$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: +H5PwktwHdLFBbtcJYvV31Xt4BzTmfe+JgmpJtoy308= Subject key identifier: 8E:C1:6B:D4:04:AC:F4:AA:FA:4F:4F:7B:E5:69:DB:EC:E3:C6:06:C8 Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 0198D439BBCA02D9C475E0D872FC282D4C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 1723 Signing time: Sat 23 Aug 2025 00:00:09 +0000 Manifest this update: Sat 23 Aug 2025 00:00:09 +0000 Manifest next update: Sun 24 Aug 2025 00:00:09 +0000 Files and hashes: 1: 00MgoZoYQtZGwQrOezTGMFJxBeQ.roa (hash: yEhoJZzpLJl/SN7s0GnAIUxYjWxoW/1J4yfFxR29F7o=) 2: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 3: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 4: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: kCsndORGwadYr2uHyFTjKJVPx0heMpR7gMoDrYV5O/0=) 5: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 6: IRWPJlIF6Vx_r34iagKuBC60plY.roa (hash: 6UnaCogzKOWL+TVkMUsFUoIa4Hln9BBiZ0rI/itufxE=) 7: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 8: XqNt7UzJuhofc4VGYamn7ZFNSyI.roa (hash: JunyMJ/+Mjm+IK459CbDtZVEIVhTVJUzVzXLrC54zcw=) 9: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 10: ke7Pxta8VpaoIZehaqEkUOxJVjY.roa (hash: /w8HaARGeZYUDrzIiinqB3uzBNqHoroNWtdxiuibk3g=) 11: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 12: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 13: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:39:bb:ca:02:d9:c4:75:e0:d8:72:fc:28:2d:4c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Aug 23 00:00:09 2025 GMT Not After : Aug 24 00:00:09 2025 GMT Subject: CN=8ec16bd404acf4aafa4f4f7be569dbece3c606c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:69:a1:43:67:78:7f:1a:d2:e4:bd:ba:41: bb:a1:40:3a:d6:cc:e0:6f:18:fe:71:ea:44:c4:97: 2e:3e:e9:56:ca:53:3f:b1:c4:83:a1:09:d6:6e:6b: 7d:84:57:2d:4f:05:a9:c7:03:3f:cc:cf:cd:fd:70: d4:9a:63:b3:9d:e1:15:58:8b:82:7f:30:92:42:5a: d9:fe:6e:68:2c:0a:71:7f:94:da:21:59:cc:73:33: f9:c5:a7:eb:36:81:e8:d7:a7:ee:3c:93:6f:de:c5: c2:db:0c:ca:f3:74:e9:4c:73:c4:08:4c:5d:bc:dd: 02:6d:a1:84:d0:2a:59:bb:73:cd:9d:eb:36:b7:18: b9:21:f7:7b:73:c6:8a:2a:e4:b0:84:40:8b:78:75: b5:42:db:3e:69:d7:8c:78:bb:31:c1:da:06:8c:87: a6:48:5c:97:75:bb:8b:45:d4:eb:aa:ca:27:65:cc: 80:0d:ee:54:44:f4:56:29:43:a0:06:a8:2e:ca:6d: 80:5b:1c:03:bd:37:0e:91:bf:92:81:4a:8a:41:2d: a8:98:34:48:b7:9a:d7:8e:e3:68:a5:b0:ff:00:74: a5:98:d1:83:77:2e:c7:95:8d:8f:a8:e2:2d:76:6f: 67:ac:8a:88:75:dd:9e:33:08:9d:dd:14:99:97:68: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:6B:D4:04:AC:F4:AA:FA:4F:4F:7B:E5:69:DB:EC:E3:C6:06:C8 X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2b:b0:26:46:9a:d9:f3:71:6b:18:99:a5:48:62:ec:a9:0e: d8:6e:d6:a5:12:45:00:3d:6e:7d:76:f1:6c:0b:21:39:a2:f8: 0b:be:be:c6:74:74:13:30:12:dd:d0:20:11:f2:5d:e6:af:a5: 0a:6f:e9:71:78:71:de:61:1e:2f:6a:d1:ba:5d:8e:ee:79:76: 1d:ed:2f:35:55:dd:97:76:2f:3f:66:be:48:2f:8e:5c:db:28: 09:7f:de:49:bc:18:be:ec:3f:24:77:11:f1:06:e8:07:bb:3b: 0a:27:0f:3c:60:62:e2:b9:db:68:28:00:a6:d9:22:52:bb:4f: 63:d8:79:f0:7b:ac:b6:75:c8:6d:c4:7f:b1:ed:62:de:2b:49: af:f3:f5:0c:6f:64:b0:d4:ff:a8:a6:68:23:36:87:ed:15:5c: 95:e7:1e:3b:2e:8e:32:1d:b1:44:65:4f:cd:db:ff:a6:2b:22: 7a:e3:49:0f:81:64:75:ab:a2:7c:e6:56:7f:ee:1b:f4:33:c4: 4e:06:0c:61:89:17:14:06:fc:d6:17:a4:bf:ec:ac:40:08:7d: 55:ac:9d:62:9f:d7:10:99:46:75:ae:34:d4:50:8c:b0:e3:7c: bd:cf:9f:e0:fe:24:06:93:51:a4:43:bf:0c:1c:be:9f:6e:c0: dc:ee:a4:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUObvKAtnEdeDYcvwoLUxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwODIzMDAwMDA5WhcNMjUwODI0MDAwMDA5WjAzMTEwLwYDVQQD Eyg4ZWMxNmJkNDA0YWNmNGFhZmE0ZjRmN2JlNTY5ZGJlY2UzYzYwNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+9poUNneH8a0uS9ukG7oUA61szg bxj+cepExJcuPulWylM/scSDoQnWbmt9hFctTwWpxwM/zM/N/XDUmmOzneEVWIuC fzCSQlrZ/m5oLApxf5TaIVnMczP5xafrNoHo16fuPJNv3sXC2wzK83TpTHPECExd vN0CbaGE0CpZu3PNnes2txi5Ifd7c8aKKuSwhECLeHW1Qts+adeMeLsxwdoGjIem SFyXdbuLRdTrqsonZcyADe5URPRWKUOgBqguym2AWxwDvTcOkb+SgUqKQS2omDRI t5rXjuNopbD/AHSlmNGDdy7HlY2PqOItdm9nrIqIdd2eMwid3RSZl2gPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7Ba9QErPSq+k9Pe+Vp2+zjxgbIMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiuwJkaa 2fNxaxiZpUhi7KkO2G7WpRJFAD1ufXbxbAshOaL4C76+xnR0EzAS3dAgEfJd5q+l Cm/pcXhx3mEeL2rRul2O7nl2He0vNVXdl3YvP2a+SC+OXNsoCX/eSbwYvuw/JHcR 8QboB7s7CicPPGBi4rnbaCgAptkiUrtPY9h58HustnXIbcR/se1i3itJr/P1DG9k sNT/qKZoIzaH7RVcleceOy6OMh2xRGVPzdv/pisieuNJD4FkdauifOZWf+4b9DPE TgYMYYkXFAb81hekv+ysQAh9VaydYp/XEJlGda401FCMsON8vc+f4P4kBpNRpEO/ DBy+n27A3O6kCw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:55 2025 by rpki-client