$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: WDttr4HxNx1NVwWK9I+mn3DaXrpfJZO/5BXDZZFBzFI= Subject key identifier: B0:FD:8B:EC:4F:14:25:30:F9:10:F4:3E:F3:F4:49:77:F1:65:69:23 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 0198D73BB55D6703820619891AF514382145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 08FE Signing time: Sat 23 Aug 2025 14:01:11 +0000 Manifest this update: Sat 23 Aug 2025 14:01:11 +0000 Manifest next update: Sun 24 Aug 2025 14:01:11 +0000 Files and hashes: 1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=) 2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=) 3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=) 4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: Lur8YXuKyLNtxk+AAOG8M502bmHqM8GmjW9r5Zymqdo=) 6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=) 7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=) 8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=) 9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=) 10: WOeiegJydkxVE1vjiwGx6ATuFEY.roa (hash: QQ0/7N7W7DkOMFKnzycHP6yPRCFiGEALp7b0CpA3RZ0=) 11: XaybEw_MkTY28IquFGQbHrSpM7k.roa (hash: TwRW1DKYPixpCJP4Q5rOfw8R+B/zkE9LC0Lipg8NmYQ=) 12: bRbW8P3bIsKJRNWaiMr-Kb4NIoQ.roa (hash: v77US+PxQpF7B60vIVmGcjZu9Cj7y5UanTIDHgPIp4M=) 13: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (hash: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=) 14: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=) 15: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=) 16: zhgXsJzHOSwZ2vW5K0nW1lO6VOU.roa (hash: Yt6DAu9pUe7VspoY5/vTE3HMguhU3RqgQubcaVH+tIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:b5:5d:67:03:82:06:19:89:1a:f5:14:38:21:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Aug 23 14:01:11 2025 GMT Not After : Aug 24 14:01:11 2025 GMT Subject: CN=b0fd8bec4f142530f910f43ef3f44977f1656923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:bb:aa:ea:02:11:99:5d:7e:64:f5:d1:04: 70:54:32:fb:29:28:f2:bc:5d:db:13:f7:e9:72:0d: 82:09:b4:c0:8b:7e:03:ec:31:13:ed:6f:00:c4:eb: 3b:4b:f7:d9:0a:1b:f0:d8:16:eb:52:f8:28:d0:7e: c6:a4:c9:74:6a:06:a7:89:56:25:fd:5b:dc:7e:00: fb:5b:86:80:b3:c3:87:37:92:c0:8e:dd:1c:17:76: 9d:dc:cf:b0:38:09:9e:01:c6:52:02:bb:1d:1b:48: 1d:1a:22:4e:44:f6:74:65:c9:bd:ee:6d:d1:8a:6c: 42:48:a1:30:ad:6c:de:20:2e:0b:df:aa:c6:a5:95: 22:e3:e8:6b:98:c0:a6:f9:df:1d:32:00:90:67:80: de:3f:56:4e:20:25:f1:d0:98:5f:58:9d:18:32:e4: 65:6b:ff:c0:46:a6:1f:db:4e:97:f4:c5:b5:52:f0: f8:4f:80:ba:91:15:d2:9a:96:e8:28:e5:ae:e6:e7: 3c:52:1f:c0:bc:be:7b:81:f4:42:64:3f:e7:e6:38: 38:67:2e:74:c0:57:07:55:41:86:13:03:47:11:5c: 79:fb:51:a1:76:ef:61:75:91:da:89:3c:4b:be:c8: f4:80:2c:64:57:94:6e:91:21:45:6c:92:b6:3a:5e: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:8B:EC:4F:14:25:30:F9:10:F4:3E:F3:F4:49:77:F1:65:69:23 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b7:41:d3:e4:4e:20:66:4a:22:3b:c5:44:aa:61:f1:03:52: f5:b0:94:3a:e0:54:4c:11:e2:73:b2:be:32:72:89:fc:b2:7a: 51:98:6b:66:86:01:07:7a:7a:b2:a8:dd:d6:eb:f4:c7:69:d3: d3:86:87:46:13:a8:6f:9c:38:f3:7f:a5:fb:a3:1a:ec:1d:32: 18:97:8c:31:f8:b6:15:14:23:91:0f:9d:1d:a0:1b:c5:3f:7d: 58:e8:d2:50:32:ed:86:6d:db:34:40:61:f4:9a:5f:ff:22:04: db:e8:b5:88:69:d2:51:42:05:d5:0e:ab:60:9b:7a:e2:86:fb: af:da:94:03:0e:95:0b:45:9c:2f:0e:78:e2:93:99:91:d7:06: 77:47:88:f2:f2:f6:aa:73:33:c2:7b:63:5e:3b:22:05:d4:6d: 0e:6e:1f:d5:3c:75:e4:fe:f8:50:b4:68:6e:9c:9c:11:17:6b: bf:50:9e:b4:ce:11:6a:87:0b:fe:10:34:0a:3a:4c:b9:e3:ed: c1:0d:65:1c:51:98:c6:63:e2:df:a1:74:ff:48:6f:29:c7:c4: 69:20:fa:b0:8f:d5:3c:b5:78:d8:0c:4b:3f:78:1e:27:b6:38: 3e:4d:b2:fa:d1:19:7f:ba:45:c7:f6:a8:df:98:4c:a1:34:c0: f5:e4:0b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXO7VdZwOCBhmJGvUUOCFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjUwODIzMTQwMTExWhcNMjUwODI0MTQwMTExWjAzMTEwLwYDVQQD EyhiMGZkOGJlYzRmMTQyNTMwZjkxMGY0M2VmM2Y0NDk3N2YxNjU2OTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9K7quoCEZldfmT10QRwVDL7KSjy vF3bE/fpcg2CCbTAi34D7DET7W8AxOs7S/fZChvw2BbrUvgo0H7GpMl0aganiVYl /VvcfgD7W4aAs8OHN5LAjt0cF3ad3M+wOAmeAcZSArsdG0gdGiJORPZ0Zcm97m3R imxCSKEwrWzeIC4L36rGpZUi4+hrmMCm+d8dMgCQZ4DeP1ZOICXx0JhfWJ0YMuRl a//ARqYf206X9MW1UvD4T4C6kRXSmpboKOWu5uc8Uh/AvL57gfRCZD/n5jg4Zy50 wFcHVUGGEwNHEVx5+1Ghdu9hdZHaiTxLvsj0gCxkV5RukSFFbJK2Ol7jrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLD9i+xPFCUw+RD0PvP0SXfxZWkjMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLdB0+RO IGZKIjvFRKph8QNS9bCUOuBUTBHic7K+MnKJ/LJ6UZhrZoYBB3p6sqjd1uv0x2nT 04aHRhOob5w483+l+6Ma7B0yGJeMMfi2FRQjkQ+dHaAbxT99WOjSUDLthm3bNEBh 9Jpf/yIE2+i1iGnSUUIF1Q6rYJt64ob7r9qUAw6VC0WcLw544pOZkdcGd0eI8vL2 qnMzwntjXjsiBdRtDm4f1Tx15P74ULRobpycERdrv1CetM4RaocL/hA0CjpMuePt wQ1lHFGYxmPi36F0/0hvKcfEaSD6sI/VPLV42AxLP3geJ7Y4Pk2y+tEZf7pFx/ao 35hMoTTA9eQLtw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:29:28 2025 by rpki-client