$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: K3gu8blQmx6BHn4cVvIVZMZXpnJR9dmTietE6AH4kpM= Subject key identifier: 2A:1C:37:22:26:FF:0B:15:61:1E:4B:A7:98:D0:BA:CE:AF:6E:13:FD Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 0198752BF829224DF80802F61D51E486940F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 04F2 Signing time: Mon 04 Aug 2025 13:01:12 +0000 Manifest this update: Mon 04 Aug 2025 13:01:12 +0000 Manifest next update: Tue 05 Aug 2025 13:01:12 +0000 Files and hashes: 1: 06Lo3TEshbdLYbOiItMhIrRRP7Y.roa (hash: UneRobUa0HOEvhDKQSJldaXTwM77pPlsoKNgn+2tT6w=) 2: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 3: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 4: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=) 5: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=) 6: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=) 7: EtvYYt1SsPhVbUBlb-gyRW3BpiI.roa (hash: mKLlkYLYAV8TtsT89IDg/2Tbl2phQohLCpJVPEdEhrA=) 8: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=) 9: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 10: IvRgmT2reOzeuytZym-ijAGPPBk.roa (hash: dSmrvci4sQWpc2gVp+CZfEWf5dBDbTlu7yUnaMUzc1w=) 11: JxZ2PV2RYnx-i5FgEdX8_ua6vLk.roa (hash: knnuID3189A1YGf/2FgAAdsJ3ixY4wa1onnycZbuIbI=) 12: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (hash: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=) 13: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=) 14: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=) 15: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=) 16: YyaG3S0poVAnzLCPDdFpzugK_PQ.roa (hash: 24Gl7AEyeVcP6AdBrJexExnxFpJwqifZ9iimIKjJBOQ=) 17: ZTvw2_D_9jeSs1gO7ujxKFQcgjk.roa (hash: AbEf9+0Lzup0wYUvoLapGxmf6MnOCczvVXXaVGlPw0Y=) 18: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=) 19: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=) 20: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: Q73kAbxjZ2WnZMVkxo7UjlCWK2RSvML9FQP+YmPtO+0=) 21: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (hash: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=) 22: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=) 23: toMHEB280KETNfSWfwGdAQlBHIo.roa (hash: /78AEGOua5BdiHCzMqoUcFzXGSUc4tOmrRCkCS8IUTo=) 24: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:2b:f8:29:22:4d:f8:08:02:f6:1d:51:e4:86:94:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Aug 4 13:01:12 2025 GMT Not After : Aug 5 13:01:12 2025 GMT Subject: CN=2a1c372226ff0b15611e4ba798d0baceaf6e13fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:16:00:ce:f0:c6:ce:ac:81:cd:af:0c:d5: 27:6a:e2:6f:7e:6b:7d:e0:a4:22:53:94:13:1b:a0: aa:ec:6d:4b:e1:e3:9c:d6:b8:b3:af:c0:ad:6b:b6: 82:b9:4d:1f:0c:2f:89:3d:47:e0:d7:ae:58:2b:8c: 2a:18:da:f9:fd:3d:51:61:3d:6f:44:f9:bc:e3:12: 2d:cc:e1:4f:eb:53:14:f7:94:1f:2c:dc:17:6a:95: 58:f2:c6:01:f3:9a:54:88:3b:3b:d4:d8:dd:93:a2: d8:91:41:18:62:bf:ef:bc:66:75:f7:6e:a8:c1:ee: fd:aa:5c:c3:c8:7c:11:f0:27:1d:40:c6:96:d8:37: a4:72:1d:da:0c:da:ec:42:97:9f:af:35:6b:29:9a: 09:47:da:c8:39:e9:70:f8:14:bc:cc:21:82:e4:83: eb:49:5a:04:74:4a:69:71:0c:54:c6:4a:97:d6:16: bd:25:3d:e1:fa:65:21:09:ec:6c:a6:81:c4:21:cc: e0:95:e8:0d:9e:1f:e3:07:34:69:21:a2:8d:4c:38: 7e:01:f7:bc:9c:b1:3c:53:b3:55:08:cd:b9:4f:d1: 3d:c8:56:9d:0d:b1:75:ab:b4:55:ac:b0:0e:e1:62: 25:d3:32:01:0d:da:c5:fe:e7:44:aa:9f:60:53:c5: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:37:22:26:FF:0B:15:61:1E:4B:A7:98:D0:BA:CE:AF:6E:13:FD X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:7c:22:f2:ab:fb:6c:3b:b2:48:85:64:22:20:cc:6f:a6: 7c:fd:68:b9:1d:46:04:b1:aa:bf:69:08:79:89:b4:ae:bf:c0: 17:29:bc:01:a3:d8:ba:82:bc:8d:ac:43:bd:4a:d1:b3:73:2c: 0f:59:26:fd:f1:9a:4c:18:0c:16:32:ca:23:bb:8d:1c:8a:b4: 2a:d9:58:d8:1e:e0:45:34:cd:ff:68:10:f0:22:4f:2f:a9:77: 35:bd:79:bd:0e:a3:d7:c8:8b:b5:37:d0:aa:18:6f:05:79:c5: e4:22:dd:a4:6d:44:15:cc:6d:ac:b9:27:cc:e2:c9:10:48:ff: e7:43:33:b1:8b:f6:cb:fd:45:b4:f1:1d:7a:e1:0b:b7:c2:15: af:fc:2a:f4:36:99:11:6d:c8:15:d0:2a:91:c3:3c:60:c2:4f: 62:f4:e2:27:c4:cd:91:81:1c:31:6b:97:a6:7f:de:a8:35:90: 05:53:16:8d:bd:32:25:96:68:d3:22:88:8d:01:94:23:70:43: 70:9f:9b:c1:43:0f:f2:a7:b9:d3:4b:74:8c:2c:dc:34:87:c2: 63:25:9a:b7:10:e1:1a:18:da:6a:f9:6d:98:c1:93:dd:bc:b0: a5:a7:b1:98:f6:18:70:3e:c5:cf:6d:40:2b:09:85:c1:19:38: 84:18:65:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1K/gpIk34CAL2HVHkhpQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUwODA0MTMwMTEyWhcNMjUwODA1MTMwMTEyWjAzMTEwLwYDVQQD EygyYTFjMzcyMjI2ZmYwYjE1NjExZTRiYTc5OGQwYmFjZWFmNmUxM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3cWAM7wxs6sgc2vDNUnauJvfmt9 4KQiU5QTG6Cq7G1L4eOc1rizr8Cta7aCuU0fDC+JPUfg165YK4wqGNr5/T1RYT1v RPm84xItzOFP61MU95QfLNwXapVY8sYB85pUiDs71Njdk6LYkUEYYr/vvGZ1926o we79qlzDyHwR8CcdQMaW2Dekch3aDNrsQpefrzVrKZoJR9rIOelw+BS8zCGC5IPr SVoEdEppcQxUxkqX1ha9JT3h+mUhCexspoHEIczglegNnh/jBzRpIaKNTDh+Afe8 nLE8U7NVCM25T9E9yFadDbF1q7RVrLAO4WIl0zIBDdrF/udEqp9gU8UYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCocNyIm/wsVYR5Lp5jQus6vbhP9MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE98IvKr +2w7skiFZCIgzG+mfP1ouR1GBLGqv2kIeYm0rr/AFym8AaPYuoK8jaxDvUrRs3Ms D1km/fGaTBgMFjLKI7uNHIq0KtlY2B7gRTTN/2gQ8CJPL6l3Nb15vQ6j18iLtTfQ qhhvBXnF5CLdpG1EFcxtrLknzOLJEEj/50MzsYv2y/1FtPEdeuELt8IVr/wq9DaZ EW3IFdAqkcM8YMJPYvTiJ8TNkYEcMWuXpn/eqDWQBVMWjb0yJZZo0yKIjQGUI3BD cJ+bwUMP8qe500t0jCzcNIfCYyWatxDhGhjaavltmMGT3bywpaexmPYYcD7Fz21A KwmFwRk4hBhlKA== -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:32 2025 by rpki-client