$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: a0ZKLNZlESOx/08bVThpcp8i9MUOazpkUebt5g7D9H4= Subject key identifier: E4:D3:31:6A:C2:62:B4:57:A4:10:50:6E:8B:F0:F1:6F:B7:DC:28:C0 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 01987E9C78C53E5F43508355ADC76858FD39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 121E Signing time: Wed 06 Aug 2025 09:00:40 +0000 Manifest this update: Wed 06 Aug 2025 09:00:40 +0000 Manifest next update: Thu 07 Aug 2025 09:00:40 +0000 Files and hashes: 1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=) 2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=) 3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=) 4: 7up0r1vQiZdKC1oE9L7mvuP0p4I.roa (hash: cVjp4QTLbcnMTdi+ebHsiAxT4Sjmfp6erOaAfdsxTlE=) 5: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=) 6: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=) 7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=) 8: GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa (hash: S/WeVLNJSBWvfGHQHnHShtzGzYAW49VG43Ku/JYfDys=) 9: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=) 10: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=) 11: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=) 12: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=) 13: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=) 14: d3sFY8_J7LBIPwIhb4dAzqL5atM.roa (hash: Jn5pB2LDPV82LCwM4xQJY+PpwwF3+IHXMhIfwqqGyG4=) 15: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: IiML28ukaBaDNXxNzqR0ThTko55gpoOPOG28F20QdFA=) 16: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=) 17: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=) 18: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=) 19: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=) 20: iTLc5VqU9KTkxYI4woYxihTaS1E.roa (hash: 9Lihlb46Ba0mozz2ZnqtyUczktp8pAuj6kFBxT8olqk=) 21: lHB6GUG9tuilyPUZ-PLVSWYnHoY.roa (hash: Yz+D6XoxB1A0Y5z0UdLVnO5DkmnKnLGf5GEO6bsKFRk=) 22: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=) 23: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=) 24: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=) 25: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (hash: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=) 26: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=) 27: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=) 28: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=) 29: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=) 30: vSFUAztM4xg8pnCN2uvJ0r0ZpOY.roa (hash: lfAk2RkoT9Z6h0Jxb78c4RLN4P2hpHz0D8+Q/p7nmkA=) 31: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=) 32: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=) 33: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7e:9c:78:c5:3e:5f:43:50:83:55:ad:c7:68:58:fd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Aug 6 09:00:40 2025 GMT Not After : Aug 7 09:00:40 2025 GMT Subject: CN=e4d3316ac262b457a410506e8bf0f16fb7dc28c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a5:c6:de:b9:9d:90:77:8d:de:cd:43:0d:75: dc:5f:49:d9:c2:51:5b:12:b9:ba:d6:d2:3f:b3:03: 6b:c0:3e:d0:de:3e:50:b2:66:33:05:9d:d4:8e:e4: d9:e4:6e:43:61:59:ad:e3:00:29:f4:29:56:b3:a9: 86:f3:45:fb:78:b7:0a:4a:11:dc:fb:50:66:72:70: 2b:bb:0e:33:e9:e4:48:fb:07:63:e5:b3:4a:b3:a1: 05:3a:81:44:e5:9d:17:cf:d7:60:d9:f0:8f:1c:d2: d1:55:1a:fd:42:d2:4a:f0:c8:f0:3a:b8:91:75:9b: 79:46:f4:b3:e6:81:67:39:b5:bb:6c:5d:66:78:ed: 61:d7:ad:06:69:fb:cf:7f:02:42:21:13:59:e4:a4: be:0e:30:73:36:bd:08:3b:a4:84:67:f8:51:5e:c0: 1b:a0:04:d3:8c:3a:d1:a2:a5:4d:5a:5b:a3:f0:ba: 52:2f:dd:b5:7c:33:51:2e:f6:d0:4e:99:79:c8:7b: 18:9f:0a:bb:0a:22:e8:15:4a:61:2d:e2:c2:9d:10: 1f:fd:15:6d:26:2d:9d:b3:f1:29:56:6d:a6:b9:4c: 61:b4:fd:71:e6:1d:b7:52:a4:f1:ff:59:b4:ab:71: 32:e0:ff:e8:0e:50:5b:5b:96:25:7c:64:a6:aa:e7: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D3:31:6A:C2:62:B4:57:A4:10:50:6E:8B:F0:F1:6F:B7:DC:28:C0 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cd:e9:d8:db:b1:a7:ef:b1:c9:a2:00:74:4e:9f:af:01:9d: 4a:8c:e7:45:2d:86:8a:47:fa:0e:d2:db:75:88:1c:dd:4e:de: a8:91:e7:1c:3c:32:58:fb:3d:63:64:1a:0d:1e:f5:4f:f5:1f: 4c:72:cb:f2:a8:3f:0d:09:72:15:8f:a1:0f:e6:40:6a:d4:d5: fc:ac:ae:d5:64:3a:bf:e8:3f:70:d7:65:c8:36:97:46:26:62: 9e:af:9e:53:7f:57:b6:c7:ae:c1:ef:7d:32:09:df:7b:4c:28: f9:f1:12:ed:12:5c:26:2d:d9:be:be:07:cd:39:c0:ef:71:b0: 3e:0a:1c:89:b2:ac:cb:e9:14:68:bb:d8:cb:8c:0f:4b:e1:5c: 32:10:79:f6:91:30:f0:e4:d7:d8:b5:0f:43:92:5d:d1:38:33: 86:5c:ef:9c:b8:ea:e2:79:d8:cd:cd:32:18:fd:be:29:85:3a: 1e:ef:d5:87:c2:16:10:2d:58:16:ee:be:da:ae:ab:80:99:98: e3:ba:6e:dd:d5:e7:d0:12:ef:34:fb:22:1c:b1:b4:23:81:61: 1d:28:f3:25:e2:bf:b4:35:ca:ab:c4:41:bd:bf:00:2a:8d:6f: b3:01:23:01:f1:c7:ac:bb:1d:6d:27:28:54:49:fb:98:72:97: 66:e2:3d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh+nHjFPl9DUINVrcdoWP05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUwODA2MDkwMDQwWhcNMjUwODA3MDkwMDQwWjAzMTEwLwYDVQQD EyhlNGQzMzE2YWMyNjJiNDU3YTQxMDUwNmU4YmYwZjE2ZmI3ZGMyOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqXG3rmdkHeN3s1DDXXcX0nZwlFb Erm61tI/swNrwD7Q3j5QsmYzBZ3UjuTZ5G5DYVmt4wAp9ClWs6mG80X7eLcKShHc +1BmcnAruw4z6eRI+wdj5bNKs6EFOoFE5Z0Xz9dg2fCPHNLRVRr9QtJK8MjwOriR dZt5RvSz5oFnObW7bF1meO1h160GafvPfwJCIRNZ5KS+DjBzNr0IO6SEZ/hRXsAb oATTjDrRoqVNWluj8LpSL921fDNRLvbQTpl5yHsYnwq7CiLoFUphLeLCnRAf/RVt Ji2ds/EpVm2muUxhtP1x5h23UqTx/1m0q3Ey4P/oDlBbW5YlfGSmqudr5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTTMWrCYrRXpBBQbovw8W+33CjAMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAms3p2Nux p++xyaIAdE6frwGdSoznRS2Gikf6DtLbdYgc3U7eqJHnHDwyWPs9Y2QaDR71T/Uf THLL8qg/DQlyFY+hD+ZAatTV/Kyu1WQ6v+g/cNdlyDaXRiZinq+eU39Xtseuwe99 Mgnfe0wo+fES7RJcJi3Zvr4HzTnA73GwPgocibKsy+kUaLvYy4wPS+FcMhB59pEw 8OTX2LUPQ5Jd0TgzhlzvnLjq4nnYzc0yGP2+KYU6Hu/Vh8IWEC1YFu6+2q6rgJmY 47pu3dXn0BLvNPsiHLG0I4FhHSjzJeK/tDXKq8RBvb8AKo1vswEjAfHHrLsdbSco VEn7mHKXZuI9/Q== -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:49 2025 by rpki-client