$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: kCus0Z2/L8d7UfDizD4wqpIGca0oQdfHY8I5x7rG24A= Subject key identifier: CE:C3:BF:5D:C7:7E:CB:1E:7E:21:8C:A2:C7:78:9A:49:E0:96:46:D9 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 0197B5FC093E4439BEF684DC39BAAADBB5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 15CA Signing time: Sat 28 Jun 2025 10:01:22 +0000 Manifest this update: Sat 28 Jun 2025 10:01:22 +0000 Manifest next update: Sun 29 Jun 2025 10:01:22 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: o16/g5M+WBJvwV79t1bGnhmsC1re403Sx4yTAJopGPk=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fc:09:3e:44:39:be:f6:84:dc:39:ba:aa:db:b5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jun 28 10:01:22 2025 GMT Not After : Jun 29 10:01:22 2025 GMT Subject: CN=cec3bf5dc77ecb1e7e218ca2c7789a49e09646d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:0c:52:36:93:f2:38:25:12:83:40:22:38: 8e:58:33:dd:7e:f2:aa:b3:ac:67:b1:39:86:a1:df: 34:66:30:d2:bb:c0:36:70:3d:f7:b6:02:d5:08:ed: 66:4a:ec:1b:92:34:54:a8:b2:7b:d7:e9:8f:53:f6: d3:ab:5e:e9:88:1f:7f:47:1d:a7:ec:a7:45:02:7d: 01:70:21:b7:44:04:0f:6d:19:b9:d9:22:0f:6e:fd: ea:d7:03:c0:07:7e:5e:9a:7d:38:0f:f5:88:da:51: ef:80:0a:13:60:b4:80:b2:dc:a9:65:47:ee:14:43: bb:e3:44:cb:de:c6:16:a4:fa:bb:ff:be:79:26:e4: 1a:9b:20:cd:f3:00:18:4c:0b:4e:b6:47:8a:22:77: 4d:e3:74:0b:68:a8:e9:79:94:dc:78:76:cf:41:cd: 31:4b:48:99:94:1a:c8:35:8b:5f:91:8f:56:c6:b9: a8:d6:fc:ea:c5:a6:3c:10:b5:27:27:cf:99:63:25: d3:7a:9f:fd:13:fe:15:d3:1e:c2:a0:d5:db:b2:4d: 98:26:9c:32:cd:c3:bf:8a:53:3b:fa:6f:91:d9:03: 96:83:33:4f:b3:f6:93:75:ac:6a:fb:10:e7:b8:8e: d8:ea:4c:19:74:b3:08:c1:ce:fd:d9:25:4b:0a:c5: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C3:BF:5D:C7:7E:CB:1E:7E:21:8C:A2:C7:78:9A:49:E0:96:46:D9 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bb:a1:08:8f:17:11:e9:ad:dd:7a:ba:75:e3:e2:87:a8:3d: af:28:39:92:b6:c4:a1:8c:dd:57:ce:e3:45:40:88:0b:a5:28: 21:9f:5b:83:a9:40:ed:4f:c0:cf:83:48:53:d3:11:3b:7a:41: de:66:49:06:33:20:a5:2a:77:8c:ea:dd:d5:3a:07:58:d9:b3: a7:d1:16:ae:f4:34:f7:3c:85:64:d2:eb:2d:bf:43:76:94:fc: 8e:25:12:4b:e1:4c:07:a3:72:56:8f:9e:42:cc:fe:da:bd:0e: f4:d1:88:bc:e8:8c:28:fe:64:3b:e9:ad:f0:ee:53:fc:3c:bb: d5:c1:95:4e:da:ab:41:5a:9b:6b:79:de:37:58:a6:b0:c2:29: e4:71:57:94:94:6f:7d:41:cb:f9:af:d5:cc:42:92:29:7d:ba: b3:0e:a1:3c:55:2e:a8:82:b8:5d:d5:cb:36:7b:a9:f6:18:89: c1:3b:b5:ef:61:79:f0:1b:23:f8:38:58:92:e4:ba:36:ae:09: a6:49:75:99:2e:9d:52:5f:b3:49:97:df:95:d5:04:1b:49:57: 98:f8:dc:3d:eb:72:a5:49:60:1c:97:a8:57:01:be:e7:5a:aa: 18:7e:ce:b4:03:b8:fb:4f:d4:ba:46:d7:2a:17:cb:74:0b:dc: df:c7:c6:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1/Ak+RDm+9oTcObqq27XqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUwNjI4MTAwMTIyWhcNMjUwNjI5MTAwMTIyWjAzMTEwLwYDVQQD EyhjZWMzYmY1ZGM3N2VjYjFlN2UyMThjYTJjNzc4OWE0OWUwOTY0NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzYMUjaT8jglEoNAIjiOWDPdfvKq s6xnsTmGod80ZjDSu8A2cD33tgLVCO1mSuwbkjRUqLJ71+mPU/bTq17piB9/Rx2n 7KdFAn0BcCG3RAQPbRm52SIPbv3q1wPAB35emn04D/WI2lHvgAoTYLSAstypZUfu FEO740TL3sYWpPq7/755JuQamyDN8wAYTAtOtkeKIndN43QLaKjpeZTceHbPQc0x S0iZlBrINYtfkY9Wxrmo1vzqxaY8ELUnJ8+ZYyXTep/9E/4V0x7CoNXbsk2YJpwy zcO/ilM7+m+R2QOWgzNPs/aTdaxq+xDnuI7Y6kwZdLMIwc792SVLCsVbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7Dv13HfssefiGMosd4mknglkbZMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7uhCI8X Eemt3Xq6dePih6g9ryg5krbEoYzdV87jRUCIC6UoIZ9bg6lA7U/Az4NIU9MRO3pB 3mZJBjMgpSp3jOrd1ToHWNmzp9EWrvQ09zyFZNLrLb9DdpT8jiUSS+FMB6NyVo+e Qsz+2r0O9NGIvOiMKP5kO+mt8O5T/Dy71cGVTtqrQVqba3neN1imsMIp5HFXlJRv fUHL+a/VzEKSKX26sw6hPFUuqIK4XdXLNnup9hiJwTu172F58Bsj+DhYkuS6Nq4J pkl1mS6dUl+zSZffldUEG0lXmPjcPetypUlgHJeoVwG+51qqGH7OtAO4+0/UukbX KhfLdAvc38fGMw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:49:53 2025 by rpki-client