$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: xuMwH7uuXYORREddTA/imVk2MDZQd4NSUX8BsvXtGAE= Subject key identifier: 5E:09:70:47:CF:99:E0:2A:4C:4C:DD:71:09:4A:08:C7:EF:89:E9:5B Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 0197B77C3AFD622EE7D146FCCA42C0881C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 15BC Signing time: Sat 28 Jun 2025 17:01:01 +0000 Manifest this update: Sat 28 Jun 2025 17:01:01 +0000 Manifest next update: Sun 29 Jun 2025 17:01:01 +0000 Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=) 2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=) 3: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=) 4: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=) 5: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=) 6: SX7Fh5D5SSmhzFcwpzLVfpnGjio.roa (hash: hS1AFnLFbyQCTAlmoU4gf8KnF5G/ZsoLJZ6QNcU/zBo=) 7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: LOLNvnloVxrYzQYeGoXl1ueJEqwMiOuPiSLO7s6fn2o=) 8: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=) 9: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=) 10: psSTG0Xrqssglub7odw_Aeumxw4.roa (hash: ZT7znN26M2IQ2XLLuIQT50IETg9WXMqInwpcq6t20hA=) 11: yMcsDqcikj-Oh_XyHzZuU6ywJns.roa (hash: Rs9ukiIBzgtbtWyPVHVA61SngL94EX769rrYMrF5bW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:3a:fd:62:2e:e7:d1:46:fc:ca:42:c0:88:1c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jun 28 17:01:01 2025 GMT Not After : Jun 29 17:01:01 2025 GMT Subject: CN=5e097047cf99e02a4c4cdd71094a08c7ef89e95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:57:50:f5:69:36:a3:30:6a:ea:41:0d:be:a3: a0:21:72:dd:93:25:62:d4:bb:00:ee:fa:59:cb:a7: 7f:cd:d4:67:ef:81:1c:af:b1:65:9a:d0:b2:36:ae: 18:fe:af:8c:ef:ee:5f:4e:16:64:fa:57:a5:30:30: 67:61:1e:90:3c:9d:0b:7c:a4:eb:0d:f2:ac:a9:a3: 96:75:f0:8f:5a:67:52:29:7d:25:8d:59:dd:d4:fc: bb:fc:20:6c:1a:95:9d:d9:a9:83:57:90:1f:df:42: 63:0b:e3:3f:0a:9c:e8:94:da:a0:7b:a8:d2:67:da: 9a:d8:b5:6a:b2:f1:7c:11:d6:13:87:4d:d8:34:04: 01:f9:6f:5a:91:6a:9d:66:19:2d:00:cd:bc:7b:89: da:e2:89:ed:ea:07:db:e7:dc:41:5e:1e:55:33:a8: e9:cc:06:ac:d1:6f:c8:6e:aa:e6:d8:da:42:aa:63: e7:61:18:a9:57:ab:47:80:7a:6a:a5:93:0b:17:df: 17:60:ea:6f:a5:dc:0f:f1:e8:ef:a6:66:b4:18:5a: b4:41:f0:ca:bf:ac:4c:68:6d:b0:9e:3f:66:55:0a: 6b:13:66:3b:9b:ab:b9:62:30:f2:ab:cf:20:99:80: b5:b4:a1:d5:ec:84:f2:c8:fb:a2:6c:4d:61:7f:d9: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:70:47:CF:99:E0:2A:4C:4C:DD:71:09:4A:08:C7:EF:89:E9:5B X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:a4:fe:6c:41:38:1e:08:b0:e6:f9:d3:e1:d6:a2:16:5c: 01:17:cf:13:90:ed:41:53:cb:5e:96:92:92:95:d1:4d:fa:25: a3:d9:a2:f6:43:14:4f:f0:c7:f7:b7:70:e0:f5:01:9f:e2:c8: 26:3d:2c:39:74:d8:b7:db:14:44:0e:67:6a:a7:14:ec:8a:e5: d9:8c:f6:5e:aa:45:73:a0:f9:e2:8f:ad:b0:d7:07:5a:41:01: 41:9c:51:53:18:c2:c3:71:43:b5:a2:0a:2c:8c:98:7b:f5:5f: e3:68:6b:43:dc:f0:83:8b:e5:3e:cd:ab:08:6e:05:3f:b7:4d: 51:07:59:2e:a0:d3:d6:64:4f:e5:4a:70:18:36:ef:be:ed:86: 65:3e:01:21:c4:e5:4c:14:e4:05:28:55:f7:23:c3:61:77:e4: 6b:7a:cc:b8:6e:c9:b0:26:35:11:2c:91:d3:b4:4f:6f:9b:0b: 6d:4a:a3:84:73:74:0d:8a:2c:cd:47:a1:fc:94:3c:a3:53:79: e9:be:81:36:71:42:69:5c:45:16:6c:f4:58:29:53:4e:2a:33: 62:b6:7e:a0:82:0b:7d:b8:1e:e6:3f:4a:ad:ca:e6:6f:37:4f: 7e:ba:5f:1a:6e:58:da:2d:79:80:59:d8:16:af:3f:31:2a:1b: 3c:dd:c6:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fDr9Yi7n0Ub8ykLAiBxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUwNjI4MTcwMTAxWhcNMjUwNjI5MTcwMTAxWjAzMTEwLwYDVQQD Eyg1ZTA5NzA0N2NmOTllMDJhNGM0Y2RkNzEwOTRhMDhjN2VmODllOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VdQ9Wk2ozBq6kENvqOgIXLdkyVi 1LsA7vpZy6d/zdRn74Ecr7FlmtCyNq4Y/q+M7+5fThZk+lelMDBnYR6QPJ0LfKTr DfKsqaOWdfCPWmdSKX0ljVnd1Py7/CBsGpWd2amDV5Af30JjC+M/CpzolNqge6jS Z9qa2LVqsvF8EdYTh03YNAQB+W9akWqdZhktAM28e4na4ont6gfb59xBXh5VM6jp zAas0W/Ibqrm2NpCqmPnYRipV6tHgHpqpZMLF98XYOpvpdwP8ejvpma0GFq0QfDK v6xMaG2wnj9mVQprE2Y7m6u5YjDyq88gmYC1tKHV7ITyyPuibE1hf9lIOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4JcEfPmeAqTEzdcQlKCMfvielbMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+qk/mxB OB4IsOb50+HWohZcARfPE5DtQVPLXpaSkpXRTfolo9mi9kMUT/DH97dw4PUBn+LI Jj0sOXTYt9sURA5naqcU7Irl2Yz2XqpFc6D54o+tsNcHWkEBQZxRUxjCw3FDtaIK LIyYe/Vf42hrQ9zwg4vlPs2rCG4FP7dNUQdZLqDT1mRP5UpwGDbvvu2GZT4BIcTl TBTkBShV9yPDYXfka3rMuG7JsCY1ESyR07RPb5sLbUqjhHN0DYoszUeh/JQ8o1N5 6b6BNnFCaVxFFmz0WClTTiozYrZ+oIILfbge5j9KrcrmbzdPfrpfGm5Y2i15gFnY Fq8/MSobPN3Gew== -----END CERTIFICATE-----Generated at Sat Jun 28 20:15:37 2025 by rpki-client