$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: VB/NtW40SGhov4CLa9OCWBySmpP7DCCys1PWXKBZPh8= Subject key identifier: E2:65:0E:99:A9:A4:43:5F:09:53:AB:64:67:BD:98:1D:14:29:08:75 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 0199FDD9B2090B1D1CA09B588EB4EBF58673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 16F6 Signing time: Sun 19 Oct 2025 19:02:06 +0000 Manifest this update: Sun 19 Oct 2025 19:02:06 +0000 Manifest next update: Mon 20 Oct 2025 19:02:06 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: C3Mxoh+iMdBl4Af101N4daBLdOcWlZJHIS+zuWP8mwQ=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 19:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d9:b2:09:0b:1d:1c:a0:9b:58:8e:b4:eb:f5:86:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Oct 19 19:02:06 2025 GMT Not After : Oct 20 19:02:06 2025 GMT Subject: CN=e2650e99a9a4435f0953ab6467bd981d14290875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:67:70:0c:cf:66:00:72:ab:b9:23:d2:52: af:52:4a:93:15:7d:7b:47:86:5f:ca:2b:54:d0:70: 5a:43:ff:56:2b:02:cc:4b:fd:ab:40:8f:a2:e8:cb: da:a6:dd:14:14:42:4a:73:55:77:b4:06:99:83:ab: b7:7a:d8:67:78:ab:38:af:f6:d3:2c:ce:da:94:51: 4f:92:54:31:d4:4a:49:70:5d:e4:e5:f6:4a:27:e7: 06:3b:05:83:db:04:52:ed:e1:85:48:28:d1:9c:7b: dd:b3:53:f5:eb:5e:49:10:47:40:8b:63:55:93:42: a0:70:1c:44:46:a7:fc:89:0a:3a:62:bb:b7:8b:af: 05:5e:7c:1b:f6:d9:22:90:9e:92:5f:34:14:b0:bd: 1d:80:e2:5d:81:ca:6f:5b:f2:31:c0:bd:4d:15:9c: fe:cb:a8:8b:b7:ef:31:50:27:28:19:d7:1e:6c:3e: ec:3f:5c:62:ae:72:5b:38:54:0a:94:ae:34:b9:de: a9:22:23:6b:67:dd:32:a3:fa:23:f3:ec:a3:f6:5c: 14:df:42:b7:b8:f0:bc:83:13:23:5d:f5:9e:39:8b: 54:d5:f7:bd:6c:23:0a:b0:61:a0:b1:a2:88:ef:a8: c9:f9:b2:05:af:4a:4b:9b:0e:a8:7b:c3:2e:11:3d: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:65:0E:99:A9:A4:43:5F:09:53:AB:64:67:BD:98:1D:14:29:08:75 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1a:d8:4b:eb:bc:91:fd:bd:fd:e5:20:5b:59:c1:4e:0d:9e: 7e:2a:92:c5:cd:7b:c8:72:9e:d2:90:47:c7:ba:7e:60:7a:68: 17:e8:53:bd:34:63:30:ec:5e:e3:3a:ab:b5:0b:24:d9:15:d4: 48:2a:07:27:fa:ee:14:ff:2f:2b:83:84:da:a9:80:12:0c:b9: e5:a3:40:af:83:5a:5e:fb:4e:fa:77:de:14:69:25:a6:be:2d: 1e:a7:64:c3:69:98:dc:4b:b3:a6:bb:53:c1:09:42:32:77:3a: 01:4a:2d:cb:d3:a9:52:d0:bd:df:4f:cf:22:c8:0e:e2:9f:98: 82:e5:cb:31:56:40:94:ce:4d:05:55:0c:9b:57:c1:34:ed:74: 5d:71:45:b8:01:90:cb:65:ff:28:c4:c5:03:7e:93:53:56:87: 07:93:e0:10:4a:c8:61:38:f6:27:b4:f8:32:eb:ad:4f:eb:59: dd:64:e7:c5:8c:f1:c5:3e:2d:89:f0:46:55:b9:d6:33:e8:b3: 0d:4b:64:18:6e:ec:15:ad:d5:13:de:a9:23:09:b1:d4:a9:2c: 3a:f5:e7:37:28:38:09:0e:c2:d1:b4:e1:59:81:e6:f7:69:bb: 6d:1f:0b:c4:7d:c6:a4:40:4a:1f:18:c6:c6:9b:42:89:e4:c9: 05:4d:ec:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92bIJCx0coJtYjrTr9YZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUxMDE5MTkwMjA2WhcNMjUxMDIwMTkwMjA2WjAzMTEwLwYDVQQD EyhlMjY1MGU5OWE5YTQ0MzVmMDk1M2FiNjQ2N2JkOTgxZDE0MjkwODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO9ncAzPZgByq7kj0lKvUkqTFX17 R4ZfyitU0HBaQ/9WKwLMS/2rQI+i6Mvapt0UFEJKc1V3tAaZg6u3ethneKs4r/bT LM7alFFPklQx1EpJcF3k5fZKJ+cGOwWD2wRS7eGFSCjRnHvds1P1615JEEdAi2NV k0KgcBxERqf8iQo6Yru3i68FXnwb9tkikJ6SXzQUsL0dgOJdgcpvW/IxwL1NFZz+ y6iLt+8xUCcoGdcebD7sP1xirnJbOFQKlK40ud6pIiNrZ90yo/oj8+yj9lwU30K3 uPC8gxMjXfWeOYtU1fe9bCMKsGGgsaKI76jJ+bIFr0pLmw6oe8MuET19WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJlDpmppENfCVOrZGe9mB0UKQh1MB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBrYS+u8 kf29/eUgW1nBTg2efiqSxc17yHKe0pBHx7p+YHpoF+hTvTRjMOxe4zqrtQsk2RXU SCoHJ/ruFP8vK4OE2qmAEgy55aNAr4NaXvtO+nfeFGklpr4tHqdkw2mY3EuzprtT wQlCMnc6AUoty9OpUtC930/PIsgO4p+YguXLMVZAlM5NBVUMm1fBNO10XXFFuAGQ y2X/KMTFA36TU1aHB5PgEErIYTj2J7T4MuutT+tZ3WTnxYzxxT4tifBGVbnWM+iz DUtkGG7sFa3VE96pIwmx1KksOvXnNyg4CQ7C0bThWYHm92m7bR8LxH3GpEBKHxjG xptCieTJBU3sSQ== -----END CERTIFICATE-----Generated at Mon Oct 20 02:46:05 2025 by rpki-client