$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: /D84h4FiT7qqkXQ7bWItRCd445Wp11WX5kIg0GreEF0= Subject key identifier: DB:7B:A3:02:9D:C5:44:B7:3E:AC:5E:71:46:A2:24:29:D6:15:BD:4B Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 0198D73BACE818FFF34167967A6A76D04300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 11EC Signing time: Sat 23 Aug 2025 14:01:08 +0000 Manifest this update: Sat 23 Aug 2025 14:01:08 +0000 Manifest next update: Sun 24 Aug 2025 14:01:08 +0000 Files and hashes: 1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 2: 65UW0bP330_sbiHmhn1GPke5-s0.roa (hash: 9frLX6TRDGO7w/2l84LcQ4FcvrGdeUXKebJFsxtBILI=) 3: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 4: Da21pS828C54GQ_yJKfeR-VgNvg.roa (hash: seVJR3ydsOQWSdKV1D2g8cTVT58k9esOBVVLIg0YE80=) 5: FM2IQt7d-4Rp8xS9GcEuVbbZTQY.roa (hash: 2RNY6t1SKoygJiGWODeZfSRgLVFzQXJJ5MLlWHcPa0A=) 6: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: 7oN16komYToh+/gjVMnAk84lAHZNh6pOzZ1ESM858X8=) 7: J899_ESpHEgZ9oMsKVtjOU0St1Y.roa (hash: NCRXSTGqeJuy3B726xguntAQJ1YJyflz+RYU37KVue8=) 8: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 9: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=) 10: SA5zFzgkW03ymllMQt_Of2KH7Ps.roa (hash: 5IF/CnZvYXVGAvUMceHl/2nQfxGE7nBMSCVJwt9pMPk=) 11: UzvoNIBCTayYuI6U30KDrmerNuU.roa (hash: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=) 12: XGOuHgklPAXFF9PgAhcplLrpo5E.roa (hash: Pv9wp2//FIn+5bdveKZPF+ZeW5gxmAnJZ0pNFRghqZU=) 13: bZqocWZwcU5ZaTTgVW1c4s9fiMo.roa (hash: V7YCD7e4GhCq4YTEJi9oA8hOwYBama0jJDytOGcYv1s=) 14: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 15: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=) 16: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=) 17: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 18: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) 19: yYlPdOxEQ-DkkikOUokHzYUMfCw.roa (hash: AgZ8YHYCCPtKRU/kCp/4/N0G8XCw377PsVS8HQ2MJ6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:ac:e8:18:ff:f3:41:67:96:7a:6a:76:d0:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Aug 23 14:01:08 2025 GMT Not After : Aug 24 14:01:08 2025 GMT Subject: CN=db7ba3029dc544b73eac5e7146a22429d615bd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:cb:d3:e7:63:88:67:e9:ee:7c:25:0f:f0: 6e:96:84:a0:6c:72:9a:ae:d3:2f:62:35:a2:db:99: 96:28:1b:ea:6c:45:86:0a:74:ee:87:77:d3:a9:ae: d2:25:2d:8f:30:ee:1e:f5:4a:21:48:27:9b:a5:95: 20:5a:14:ce:17:01:a0:df:7f:7e:4c:29:e3:b8:0e: 2e:26:2f:52:12:da:c7:57:76:15:49:dd:52:08:67: ad:fd:14:30:09:5e:42:d9:fd:f6:e3:24:3a:78:7f: 57:f3:79:37:12:80:3f:52:0d:5e:3f:76:82:d3:fd: c4:d8:89:a7:48:e8:8e:6c:4d:5c:c6:43:17:03:a2: 5a:10:59:76:80:fe:ab:8d:0d:9b:c9:34:48:97:66: e1:dc:3f:02:3c:03:09:7f:7f:bb:f6:78:d3:33:ce: df:d4:4b:4f:bb:e5:b0:c7:be:e8:f2:27:56:a8:05: 52:10:f1:2b:49:04:a7:51:52:e5:06:47:27:99:4a: cb:fc:30:d4:50:b5:d5:8d:a4:93:90:05:fc:8c:94: 5e:cb:bd:f3:fe:ab:3c:43:22:c0:8f:5c:06:b7:90: ac:1b:ec:73:4f:61:e4:47:2c:a2:41:c8:7c:8e:8b: aa:80:c6:d7:67:5c:fe:7f:a1:99:f4:5d:d9:93:cf: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:A3:02:9D:C5:44:B7:3E:AC:5E:71:46:A2:24:29:D6:15:BD:4B X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:50:ea:bf:78:dd:ab:0b:d6:41:25:c3:5e:04:4c:09:0a:0c: ca:f2:ef:b5:35:3b:0a:75:e2:d9:58:bd:64:30:54:d4:c6:e9: 0c:1e:2d:55:20:45:1e:63:16:6a:5e:cb:30:d4:f1:90:83:23: 1c:9c:52:ed:f7:7b:52:60:cf:e4:83:8d:5a:09:fc:c9:32:b3: a1:90:f6:63:77:48:48:3a:c6:42:68:62:d9:84:e5:4f:31:1a: d4:d7:30:0e:3b:fb:88:fe:57:d2:f0:94:eb:ad:62:a6:f0:f7: 52:8b:80:a4:df:3d:d0:5e:2e:05:75:db:45:c5:99:36:5d:33: 31:5d:25:0e:0e:4f:1b:ba:1c:71:1e:82:57:03:1e:cf:1d:b0: 8d:3b:0a:98:45:51:9e:0a:40:83:01:37:de:ac:fd:17:42:5d: 58:53:c1:d0:92:55:1d:2f:fa:32:d0:c8:0c:44:83:6e:26:e3: 38:33:c6:79:be:58:11:04:71:2f:61:11:02:04:ee:47:8c:15: 42:cb:6e:13:c3:f0:7a:bd:02:f8:19:64:fc:30:84:7a:29:4f: 6f:15:5f:aa:94:6a:83:5d:8c:56:01:bd:82:16:ec:c0:04:22: d2:05:69:85:06:4a:46:b0:ac:d8:4b:71:c6:93:ec:2e:63:0c: 46:40:cc:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXO6zoGP/zQWeWemp20EMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUwODIzMTQwMTA4WhcNMjUwODI0MTQwMTA4WjAzMTEwLwYDVQQD EyhkYjdiYTMwMjlkYzU0NGI3M2VhYzVlNzE0NmEyMjQyOWQ2MTViZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KfL0+djiGfp7nwlD/BuloSgbHKa rtMvYjWi25mWKBvqbEWGCnTuh3fTqa7SJS2PMO4e9UohSCebpZUgWhTOFwGg339+ TCnjuA4uJi9SEtrHV3YVSd1SCGet/RQwCV5C2f324yQ6eH9X83k3EoA/Ug1eP3aC 0/3E2ImnSOiObE1cxkMXA6JaEFl2gP6rjQ2byTRIl2bh3D8CPAMJf3+79njTM87f 1EtPu+Wwx77o8idWqAVSEPErSQSnUVLlBkcnmUrL/DDUULXVjaSTkAX8jJRey73z /qs8QyLAj1wGt5CsG+xzT2HkRyyiQch8jouqgMbXZ1z+f6GZ9F3Zk8/WjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt7owKdxUS3PqxecUaiJCnWFb1LMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlDqv3jd qwvWQSXDXgRMCQoMyvLvtTU7CnXi2Vi9ZDBU1MbpDB4tVSBFHmMWal7LMNTxkIMj HJxS7fd7UmDP5IONWgn8yTKzoZD2Y3dISDrGQmhi2YTlTzEa1NcwDjv7iP5X0vCU 661ipvD3UouApN890F4uBXXbRcWZNl0zMV0lDg5PG7occR6CVwMezx2wjTsKmEVR ngpAgwE33qz9F0JdWFPB0JJVHS/6MtDIDESDbibjODPGeb5YEQRxL2ERAgTuR4wV QstuE8Pwer0C+Blk/DCEeilPbxVfqpRqg12MVgG9ghbswAQi0gVphQZKRrCs2Etx xpPsLmMMRkDM6A== -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:19 2025 by rpki-client