$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: MjOGeLybWku7HuipfyNbEw3p7TXVVOlfl670Rkcqi0w= Subject key identifier: 2C:32:C5:9A:B9:48:A5:5B:F7:F7:9E:6E:8B:1F:94:E0:1B:68:C7:ED Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 0198D472CE8A3A3D9F23EA457F8C400F1D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 165C Signing time: Sat 23 Aug 2025 01:02:30 +0000 Manifest this update: Sat 23 Aug 2025 01:02:30 +0000 Manifest next update: Sun 24 Aug 2025 01:02:30 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: h7qHRtuJs3YBe/dhtSvFmaKthEGF+okslrWVN9H+Yz0=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:ce:8a:3a:3d:9f:23:ea:45:7f:8c:40:0f:1d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Aug 23 01:02:30 2025 GMT Not After : Aug 24 01:02:30 2025 GMT Subject: CN=2c32c59ab948a55bf7f79e6e8b1f94e01b68c7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:77:f4:c4:f5:1e:7c:51:48:77:c4:57:b9: c6:90:2a:c6:e6:2f:db:b4:b4:99:4d:c8:50:31:72: 75:48:b9:b8:75:a6:20:16:3d:0d:84:f5:b7:c7:7e: 3f:de:8a:12:f5:25:ae:99:6d:33:4d:b2:77:26:63: 0b:90:e2:a2:b5:fa:91:c5:07:6f:74:7e:40:70:86: f1:ad:90:2f:69:1a:e5:4d:08:22:e4:4e:c3:a1:f0: 59:04:f6:ef:99:76:0e:1a:0d:78:f3:50:b9:56:91: b3:86:99:9c:d8:48:d2:c3:d0:d2:0f:ab:94:b3:77: 04:82:1a:3b:59:75:ba:40:e1:e8:65:96:96:18:4e: 66:67:e4:70:ae:fc:cc:76:c4:5e:34:f2:83:8f:39: 25:a3:10:cf:68:53:ac:ed:da:6b:f4:2a:7f:9d:3d: 40:f8:e5:cc:c3:10:62:68:85:b2:97:8a:37:ba:e2: ec:8e:97:4d:86:7b:2a:ea:02:bf:3c:51:9e:ae:5c: 7a:56:0f:60:fb:32:ee:cb:d4:34:25:a6:a3:12:03: cc:17:eb:83:e5:f3:06:d3:a8:b3:52:e2:c3:79:87: 60:94:9c:5c:66:9e:e0:1f:8c:fe:01:d7:80:19:0d: fa:e6:04:ac:9b:ab:86:07:b2:57:21:b8:f4:1b:92: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:32:C5:9A:B9:48:A5:5B:F7:F7:9E:6E:8B:1F:94:E0:1B:68:C7:ED X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:40:08:32:15:42:a4:42:05:49:20:76:6e:e8:18:45:ee:37: 3f:1b:49:67:ad:24:39:5b:19:5f:06:a3:af:11:53:d1:d2:89: 6d:3c:3c:bc:2f:38:3d:9c:19:7c:08:81:1f:06:eb:cc:73:cd: 6d:41:cc:32:78:14:0d:1c:79:6f:dd:3b:79:d5:a7:d8:9a:8f: 16:2b:3d:2c:cf:d9:c0:40:a1:81:6d:e8:c7:da:7a:d3:c6:fd: 64:7a:f4:82:b6:04:36:d7:e4:7b:85:db:4a:81:69:31:e4:76: 94:07:f6:0f:5d:15:11:60:29:8b:93:b5:f7:38:2e:aa:7b:42: 4a:27:56:fe:13:71:77:77:3e:20:72:e4:0f:3b:b8:87:21:c5: e8:2f:85:67:67:1d:f0:36:09:54:a4:b1:04:d5:f4:6e:48:f7: 6d:8c:0d:fd:b3:ee:1f:8c:3f:56:7f:8b:e6:29:5a:9b:b4:f9: 80:dd:88:32:e5:9e:69:6b:9e:78:9a:52:e2:38:34:d2:fb:e9: 7c:fe:df:32:ca:d1:2d:19:ac:f9:11:8b:1d:0a:c0:1c:12:e8: d9:d9:c4:40:b4:50:c7:dd:6e:c7:07:20:b1:a8:5f:34:f6:69: 1d:2a:74:4a:65:fb:c4:71:59:8a:0d:f1:92:0a:69:83:ef:2b: 55:89:3a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcs6KOj2fI+pFf4xADx1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwODIzMDEwMjMwWhcNMjUwODI0MDEwMjMwWjAzMTEwLwYDVQQD EygyYzMyYzU5YWI5NDhhNTViZjdmNzllNmU4YjFmOTRlMDFiNjhjN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDh39MT1HnxRSHfEV7nGkCrG5i/b tLSZTchQMXJ1SLm4daYgFj0NhPW3x34/3ooS9SWumW0zTbJ3JmMLkOKitfqRxQdv dH5AcIbxrZAvaRrlTQgi5E7DofBZBPbvmXYOGg1481C5VpGzhpmc2EjSw9DSD6uU s3cEgho7WXW6QOHoZZaWGE5mZ+RwrvzMdsReNPKDjzkloxDPaFOs7dpr9Cp/nT1A +OXMwxBiaIWyl4o3uuLsjpdNhnsq6gK/PFGerlx6Vg9g+zLuy9Q0JaajEgPMF+uD 5fMG06izUuLDeYdglJxcZp7gH4z+AdeAGQ365gSsm6uGB7JXIbj0G5IESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwyxZq5SKVb9/eebosflOAbaMftMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEAIMhVC pEIFSSB2bugYRe43PxtJZ60kOVsZXwajrxFT0dKJbTw8vC84PZwZfAiBHwbrzHPN bUHMMngUDRx5b907edWn2JqPFis9LM/ZwEChgW3ox9p608b9ZHr0grYENtfke4Xb SoFpMeR2lAf2D10VEWApi5O19zguqntCSidW/hNxd3c+IHLkDzu4hyHF6C+FZ2cd 8DYJVKSxBNX0bkj3bYwN/bPuH4w/Vn+L5ilam7T5gN2IMuWeaWueeJpS4jg00vvp fP7fMsrRLRms+RGLHQrAHBLo2dnEQLRQx91uxwcgsahfNPZpHSp0SmX7xHFZig3x kgppg+8rVYk6Zw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:36:38 2025 by rpki-client