$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: TVl30FOp/m7zDP0a083f/peLqsLjZDF7OLeDJ86Gmtc= Subject key identifier: 4C:89:F7:63:18:EC:F4:99:5C:BA:28:DB:D1:70:0C:96:6D:3D:C9:67 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 0198D4E04F72B3C165CF7663A20074E47BE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 165A Signing time: Sat 23 Aug 2025 03:02:06 +0000 Manifest this update: Sat 23 Aug 2025 03:02:06 +0000 Manifest next update: Sun 24 Aug 2025 03:02:06 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: azpmapNJRwpMWilwfTdCibXdZPferyk8a2vJbQPjk74=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:4f:72:b3:c1:65:cf:76:63:a2:00:74:e4:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Aug 23 03:02:06 2025 GMT Not After : Aug 24 03:02:06 2025 GMT Subject: CN=4c89f76318ecf4995cba28dbd1700c966d3dc967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:a9:07:82:34:85:38:dd:2d:cc:49:2f:ed: 50:cb:ae:af:c5:b0:14:22:2a:84:1d:ca:75:78:d6: 1c:f1:51:2d:38:ee:19:4e:c9:76:0a:c8:dc:20:98: 61:fd:3e:93:7b:75:81:bb:bc:45:0f:36:80:09:56: 01:a3:72:b7:36:bb:0f:60:42:94:0d:b0:4d:7c:b3: a5:fc:c6:7a:7a:8b:8f:c1:5a:5a:56:c2:2b:4b:74: c0:46:77:d2:da:01:cf:95:b8:c5:34:83:de:20:39: 91:73:e5:94:e4:4f:ed:75:69:15:46:3e:b3:5b:31: b7:a0:42:98:00:d0:fb:8d:8c:00:76:ca:4d:60:4f: 1b:5f:b5:b0:64:b2:a6:8f:df:05:25:6a:f4:69:8d: 61:09:41:2c:40:70:2b:78:5e:69:b0:66:c3:6f:b5: 16:7c:f7:90:55:0c:43:7e:4d:d9:0e:6d:16:8b:b7: 11:55:18:f4:3e:01:03:3d:4c:4c:e3:5c:9c:3b:49: 7a:b0:d7:eb:16:38:6a:79:f0:46:b6:54:c3:e1:c4: 3f:40:57:39:4a:b3:91:f8:58:24:e6:1c:5d:b0:61: 91:a4:b2:b6:b2:12:b5:d6:3b:55:c4:65:54:94:64: e6:03:1a:6a:88:dd:99:6d:94:18:8f:90:3d:d4:32: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:F7:63:18:EC:F4:99:5C:BA:28:DB:D1:70:0C:96:6D:3D:C9:67 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:43:0f:08:7b:0c:41:d8:ab:fa:c0:c7:4b:b6:29:9a:f1:e6: dc:28:6f:7f:82:96:ba:09:51:37:ef:85:3c:c2:e8:fc:fb:ff: 90:66:62:76:d8:1f:9c:a4:b7:3c:cf:18:6d:63:4b:3e:b0:29: ab:c7:73:f3:f0:58:a1:55:e0:0b:3c:9d:b2:6c:88:f8:ba:2c: a3:1f:d8:fd:b7:f5:92:2e:8b:0c:20:d4:99:39:9e:a9:5b:9f: 83:a1:c5:6a:81:a1:75:7c:14:e7:b7:ea:57:20:91:b7:02:44: ef:21:69:da:8f:57:48:6f:f4:a4:d4:3e:8c:63:a1:a1:bc:32: ce:c8:df:2f:2a:29:dd:1f:aa:b2:f8:07:d8:18:0c:8f:c9:fb: 4e:79:6d:90:09:0f:74:34:6f:9e:5d:fb:f2:1c:fd:11:eb:8c: 8a:7f:f1:56:72:91:2b:eb:a3:8d:bd:d1:00:af:c6:c4:23:ba: 26:79:52:30:71:ee:54:74:28:10:9e:7d:ce:31:0b:13:94:c5: 4f:00:97:bf:fd:83:4e:ea:09:6e:55:90:8e:2b:f6:2d:7c:c3: 9c:b1:d8:e3:aa:12:a6:3b:d2:e8:b6:4c:18:62:7a:ce:2f:48: 0b:50:b8:11:bd:be:91:41:ad:ab:5b:07:2b:76:68:74:99:f6: 1d:ac:01:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4E9ys8Flz3ZjogB05HvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwODIzMDMwMjA2WhcNMjUwODI0MDMwMjA2WjAzMTEwLwYDVQQD Eyg0Yzg5Zjc2MzE4ZWNmNDk5NWNiYTI4ZGJkMTcwMGM5NjZkM2RjOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpmpB4I0hTjdLcxJL+1Qy66vxbAU IiqEHcp1eNYc8VEtOO4ZTsl2CsjcIJhh/T6Te3WBu7xFDzaACVYBo3K3NrsPYEKU DbBNfLOl/MZ6eouPwVpaVsIrS3TARnfS2gHPlbjFNIPeIDmRc+WU5E/tdWkVRj6z WzG3oEKYAND7jYwAdspNYE8bX7WwZLKmj98FJWr0aY1hCUEsQHAreF5psGbDb7UW fPeQVQxDfk3ZDm0Wi7cRVRj0PgEDPUxM41ycO0l6sNfrFjhqefBGtlTD4cQ/QFc5 SrOR+Fgk5hxdsGGRpLK2shK11jtVxGVUlGTmAxpqiN2ZbZQYj5A91DIpLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyJ92MY7PSZXLoo29FwDJZtPclnMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0UMPCHsM Qdir+sDHS7YpmvHm3Chvf4KWuglRN++FPMLo/Pv/kGZidtgfnKS3PM8YbWNLPrAp q8dz8/BYoVXgCzydsmyI+Losox/Y/bf1ki6LDCDUmTmeqVufg6HFaoGhdXwU57fq VyCRtwJE7yFp2o9XSG/0pNQ+jGOhobwyzsjfLyop3R+qsvgH2BgMj8n7TnltkAkP dDRvnl378hz9EeuMin/xVnKRK+ujjb3RAK/GxCO6JnlSMHHuVHQoEJ59zjELE5TF TwCXv/2DTuoJblWQjiv2LXzDnLHY46oSpjvS6LZMGGJ6zi9IC1C4Eb2+kUGtq1sH K3ZodJn2HawBDw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:28:12 2025 by rpki-client