$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: 9XLHeF0zdj9/bileV8FRkuwjD6IFdFnLQKpa13FBdkc= Subject key identifier: F6:A5:C2:E2:8F:18:1C:D0:49:EE:A0:A7:DB:F8:8A:0C:61:3D:A6:8E Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 0197B70E80373BDED31722A17B8E8D8C678F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 15C6 Signing time: Sat 28 Jun 2025 15:01:10 +0000 Manifest this update: Sat 28 Jun 2025 15:01:10 +0000 Manifest next update: Sun 29 Jun 2025 15:01:10 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: 6bmVPk9YZQKW0lSdMOafTKpOHY0LQwag1mzg2XErXyQ=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:80:37:3b:de:d3:17:22:a1:7b:8e:8d:8c:67:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jun 28 15:01:10 2025 GMT Not After : Jun 29 15:01:10 2025 GMT Subject: CN=f6a5c2e28f181cd049eea0a7dbf88a0c613da68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:5c:68:8c:e8:05:9b:8a:0f:b7:ae:ec:f4: 1f:93:a2:80:8f:5e:da:b2:61:bc:4e:ca:5b:fb:09: 64:13:bd:06:93:d4:ba:d2:02:3b:40:cf:98:29:3c: 36:d0:21:2c:9e:92:db:75:ae:be:75:37:c8:b3:22: 8e:80:c6:ce:0a:ce:48:74:55:bc:52:f1:05:17:71: 4a:6f:b0:7f:c4:4b:79:f2:f8:43:d5:77:da:23:30: 5c:8c:7b:da:3c:75:80:aa:ac:d1:c9:ad:83:0d:06: ae:21:3b:63:f9:a6:c3:87:02:7f:8a:1b:31:df:03: 30:ca:fa:7e:72:32:54:e7:62:4b:72:f1:56:c5:77: e4:34:6f:03:40:27:b8:be:d4:19:28:f3:d3:4d:06: db:40:83:97:33:85:fa:e3:35:74:c1:4f:72:a3:8f: 60:7b:bc:a9:bf:1e:a8:e5:1a:33:6d:24:3b:61:58: b9:d7:79:9d:cb:1a:93:93:17:80:5a:c6:63:2e:ae: 9b:d5:32:7e:d6:ca:22:b1:d5:37:8f:5f:6f:13:8f: ec:0c:d8:9b:35:da:e0:25:19:0d:39:65:0a:19:aa: f9:15:fe:67:de:61:e0:68:ea:02:9b:fb:88:26:14: 48:33:55:00:9d:64:17:29:68:0b:f8:b0:10:5e:e9: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A5:C2:E2:8F:18:1C:D0:49:EE:A0:A7:DB:F8:8A:0C:61:3D:A6:8E X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:35:1b:d7:50:2b:97:b4:e7:6f:b1:54:2f:86:11:bd:8b:4d: aa:9e:c2:fa:3e:9f:0e:a6:e5:b3:85:db:3d:e9:af:24:2c:b4: 8a:7c:87:6a:b3:05:3f:23:81:b0:da:24:80:70:58:32:1d:2d: 88:20:ba:7f:a3:31:c2:92:26:72:b2:b0:74:b2:43:fa:46:80: e0:89:a4:13:50:8d:0e:b2:48:a1:bc:1b:a3:42:4b:1b:03:ca: fc:1d:ce:c0:08:01:20:e0:b4:14:aa:1e:e8:f9:a8:48:ff:a7: b3:21:f1:6b:1e:90:d2:d2:1d:c5:3e:a5:b0:ee:f8:a0:68:4a: 04:e5:06:24:c3:a4:17:22:7c:93:82:4b:98:e4:77:69:ba:43: 58:d6:7b:63:d3:ff:a7:84:60:de:bb:1d:b2:9b:40:9a:0e:9b: 5a:0c:23:e4:86:3b:93:3c:57:31:f3:92:88:be:57:d7:4c:f7: 69:1a:72:72:0e:47:75:59:6d:dc:5c:07:aa:5b:2d:dd:42:14: 82:7e:ef:f5:3f:f4:08:c4:95:94:b4:ca:94:38:db:27:f6:a3: 21:2e:cb:45:80:b4:61:af:18:76:b1:f6:36:19:01:65:d8:0d: e9:7c:5a:cb:ee:c8:68:84:3c:7e:4e:a6:e9:fb:a6:1a:8c:b2: 3b:01:8c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DoA3O97TFyKhe46NjGePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwNjI4MTUwMTEwWhcNMjUwNjI5MTUwMTEwWjAzMTEwLwYDVQQD EyhmNmE1YzJlMjhmMTgxY2QwNDllZWEwYTdkYmY4OGEwYzYxM2RhNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne1caIzoBZuKD7eu7PQfk6KAj17a smG8Tspb+wlkE70Gk9S60gI7QM+YKTw20CEsnpLbda6+dTfIsyKOgMbOCs5IdFW8 UvEFF3FKb7B/xEt58vhD1XfaIzBcjHvaPHWAqqzRya2DDQauITtj+abDhwJ/ihsx 3wMwyvp+cjJU52JLcvFWxXfkNG8DQCe4vtQZKPPTTQbbQIOXM4X64zV0wU9yo49g e7ypvx6o5RozbSQ7YVi513mdyxqTkxeAWsZjLq6b1TJ+1soisdU3j19vE4/sDNib NdrgJRkNOWUKGar5Ff5n3mHgaOoCm/uIJhRIM1UAnWQXKWgL+LAQXunw2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPalwuKPGBzQSe6gp9v4igxhPaaOMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5jUb11Ar l7Tnb7FUL4YRvYtNqp7C+j6fDqbls4XbPemvJCy0inyHarMFPyOBsNokgHBYMh0t iCC6f6MxwpImcrKwdLJD+kaA4ImkE1CNDrJIobwbo0JLGwPK/B3OwAgBIOC0FKoe 6PmoSP+nsyHxax6Q0tIdxT6lsO74oGhKBOUGJMOkFyJ8k4JLmOR3abpDWNZ7Y9P/ p4Rg3rsdsptAmg6bWgwj5IY7kzxXMfOSiL5X10z3aRpycg5HdVlt3FwHqlst3UIU gn7v9T/0CMSVlLTKlDjbJ/ajIS7LRYC0Ya8YdrH2NhkBZdgN6Xxay+7IaIQ8fk6m 6fumGoyyOwGMYA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:29:02 2025 by rpki-client