$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json) Hash identifier: g8yyOxLy6W/z2lgmBqISN3c3FClRNjWYCVtKOMXVAwU= Subject key identifier: 4D:69:91:FB:F3:14:C3:14:23:C4:B9:CF:3A:C3:FD:FA:94:B6:56:DD Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Certificate serial: 0198D5161191F1F06F114045022914C77B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft Manifest number: 1667 Signing time: Sat 23 Aug 2025 04:00:49 +0000 Manifest this update: Sat 23 Aug 2025 04:00:49 +0000 Manifest next update: Sun 24 Aug 2025 04:00:49 +0000 Files and hashes: 1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: 0IEa1/NtzgO47DDsA04ZSwoA8Hkn4dRd77skBlQ0CoM=) 2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=) 3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=) 4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=) 5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=) 6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=) 7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=) 8: _F5MVfF5fNE4gJHS7bTOuaP33x0.roa (hash: glFPm7n2DIuS97xAP2QYuEIRa9RXcbN9tpa+7lEYHOU=) 9: fakXDMo3zyIUclESUX9dWmYL5TA.roa (hash: IcVzCrlp60ik4ciNebwcS9dD7bdLcMNXOEwcfbEsKXU=) 10: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=) 11: yKEdpqHdvo91vC0Mmh0XBWCJyPs.roa (hash: pz0PLVuo+mNtiFiglr7TH4jCIgorFqRrLuJoPAyhrKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:16:11:91:f1:f0:6f:11:40:45:02:29:14:c7:7b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Validity Not Before: Aug 23 04:00:49 2025 GMT Not After : Aug 24 04:00:49 2025 GMT Subject: CN=4d6991fbf314c31423c4b9cf3ac3fdfa94b656dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:5b:e7:73:44:f6:62:6e:68:d7:19:85:db: 45:88:a3:d7:7b:31:59:8e:b1:dc:89:ac:44:eb:ab: 30:02:84:b7:a8:8d:73:c3:bf:a7:9b:2f:8a:04:a1: fd:9f:e4:ea:e4:88:7f:90:a7:21:7f:d6:59:e9:a3: 27:09:30:53:29:8d:70:03:3c:bd:94:25:98:30:ca: 2d:77:ec:7e:3b:a7:d2:dd:e8:6d:1f:32:0a:cf:f9: 27:a5:c1:ea:74:c3:3d:31:7f:77:c4:83:38:8a:bb: 80:9d:a6:61:a9:fd:73:85:ae:ef:8d:55:68:78:6d: 1b:02:cd:ad:29:73:7d:a8:7f:ac:1d:88:8a:54:4c: 56:d8:a2:37:ba:9b:2d:56:7c:cb:58:8e:b2:80:b3: 05:93:f4:18:97:c4:a9:c6:c3:16:87:0f:72:d6:8d: ad:4b:ce:cf:d3:2d:ab:06:19:76:8a:e7:cd:31:40: 3e:57:4d:41:3e:df:4e:d1:74:59:85:e5:34:f2:1f: 09:ef:6f:98:ff:3a:f8:6c:fd:45:be:6e:fa:23:57: 51:23:5b:1c:16:7e:26:df:8f:b6:5f:2a:27:3d:5c: cc:d7:82:91:33:73:bf:9a:39:05:dc:98:b9:04:79: c4:6e:63:bf:a3:f4:fa:7f:6a:2f:cd:c2:39:82:39: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:91:FB:F3:14:C3:14:23:C4:B9:CF:3A:C3:FD:FA:94:B6:56:DD X509v3 Authority Key Identifier: keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a7:01:7a:64:de:d4:16:7a:90:a7:47:a3:ce:45:e5:7d:eb: c5:85:20:af:ad:2f:2f:17:0c:ae:4b:59:96:1a:63:df:86:bc: 52:94:bf:1b:f6:88:07:ba:78:9b:15:c4:24:d6:6d:07:9f:3b: f6:12:13:83:dc:7e:90:ad:a7:36:12:06:7e:22:31:63:4a:57: 42:89:36:60:e7:88:43:58:06:09:b6:d3:3a:41:a9:ff:e3:94: df:c2:5b:c4:62:3a:4c:fa:f2:06:9c:d1:6e:83:9d:3b:76:38: 88:1b:c9:7f:48:88:1b:f3:22:2e:fb:88:71:91:eb:19:bb:e7: c5:05:ea:79:48:13:ca:ad:b7:70:47:88:29:f6:de:0e:ed:73: c6:4b:0c:f7:e0:d3:8b:5c:f0:09:75:75:2a:b1:7a:f8:52:dc: 58:17:44:ba:60:20:2b:58:3f:0d:c3:08:83:22:99:22:4c:66: b4:ba:af:64:3a:50:84:fd:c2:a5:7c:9b:02:79:21:4a:d1:58: 4c:d0:cf:f0:c6:a7:7f:d8:e1:e5:d2:90:21:82:0b:00:77:13: 03:3e:11:be:9e:d9:be:fc:eb:54:ab:1a:de:a5:4e:fe:93:6b: a7:8c:69:0d:a8:04:47:46:07:76:29:01:f5:85:b0:d5:74:2f: 00:5a:b4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFhGR8fBvEUBFAikUx3tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1 OGE0YzAwHhcNMjUwODIzMDQwMDQ5WhcNMjUwODI0MDQwMDQ5WjAzMTEwLwYDVQQD Eyg0ZDY5OTFmYmYzMTRjMzE0MjNjNGI5Y2YzYWMzZmRmYTk0YjY1NmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pJb53NE9mJuaNcZhdtFiKPXezFZ jrHciaxE66swAoS3qI1zw7+nmy+KBKH9n+Tq5Ih/kKchf9ZZ6aMnCTBTKY1wAzy9 lCWYMMotd+x+O6fS3ehtHzIKz/knpcHqdMM9MX93xIM4iruAnaZhqf1zha7vjVVo eG0bAs2tKXN9qH+sHYiKVExW2KI3upstVnzLWI6ygLMFk/QYl8SpxsMWhw9y1o2t S87P0y2rBhl2iufNMUA+V01BPt9O0XRZheU08h8J72+Y/zr4bP1Fvm76I1dRI1sc Fn4m34+2XyonPVzM14KRM3O/mjkF3Ji5BHnEbmO/o/T6f2ovzcI5gjksowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1pkfvzFMMUI8S5zzrD/fqUtlbdMB8GA1UdIwQY MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt Y2U1NzE1MDY5NWE5LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5 LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKcBemTe 1BZ6kKdHo85F5X3rxYUgr60vLxcMrktZlhpj34a8UpS/G/aIB7p4mxXEJNZtB587 9hITg9x+kK2nNhIGfiIxY0pXQok2YOeIQ1gGCbbTOkGp/+OU38JbxGI6TPryBpzR boOdO3Y4iBvJf0iIG/MiLvuIcZHrGbvnxQXqeUgTyq23cEeIKfbeDu1zxksM9+DT i1zwCXV1KrF6+FLcWBdEumAgK1g/DcMIgyKZIkxmtLqvZDpQhP3CpXybAnkhStFY TNDP8Manf9jh5dKQIYILAHcTAz4Rvp7ZvvzrVKsa3qVO/pNrp4xpDagER0YHdikB 9YWw1XQvAFq0Zw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:38:59 2025 by rpki-client