$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft File: 7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json) Hash identifier: Si4qljTTGrDL8fxhsjs5eSbGstiHoQIzwRMUOdhJZKE= Subject key identifier: 61:38:B4:A5:7E:17:69:A1:B7:F0:9B:BF:FD:1B:9D:25:3D:2D:01:0C Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 0198868D7CF3A47F48EE3661F1ABC2525502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft Manifest number: 1668 Signing time: Thu 07 Aug 2025 22:01:16 +0000 Manifest this update: Thu 07 Aug 2025 22:01:16 +0000 Manifest next update: Fri 08 Aug 2025 22:01:16 +0000 Files and hashes: 1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=) 2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=) 3: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=) 4: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=) 5: 7mljAx2MPE8ckRZfqaa9qIHwI78.roa (hash: QoswDUBIDzIT7x/nZLY3TWZiOCoIUk8QVtrt2GI34Tc=) 6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: 2rHRfiG1jww1p0+wk8k4G/eNmw1/ht8jpNYf6lWIFIY=) 7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=) 8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=) 9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=) 10: X6QCTOwOC8y3vNqfakDVWl14x2E.roa (hash: ntyGFIij13k4RvM2mOeeSG9K/6TRfBr3RSElp30qqF4=) 11: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=) 12: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=) 13: nxONRr35yfVjJyyHJ14q4Tj1wU4.roa (hash: +bkryBLmQu7w4ldoQCmP9JbDgt+kLUslVyNWfoUmV6M=) 14: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=) 15: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:86:8d:7c:f3:a4:7f:48:ee:36:61:f1:ab:c2:52:55:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Aug 7 22:01:16 2025 GMT Not After : Aug 8 22:01:16 2025 GMT Subject: CN=6138b4a57e1769a1b7f09bbffd1b9d253d2d010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:dc:4a:7c:ee:de:fe:ca:33:f8:ea:14:d1: db:74:94:a2:9b:8d:bf:fc:21:ed:98:16:8b:cc:0a: 86:2b:bc:0f:39:63:cb:37:e1:5e:f1:ae:cc:2b:ba: df:93:11:4f:d6:54:f9:06:4b:31:59:96:cf:03:da: 12:89:03:02:07:67:fa:b6:57:ed:6c:12:b0:e7:a6: c8:88:72:ab:73:49:ae:1d:52:49:10:ff:ae:28:53: b2:c5:ad:dd:60:58:19:26:1a:dc:82:dd:2e:e4:ce: df:c3:61:d5:b3:94:3d:6b:cc:bf:76:3e:b1:b1:4a: 44:ce:01:a9:d9:61:de:2d:fa:43:c9:13:dd:ce:a2: ff:2e:85:d0:71:26:16:f4:15:93:ae:45:65:90:a3: 88:0c:79:c0:68:2e:3f:6d:5a:fb:c0:87:1d:61:ba: 59:23:fd:97:1c:d6:9c:8f:10:f4:e5:ad:ef:4b:93: 88:bc:0a:5e:b6:e9:ee:4c:d3:b2:de:7e:96:73:9d: 05:42:83:82:49:1b:9b:df:9b:7c:a1:4d:b0:1b:20: 8a:0a:d2:34:be:13:1c:89:cc:21:c6:df:af:9e:13: 96:b4:4b:d1:61:7d:ed:aa:d6:8a:ce:a6:73:ca:29: c7:e4:03:ec:9d:c5:68:fe:69:26:40:e3:ec:eb:39: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:38:B4:A5:7E:17:69:A1:B7:F0:9B:BF:FD:1B:9D:25:3D:2D:01:0C X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:a9:74:d3:e8:dd:8b:fa:85:cd:e5:1c:2a:3f:8a:02:66:8b: cc:c0:d8:91:43:e1:2a:9d:4d:9b:6e:48:a7:91:41:a5:13:e9: c6:3e:a8:c6:c4:04:cf:f0:95:34:d9:1a:1d:5e:6d:37:6a:23: fb:63:07:2b:df:aa:fe:2c:c6:88:dd:10:f8:ea:80:76:08:a3: eb:e0:7c:61:01:88:38:90:af:73:2e:cb:cb:b3:2a:14:94:8a: 41:00:67:5e:c7:63:de:6a:80:67:61:f4:23:7e:cd:2a:f7:51: 78:e9:45:56:2e:39:8a:8b:62:97:21:d7:fa:0f:37:82:48:cf: 9e:88:6d:2e:5b:d1:49:de:ef:15:21:b3:0b:2c:6a:7e:e3:94: 8d:55:4f:ee:a0:7e:1d:a6:9c:db:b9:c1:ce:a8:23:96:3e:00: c3:5e:09:a9:70:45:7e:de:bd:20:d8:03:ab:88:76:c1:35:74: ec:8e:fd:b4:01:df:06:e7:e4:a6:92:d2:f2:61:fd:bb:4b:96: ad:2e:e3:d4:52:29:cd:56:c2:0c:2e:3b:8b:bd:04:04:b8:5b: 2d:0f:27:cd:8f:32:14:c9:ed:19:d5:48:54:a3:89:54:9a:fa: 1b:51:73:99:02:b9:7e:3d:49:8a:e7:49:31:2d:c3:bf:19:1d: 91:5a:aa:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiGjXzzpH9I7jZh8avCUlUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjUwODA3MjIwMTE2WhcNMjUwODA4MjIwMTE2WjAzMTEwLwYDVQQD Eyg2MTM4YjRhNTdlMTc2OWExYjdmMDliYmZmZDFiOWQyNTNkMmQwMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/vcSnzu3v7KM/jqFNHbdJSim42/ /CHtmBaLzAqGK7wPOWPLN+Fe8a7MK7rfkxFP1lT5BksxWZbPA9oSiQMCB2f6tlft bBKw56bIiHKrc0muHVJJEP+uKFOyxa3dYFgZJhrcgt0u5M7fw2HVs5Q9a8y/dj6x sUpEzgGp2WHeLfpDyRPdzqL/LoXQcSYW9BWTrkVlkKOIDHnAaC4/bVr7wIcdYbpZ I/2XHNacjxD05a3vS5OIvApetunuTNOy3n6Wc50FQoOCSRub35t8oU2wGyCKCtI0 vhMcicwhxt+vnhOWtEvRYX3tqtaKzqZzyinH5APsncVo/mkmQOPs6znUYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE4tKV+F2mht/Cbv/0bnSU9LQEMMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Kl00+jd i/qFzeUcKj+KAmaLzMDYkUPhKp1Nm25Ip5FBpRPpxj6oxsQEz/CVNNkaHV5tN2oj +2MHK9+q/izGiN0Q+OqAdgij6+B8YQGIOJCvcy7Ly7MqFJSKQQBnXsdj3mqAZ2H0 I37NKvdReOlFVi45iotilyHX+g83gkjPnohtLlvRSd7vFSGzCyxqfuOUjVVP7qB+ Haac27nBzqgjlj4Aw14JqXBFft69INgDq4h2wTV07I79tAHfBufkppLS8mH9u0uW rS7j1FIpzVbCDC47i70EBLhbLQ8nzY8yFMntGdVIVKOJVJr6G1FzmQK5fj1JiudJ MS3DvxkdkVqqFA== -----END CERTIFICATE-----Generated at Fri Aug 8 00:43:29 2025 by rpki-client