$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: xUgGLO5Q+TaFMpK8PYZdYGQWpHREKk82kk9zQ3qzAEI= Subject key identifier: 49:04:01:31:33:14:3B:71:1D:D1:8A:7B:87:A4:E7:ED:D1:74:F2:23 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 0199FDDA06BFC1935A4ECEEADE707A1F2AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 16F7 Signing time: Sun 19 Oct 2025 19:02:28 +0000 Manifest this update: Sun 19 Oct 2025 19:02:28 +0000 Manifest next update: Mon 20 Oct 2025 19:02:28 +0000 Files and hashes: 1: 28ZcXxr21V3g8tkNu2SthAHESpQ.roa (hash: h2FWZ11G0T+okbMyTkF9rdPiR2xC/SmDqr6XsOWCmBI=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: Htx4HHRKWCRc8PPhwDAnjI8vDv/lo5bBSeoXyRdnwoU=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OD8FF3bzXgR90_KVqhd9MLzHmAw.roa (hash: jzLxdDmjDJ4y9FgIRz0UlTc/mjLkyHig2G3vYZkTFSM=) 6: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 7: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 8: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 9: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 10: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 15: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 16: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:da:06:bf:c1:93:5a:4e:ce:ea:de:70:7a:1f:2a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Oct 19 19:02:28 2025 GMT Not After : Oct 20 19:02:28 2025 GMT Subject: CN=4904013133143b711dd18a7b87a4e7edd174f223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:c3:36:7f:e5:83:b5:bd:9d:8e:94:1a:b6: 7b:bd:cb:76:15:d0:71:1c:0a:73:10:1b:0b:c0:7f: 36:62:73:c7:d9:6a:8a:73:db:56:cd:cf:7c:a1:c9: 63:5e:5d:45:0a:c0:45:ea:b3:26:1f:6c:33:3b:25: 92:06:ea:e9:ca:e6:a3:07:1a:c5:61:10:5e:28:95: c0:1d:1b:a1:ff:09:fa:2e:88:91:5e:83:21:81:b8: c7:70:2a:56:ea:8b:b9:8a:5c:58:29:6f:6f:1d:44: 8d:70:b3:85:c6:90:08:0d:91:4e:63:30:74:45:ed: ef:97:e5:b2:cd:73:77:8c:ac:89:6d:e9:7a:1c:38: 8b:60:2b:c3:a8:5c:80:47:ce:03:40:aa:d0:ca:50: 35:b5:af:61:07:d8:2b:04:ae:c7:3c:2c:e7:bd:8e: 29:4a:63:18:55:8a:61:d2:05:07:2c:7e:c9:4f:09: 6d:e2:1f:49:93:51:c0:ce:e9:95:e0:d9:3c:ec:78: fb:f2:b5:29:4c:d1:e0:0a:ed:00:6c:da:74:49:22: df:59:b0:79:ea:ac:77:7e:c0:27:c1:ec:4c:83:0e: f7:e5:cd:bb:a8:1d:94:bd:f3:e5:1f:7e:09:bb:d7: 3e:37:a0:2f:a7:02:0b:b7:3a:8b:02:47:9a:cf:6b: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:04:01:31:33:14:3B:71:1D:D1:8A:7B:87:A4:E7:ED:D1:74:F2:23 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a1:3b:cf:9c:8f:ea:61:4d:bd:41:f2:6c:6f:ba:98:b6:d9: b6:73:a7:84:c4:ce:ce:65:b1:0e:37:d7:6b:a1:bf:05:e1:62: 99:cd:9b:0d:49:6c:0c:1c:a3:0c:6f:bc:3c:01:fd:ba:95:d3: d0:49:9a:94:58:93:68:bf:d7:75:11:01:09:ec:68:68:ff:99: 83:ef:12:b2:fd:c7:9a:03:1f:63:22:8a:3e:fd:ce:22:36:24: 5d:63:37:bc:ef:ea:cb:d5:0c:a2:03:b2:21:88:4f:da:db:47: 6e:0b:83:fa:1f:91:ef:c8:69:fb:20:35:cc:64:20:d3:0f:01: 71:c8:59:74:7b:4f:33:42:9d:29:80:0b:eb:eb:e2:6d:f9:05: 07:1c:56:10:19:9f:a9:47:82:14:2b:02:a7:7a:b3:22:7f:a1: 79:cf:f6:3e:76:5d:f7:e2:fa:72:1f:7b:ac:0e:cc:3a:0a:c3: 58:38:fb:af:99:c8:2f:df:bc:c8:97:1a:57:44:0d:6c:29:6e: e6:45:1b:4b:41:ef:04:06:cd:44:02:ed:f0:b9:3b:ec:5d:84: e3:08:df:b7:7d:62:ca:5b:09:5b:94:52:db:39:34:cf:15:5a: 5c:ee:2e:12:43:bc:2f:3c:77:ce:b5:18:37:96:43:8a:d3:a1: 82:c0:f5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92ga/wZNaTs7q3nB6HyrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUxMDE5MTkwMjI4WhcNMjUxMDIwMTkwMjI4WjAzMTEwLwYDVQQD Eyg0OTA0MDEzMTMzMTQzYjcxMWRkMThhN2I4N2E0ZTdlZGQxNzRmMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgTDNn/lg7W9nY6UGrZ7vct2FdBx HApzEBsLwH82YnPH2WqKc9tWzc98ocljXl1FCsBF6rMmH2wzOyWSBurpyuajBxrF YRBeKJXAHRuh/wn6LoiRXoMhgbjHcCpW6ou5ilxYKW9vHUSNcLOFxpAIDZFOYzB0 Re3vl+WyzXN3jKyJbel6HDiLYCvDqFyAR84DQKrQylA1ta9hB9grBK7HPCznvY4p SmMYVYph0gUHLH7JTwlt4h9Jk1HAzumV4Nk87Hj78rUpTNHgCu0AbNp0SSLfWbB5 6qx3fsAnwexMgw735c27qB2UvfPlH34Ju9c+N6AvpwILtzqLAkeaz2vL8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkEATEzFDtxHdGKe4ek5+3RdPIjMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaE7z5yP 6mFNvUHybG+6mLbZtnOnhMTOzmWxDjfXa6G/BeFimc2bDUlsDByjDG+8PAH9upXT 0EmalFiTaL/XdREBCexoaP+Zg+8Ssv3HmgMfYyKKPv3OIjYkXWM3vO/qy9UMogOy IYhP2ttHbguD+h+R78hp+yA1zGQg0w8BcchZdHtPM0KdKYAL6+vibfkFBxxWEBmf qUeCFCsCp3qzIn+hec/2PnZd9+L6ch97rA7MOgrDWDj7r5nIL9+8yJcaV0QNbClu 5kUbS0HvBAbNRALt8Lk77F2E4wjft31iylsJW5RS2zk0zxVaXO4uEkO8Lzx3zrUY N5ZDitOhgsD1UA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:55:51 2025 by rpki-client