/RU rnnvE7BjIAkw+wgnDrH94y0md+QX1vaCboT1kfX1xMILuQmIvgst+4Qn/cJ27fc9 9IOodH4ryLPchw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:22 2025 by rpki-client