$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: Wz4YeMhvGmhCbSSB977vp5BtKjttmASOFm/fL8UIhnY= Subject key identifier: 7C:CE:BF:3D:3F:EA:9A:DB:A4:B1:26:7E:5F:1C:7B:38:D7:BB:E8:37 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 0198D59DC921814A84566781BF5F62CC4679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0525 Signing time: Sat 23 Aug 2025 06:29:04 +0000 Manifest this update: Sat 23 Aug 2025 06:29:04 +0000 Manifest next update: Sun 24 Aug 2025 06:29:04 +0000 Files and hashes: 1: 06Lo3TEshbdLYbOiItMhIrRRP7Y.roa (hash: UneRobUa0HOEvhDKQSJldaXTwM77pPlsoKNgn+2tT6w=) 2: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 3: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 4: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=) 5: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=) 6: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=) 7: EtvYYt1SsPhVbUBlb-gyRW3BpiI.roa (hash: mKLlkYLYAV8TtsT89IDg/2Tbl2phQohLCpJVPEdEhrA=) 8: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=) 9: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 10: HwKVy1yQ4bPFCoqhTaRIy9qwb1g.roa (hash: TUHFYUs21Rdlufk5+5Z5axe2QLTUJiHKUIz7Z3PIHYg=) 11: IvRgmT2reOzeuytZym-ijAGPPBk.roa (hash: dSmrvci4sQWpc2gVp+CZfEWf5dBDbTlu7yUnaMUzc1w=) 12: JxZ2PV2RYnx-i5FgEdX8_ua6vLk.roa (hash: knnuID3189A1YGf/2FgAAdsJ3ixY4wa1onnycZbuIbI=) 13: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (hash: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=) 14: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=) 15: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=) 16: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=) 17: YyaG3S0poVAnzLCPDdFpzugK_PQ.roa (hash: 24Gl7AEyeVcP6AdBrJexExnxFpJwqifZ9iimIKjJBOQ=) 18: ZTvw2_D_9jeSs1gO7ujxKFQcgjk.roa (hash: AbEf9+0Lzup0wYUvoLapGxmf6MnOCczvVXXaVGlPw0Y=) 19: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=) 20: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=) 21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: WlOexFZRpcwNnxRhaxDgP/wfT4Hb4S6WJ4dYoHUM1w4=) 22: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (hash: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=) 23: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=) 24: toMHEB280KETNfSWfwGdAQlBHIo.roa (hash: /78AEGOua5BdiHCzMqoUcFzXGSUc4tOmrRCkCS8IUTo=) 25: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:9d:c9:21:81:4a:84:56:67:81:bf:5f:62:cc:46:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Aug 23 06:29:04 2025 GMT Not After : Aug 24 06:29:04 2025 GMT Subject: CN=7ccebf3d3fea9adba4b1267e5f1c7b38d7bbe837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:b0:67:89:85:0c:66:d9:92:28:49:11:7f: c2:0b:c8:cd:73:51:99:ca:a5:5d:3b:62:08:59:ba: 80:9d:e4:43:6a:66:7e:12:eb:99:ba:17:46:3c:91: 30:b2:e1:69:f2:fe:78:6b:86:d1:40:47:0e:c5:fe: 9f:fd:1f:98:c4:d6:6c:5c:44:e8:07:09:8c:2b:d7: 6b:be:30:4a:6d:5a:df:02:07:16:9b:eb:9e:d5:45: ad:03:7d:2f:09:18:2e:48:89:fd:4e:f7:2e:53:fb: 1c:b5:da:63:be:2b:de:7b:0f:53:14:94:bb:4c:d8: a8:6a:c0:69:07:c9:ca:01:4d:a4:a1:09:7f:dd:a0: 7f:ba:9e:17:e3:a9:45:6f:a5:14:f7:3b:d6:f9:00: ac:f5:3c:17:87:fd:49:4e:9a:c5:8c:04:2b:cc:b3: 54:40:c9:85:41:88:85:0e:e5:a3:f8:14:82:d7:b7: 68:d8:ac:03:0c:5d:39:12:da:04:58:23:9b:17:e7: 8c:33:a3:11:ab:d5:8c:13:e8:25:d2:55:fb:17:96: 9d:52:4c:e6:13:94:87:a8:46:ec:db:91:33:33:c7: e2:72:51:68:13:43:e7:8b:fa:cc:cc:e6:0a:20:70: fe:fe:8e:b2:8e:cf:c6:9e:d3:e3:c7:7b:48:df:e9: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CE:BF:3D:3F:EA:9A:DB:A4:B1:26:7E:5F:1C:7B:38:D7:BB:E8:37 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ed:fa:e7:be:2a:16:24:d5:51:e3:47:6a:10:5c:9e:b1:78: 7c:6a:06:d7:3f:af:5b:fc:09:bc:c9:e6:a6:11:a2:0f:2b:4c: b1:90:b4:a9:39:f0:ed:62:f0:8a:a0:df:33:b5:c2:6d:8e:cb: 3e:f5:f8:c1:ac:4b:f0:e9:e2:88:fe:80:47:89:f3:00:36:64: 45:0e:79:03:12:9a:f3:52:3b:ee:0c:8d:31:15:d9:e0:51:cc: c4:87:0b:33:f0:b8:9e:dd:0e:2a:65:45:a9:14:67:28:81:d8: ee:0a:30:88:f7:dc:56:3b:15:da:e9:64:04:0d:ff:c9:d2:16: a1:11:73:a5:26:85:9c:97:bc:e2:54:9b:b8:40:4e:b1:3b:ba: d9:2f:72:e5:67:08:03:4b:ff:d6:ed:81:35:13:73:db:13:cb: 5a:15:59:84:82:c1:98:23:38:54:e2:e2:7c:83:81:d4:65:24: 2e:5f:68:04:61:be:86:91:26:70:35:72:4b:05:af:18:ab:aa: 71:0a:99:6a:05:5a:1d:53:ea:60:31:1c:50:98:7d:22:d8:f3: 44:40:b5:ac:01:22:09:af:9c:be:61:64:e8:eb:25:4e:4c:63: bf:3c:cb:5f:7f:c0:1e:68:ae:bc:64:04:c3:24:dd:e4:8b:c2: c4:13:62:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVnckhgUqEVmeBv19izEZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUwODIzMDYyOTA0WhcNMjUwODI0MDYyOTA0WjAzMTEwLwYDVQQD Eyg3Y2NlYmYzZDNmZWE5YWRiYTRiMTI2N2U1ZjFjN2IzOGQ3YmJlODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZuwZ4mFDGbZkihJEX/CC8jNc1GZ yqVdO2IIWbqAneRDamZ+EuuZuhdGPJEwsuFp8v54a4bRQEcOxf6f/R+YxNZsXETo BwmMK9drvjBKbVrfAgcWm+ue1UWtA30vCRguSIn9TvcuU/sctdpjviveew9TFJS7 TNioasBpB8nKAU2koQl/3aB/up4X46lFb6UU9zvW+QCs9TwXh/1JTprFjAQrzLNU QMmFQYiFDuWj+BSC17do2KwDDF05EtoEWCObF+eMM6MRq9WME+gl0lX7F5adUkzm E5SHqEbs25EzM8ficlFoE0Pni/rMzOYKIHD+/o6yjs/GntPjx3tI3+kibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzOvz0/6prbpLEmfl8cezjXu+g3MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO36574q FiTVUeNHahBcnrF4fGoG1z+vW/wJvMnmphGiDytMsZC0qTnw7WLwiqDfM7XCbY7L PvX4waxL8OniiP6AR4nzADZkRQ55AxKa81I77gyNMRXZ4FHMxIcLM/C4nt0OKmVF qRRnKIHY7gowiPfcVjsV2ulkBA3/ydIWoRFzpSaFnJe84lSbuEBOsTu62S9y5WcI A0v/1u2BNRNz2xPLWhVZhILBmCM4VOLifIOB1GUkLl9oBGG+hpEmcDVySwWvGKuq cQqZagVaHVPqYDEcUJh9ItjzREC1rAEiCa+cvmFk6OslTkxjvzzLX3/AHmiuvGQE wyTd5IvCxBNiWQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:56 2025 by rpki-client