$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: KsC/3tSiZEuQeFkRO9yBO1GQOAFnSkZ8kpqhLBLRXTg= Subject key identifier: 56:76:A8:79:28:D4:6D:20:D2:7E:17:EC:85:31:4E:D1:59:A7:27:70 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 01977564A0DABA5D509768BF9C3A353D47AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 15A4 Signing time: Sun 15 Jun 2025 21:00:17 +0000 Manifest this update: Sun 15 Jun 2025 21:00:17 +0000 Manifest next update: Mon 16 Jun 2025 21:00:17 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: vRkLNOO2Dpj9HOyP9+UQdJFexiHJ9jWeYY59pHgWBoI=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:64:a0:da:ba:5d:50:97:68:bf:9c:3a:35:3d:47:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jun 15 21:00:17 2025 GMT Not After : Jun 16 21:00:17 2025 GMT Subject: CN=5676a87928d46d20d27e17ec85314ed159a72770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:f7:ff:82:88:cd:23:33:71:54:77:6a:cc: 9e:3d:34:be:1a:50:e4:f0:d4:77:5a:53:21:9c:75: 9c:57:1a:97:33:c5:da:6e:cd:3c:82:8c:2c:c5:ab: 9a:ec:e5:04:7d:c0:d8:a2:03:51:a8:f7:41:c7:7c: bd:43:71:57:cf:a7:97:7f:95:bd:18:34:03:a7:4f: 8b:20:b4:da:cd:0b:fa:cc:70:66:c4:a8:7e:55:20: b6:17:15:19:20:75:fa:9b:a5:24:07:03:b8:4b:82: 66:fa:41:60:dc:8c:74:5c:96:ba:26:88:a9:f0:66: a9:80:fa:60:c6:f7:79:a2:1c:b3:20:b3:45:6a:36: 5f:e1:f3:ba:b4:ec:77:57:39:d1:df:45:89:5f:cd: 30:bc:48:11:45:3e:7a:cf:46:74:4a:26:70:a2:e5: e0:27:36:1e:8b:00:78:17:16:5c:7b:df:02:85:38: 24:a4:8b:2a:d3:e6:85:25:6d:52:97:e7:ee:fa:c2: 61:1b:cf:3d:fe:b7:ed:fa:cb:27:af:0c:73:05:8d: 8c:4c:da:48:2b:fa:a5:dc:42:96:d2:12:af:a1:15: c5:53:fc:7c:41:25:27:7d:7a:43:4f:70:ad:e4:c0: 4b:49:74:df:6d:e1:f3:ac:4a:3d:89:63:ba:8b:2d: e8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:A8:79:28:D4:6D:20:D2:7E:17:EC:85:31:4E:D1:59:A7:27:70 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b7:f3:cb:60:b4:4f:f0:14:8b:2e:8f:c1:aa:f5:c6:2e:7b: b9:65:4d:70:e8:14:8c:4d:57:89:c4:df:92:41:a2:4e:5c:6d: 11:78:97:08:58:8f:92:23:98:b2:33:be:7d:df:38:f0:3c:5e: df:28:94:bf:f8:2e:37:5d:42:19:6c:73:1e:b1:8c:9d:5e:16: 42:ec:8a:17:13:c0:76:68:f6:61:69:a9:1f:f0:43:2b:0b:cb: 5a:bd:25:9d:99:06:69:a4:6b:85:ae:7a:21:78:2f:78:c9:2d: fa:b6:5b:1b:8b:7b:23:3d:d7:bd:cf:d5:fc:ad:78:f2:69:64: 6b:01:6d:6e:30:86:15:38:34:fa:1f:da:c1:e7:30:d9:87:39: 10:ad:ee:33:f3:95:99:b5:c0:2f:8e:d8:00:59:30:6e:d4:b4: 35:d7:29:55:c5:7e:cf:23:5f:e6:4a:bb:92:d5:28:59:cc:44: fc:49:45:18:cd:28:7f:51:8f:23:8e:95:eb:24:f5:f2:28:5d: 66:71:20:81:2f:de:38:b6:00:a3:69:aa:78:4c:19:c9:b2:5b: 31:fd:95:d8:0e:5b:88:4f:47:9e:ce:bc:16:95:b9:bc:fd:3c: ac:0d:0f:b7:63:d3:04:85:6d:39:57:78:d5:b9:5f:89:6e:95: c5:89:88:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd1ZKDaul1Ql2i/nDo1PUetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwNjE1MjEwMDE3WhcNMjUwNjE2MjEwMDE3WjAzMTEwLwYDVQQD Eyg1Njc2YTg3OTI4ZDQ2ZDIwZDI3ZTE3ZWM4NTMxNGVkMTU5YTcyNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApev3/4KIzSMzcVR3asyePTS+GlDk 8NR3WlMhnHWcVxqXM8Xabs08gowsxaua7OUEfcDYogNRqPdBx3y9Q3FXz6eXf5W9 GDQDp0+LILTazQv6zHBmxKh+VSC2FxUZIHX6m6UkBwO4S4Jm+kFg3Ix0XJa6Joip 8GapgPpgxvd5ohyzILNFajZf4fO6tOx3VznR30WJX80wvEgRRT56z0Z0SiZwouXg JzYeiwB4FxZce98ChTgkpIsq0+aFJW1Sl+fu+sJhG889/rft+ssnrwxzBY2MTNpI K/ql3EKW0hKvoRXFU/x8QSUnfXpDT3Ct5MBLSXTfbeHzrEo9iWO6iy3oywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ2qHko1G0g0n4X7IUxTtFZpydwMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELfzy2C0 T/AUiy6Pwar1xi57uWVNcOgUjE1XicTfkkGiTlxtEXiXCFiPkiOYsjO+fd848Dxe 3yiUv/guN11CGWxzHrGMnV4WQuyKFxPAdmj2YWmpH/BDKwvLWr0lnZkGaaRrha56 IXgveMkt+rZbG4t7Iz3Xvc/V/K148mlkawFtbjCGFTg0+h/awecw2Yc5EK3uM/OV mbXAL47YAFkwbtS0NdcpVcV+zyNf5kq7ktUoWcxE/ElFGM0of1GPI46V6yT18ihd ZnEggS/eOLYAo2mqeEwZybJbMf2V2A5biE9Hns68FpW5vP08rA0Pt2PTBIVtOVd4 1blfiW6VxYmIIQ== -----END CERTIFICATE-----Generated at Mon Jun 16 00:40:13 2025 by rpki-client