$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: Z7+iqnLWkQPIJHd08Wy+0tNxfT58u5T29nOp3UT1tx0= Subject key identifier: 95:FB:70:F9:21:AB:6E:45:62:74:A5:3A:8B:AF:02:CA:CD:3C:5C:9A Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 0199FD34936FE712B1DD0C7C5740AC418D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0D3D Signing time: Sun 19 Oct 2025 16:01:45 +0000 Manifest this update: Sun 19 Oct 2025 16:01:45 +0000 Manifest next update: Mon 20 Oct 2025 16:01:45 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: 4mbkhSZAcStbHHbqK4wI36o46ex3kYa2AOJ93F9bkHA=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: Y-G-2eU8guxGK6-egpUuNnN5bxQ.roa (hash: JW4itdi7iIIqZg7XFpTOGoDZRoJgyjCRWVBtmPDf1+s=) 8: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 9: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 10: e5_v6xhlzRioNu7pPqcxgbio8VU.roa (hash: EvR0dlLjUmhrdpl6WksG3VAhbOibMVCgk2a2YuzEtmw=) 11: eRiR4NgIZ_-6ixM1jewwpaWhdtk.roa (hash: WXxK+4k/CLSD9EX98U8J2JMpmdRrgwBoAZnDHy+6A6Q=) 12: ijWfv5FDZoOJVxEIffezGQJrhR0.roa (hash: zEEQyBwCgCA9r+zAOqpHAUGqUtdbLfczPPM/Bv/7v6A=) 13: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 14: tW9IFrprtjHgSmO1yq_ovXKLygM.roa (hash: cUYJx2WeqQgX3iPrT/0TOqbvPPoUtMmCsb4eRH/r/A0=) 15: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 16: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:93:6f:e7:12:b1:dd:0c:7c:57:40:ac:41:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Oct 19 16:01:45 2025 GMT Not After : Oct 20 16:01:45 2025 GMT Subject: CN=95fb70f921ab6e456274a53a8baf02cacd3c5c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:1b:99:ad:07:aa:0d:be:f9:95:76:00:f4: 1b:2f:5d:12:6b:8a:6a:f8:16:4b:5b:9d:5a:8c:03: cf:ce:99:2f:84:89:33:42:65:8a:27:a8:72:c1:e7: 1f:c8:5b:94:11:5b:63:29:4b:ca:66:23:f0:99:cb: 1b:e1:3f:e0:e9:7d:bb:b8:ff:2a:eb:f3:c6:3b:2b: e1:ad:c1:48:10:75:32:18:0f:73:0c:2c:01:a4:01: b4:26:f2:50:bb:e9:85:b1:bf:67:85:15:90:df:cb: de:6b:ce:f8:30:60:c3:ad:ec:cd:33:41:5b:92:9b: d4:20:ce:c1:05:f5:48:1b:6d:4f:e6:87:3c:5d:af: f6:17:94:69:8d:32:68:7a:8a:93:de:20:cf:70:8a: 9a:9c:cb:e6:84:33:8b:f0:22:73:2c:b2:1f:c5:b3: b9:3a:7e:4b:25:bb:44:a1:e5:ba:b8:2f:dd:b2:3e: c9:68:25:24:b6:79:eb:0a:7b:55:17:b6:e7:d4:e1: 8c:63:a5:24:41:d9:45:df:13:a5:5f:5c:d1:22:4f: 93:c2:4a:18:bc:6c:0b:11:33:62:75:b6:55:66:a6: c5:23:14:14:1a:58:a3:33:12:82:68:19:e2:19:74: 37:b4:e0:6f:2f:25:6b:a4:2d:78:97:27:45:87:23: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:70:F9:21:AB:6E:45:62:74:A5:3A:8B:AF:02:CA:CD:3C:5C:9A X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:4a:d8:98:ac:83:34:7c:83:d8:fe:db:60:e1:4e:a1:10:51: c2:86:d3:75:65:a2:ac:0f:3a:4e:b6:ec:b5:fd:bd:09:4b:ce: 3a:18:71:0a:6c:10:d7:24:7d:28:da:f3:a4:92:a0:3e:cd:80: c6:8a:0a:94:76:5a:1d:59:f3:d6:5a:8c:44:a9:3f:38:96:9c: 96:3c:cd:34:0c:8b:7c:59:3b:fb:b6:ed:4a:5d:d0:bf:3f:a0: 99:d9:a1:cd:2b:02:6f:8b:be:a1:19:8e:99:05:4e:97:b3:cc: 46:3b:ca:58:12:60:cd:3a:24:d9:40:96:ed:d7:65:b0:06:00: 6d:da:18:3f:60:df:41:94:49:49:66:f6:9e:f4:47:96:c4:6c: b2:63:6f:94:81:79:6f:5a:d1:fc:9d:3d:ff:32:ea:ef:d7:46: 88:75:e3:f9:44:19:89:3a:ac:51:87:5f:00:df:4d:17:22:50: 17:54:db:91:5d:01:56:70:a8:48:dd:4e:95:90:5e:cc:b7:dd: 2a:87:65:bf:eb:24:f3:0d:1e:25:dd:ea:62:b3:96:1c:04:50: 6b:91:1c:cd:74:6f:e9:40:d9:6f:ae:c2:9c:fe:99:73:ea:1b: 2d:83:6d:21:db:4f:6f:40:89:96:d6:05:bc:54:a7:85:53:29: 42:fa:8b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NJNv5xKx3Qx8V0CsQY1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMDE5MTYwMTQ1WhcNMjUxMDIwMTYwMTQ1WjAzMTEwLwYDVQQD Eyg5NWZiNzBmOTIxYWI2ZTQ1NjI3NGE1M2E4YmFmMDJjYWNkM2M1YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw38bma0Hqg2++ZV2APQbL10Sa4pq +BZLW51ajAPPzpkvhIkzQmWKJ6hywecfyFuUEVtjKUvKZiPwmcsb4T/g6X27uP8q 6/PGOyvhrcFIEHUyGA9zDCwBpAG0JvJQu+mFsb9nhRWQ38vea874MGDDrezNM0Fb kpvUIM7BBfVIG21P5oc8Xa/2F5RpjTJoeoqT3iDPcIqanMvmhDOL8CJzLLIfxbO5 On5LJbtEoeW6uC/dsj7JaCUktnnrCntVF7bn1OGMY6UkQdlF3xOlX1zRIk+TwkoY vGwLETNidbZVZqbFIxQUGlijMxKCaBniGXQ3tOBvLyVrpC14lydFhyNDNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX7cPkhq25FYnSlOouvAsrNPFyaMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArErYmKyD NHyD2P7bYOFOoRBRwobTdWWirA86Trbstf29CUvOOhhxCmwQ1yR9KNrzpJKgPs2A xooKlHZaHVnz1lqMRKk/OJacljzNNAyLfFk7+7btSl3Qvz+gmdmhzSsCb4u+oRmO mQVOl7PMRjvKWBJgzTok2UCW7ddlsAYAbdoYP2DfQZRJSWb2nvRHlsRssmNvlIF5 b1rR/J09/zLq79dGiHXj+UQZiTqsUYdfAN9NFyJQF1TbkV0BVnCoSN1OlZBezLfd Kodlv+sk8w0eJd3qYrOWHARQa5EczXRv6UDZb67CnP6Zc+obLYNtIdtPb0CJltYF vFSnhVMpQvqLFQ== -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:34 2025 by rpki-client