$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: bRlhwENgjws1mfRx5exyvS+epiP8Mf7ZNQ+o2khW+hw= Subject key identifier: 2F:C7:87:C9:16:33:7C:20:65:66:D9:F5:AD:85:14:4B:CA:5A:94:7F Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 0197B6A065D5244E53F393BFD84E0A0848C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 15C8 Signing time: Sat 28 Jun 2025 13:00:54 +0000 Manifest this update: Sat 28 Jun 2025 13:00:54 +0000 Manifest next update: Sun 29 Jun 2025 13:00:54 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: Hm1oNIHufSn5OiXM97J/PhY9ZRIOhA2YGUtYCp89izQ=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:65:d5:24:4e:53:f3:93:bf:d8:4e:0a:08:48:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jun 28 13:00:54 2025 GMT Not After : Jun 29 13:00:54 2025 GMT Subject: CN=2fc787c916337c206566d9f5ad85144bca5a947f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:73:c0:31:d7:5f:78:ec:15:14:89:6d:e4: 88:03:53:d4:bf:e9:87:5d:a2:1a:4c:7c:4d:9f:50: b6:74:38:87:81:9b:d8:84:64:b2:fc:8d:b0:98:cf: 0c:3e:87:40:0b:4f:5d:4e:88:a0:a8:03:b8:2f:49: 48:b5:ab:21:07:b6:0d:45:e6:3b:f3:b8:de:0a:cf: 10:56:f2:c4:ed:21:22:e4:36:53:86:6b:cd:a9:37: 33:33:29:26:94:64:59:ac:4c:31:b8:50:41:fd:9d: 4e:49:a3:67:2b:22:dd:a7:37:ce:a0:9b:d1:60:38: 4c:93:33:8a:b4:6a:59:eb:58:f3:b1:0b:a1:91:2e: 50:1d:a6:56:f9:61:bf:45:f3:fa:3b:23:5c:70:d3: b8:7b:1b:3f:c3:c3:3f:68:7a:56:17:78:38:a6:a0: cc:a7:32:2b:9a:de:77:23:a9:df:4c:ce:0a:6c:bb: 16:49:3a:51:47:0f:26:ed:b7:23:76:fc:e8:4d:83: d6:e7:06:47:ed:48:47:34:6d:c0:5a:f8:65:67:7f: c8:fb:96:52:39:7c:89:bb:61:aa:6e:79:35:db:3e: 46:4f:34:eb:f3:3b:96:fb:56:f1:a9:04:ed:a4:bc: 52:a5:94:2a:f8:f1:bb:ea:ce:9e:51:b8:e1:f7:38: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:87:C9:16:33:7C:20:65:66:D9:F5:AD:85:14:4B:CA:5A:94:7F X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3d:66:83:9e:62:76:e6:77:93:de:fe:c8:28:dd:a2:b5:7a: 14:18:14:4d:fa:9e:8f:e3:9b:63:24:c2:53:f4:40:10:dd:7a: 70:aa:e5:a0:fd:80:1f:f9:98:9d:e1:28:76:f2:8f:02:fb:24: 69:b3:88:63:1b:18:a9:6f:b6:22:11:cf:60:3d:0c:9f:ea:7d: 19:b6:e2:2e:67:e5:a5:23:8f:b4:27:e6:56:75:95:2b:e1:9d: ba:9d:57:5b:5f:f4:90:24:77:fc:3b:ff:35:a9:3a:8e:6b:22: fc:79:a2:67:00:c4:d2:18:b4:fb:c9:c8:32:47:1b:f6:c9:b8: 5c:d5:ea:18:c6:bd:e4:e7:55:5f:74:c1:2d:53:2a:01:d5:30: fe:a3:5e:65:04:4d:29:6b:88:cf:1c:2a:8b:ac:22:a2:e2:59: 68:6e:7a:09:07:fd:8e:a2:46:cd:a1:1b:bb:38:80:19:cb:43: fc:2d:78:e4:94:42:f2:5f:c1:41:0e:6d:9f:84:5a:29:18:86: e2:a2:e6:10:b7:b5:28:e8:20:04:40:f0:61:2d:9f:f8:55:41: 08:fd:bf:90:8d:46:47:01:43:90:21:44:8e:3f:20:e4:99:48: c3:c9:2e:72:99:65:be:5b:d7:75:1e:e1:97:79:c8:6e:82:03: 99:a3:34:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oGXVJE5T85O/2E4KCEjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwNjI4MTMwMDU0WhcNMjUwNjI5MTMwMDU0WjAzMTEwLwYDVQQD EygyZmM3ODdjOTE2MzM3YzIwNjU2NmQ5ZjVhZDg1MTQ0YmNhNWE5NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sNzwDHXX3jsFRSJbeSIA1PUv+mH XaIaTHxNn1C2dDiHgZvYhGSy/I2wmM8MPodAC09dToigqAO4L0lItashB7YNReY7 87jeCs8QVvLE7SEi5DZThmvNqTczMykmlGRZrEwxuFBB/Z1OSaNnKyLdpzfOoJvR YDhMkzOKtGpZ61jzsQuhkS5QHaZW+WG/RfP6OyNccNO4exs/w8M/aHpWF3g4pqDM pzIrmt53I6nfTM4KbLsWSTpRRw8m7bcjdvzoTYPW5wZH7UhHNG3AWvhlZ3/I+5ZS OXyJu2Gqbnk12z5GTzTr8zuW+1bxqQTtpLxSpZQq+PG76s6eUbjh9ziRzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/Hh8kWM3wgZWbZ9a2FFEvKWpR/MB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz1mg55i duZ3k97+yCjdorV6FBgUTfqej+ObYyTCU/RAEN16cKrloP2AH/mYneEodvKPAvsk abOIYxsYqW+2IhHPYD0Mn+p9GbbiLmflpSOPtCfmVnWVK+Gdup1XW1/0kCR3/Dv/ Nak6jmsi/HmiZwDE0hi0+8nIMkcb9sm4XNXqGMa95OdVX3TBLVMqAdUw/qNeZQRN KWuIzxwqi6wiouJZaG56CQf9jqJGzaEbuziAGctD/C145JRC8l/BQQ5tn4RaKRiG 4qLmELe1KOggBEDwYS2f+FVBCP2/kI1GRwFDkCFEjj8g5JlIw8kucpllvlvXdR7h l3nIboIDmaM0EA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:21:23 2025 by rpki-client