$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: Cg0RmO3yDJhFsqIuwcf4FtCtan5O6q8dW1ooUQvuz70= Subject key identifier: 13:81:EC:36:9A:FC:DB:53:D4:A0:06:E9:3C:77:34:95:1A:66:93:00 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 0197B5FBD0D8DBFB0910ADCCC24DE1F9E985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 0867 Signing time: Sat 28 Jun 2025 10:01:08 +0000 Manifest this update: Sat 28 Jun 2025 10:01:08 +0000 Manifest next update: Sun 29 Jun 2025 10:01:08 +0000 Files and hashes: 1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=) 2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=) 3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=) 4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: iSQZrdxQ3Em/gra7M6bT//CCHVDHOjCCvQOC9NfRVfc=) 6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=) 7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=) 8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=) 9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=) 10: bQ_hDW3CFCEDwoE1OstRvKETtbc.roa (hash: ZMu9HCS1/BRrvsvlRmVezGc/35cGLC+T1nGXPiaS0kM=) 11: bRbW8P3bIsKJRNWaiMr-Kb4NIoQ.roa (hash: v77US+PxQpF7B60vIVmGcjZu9Cj7y5UanTIDHgPIp4M=) 12: dMZjIJZoUmrMNPGBBUrcXn7nJEA.roa (hash: Lu1E0qSEZKaeh/TE8iYc13AZt915axFDE9iXfLIAMlM=) 13: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=) 14: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fb:d0:d8:db:fb:09:10:ad:cc:c2:4d:e1:f9:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jun 28 10:01:08 2025 GMT Not After : Jun 29 10:01:08 2025 GMT Subject: CN=1381ec369afcdb53d4a006e93c7734951a669300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:05:eb:ff:79:02:5c:01:a9:3a:16:51:2b:53: 26:78:04:3e:10:3f:e5:b7:dd:f9:cc:82:8e:e9:d7: 9b:4a:51:1e:c4:9b:11:90:ad:5e:b6:9d:74:34:f8: 8f:16:3b:46:75:09:12:5c:1a:94:52:29:a0:9a:0b: 9e:ac:8f:57:a7:75:96:56:bc:05:22:f5:7a:0d:27: 60:9d:90:83:d3:e2:9d:19:c9:db:f2:6f:14:30:e3: 03:cb:32:6b:95:68:8a:b5:69:81:d0:ec:03:95:96: 4f:91:f1:57:31:0d:20:91:65:9e:5f:7b:26:bb:8c: 82:0b:67:66:0d:ca:77:50:5b:ad:fa:5d:bc:bb:1c: 02:53:73:23:59:2d:c3:b1:57:4f:b4:87:05:73:9a: b9:49:71:b0:c5:2c:99:ac:94:69:56:53:ad:a2:4f: 03:31:35:b8:1c:1c:17:03:ba:ab:b0:d3:05:ef:3d: 8a:27:4c:d2:a7:1b:43:48:f8:24:ae:d0:9a:1f:92: 09:f0:ce:53:2a:fa:c0:60:4a:ab:2e:b0:ef:6b:df: 37:76:b0:1d:f9:32:0e:46:36:16:8b:70:e8:db:37: 80:02:15:ea:bf:f6:97:9a:f4:33:73:a6:9a:62:10: f3:a3:7f:71:04:55:b6:b2:e7:a7:67:a4:39:48:c3: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:EC:36:9A:FC:DB:53:D4:A0:06:E9:3C:77:34:95:1A:66:93:00 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:63:cc:bd:38:8b:10:08:00:ce:6c:53:28:cc:b7:87:de:cd: 95:10:a9:82:ee:8b:bf:31:97:0a:ae:49:bf:91:1c:72:a0:b0: 63:ee:8c:af:f7:b2:1e:dd:77:a7:ec:76:27:e3:c1:4c:d6:e0: 12:80:97:bd:c8:56:10:89:fe:68:a8:ad:03:ab:3d:8f:b1:a1: 50:f9:8c:f9:1a:ed:4d:6f:9c:c0:7a:23:37:84:ae:9f:eb:34: 07:fe:7a:48:f3:3a:a3:16:a6:89:68:91:3d:92:d6:6b:56:5a: e2:71:2c:ef:38:dc:77:e8:99:88:60:6a:b2:41:d8:35:4a:3f: 4e:47:c2:50:13:ea:8d:8f:49:93:8a:4f:c3:26:d3:80:7d:97: d6:6c:0e:d2:e8:eb:7b:af:2d:2c:1d:89:13:9d:9e:c9:60:bb: 82:1f:16:5c:0e:25:70:21:36:e0:e9:d5:20:1b:27:e5:1c:31: c2:de:37:44:c2:2f:6f:cb:ba:d3:d3:c7:f9:79:70:b5:7b:04: 12:4f:92:09:de:ff:8e:18:de:c8:37:e2:08:ec:da:b5:fb:18: b9:62:f7:6d:a0:96:a5:e5:b9:88:e7:c2:7a:ea:df:68:df:53: 6d:47:d4:2f:1a:be:0d:48:50:b1:d5:5f:72:d0:92:26:43:a0: d9:e5:c4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1+9DY2/sJEK3Mwk3h+emFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjUwNjI4MTAwMTA4WhcNMjUwNjI5MTAwMTA4WjAzMTEwLwYDVQQD EygxMzgxZWMzNjlhZmNkYjUzZDRhMDA2ZTkzYzc3MzQ5NTFhNjY5MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QXr/3kCXAGpOhZRK1MmeAQ+ED/l t935zIKO6debSlEexJsRkK1etp10NPiPFjtGdQkSXBqUUimgmguerI9Xp3WWVrwF IvV6DSdgnZCD0+KdGcnb8m8UMOMDyzJrlWiKtWmB0OwDlZZPkfFXMQ0gkWWeX3sm u4yCC2dmDcp3UFut+l28uxwCU3MjWS3DsVdPtIcFc5q5SXGwxSyZrJRpVlOtok8D MTW4HBwXA7qrsNMF7z2KJ0zSpxtDSPgkrtCaH5IJ8M5TKvrAYEqrLrDva983drAd +TIORjYWi3Do2zeAAhXqv/aXmvQzc6aaYhDzo39xBFW2suenZ6Q5SMOt3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOB7Daa/NtT1KAG6Tx3NJUaZpMAMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmPMvTiL EAgAzmxTKMy3h97NlRCpgu6LvzGXCq5Jv5EccqCwY+6Mr/eyHt13p+x2J+PBTNbg EoCXvchWEIn+aKitA6s9j7GhUPmM+RrtTW+cwHojN4Sun+s0B/56SPM6oxamiWiR PZLWa1Za4nEs7zjcd+iZiGBqskHYNUo/TkfCUBPqjY9Jk4pPwybTgH2X1mwO0ujr e68tLB2JE52eyWC7gh8WXA4lcCE24OnVIBsn5Rwxwt43RMIvb8u609PH+XlwtXsE Ek+SCd7/jhjeyDfiCOzatfsYuWL3baCWpeW5iOfCeurfaN9TbUfULxq+DUhQsdVf ctCSJkOg2eXEUw== -----END CERTIFICATE-----Generated at Sat Jun 28 18:57:14 2025 by rpki-client