$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: VKoNrKAweAwn3uzV870NN5UiGjCVw4wnmJwesj53qCI= Subject key identifier: F0:7B:2F:75:DF:05:81:7D:C2:64:70:8E:E2:FB:7C:CA:9A:EA:9A:62 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 0197B6A202FF29F7AF1CC3AE80A382BFA80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 10B7 Signing time: Sat 28 Jun 2025 13:02:40 +0000 Manifest this update: Sat 28 Jun 2025 13:02:40 +0000 Manifest next update: Sun 29 Jun 2025 13:02:40 +0000 Files and hashes: 1: 2qVUszqlyuVT0tEP7WJf9nN8lO0.roa (hash: wmcsgU6wglaJJBGIpzY50l05qBBcm4nCWcT/kMgV8PU=) 2: 7jg5nYJzN202VeUtKc2WQp0u16Q.roa (hash: ZZbLbdoT31z/ALJflUEJX2CB+rUD6ZjDZf6ELXkjBWg=) 3: AoMT5b0s220gfTbI5C6yhKPwPrE.roa (hash: +qSXAk/lFWMsTuz1TwEHbExedzxqhqbaCt1snmBnH+8=) 4: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (hash: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=) 5: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: ziQzNwLoDOvZKgW/SqM3R9aK8rnHzcP61MDU88/oqa8=) 6: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=) 7: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=) 8: MsRs365bdC8m7rP_LW-kMb51Frk.roa (hash: sKWweV+263NZR+80PeyJEjHfdffBDxhi2f9NLW8d3eQ=) 9: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=) 10: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=) 11: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=) 12: _MVzD4pFko36vb7bZAI5sOTrlTY.roa (hash: 4kDpbOv6yGlgck5RYKh7zUEfHJ48+3Dq7lTqvnttFsk=) 13: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=) 14: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=) 15: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=) 16: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a2:02:ff:29:f7:af:1c:c3:ae:80:a3:82:bf:a8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Jun 28 13:02:40 2025 GMT Not After : Jun 29 13:02:40 2025 GMT Subject: CN=f07b2f75df05817dc264708ee2fb7cca9aea9a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:14:6b:d5:8a:23:5b:c9:e6:1a:af:74:e9: 0d:76:3b:da:bf:7b:58:e1:54:41:a4:60:1e:8d:28: ac:8a:74:e8:24:3a:f5:60:80:44:15:93:f3:7f:0e: f5:e8:64:ff:7d:5b:2f:68:cb:aa:cd:0b:26:71:ff: c9:3d:da:1f:a8:e0:53:a5:49:ee:c9:c8:7a:65:b2: ae:0e:2c:db:d4:cb:d1:73:44:4f:dd:58:b4:de:6e: ac:e0:97:58:3e:73:33:7a:82:3a:e7:22:5e:ee:89: 96:14:4e:44:5d:f3:61:c5:20:47:39:67:9c:ea:85: 6c:03:16:87:85:64:5f:99:ef:0c:59:ce:b2:5f:e7: 0b:01:c2:f4:c3:d5:30:01:86:58:29:2e:32:b1:71: 86:93:00:7f:29:bc:b0:fc:94:5e:f4:bf:b2:06:ad: ff:fe:a4:e8:82:b1:4d:40:8c:83:d8:a0:f6:8b:b2: 67:a0:48:f7:e2:fa:8a:16:28:d1:39:57:79:b3:bc: 23:80:d3:dc:8a:e6:3c:1a:1d:29:11:4b:1c:18:a4: a3:2d:37:6a:af:22:a7:d8:50:09:5f:af:ae:68:9f: da:7e:2d:81:57:e1:59:41:de:f2:29:2e:ec:55:94: d7:80:bf:a0:04:9a:c6:3f:1f:00:8a:46:e7:f3:34: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:2F:75:DF:05:81:7D:C2:64:70:8E:E2:FB:7C:CA:9A:EA:9A:62 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1b:b3:35:6d:9e:12:db:f8:e5:96:f6:dc:de:a8:a7:e5:27: f7:ed:f3:8e:a9:bb:f8:6a:dc:43:c3:dc:2f:09:57:b1:f7:cc: 51:52:7c:fa:7a:af:28:91:a7:20:76:5c:7f:5f:e4:ff:5c:6a: be:26:dd:77:68:95:28:bf:c6:59:38:6a:68:40:a2:e5:fe:f3: 57:b2:e0:38:64:aa:50:35:97:6c:0b:d3:d0:1c:57:74:8d:56: d8:fe:8b:23:91:c4:29:c1:93:36:93:49:db:34:28:9c:3c:95: b9:a6:e2:ff:a8:1b:38:b9:ca:f6:be:36:29:23:2a:ed:bd:49: 24:02:ff:3a:08:41:4c:f2:ac:fd:bc:14:fa:2d:b0:d3:5b:55: 65:2b:af:14:fe:8c:4d:58:c4:77:58:1f:10:fe:ba:21:65:bf: 73:e7:24:7a:7c:eb:a9:0b:da:3a:da:f8:75:66:b1:ca:f3:82: fc:de:01:97:82:8c:96:c1:30:6b:53:55:0f:28:67:78:c8:45: 13:c2:41:c0:98:58:7d:45:65:c9:39:e7:2e:24:9a:09:08:14: 7d:66:cb:72:c3:d8:c8:b8:5c:ab:fb:e9:f5:dc:8f:64:6b:a7: 5b:6f:94:f5:ac:36:f1:b0:74:f8:98:2d:28:2d:78:48:12:ed: 19:32:23:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2ogL/KfevHMOugKOCv6gMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUwNjI4MTMwMjQwWhcNMjUwNjI5MTMwMjQwWjAzMTEwLwYDVQQD EyhmMDdiMmY3NWRmMDU4MTdkYzI2NDcwOGVlMmZiN2NjYTlhZWE5YTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrkUa9WKI1vJ5hqvdOkNdjvav3tY 4VRBpGAejSisinToJDr1YIBEFZPzfw716GT/fVsvaMuqzQsmcf/JPdofqOBTpUnu ych6ZbKuDizb1MvRc0RP3Vi03m6s4JdYPnMzeoI65yJe7omWFE5EXfNhxSBHOWec 6oVsAxaHhWRfme8MWc6yX+cLAcL0w9UwAYZYKS4ysXGGkwB/Kbyw/JRe9L+yBq3/ /qTogrFNQIyD2KD2i7JnoEj34vqKFijROVd5s7wjgNPciuY8Gh0pEUscGKSjLTdq ryKn2FAJX6+uaJ/afi2BV+FZQd7yKS7sVZTXgL+gBJrGPx8Aikbn8zRJCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB7L3XfBYF9wmRwjuL7fMqa6ppiMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRuzNW2e Etv45Zb23N6op+Un9+3zjqm7+GrcQ8PcLwlXsffMUVJ8+nqvKJGnIHZcf1/k/1xq vibdd2iVKL/GWThqaECi5f7zV7LgOGSqUDWXbAvT0BxXdI1W2P6LI5HEKcGTNpNJ 2zQonDyVuabi/6gbOLnK9r42KSMq7b1JJAL/OghBTPKs/bwU+i2w01tVZSuvFP6M TVjEd1gfEP66IWW/c+ckenzrqQvaOtr4dWaxyvOC/N4Bl4KMlsEwa1NVDyhneMhF E8JBwJhYfUVlyTnnLiSaCQgUfWbLcsPYyLhcq/vp9dyPZGunW2+U9aw28bB0+Jgt KC14SBLtGTIjtQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:38:50 2025 by rpki-client