$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: Bh0kbsDBpJpz1buycO7PpcnyET1MKyaJblJhfdhrgs8= Subject key identifier: 76:D9:7F:47:C1:42:AD:76:56:34:22:1A:A8:6F:FB:CF:54:30:32:23 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 0198906C1A6381438DA0C979FCF9A8D085C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1647 Signing time: Sat 09 Aug 2025 20:01:00 +0000 Manifest this update: Sat 09 Aug 2025 20:01:00 +0000 Manifest next update: Sun 10 Aug 2025 20:01:00 +0000 Files and hashes: 1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=) 2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: cPIFj4emJFvwe8Upx_l04Smq82M.roa (hash: vDJnCBY3/Xu6IQlzRF0lLRZwveQcZyy7umYRTs07PBM=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: aEav8l1u9O2DIBAYMblNtbz2Ebk3QdEgswhYrmUW5o0=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:90:6c:1a:63:81:43:8d:a0:c9:79:fc:f9:a8:d0:85:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Aug 9 20:01:00 2025 GMT Not After : Aug 10 20:01:00 2025 GMT Subject: CN=76d97f47c142ad765634221aa86ffbcf54303223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:a6:53:14:2c:41:76:a2:ca:73:a8:aa:d0: fc:f6:79:e4:c7:5c:5b:24:57:1b:03:d3:11:58:bb: 70:aa:24:82:14:bf:cb:d4:e2:6a:3c:45:9c:33:2a: ac:db:8b:99:4f:6f:96:bb:4c:03:ed:b7:d5:6f:bc: e4:eb:22:18:f7:c9:f1:85:b5:64:fd:6d:47:d0:f1: fc:c8:6b:b7:20:ff:e2:48:57:fc:cd:7c:f6:43:06: 88:64:19:c9:25:a8:19:01:c0:63:ca:fd:c4:27:46: 1e:e3:2a:95:76:7f:fa:07:fa:4d:9d:13:cb:22:5e: 45:ae:62:dd:75:b7:0e:a7:11:88:c5:aa:93:1f:a8: f7:24:ab:0f:87:50:17:8d:1b:eb:2c:dc:3f:f5:4c: 27:01:3c:e4:4c:40:d6:e8:85:07:a5:3d:71:f5:7b: 26:f0:8c:67:06:70:8a:84:a4:9b:34:43:a9:2c:87: 78:bf:e5:7b:27:72:fb:c2:80:f5:88:0f:de:2f:3a: 87:ea:5d:8e:5a:fc:ae:d4:d0:d6:8c:5d:9f:88:61: 5f:a2:13:60:ba:0a:56:66:dd:c7:4f:0d:bc:7e:7b: 3f:d7:b0:a7:7d:14:e6:e7:69:70:f4:57:55:f4:fd: d8:ba:5f:e0:3f:85:87:f3:0b:d3:2c:ab:96:2f:54: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:7F:47:C1:42:AD:76:56:34:22:1A:A8:6F:FB:CF:54:30:32:23 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a6:a7:e5:46:89:c7:78:e0:bc:17:8d:7a:6c:2a:aa:80:41: 68:ff:cc:68:07:b7:27:14:a6:f9:03:1e:15:63:8f:7a:54:fa: 0f:39:68:92:30:08:8b:5d:a9:cc:22:97:f0:4c:5e:af:bb:85: 34:33:7b:e6:3d:0e:d7:78:26:78:61:25:b5:08:e0:7d:cb:63: 6d:00:7d:67:3c:ea:d5:3f:98:9f:01:94:e2:9a:dd:6a:95:31: 51:5a:95:bb:d7:18:6f:b4:e9:63:3b:69:eb:a1:fb:48:03:d7: 7a:9a:6a:f8:f3:7d:cc:47:67:03:01:99:fd:22:3e:09:83:39: c2:7c:7e:93:6d:81:37:ad:73:b2:be:f0:20:81:17:2a:4f:61: ca:68:ea:12:e6:4c:31:a1:4a:1a:7d:1b:74:ca:6d:32:72:8f: 28:77:ab:89:f3:e7:15:51:ec:97:52:43:d5:10:27:fc:cd:8a: fb:29:20:f3:8a:e3:e3:65:21:fe:e2:02:81:3c:72:f1:4f:84: 9d:17:62:6a:8e:ef:1d:c9:73:a6:5f:48:ab:fe:f5:c5:2e:d1: bc:15:be:5a:80:28:a3:15:87:08:c1:eb:f3:5a:1a:56:06:59: 24:8d:5c:e1:bf:7a:16:8f:45:c4:2a:d2:8f:29:7a:b5:f0:ef: 15:f1:d7:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiQbBpjgUONoMl5/Pmo0IXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUwODA5MjAwMTAwWhcNMjUwODEwMjAwMTAwWjAzMTEwLwYDVQQD Eyg3NmQ5N2Y0N2MxNDJhZDc2NTYzNDIyMWFhODZmZmJjZjU0MzAzMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDamUxQsQXaiynOoqtD89nnkx1xb JFcbA9MRWLtwqiSCFL/L1OJqPEWcMyqs24uZT2+Wu0wD7bfVb7zk6yIY98nxhbVk /W1H0PH8yGu3IP/iSFf8zXz2QwaIZBnJJagZAcBjyv3EJ0Ye4yqVdn/6B/pNnRPL Il5FrmLddbcOpxGIxaqTH6j3JKsPh1AXjRvrLNw/9UwnATzkTEDW6IUHpT1x9Xsm 8IxnBnCKhKSbNEOpLId4v+V7J3L7woD1iA/eLzqH6l2OWvyu1NDWjF2fiGFfohNg ugpWZt3HTw28fns/17CnfRTm52lw9FdV9P3Yul/gP4WH8wvTLKuWL1T5wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbZf0fBQq12VjQiGqhv+89UMDIjMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaan5UaJ x3jgvBeNemwqqoBBaP/MaAe3JxSm+QMeFWOPelT6DzlokjAIi12pzCKX8Exer7uF NDN75j0O13gmeGEltQjgfctjbQB9Zzzq1T+YnwGU4prdapUxUVqVu9cYb7TpYztp 66H7SAPXeppq+PN9zEdnAwGZ/SI+CYM5wnx+k22BN61zsr7wIIEXKk9hymjqEuZM MaFKGn0bdMptMnKPKHerifPnFVHsl1JD1RAn/M2K+ykg84rj42Uh/uICgTxy8U+E nRdiao7vHclzpl9Iq/71xS7RvBW+WoAooxWHCMHr81oaVgZZJI1c4b96Fo9FxCrS jyl6tfDvFfHXTA== -----END CERTIFICATE-----Generated at Sat Aug 9 23:07:35 2025 by rpki-client