$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: XvxPfjO4/vANAp/Jrvp/rYb4JgdCU0XihCSNkO1KyFA= Subject key identifier: DB:C6:1A:ED:11:9D:08:DD:C1:B1:5A:6A:8D:24:C4:2F:B4:2E:66:19 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 0198744FD46837D7D82F2CB299B360621239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1628 Signing time: Mon 04 Aug 2025 09:00:45 +0000 Manifest this update: Mon 04 Aug 2025 09:00:45 +0000 Manifest next update: Tue 05 Aug 2025 09:00:45 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: 6BAtV+Z8uBtR0DuLn+Z+Uuxhawtb5oAINRVLswzM/h8=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:4f:d4:68:37:d7:d8:2f:2c:b2:99:b3:60:62:12:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Aug 4 09:00:45 2025 GMT Not After : Aug 5 09:00:45 2025 GMT Subject: CN=dbc61aed119d08ddc1b15a6a8d24c42fb42e6619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:d3:e2:6f:92:23:b0:25:83:f6:0a:f9:18: 4b:84:c2:06:49:98:0f:d2:9d:53:f3:0a:22:51:f3: 91:8b:e8:ae:98:6a:1f:b3:f4:dc:e1:34:19:52:28: f0:8d:5d:67:48:ec:05:b2:62:32:9d:64:23:87:d7: a6:cf:e5:4b:26:48:8e:ff:cb:a0:45:20:7a:9f:4a: 81:8e:8a:1a:fb:d1:e6:50:5e:c3:3f:6a:47:aa:aa: 6d:7a:e9:af:b1:d3:25:30:2e:5c:a7:dd:ec:b4:c9: 2c:54:e0:e2:98:87:94:c9:51:ca:4f:42:94:6d:a9: 98:06:6c:a9:23:8e:7b:df:43:c6:a4:07:ab:bc:c0: d9:86:76:d1:c4:21:e5:2c:b0:eb:5f:03:3e:53:7e: a8:a6:81:49:eb:1e:70:22:86:b2:0f:cb:98:41:da: 93:e5:42:ea:f0:bf:ad:be:5b:e8:34:85:1c:78:b6: c7:fc:b6:c1:f3:17:ee:65:7e:21:dd:e9:67:f4:f5: 42:3d:ef:e5:16:91:57:ac:08:7e:6b:d8:9c:34:c5: 65:b1:af:8b:74:88:3f:29:92:c1:3a:66:82:81:a3: 89:0c:95:82:75:49:96:f7:ab:ca:21:0f:6d:4d:95: a2:9c:10:51:aa:54:11:eb:43:f8:cd:2d:7b:ec:c0: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C6:1A:ED:11:9D:08:DD:C1:B1:5A:6A:8D:24:C4:2F:B4:2E:66:19 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:a7:a2:83:8f:bc:7f:98:84:e1:93:c1:48:b7:eb:b0:33:32: ce:49:96:17:ae:03:cf:95:75:02:26:55:f5:3c:26:a6:33:a0: b9:24:05:49:5c:7e:9b:c4:f8:76:13:d8:b1:22:7d:56:4c:1c: e1:13:aa:d8:36:ad:70:8b:d5:41:d5:77:b1:b3:6f:bb:d8:3e: a7:04:ca:e6:81:42:0c:14:62:dd:6d:fa:83:77:d0:ae:10:46: c6:c1:99:30:1a:4d:3c:b2:7b:2a:7b:89:78:d7:ae:e1:74:ba: 54:ea:9d:fd:17:80:29:f2:60:84:a5:b6:f4:a9:ea:5b:00:33: 89:df:59:6c:d2:50:14:36:d8:f0:f2:17:ba:07:1c:84:7d:0f: 9a:ca:b7:d8:5e:ad:df:61:54:b4:b4:19:e5:a9:a5:04:cc:9e: 22:26:d1:b8:8d:58:bb:76:84:f3:68:22:e4:d8:f7:39:30:50: d7:bf:0e:8a:28:45:1f:04:7c:7e:4e:f7:cd:58:7b:65:10:46: 06:45:83:f3:fe:d1:7b:14:80:1c:0f:57:3e:ab:23:d0:95:49: d7:77:10:e8:2d:ba:99:f8:d7:de:65:eb:72:e8:e5:24:7c:b7: e9:c5:25:fd:7d:ce:15:82:c8:65:8e:a5:e7:16:ad:08:2c:28: 6c:6b:c3:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0T9RoN9fYLyyymbNgYhI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwODA0MDkwMDQ1WhcNMjUwODA1MDkwMDQ1WjAzMTEwLwYDVQQD EyhkYmM2MWFlZDExOWQwOGRkYzFiMTVhNmE4ZDI0YzQyZmI0MmU2NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzT4m+SI7Alg/YK+RhLhMIGSZgP 0p1T8woiUfORi+iumGofs/Tc4TQZUijwjV1nSOwFsmIynWQjh9emz+VLJkiO/8ug RSB6n0qBjooa+9HmUF7DP2pHqqpteumvsdMlMC5cp93stMksVODimIeUyVHKT0KU bamYBmypI45730PGpAervMDZhnbRxCHlLLDrXwM+U36opoFJ6x5wIoayD8uYQdqT 5ULq8L+tvlvoNIUceLbH/LbB8xfuZX4h3eln9PVCPe/lFpFXrAh+a9icNMVlsa+L dIg/KZLBOmaCgaOJDJWCdUmW96vKIQ9tTZWinBBRqlQR60P4zS177MC3VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvGGu0RnQjdwbFaao0kxC+0LmYZMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1qeig4+8 f5iE4ZPBSLfrsDMyzkmWF64Dz5V1AiZV9TwmpjOguSQFSVx+m8T4dhPYsSJ9Vkwc 4ROq2DatcIvVQdV3sbNvu9g+pwTK5oFCDBRi3W36g3fQrhBGxsGZMBpNPLJ7KnuJ eNeu4XS6VOqd/ReAKfJghKW29KnqWwAzid9ZbNJQFDbY8PIXugcchH0Pmsq32F6t 32FUtLQZ5amlBMyeIibRuI1Yu3aE82gi5Nj3OTBQ178OiihFHwR8fk73zVh7ZRBG BkWD8/7RexSAHA9XPqsj0JVJ13cQ6C26mfjX3mXrcujlJHy36cUl/X3OFYLIZY6l 5xatCCwobGvDpA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:48 2025 by rpki-client