$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: KnnnO1a/A2UXwKwqYQLkFtEkFa+5Sx/gNM/UUQtD9L4= Subject key identifier: E0:C6:2B:12:BB:76:61:B3:85:3D:71:41:5B:F7:D6:1C:8F:FB:F7:69 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 0197B7B3311B54A7E396E7C0B4CD6B24906C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 11B5 Signing time: Sat 28 Jun 2025 18:01:03 +0000 Manifest this update: Sat 28 Jun 2025 18:01:03 +0000 Manifest next update: Sun 29 Jun 2025 18:01:03 +0000 Files and hashes: 1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=) 2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=) 3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=) 4: 7up0r1vQiZdKC1oE9L7mvuP0p4I.roa (hash: cVjp4QTLbcnMTdi+ebHsiAxT4Sjmfp6erOaAfdsxTlE=) 5: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=) 6: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=) 7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=) 8: GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa (hash: S/WeVLNJSBWvfGHQHnHShtzGzYAW49VG43Ku/JYfDys=) 9: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=) 10: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=) 11: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=) 12: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=) 13: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=) 14: d3sFY8_J7LBIPwIhb4dAzqL5atM.roa (hash: Jn5pB2LDPV82LCwM4xQJY+PpwwF3+IHXMhIfwqqGyG4=) 15: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: PPc2LEX5T7RuGwpzPoAv1RDk1a46c14IpM5k69zolUg=) 16: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=) 17: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=) 18: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=) 19: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=) 20: iTLc5VqU9KTkxYI4woYxihTaS1E.roa (hash: 9Lihlb46Ba0mozz2ZnqtyUczktp8pAuj6kFBxT8olqk=) 21: l9F2BKLRzJdwd0fdRPbEtVrxZ_w.roa (hash: sQ1Z2qgiFPzai3M2nTZDaES/HRhMJZ1SRAb6A8g+cZw=) 22: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=) 23: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=) 24: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=) 25: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (hash: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=) 26: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=) 27: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=) 28: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=) 29: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=) 30: vSFUAztM4xg8pnCN2uvJ0r0ZpOY.roa (hash: lfAk2RkoT9Z6h0Jxb78c4RLN4P2hpHz0D8+Q/p7nmkA=) 31: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=) 32: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=) 33: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:31:1b:54:a7:e3:96:e7:c0:b4:cd:6b:24:90:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jun 28 18:01:03 2025 GMT Not After : Jun 29 18:01:03 2025 GMT Subject: CN=e0c62b12bb7661b3853d71415bf7d61c8ffbf769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:13:10:0f:41:48:5c:4a:cf:6e:2f:18:ca: 22:17:89:4a:43:50:f5:eb:2b:09:55:e6:42:05:ae: 16:90:33:22:43:43:df:b0:92:78:d7:74:0a:de:f2: 3d:3d:96:06:52:39:ce:42:34:81:7c:7d:c5:1f:81: af:4a:1b:f1:a1:0d:05:76:22:dc:27:19:d6:ee:0b: 9e:d4:3f:d6:c3:ac:66:ed:00:e6:b8:2c:1e:a9:69: 1a:18:bb:f4:e1:1a:f4:be:4b:17:27:18:6d:1b:18: e3:c8:50:59:a1:49:2b:10:d1:18:c1:28:27:31:f8: 4e:13:b8:16:43:49:e6:3a:1d:2b:8f:6f:89:13:13: 2a:ab:61:3b:be:0c:86:88:9a:6d:40:7e:84:ad:f7: 47:c2:2d:e8:48:1c:54:8a:7c:56:4e:f0:44:b4:b5: ef:de:68:01:00:23:9a:52:85:a3:42:d8:81:b2:5e: 52:33:bc:7f:83:e4:1e:af:2d:9b:d7:fb:2f:6a:36: 65:ad:3e:40:f0:76:fc:52:a9:00:f1:6a:b2:92:6c: f0:80:e4:9d:bd:9c:a5:34:03:d7:26:b9:13:9c:0c: 15:c3:e2:a4:44:83:db:4e:07:d7:0d:0f:16:42:b0: b7:07:4b:45:23:49:51:45:56:4a:80:7a:87:ea:14: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:2B:12:BB:76:61:B3:85:3D:71:41:5B:F7:D6:1C:8F:FB:F7:69 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:44:e3:d5:5d:3b:94:04:11:62:bd:a0:d6:c1:02:e0:ba:72: 55:77:45:59:43:1a:6c:db:3c:d1:0f:48:d9:86:05:57:78:64: 8b:4e:eb:f4:33:aa:47:0d:20:60:cd:b8:33:88:64:47:24:36: 00:38:a1:a6:d0:16:63:ed:77:16:53:ae:a5:f7:14:3d:3a:3e: 31:8b:d7:3b:82:cc:4a:0b:6a:15:12:c7:48:f4:c2:20:fd:53: 43:2d:05:b0:17:be:51:3d:ed:fb:f6:b0:cd:3c:29:e0:31:20: 30:36:4b:de:1c:e9:bd:0a:c9:f6:e5:9f:6b:63:33:9c:5a:84: 04:e9:8d:52:e0:ef:43:2f:6a:6c:24:79:ce:8a:7b:e0:8a:2c: 13:62:32:df:32:57:8c:89:ea:2f:8d:76:2c:9f:c3:42:fa:d0: a2:d1:ff:6d:2a:4b:1a:aa:e7:28:69:39:e7:d7:94:45:15:9e: fe:2d:df:25:a3:6d:76:7a:5d:19:51:1b:f0:e7:c9:4c:7d:70: 60:44:b1:33:bd:64:80:a8:70:88:50:0a:8b:28:3f:5f:ab:f6: fd:af:09:d2:84:2f:ff:3c:b4:61:ed:28:41:78:eb:fd:0f:72: 37:c9:b3:33:67:19:b2:dc:85:48:1c:d1:56:ac:06:fa:64:40: 84:75:b6:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3szEbVKfjlufAtM1rJJBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUwNjI4MTgwMTAzWhcNMjUwNjI5MTgwMTAzWjAzMTEwLwYDVQQD EyhlMGM2MmIxMmJiNzY2MWIzODUzZDcxNDE1YmY3ZDYxYzhmZmJmNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaITEA9BSFxKz24vGMoiF4lKQ1D1 6ysJVeZCBa4WkDMiQ0PfsJJ413QK3vI9PZYGUjnOQjSBfH3FH4GvShvxoQ0FdiLc JxnW7gue1D/Ww6xm7QDmuCweqWkaGLv04Rr0vksXJxhtGxjjyFBZoUkrENEYwSgn MfhOE7gWQ0nmOh0rj2+JExMqq2E7vgyGiJptQH6ErfdHwi3oSBxUinxWTvBEtLXv 3mgBACOaUoWjQtiBsl5SM7x/g+Qery2b1/svajZlrT5A8Hb8UqkA8WqykmzwgOSd vZylNAPXJrkTnAwVw+KkRIPbTgfXDQ8WQrC3B0tFI0lRRVZKgHqH6hSGOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODGKxK7dmGzhT1xQVv31hyP+/dpMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0Tj1V07 lAQRYr2g1sEC4LpyVXdFWUMabNs80Q9I2YYFV3hki07r9DOqRw0gYM24M4hkRyQ2 ADihptAWY+13FlOupfcUPTo+MYvXO4LMSgtqFRLHSPTCIP1TQy0FsBe+UT3t+/aw zTwp4DEgMDZL3hzpvQrJ9uWfa2MznFqEBOmNUuDvQy9qbCR5zop74IosE2Iy3zJX jInqL412LJ/DQvrQotH/bSpLGqrnKGk559eURRWe/i3fJaNtdnpdGVEb8OfJTH1w YESxM71kgKhwiFAKiyg/X6v2/a8J0oQv/zy0Ye0oQXjr/Q9yN8mzM2cZstyFSBzR VqwG+mRAhHW2QQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:08:18 2025 by rpki-client