$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: lBxrnFil1sGGfEhDQTTkpBK9zGPPVfhi0BTccMJ4uhU= Subject key identifier: B2:BD:9F:7A:FE:B4:BF:AE:AB:F1:09:D6:9A:B8:A2:80:2E:45:7D:C3 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0198D583A6B1C36A34236480D33E6E235238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0F6B Signing time: Sat 23 Aug 2025 06:00:31 +0000 Manifest this update: Sat 23 Aug 2025 06:00:31 +0000 Manifest next update: Sun 24 Aug 2025 06:00:31 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: lZ3TfTfAi6GyuRJtiSAOQi9ZMJvuYVn6rOwPOch34Cs=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:a6:b1:c3:6a:34:23:64:80:d3:3e:6e:23:52:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Aug 23 06:00:31 2025 GMT Not After : Aug 24 06:00:31 2025 GMT Subject: CN=b2bd9f7afeb4bfaeabf109d69ab8a2802e457dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6e:1c:a8:b3:3d:9c:eb:12:13:0c:00:47:bb: d2:81:d9:59:40:46:09:0e:38:b5:ad:61:c4:d9:37: 5c:23:31:fc:ea:bd:c8:3c:5c:b9:cd:71:d5:ea:27: 81:7a:a9:dc:bc:92:2a:d5:61:d3:10:e7:aa:21:8d: ba:32:a7:59:00:33:4e:3b:f1:30:00:3f:5f:fa:fe: 72:09:52:76:42:2b:b7:e6:1f:78:78:ce:09:23:d8: 2d:4d:a0:90:cc:18:4f:6f:a9:c2:92:f7:6d:36:c1: 56:3b:4b:a9:72:d4:34:9c:23:5a:eb:63:af:d3:9b: 92:5d:ac:b4:86:61:d9:0c:ad:8b:0a:ae:34:10:c2: 76:43:20:b8:9f:3f:22:27:e5:77:89:34:31:69:4b: 62:99:76:71:e4:1c:3e:f3:77:67:24:1e:1d:65:3c: 79:f1:c7:c3:88:52:fd:70:89:4c:66:d5:9a:d0:0a: 25:77:82:0e:11:84:ff:33:c7:14:5b:8d:a8:90:8a: e3:67:65:06:1c:79:16:77:be:aa:42:e7:58:be:bf: ed:b6:77:78:ae:03:dd:0c:34:f8:da:5a:75:95:dd: 3b:45:05:9a:56:2d:b5:0c:8a:26:18:a3:66:86:d4: 4f:38:65:54:31:96:0f:51:7a:df:86:e6:02:f1:ff: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BD:9F:7A:FE:B4:BF:AE:AB:F1:09:D6:9A:B8:A2:80:2E:45:7D:C3 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6b:3f:64:dc:bf:97:a7:9b:e7:d9:00:a6:8b:4c:b9:db:86: 64:78:9c:ae:d1:b3:41:d3:b5:db:ee:40:9b:10:3b:27:e1:f4: 6e:00:28:d5:21:4e:29:5b:77:b0:eb:b2:02:fa:c1:84:7b:48: 14:da:77:9e:be:a0:5c:92:99:aa:4a:e4:b9:96:fc:ec:c4:d5: 4b:0d:41:1c:50:74:1e:1f:29:cb:7a:68:7d:13:43:5b:a4:89: 77:52:b3:a1:fd:fb:3a:e2:cd:7b:6f:22:7b:98:02:76:eb:43: b4:d1:7c:d8:64:42:88:1b:b0:bf:e5:fb:60:63:55:6b:1b:39: d8:92:05:b0:68:3a:b8:74:03:17:5a:ee:dd:75:e3:47:bf:e7: f0:f0:b9:d8:62:ae:f3:f7:92:54:33:b1:a8:ae:69:7f:88:98: 6b:f3:e2:8b:f1:8f:af:dc:3c:7e:04:74:2f:2e:b1:ef:6f:de: 50:42:18:2b:65:79:f0:8a:10:1b:fb:84:f7:59:c7:cd:cb:f9: ff:5d:3a:61:ba:c4:bd:39:97:3a:19:d5:2c:53:a8:fa:0a:1d: ee:47:89:7b:55:91:99:af:14:e4:c1:f4:5d:5f:25:7e:86:1d: d6:45:2f:1c:42:82:7c:2a:08:45:53:28:f2:93:4f:a1:56:94: fa:ce:88:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg6axw2o0I2SA0z5uI1I4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwODIzMDYwMDMxWhcNMjUwODI0MDYwMDMxWjAzMTEwLwYDVQQD EyhiMmJkOWY3YWZlYjRiZmFlYWJmMTA5ZDY5YWI4YTI4MDJlNDU3ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G4cqLM9nOsSEwwAR7vSgdlZQEYJ Dji1rWHE2TdcIzH86r3IPFy5zXHV6ieBeqncvJIq1WHTEOeqIY26MqdZADNOO/Ew AD9f+v5yCVJ2Qiu35h94eM4JI9gtTaCQzBhPb6nCkvdtNsFWO0upctQ0nCNa62Ov 05uSXay0hmHZDK2LCq40EMJ2QyC4nz8iJ+V3iTQxaUtimXZx5Bw+83dnJB4dZTx5 8cfDiFL9cIlMZtWa0Aold4IOEYT/M8cUW42okIrjZ2UGHHkWd76qQudYvr/ttnd4 rgPdDDT42lp1ld07RQWaVi21DIomGKNmhtRPOGVUMZYPUXrfhuYC8f+wlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK9n3r+tL+uq/EJ1pq4ooAuRX3DMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWs/ZNy/ l6eb59kApotMuduGZHicrtGzQdO12+5AmxA7J+H0bgAo1SFOKVt3sOuyAvrBhHtI FNp3nr6gXJKZqkrkuZb87MTVSw1BHFB0Hh8py3pofRNDW6SJd1Kzof37OuLNe28i e5gCdutDtNF82GRCiBuwv+X7YGNVaxs52JIFsGg6uHQDF1ru3XXjR7/n8PC52GKu 8/eSVDOxqK5pf4iYa/Pii/GPr9w8fgR0Ly6x72/eUEIYK2V58IoQG/uE91nHzcv5 /106YbrEvTmXOhnVLFOo+god7keJe1WRma8U5MH0XV8lfoYd1kUvHEKCfCoIRVMo 8pNPoVaU+s6IuA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:14:52 2025 by rpki-client