$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: Nfhcf0BqvyZ2/I7gAFn8igPJr6+UzB17ir/bPkRMlDM= Subject key identifier: E9:9E:B0:E4:D3:DF:37:E7:41:8C:18:A5:FD:FD:FB:45:07:48:11:D3 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 01987B6457E723012A5C6D5A001946E25850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 1675 Signing time: Tue 05 Aug 2025 18:00:30 +0000 Manifest this update: Tue 05 Aug 2025 18:00:30 +0000 Manifest next update: Wed 06 Aug 2025 18:00:30 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 4: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 5: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 6: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: TvSa2oCb/43mTKeeW4Pd1zoJK3oKLEe4dyAU5ujhEVM=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: hKxNfLTH0X80Ow-eROTxbGbiZe4.roa (hash: hZv0Z8Cj/PVONdIYD1TEXdIoPUW4dHy+qq7CiSqIhck=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:64:57:e7:23:01:2a:5c:6d:5a:00:19:46:e2:58:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Aug 5 18:00:30 2025 GMT Not After : Aug 6 18:00:30 2025 GMT Subject: CN=e99eb0e4d3df37e7418c18a5fdfdfb45074811d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:82:12:a2:03:01:41:0a:f7:57:0b:fe:66: d4:d6:8f:b8:ae:99:4c:0c:69:e0:ea:f5:a1:f6:8c: fc:b6:ec:34:7a:fa:0e:64:3f:11:0e:e4:68:2e:09: 11:6f:b6:bd:ae:02:36:e0:0f:1c:ed:36:2f:23:33: 06:1d:ac:18:53:17:8a:ca:ba:cf:76:67:33:d1:e7: 04:fa:be:8c:dc:41:8d:97:3a:ab:16:4c:ca:32:a9: f3:01:72:4d:2c:6a:0a:2f:a5:72:b3:5d:a6:db:e0: 31:b1:27:3f:37:60:51:17:15:95:d6:75:16:7f:76: a1:91:85:ae:a4:0a:c3:91:9a:2e:89:00:8e:2b:02: 1b:ae:1b:5a:e9:c9:ec:a1:15:51:98:32:94:c1:00: 1a:0b:76:25:3b:06:44:09:bd:6d:1d:ac:b5:23:ca: c1:ce:db:a5:86:1e:a9:6d:60:00:96:dc:89:c5:0d: b5:20:b5:7a:c2:80:c0:eb:05:83:53:c2:09:7e:da: cc:76:a8:69:64:44:1c:69:92:20:0f:df:b3:fd:1e: 5a:df:2c:ae:f5:29:1c:14:fd:3e:c8:4b:01:81:1d: 01:88:8d:a8:64:1c:31:13:b2:11:c0:df:48:5e:93: 36:ff:eb:d7:74:d2:2e:0a:50:86:40:3e:76:95:3a: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:B0:E4:D3:DF:37:E7:41:8C:18:A5:FD:FD:FB:45:07:48:11:D3 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:f9:dc:bf:23:67:eb:5d:8d:ed:ad:a4:5d:46:65:75:9a:34: 3e:93:b3:bc:cf:39:73:08:1e:9d:58:f6:70:03:09:0e:41:47: 7c:f9:62:c1:b6:71:1c:5b:a4:0b:c5:ee:ed:75:ef:3f:c2:89: c8:df:c7:df:11:ac:71:05:ac:32:b7:ab:4a:6a:73:64:9b:e8: c5:96:e5:78:71:a7:f5:61:7d:a3:ec:f4:00:91:09:19:58:78: 61:37:05:4f:62:d9:8a:e2:49:9b:ca:44:8c:3b:f3:ff:c8:a1: e9:97:89:92:a3:10:34:6f:d0:bd:97:4e:e5:1f:72:be:4c:61: fa:b5:e8:29:ba:1b:1b:95:3a:df:55:8a:71:42:74:b9:9a:40: 98:71:8f:c4:2c:b4:19:9f:80:36:75:f1:36:d8:a0:f8:09:ef: 68:71:be:6f:3b:cb:e4:f1:f5:63:c6:f5:01:0a:b7:65:69:36: 78:9f:31:ec:8b:f1:c9:05:2e:96:6b:6e:21:c2:b3:19:65:6a: 96:c7:91:07:10:e2:92:cc:7a:41:f6:1f:83:47:29:e3:1c:b5: 3f:85:f9:20:af:de:a6:aa:9f:6e:db:ce:24:2b:29:d7:e5:55: 33:a4:3e:82:6d:0e:d6:de:43:56:32:56:8d:08:1d:c6:13:43: 02:56:c9:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh7ZFfnIwEqXG1aABlG4lhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwODA1MTgwMDMwWhcNMjUwODA2MTgwMDMwWjAzMTEwLwYDVQQD EyhlOTllYjBlNGQzZGYzN2U3NDE4YzE4YTVmZGZkZmI0NTA3NDgxMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VeCEqIDAUEK91cL/mbU1o+4rplM DGng6vWh9oz8tuw0evoOZD8RDuRoLgkRb7a9rgI24A8c7TYvIzMGHawYUxeKyrrP dmcz0ecE+r6M3EGNlzqrFkzKMqnzAXJNLGoKL6Vys12m2+AxsSc/N2BRFxWV1nUW f3ahkYWupArDkZouiQCOKwIbrhta6cnsoRVRmDKUwQAaC3YlOwZECb1tHay1I8rB ztulhh6pbWAAltyJxQ21ILV6woDA6wWDU8IJftrMdqhpZEQcaZIgD9+z/R5a3yyu 9SkcFP0+yEsBgR0BiI2oZBwxE7IRwN9IXpM2/+vXdNIuClCGQD52lTocCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmesOTT3zfnQYwYpf39+0UHSBHTMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0fncvyNn 612N7a2kXUZldZo0PpOzvM85cwgenVj2cAMJDkFHfPliwbZxHFukC8Xu7XXvP8KJ yN/H3xGscQWsMrerSmpzZJvoxZbleHGn9WF9o+z0AJEJGVh4YTcFT2LZiuJJm8pE jDvz/8ih6ZeJkqMQNG/QvZdO5R9yvkxh+rXoKbobG5U631WKcUJ0uZpAmHGPxCy0 GZ+ANnXxNtig+AnvaHG+bzvL5PH1Y8b1AQq3ZWk2eJ8x7IvxyQUulmtuIcKzGWVq lseRBxDiksx6QfYfg0cp4xy1P4X5IK/epqqfbtvOJCsp1+VVM6Q+gm0O1t5DVjJW jQgdxhNDAlbJ8A== -----END CERTIFICATE-----Generated at Wed Aug 6 04:05:28 2025 by rpki-client