$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: VuJUN/O6y9V1IReF1x1QDeXcTd5XIWIo9JApG8kbImY= Subject key identifier: F8:B5:FA:06:F2:8F:37:D8:48:D3:0B:0E:32:94:C3:D8:57:45:D8:76 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 0197B6A1110A7B075DF46C0B1F1C135EA817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0C0C Signing time: Sat 28 Jun 2025 13:01:38 +0000 Manifest this update: Sat 28 Jun 2025 13:01:38 +0000 Manifest next update: Sun 29 Jun 2025 13:01:38 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: oql+0rkvezhC+Ajmf7WbazfP3q0a4M+FHU86vTNxc54=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=) 11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:11:0a:7b:07:5d:f4:6c:0b:1f:1c:13:5e:a8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jun 28 13:01:38 2025 GMT Not After : Jun 29 13:01:38 2025 GMT Subject: CN=f8b5fa06f28f37d848d30b0e3294c3d85745d876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:b7:95:99:f2:03:98:26:9a:47:01:40:b0: 50:4b:b3:e2:23:4c:ea:a6:7e:00:10:4a:fa:6b:9d: 1f:f5:66:01:0e:aa:ab:b7:b8:7e:39:ec:81:89:ef: 73:38:ab:17:e1:38:92:5e:b9:d2:63:e5:fd:92:0a: b9:06:4d:d4:32:62:1b:a6:b7:e8:c0:b2:e5:87:9e: f4:16:7a:70:73:cd:bc:6c:bb:c6:2f:72:78:df:24: 0b:42:c3:33:25:6f:5f:98:c6:0a:09:64:37:22:06: 54:aa:06:62:d9:00:ab:6a:93:ff:70:6a:21:b0:c4: 10:ac:ce:c8:28:06:7a:5b:29:b6:b3:2c:41:03:5a: 80:46:fb:22:db:95:a3:26:0b:44:85:87:4a:45:1f: 7e:f8:57:47:6a:14:04:33:28:0f:d3:72:41:c8:d2: 63:68:8e:98:84:a9:84:81:40:d1:cc:51:a6:d4:b5: 2c:92:6e:09:61:02:c4:3e:03:e4:21:48:3d:38:b8: ef:a2:54:fa:50:c1:31:09:33:99:13:84:38:68:b1: 34:dd:dd:fa:e4:5e:2b:71:5a:70:64:11:19:62:01: cf:45:6a:8c:20:05:a2:5f:27:e0:e0:b5:ed:b0:70: 35:7c:f6:72:19:ef:26:c7:b0:5c:a1:d1:90:b0:39: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:FA:06:F2:8F:37:D8:48:D3:0B:0E:32:94:C3:D8:57:45:D8:76 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ef:80:f7:5b:3d:7e:25:f4:bc:f4:9b:24:20:ba:63:d4:2e: 37:df:f5:01:a0:d6:23:db:56:82:78:ff:6f:ef:f9:ac:b9:1e: 18:9f:82:75:be:68:5b:75:2d:70:53:c0:8c:f3:ae:49:a9:5f: 69:3b:22:6a:4e:d1:69:a5:5c:6b:09:04:69:fa:f2:7e:49:be: bd:96:48:b3:df:3c:14:fa:9d:52:61:a5:58:25:fa:94:24:ca: 8d:eb:46:69:f0:44:35:1a:8d:87:af:c6:c9:f0:61:a2:ba:c9: e1:f9:9c:bf:cd:d7:4a:19:5c:28:1e:42:e7:c0:09:25:e8:ef: f7:6f:2d:0e:25:ee:82:d6:bc:6b:f9:aa:d4:db:82:9e:2a:89: c0:5a:95:cb:35:b2:81:a8:19:f1:8d:af:9b:6b:64:7a:98:b6: ad:34:fb:bf:52:b0:d9:14:ea:e4:b3:ae:4c:3c:55:8a:db:ea: 6e:ff:d2:ae:b3:71:38:f4:ec:e9:3e:99:61:c3:ee:c9:c8:af: 32:82:e9:38:f2:ff:33:46:70:21:eb:c2:11:91:51:89:67:5e: c3:a5:a7:f6:d9:07:a0:b8:e2:2e:fb:04:c7:e5:e6:1a:c1:a5: 33:c0:3f:f5:46:77:27:95:69:43:6e:34:53:ec:9b:19:ec:cf: 93:66:20:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oREKewdd9GwLHxwTXqgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwNjI4MTMwMTM4WhcNMjUwNjI5MTMwMTM4WjAzMTEwLwYDVQQD EyhmOGI1ZmEwNmYyOGYzN2Q4NDhkMzBiMGUzMjk0YzNkODU3NDVkODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS23lZnyA5gmmkcBQLBQS7PiI0zq pn4AEEr6a50f9WYBDqqrt7h+OeyBie9zOKsX4TiSXrnSY+X9kgq5Bk3UMmIbprfo wLLlh570Fnpwc828bLvGL3J43yQLQsMzJW9fmMYKCWQ3IgZUqgZi2QCrapP/cGoh sMQQrM7IKAZ6Wym2syxBA1qARvsi25WjJgtEhYdKRR9++FdHahQEMygP03JByNJj aI6YhKmEgUDRzFGm1LUskm4JYQLEPgPkIUg9OLjvolT6UMExCTOZE4Q4aLE03d36 5F4rcVpwZBEZYgHPRWqMIAWiXyfg4LXtsHA1fPZyGe8mx7BcodGQsDnnwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi1+gbyjzfYSNMLDjKUw9hXRdh2MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO+A91s9 fiX0vPSbJCC6Y9QuN9/1AaDWI9tWgnj/b+/5rLkeGJ+Cdb5oW3UtcFPAjPOuSalf aTsiak7RaaVcawkEafryfkm+vZZIs988FPqdUmGlWCX6lCTKjetGafBENRqNh6/G yfBhorrJ4fmcv83XShlcKB5C58AJJejv928tDiXugta8a/mq1NuCniqJwFqVyzWy gagZ8Y2vm2tkepi2rTT7v1Kw2RTq5LOuTDxVitvqbv/SrrNxOPTs6T6ZYcPuyciv MoLpOPL/M0ZwIevCEZFRiWdew6Wn9tkHoLjiLvsEx+XmGsGlM8A/9UZ3J5VpQ240 U+ybGezPk2YgIw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:11:08 2025 by rpki-client