$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: g8QL32L0IUwFjjjVZXAg3ffYKaO+1r5yj3G8AUYuMT0= Subject key identifier: 40:0A:57:3B:4C:DE:89:C9:94:4B:83:08:17:1F:E2:BA:89:90:78:8D Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019879E43E9512293B29E33521C6BCF0C200 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1622 Signing time: Tue 05 Aug 2025 11:00:58 +0000 Manifest this update: Tue 05 Aug 2025 11:00:58 +0000 Manifest next update: Wed 06 Aug 2025 11:00:58 +0000 Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=) 2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=) 3: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (hash: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=) 4: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=) 5: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=) 6: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: uM5mUazkofiDxAOo4Jdsdn6HsBDUZURvftiHGZzp5J8=) 8: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=) 9: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=) 10: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (hash: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=) 11: qGk1e2SSj7a867DIFcXEQy9VRwk.roa (hash: FczogQCjHMZiK1Ux2uZ685nsTVBLAXheYXkPGrZoEcc=) 12: qKcCLtEG432D5WJB88yhMQT2crs.roa (hash: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=) 13: yMcsDqcikj-Oh_XyHzZuU6ywJns.roa (hash: Rs9ukiIBzgtbtWyPVHVA61SngL94EX769rrYMrF5bW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:e4:3e:95:12:29:3b:29:e3:35:21:c6:bc:f0:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Aug 5 11:00:58 2025 GMT Not After : Aug 6 11:00:58 2025 GMT Subject: CN=400a573b4cde89c9944b8308171fe2ba8990788d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:76:a6:d4:d8:b6:14:44:31:0d:b3:62:6e:3d: 6a:2b:87:f8:10:93:08:55:33:79:b5:53:8d:3c:d7: 6d:44:c0:a5:3b:33:30:08:0c:f0:a0:aa:97:cc:1e: 87:22:b6:02:98:6e:06:65:32:69:4d:0f:92:09:88: 35:df:e6:4d:a1:bd:24:b2:53:62:05:49:d6:d3:9f: a2:34:48:04:24:36:a0:6a:e6:a9:95:11:42:58:04: 09:70:1b:bd:ef:b4:55:40:cf:37:e1:28:ba:fd:6f: b9:89:5d:72:19:aa:2d:17:1e:ff:16:e4:a0:9d:e7: d5:2b:3c:f7:2f:bb:dd:c9:f4:11:6a:3b:c1:3e:48: a3:6e:4c:1a:79:27:1a:37:d5:ca:51:c6:99:23:b8: c7:d6:c9:5e:28:48:00:d5:15:f5:ef:2c:de:26:d0: ec:1a:53:06:d8:d6:ec:17:cb:d9:28:ba:1d:63:ef: 77:48:55:7f:80:fe:a2:f2:1b:64:eb:a8:40:4f:5d: e9:c9:b2:25:20:96:6f:64:97:75:9c:87:d8:75:30: 6c:52:25:a0:b7:7c:52:1b:fd:53:e5:c9:b9:79:37: eb:23:72:fa:b0:bb:c3:4e:30:a7:9e:86:d8:73:27: ef:cd:2f:c0:e8:ab:15:9c:bc:3a:ac:2d:27:5e:2e: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0A:57:3B:4C:DE:89:C9:94:4B:83:08:17:1F:E2:BA:89:90:78:8D X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c3:fd:e0:b2:1c:a1:bb:9d:13:e6:53:fe:80:86:28:09:5e: 48:2c:8e:5f:40:94:ac:96:84:1d:b1:af:57:e6:25:82:a7:a3: 22:76:53:3f:52:c0:3f:c8:29:1a:c2:d8:43:c0:3f:30:59:17: fd:59:c4:33:3c:5e:6d:32:55:75:33:77:e2:63:77:fb:fe:6d: 35:2e:61:a4:30:e3:0b:a6:94:5e:6a:e0:6c:02:23:29:21:07: 72:ff:51:6f:10:1a:12:b6:4b:1c:fd:7a:58:16:6e:12:8f:c3: 22:c0:65:9c:c1:c0:7d:e8:fa:80:78:8b:c5:d5:e0:49:39:a4: d9:9d:d6:1d:13:10:a2:26:0e:e7:56:b7:7a:cd:b9:bd:4d:76: 69:b3:a6:5f:a9:26:8b:f2:fb:ab:4e:e0:12:a9:83:9f:b3:b8: 52:dc:9a:39:18:be:fa:87:48:d6:a1:eb:bf:69:8d:c6:c7:1e: fb:3c:64:26:79:2a:8d:db:eb:b6:3e:5d:9b:45:15:98:06:7f: a1:86:f4:a1:a1:91:82:f0:46:00:d8:46:7d:43:5f:59:7e:51: 91:50:c5:4c:12:90:7d:9b:3c:25:f8:86:1f:de:69:27:8f:ac: 2d:d4:9c:de:fb:64:43:cf:67:10:81:01:fc:96:4f:cf:17:0a: 4a:30:02:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh55D6VEik7KeM1Ica88MIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUwODA1MTEwMDU4WhcNMjUwODA2MTEwMDU4WjAzMTEwLwYDVQQD Eyg0MDBhNTczYjRjZGU4OWM5OTQ0YjgzMDgxNzFmZTJiYTg5OTA3ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xam1Ni2FEQxDbNibj1qK4f4EJMI VTN5tVONPNdtRMClOzMwCAzwoKqXzB6HIrYCmG4GZTJpTQ+SCYg13+ZNob0kslNi BUnW05+iNEgEJDagauaplRFCWAQJcBu977RVQM834Si6/W+5iV1yGaotFx7/FuSg nefVKzz3L7vdyfQRajvBPkijbkwaeScaN9XKUcaZI7jH1sleKEgA1RX17yzeJtDs GlMG2NbsF8vZKLodY+93SFV/gP6i8htk66hAT13pybIlIJZvZJd1nIfYdTBsUiWg t3xSG/1T5cm5eTfrI3L6sLvDTjCnnobYcyfvzS/A6KsVnLw6rC0nXi58RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAKVztM3onJlEuDCBcf4rqJkHiNMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8P94LIc obudE+ZT/oCGKAleSCyOX0CUrJaEHbGvV+YlgqejInZTP1LAP8gpGsLYQ8A/MFkX /VnEMzxebTJVdTN34mN3+/5tNS5hpDDjC6aUXmrgbAIjKSEHcv9RbxAaErZLHP16 WBZuEo/DIsBlnMHAfej6gHiLxdXgSTmk2Z3WHRMQoiYO51a3es25vU12abOmX6km i/L7q07gEqmDn7O4UtyaORi++odI1qHrv2mNxsce+zxkJnkqjdvrtj5dm0UVmAZ/ oYb0oaGRgvBGANhGfUNfWX5RkVDFTBKQfZs8JfiGH95pJ4+sLdSc3vtkQ89nEIEB /JZPzxcKSjACBQ== -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:48 2025 by rpki-client