$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: xnZnfjWSWbzEVTu/NXwyMPg2jsktgI91A5O+n8sQjbU= Subject key identifier: D8:70:D1:14:D2:CD:36:8F:98:0F:7B:F4:BB:57:FE:F0:E1:36:A3:4C Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 0197BA7E3D481298967A3007A440A3941543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 1611 Signing time: Sun 29 Jun 2025 07:02:04 +0000 Manifest this update: Sun 29 Jun 2025 07:02:04 +0000 Manifest next update: Mon 30 Jun 2025 07:02:04 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 52PmmGV3aXleWbX9-5QkD3T7G80.roa (hash: YUpifY1bSAdptUQTodCY1O+Ws4plwdNZWT5tmGKMklE=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 10: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 11: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 12: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: 5ZDiya3WtwHKlKaEhZJPaeUbj5SDUaMcXDbaSGyGcHg=) 13: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 14: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:7e:3d:48:12:98:96:7a:30:07:a4:40:a3:94:15:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jun 29 07:02:04 2025 GMT Not After : Jun 30 07:02:04 2025 GMT Subject: CN=d870d114d2cd368f980f7bf4bb57fef0e136a34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:c3:db:81:3a:e1:8c:b1:77:92:09:92:39: cb:82:4d:5f:a3:c5:8a:7e:bf:ec:5a:e4:87:6c:33: 27:b0:d6:84:f7:b6:d3:4e:46:a1:54:2f:c5:51:c5: b3:6f:44:0e:dc:ce:23:aa:4a:97:a6:f1:15:59:84: 30:07:9f:50:32:6f:33:b8:39:5f:2f:69:92:35:17: 01:0e:12:83:27:b6:d2:b8:01:87:13:e8:5d:f9:b0: 9d:a1:fa:c8:4c:d7:a5:45:d1:ec:11:c9:e9:f5:f5: d1:da:46:1e:b2:96:e8:8b:93:49:f1:a1:6e:0d:ba: fa:a1:0d:77:fd:29:24:64:7b:12:d4:33:6b:e5:06: 30:78:a1:a8:2a:b1:f7:b1:e7:a1:0d:01:a4:c3:ba: 4b:c3:67:66:22:3b:ef:81:51:1b:a5:fd:3e:40:c0: 7f:74:4d:d2:b9:5c:34:ca:d0:14:c6:62:a7:0d:47: 9b:df:a7:93:d3:7f:01:5d:eb:5e:24:cd:ae:a3:2d: 05:1c:2c:cb:6f:c6:09:5e:08:30:8d:69:53:ad:e9: 22:5d:41:f5:db:eb:d6:44:7c:1d:f7:11:d8:2a:5c: f5:b8:c2:94:9a:42:a5:bd:78:a4:9b:9c:49:19:4e: 3d:48:4a:a0:17:b8:a2:df:4d:5c:bd:a5:c6:e5:ac: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:D1:14:D2:CD:36:8F:98:0F:7B:F4:BB:57:FE:F0:E1:36:A3:4C X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:1f:06:2d:50:2d:c0:20:ec:68:ed:19:3b:e9:37:8e:4f:05: 41:1b:d6:47:87:a5:1e:ad:a0:0c:fc:f8:c2:ab:01:97:bf:85: 2a:c7:c6:af:93:17:5a:49:09:7f:c7:e5:71:f4:3a:0c:17:96: ae:ab:99:5f:ac:ef:fb:c9:6d:9c:89:89:38:d1:5d:32:fd:19: c5:2d:e1:00:ff:4a:56:78:ce:7e:19:a8:67:70:42:14:db:60: 6c:67:e8:bc:b6:11:50:02:27:95:04:c9:e4:aa:2d:df:c9:c3: a2:f9:5a:49:70:4a:b6:54:f7:53:9b:37:d9:71:a9:7a:3c:f1: 7d:27:3f:0f:96:ee:f0:82:40:23:61:7f:ed:75:d8:ac:27:bc: a4:e6:08:6e:48:17:db:44:a5:e2:0c:da:cd:2b:76:c9:eb:f7: 32:0c:25:61:cc:a4:f5:a0:dc:c0:b3:44:ac:e8:98:4d:31:6e: b8:02:69:aa:b0:37:5e:c1:07:08:29:0b:10:cf:b3:77:99:c5: e1:46:35:07:4d:18:62:6c:79:06:9e:39:b7:04:18:f0:ed:44: 2c:d4:83:2b:5a:c9:5e:96:dc:09:49:00:00:fd:c1:1e:aa:e5: 4f:4b:37:d9:e7:ab:e5:3e:4a:53:aa:ed:5e:15:f6:1f:0c:09: b4:51:24:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6fj1IEpiWejAHpECjlBVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwNjI5MDcwMjA0WhcNMjUwNjMwMDcwMjA0WjAzMTEwLwYDVQQD EyhkODcwZDExNGQyY2QzNjhmOTgwZjdiZjRiYjU3ZmVmMGUxMzZhMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGnD24E64Yyxd5IJkjnLgk1fo8WK fr/sWuSHbDMnsNaE97bTTkahVC/FUcWzb0QO3M4jqkqXpvEVWYQwB59QMm8zuDlf L2mSNRcBDhKDJ7bSuAGHE+hd+bCdofrITNelRdHsEcnp9fXR2kYespboi5NJ8aFu Dbr6oQ13/SkkZHsS1DNr5QYweKGoKrH3seehDQGkw7pLw2dmIjvvgVEbpf0+QMB/ dE3SuVw0ytAUxmKnDUeb36eT038BXeteJM2uoy0FHCzLb8YJXggwjWlTrekiXUH1 2+vWRHwd9xHYKlz1uMKUmkKlvXikm5xJGU49SEqgF7ii301cvaXG5axoDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhw0RTSzTaPmA979LtX/vDhNqNMMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2B8GLVAt wCDsaO0ZO+k3jk8FQRvWR4elHq2gDPz4wqsBl7+FKsfGr5MXWkkJf8flcfQ6DBeW rquZX6zv+8ltnImJONFdMv0ZxS3hAP9KVnjOfhmoZ3BCFNtgbGfovLYRUAInlQTJ 5Kot38nDovlaSXBKtlT3U5s32XGpejzxfSc/D5bu8IJAI2F/7XXYrCe8pOYIbkgX 20Sl4gzazSt2yev3MgwlYcyk9aDcwLNErOiYTTFuuAJpqrA3XsEHCCkLEM+zd5nF 4UY1B00YYmx5Bp45twQY8O1ELNSDK1rJXpbcCUkAAP3BHqrlT0s32eer5T5KU6rt XhX2HwwJtFEkKw== -----END CERTIFICATE-----Generated at Sun Jun 29 08:42:38 2025 by rpki-client