$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: 5XAyzSgSDqBQnyHx15l5fJq8uxwEBj6qyC9YB/L6Agc= Subject key identifier: 3C:D3:B0:59:3C:71:25:AC:C7:5E:B2:D4:B8:BD:C8:70:1E:B6:63:C9 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 0197B7457EC33100C4DF35AA3F26093DCC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 15CD Signing time: Sat 28 Jun 2025 16:01:14 +0000 Manifest this update: Sat 28 Jun 2025 16:01:14 +0000 Manifest next update: Sun 29 Jun 2025 16:01:14 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 6: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 7: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 8: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 9: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 10: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 11: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 12: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 13: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 14: aTKoAcJI3FXVrw8kkI8TnAJjwsw.roa (hash: o921TO0oKHyxKUzXhR4Rw3JAqYi3aDFIH1je791fzRQ=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: NcYK5qKE58jQamDrX7L0uXEdJivJGkNFuab3JO2fP9U=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:7e:c3:31:00:c4:df:35:aa:3f:26:09:3d:cc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jun 28 16:01:14 2025 GMT Not After : Jun 29 16:01:14 2025 GMT Subject: CN=3cd3b0593c7125acc75eb2d4b8bdc8701eb663c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:17:df:e5:26:58:76:43:32:40:bc:47:c7: 71:c2:10:65:43:d1:36:45:10:2c:ff:c2:d0:95:ec: bb:94:a6:8c:57:dd:49:dc:77:c5:f5:0d:88:99:fd: 3c:22:3c:1b:d4:a9:41:1d:8e:cb:66:be:fb:bc:1d: 92:87:7a:23:01:01:4f:ac:36:f6:73:a4:d8:4f:53: a9:c6:41:99:1f:da:27:1c:33:f1:07:d4:4a:42:07: a3:b4:64:d7:10:91:f9:46:26:01:80:02:2a:dc:ef: 5a:f3:0c:bc:1c:d2:dd:a7:88:28:00:d5:f7:c1:9a: 0b:87:bb:10:31:89:43:af:fd:b6:58:57:43:61:9c: 43:1d:c8:2f:56:43:7e:33:d4:f0:d4:d6:35:4c:4b: b1:8b:47:73:16:55:92:27:9c:11:7d:4f:1c:4d:2a: a7:7b:1a:2b:ab:d5:85:86:f5:39:de:aa:c0:03:ac: 90:38:50:40:05:dd:13:87:29:fd:87:36:ea:92:f6: 45:6a:42:8c:c0:67:1b:6a:0b:41:01:a4:73:a1:58: a3:90:64:f1:c8:a8:ba:fc:1e:85:a8:52:8e:fb:fd: 32:44:39:57:4a:5d:6a:8d:ee:b6:e2:22:2b:4b:11: 8a:b4:23:cf:a5:6e:e0:ac:46:79:90:08:04:76:e0: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:B0:59:3C:71:25:AC:C7:5E:B2:D4:B8:BD:C8:70:1E:B6:63:C9 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5d:8c:23:4a:2b:99:40:9c:9f:41:fe:66:ba:09:62:2e:30: 6e:f7:db:c2:db:18:eb:69:a4:12:99:7b:d0:b5:07:0b:3f:fa: 52:26:82:fa:46:8f:37:bb:b7:32:26:d9:d3:37:23:82:e4:b4: e8:79:b5:33:cd:27:76:bc:29:82:04:5e:c6:a9:c2:e2:8f:49: 82:a0:bb:a1:03:44:ae:cf:4c:b2:6b:55:6e:47:c3:21:f6:11: 71:79:1b:15:0b:ef:c5:ab:46:0e:e9:44:b5:55:9d:2e:8a:66: 85:e5:de:97:37:62:2a:5a:a4:54:5b:5e:54:c6:8b:b8:83:ce: cf:f1:f0:65:79:70:be:75:3c:02:09:a1:fa:db:ef:11:b0:67: 46:f9:01:6c:d8:be:43:68:2d:6f:0e:e0:40:6b:fd:f0:90:47: 86:92:e6:4b:dc:27:a8:10:e3:ea:97:65:fa:12:b2:63:6b:f4: 64:83:9a:bd:c1:d8:e4:af:a2:ed:c9:b2:fc:03:ed:a1:97:db: ef:8e:cc:f4:24:5c:05:8e:95:38:1a:9e:44:d5:cf:d2:86:04: 7a:15:77:ac:7a:68:06:98:86:b1:27:f2:f8:0a:30:93:14:98: 5b:f7:a5:bd:d0:33:2a:3f:22:d5:0e:f5:6d:8f:a7:18:6b:28: 7d:fb:99:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RX7DMQDE3zWqPyYJPcwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUwNjI4MTYwMTE0WhcNMjUwNjI5MTYwMTE0WjAzMTEwLwYDVQQD EygzY2QzYjA1OTNjNzEyNWFjYzc1ZWIyZDRiOGJkYzg3MDFlYjY2M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptwX3+UmWHZDMkC8R8dxwhBlQ9E2 RRAs/8LQley7lKaMV91J3HfF9Q2Imf08Ijwb1KlBHY7LZr77vB2Sh3ojAQFPrDb2 c6TYT1OpxkGZH9onHDPxB9RKQgejtGTXEJH5RiYBgAIq3O9a8wy8HNLdp4goANX3 wZoLh7sQMYlDr/22WFdDYZxDHcgvVkN+M9Tw1NY1TEuxi0dzFlWSJ5wRfU8cTSqn exorq9WFhvU53qrAA6yQOFBABd0Thyn9hzbqkvZFakKMwGcbagtBAaRzoVijkGTx yKi6/B6FqFKO+/0yRDlXSl1qje624iIrSxGKtCPPpW7grEZ5kAgEduBwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzTsFk8cSWsx16y1Li9yHAetmPJMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV2MI0or mUCcn0H+ZroJYi4wbvfbwtsY62mkEpl70LUHCz/6UiaC+kaPN7u3MibZ0zcjguS0 6Hm1M80ndrwpggRexqnC4o9JgqC7oQNErs9MsmtVbkfDIfYRcXkbFQvvxatGDulE tVWdLopmheXelzdiKlqkVFteVMaLuIPOz/HwZXlwvnU8Agmh+tvvEbBnRvkBbNi+ Q2gtbw7gQGv98JBHhpLmS9wnqBDj6pdl+hKyY2v0ZIOavcHY5K+i7cmy/APtoZfb 747M9CRcBY6VOBqeRNXP0oYEehV3rHpoBpiGsSfy+AowkxSYW/elvdAzKj8i1Q71 bY+nGGsoffuZ8g== -----END CERTIFICATE-----Generated at Sat Jun 28 21:59:23 2025 by rpki-client