$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json) Hash identifier: q/KjxLY8XbClUMjQNDtEtAjpWw9K4S7ypTP4XOwkv4A= Subject key identifier: CB:55:4C:22:9D:47:EF:C2:CC:F5:EA:85:8B:E4:CC:55:70:77:B2:F3 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 0198D515C248DEE60635D42EB2B1593CC0E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft Manifest number: 03EF Signing time: Sat 23 Aug 2025 04:00:29 +0000 Manifest this update: Sat 23 Aug 2025 04:00:29 +0000 Manifest next update: Sun 24 Aug 2025 04:00:29 +0000 Files and hashes: 1: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=) 2: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=) 3: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=) 4: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: BUKbczUqYPJdZaOFQjp9p16/tz0SQ3Tn3Oel+PTZAEw=) 5: HlqaX9y1cpjv0wxGrlQZeagT5Q0.roa (hash: dZjid0DCr3cVa0kusKQlx9flhXPy/L6bL7wDHQcf1TY=) 6: HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa (hash: hj+XgnyJ0Da4wSkZgTsnnXr4WcLVInfl1QD5sz921GI=) 7: KY68jLeDujJbynrOgN-K9-lu_Eo.roa (hash: ile+eHNeTiPprnxFVEw1DNOI8w4SlEdrRqsqP3bCU9I=) 8: KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa (hash: b1lOLAYHQOxQVa21mEjqyKotS3xDQTkF8+kYPRp8ch4=) 9: Z8p5c-rlAPW0cZ-sWH7G-yZd9To.roa (hash: 14NxmVMH2EBfG9yj1NkfTzczT8KoDClH3gg1peZJpIk=) 10: _6Y6rmU3Q87e3mYJhUSvpdyOJ-M.roa (hash: MU2k0JLgHnAz6+Q2NLRxKsFVTuyUV8a7JG+EC761Ul0=) 11: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=) 12: nfwXLaa85PC-1c7VMk7rOkw_-kg.roa (hash: gQAkAYEgr329mA4EnpTCM1JOzdPYMZwZfd+KXQs7Zh4=) 13: pNpzbfUM_GQcgSoOWZp4aA4GaB8.roa (hash: E4cNIzDm82eZ1IWwSg/5EHQb/g9071re7z3EoizLYv8=) 14: pPtHj_8PIPTQq9_9HQ7moU-tNto.roa (hash: VG+uAOWni5Eou7Kbno7vLXQuzDBwYKJivK6FVEDldcE=) 15: so8pBCu3OoCQHu6FwVS_UlNOhcc.roa (hash: 1ROXDchmdC8sVtRbk/pVH0KENmflgOQs2hvgfG5XuAg=) 16: tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa (hash: GOHAj03XK7r6uHKyuAW9rpoOeyK5T9KDx1ewuKony44=) 17: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:c2:48:de:e6:06:35:d4:2e:b2:b1:59:3c:c0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Aug 23 04:00:29 2025 GMT Not After : Aug 24 04:00:29 2025 GMT Subject: CN=cb554c229d47efc2ccf5ea858be4cc557077b2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:9f:e5:57:e7:14:41:09:5f:bc:4f:1c:31: d1:87:8b:f5:81:a2:c3:fd:ad:9f:d0:25:35:2b:83: 5d:89:cf:5b:8b:cb:55:91:b9:de:fe:61:2a:a0:0a: 68:b7:5f:df:5d:f9:24:7b:2d:6f:a6:f6:3e:2a:01: 1a:5f:8e:c7:13:dd:d3:e2:66:e2:81:6d:8b:d0:c0: 55:d3:be:9c:26:46:07:52:dc:dd:f9:f2:af:ce:da: 43:3c:a6:d1:af:89:e3:37:ee:8b:98:8b:76:70:50: 22:de:57:d6:28:59:14:a4:ca:8a:4e:31:89:15:33: 1c:2e:07:54:54:b4:29:01:7b:a7:f4:40:3e:08:67: 73:3c:ed:18:9e:36:92:84:8f:31:40:0d:23:2c:16: a8:3e:f6:83:ea:0d:a7:1c:4a:71:94:e1:95:f8:b7: 54:15:7c:f0:5d:ed:5d:f0:74:21:32:b3:c1:0e:ed: 0b:c1:fe:f9:fe:c8:5f:58:f2:26:cc:62:c5:5c:26: b8:db:45:55:51:c8:68:76:1d:83:3a:06:18:8b:da: 7f:bd:ca:d3:e4:f1:dc:0b:53:3b:3e:12:59:b5:21: 9a:95:e3:d6:a7:fe:26:9d:65:13:f3:37:c9:86:78: 54:81:ef:bf:8d:42:d7:cc:fd:55:ad:22:44:2a:71: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:55:4C:22:9D:47:EF:C2:CC:F5:EA:85:8B:E4:CC:55:70:77:B2:F3 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bf:8d:6c:9d:6c:8c:5c:64:72:58:49:b9:8b:c8:e9:1e:07: 6a:44:f0:77:ba:31:d0:86:78:ca:7e:a6:4a:a6:c7:51:fc:37: 99:3e:f2:10:9e:8a:5a:d6:80:cf:82:57:17:85:b2:1a:49:94: 49:5a:01:22:56:01:69:cf:ab:7d:41:22:b6:e6:d3:1b:46:a6: ce:05:37:c4:a9:51:14:1b:ee:d3:52:3c:ef:56:dc:6d:25:0e: fd:7e:d4:78:0b:1c:fa:43:a1:e4:cb:9a:21:9b:e8:ef:f1:ee: cf:32:1e:c3:26:e3:a9:25:f1:59:0f:0e:ed:6c:2a:e9:30:2f: d0:7a:4e:1a:98:24:56:bc:6a:38:ee:6e:3f:7a:f0:4d:d4:9f: 87:6e:aa:06:17:4d:a4:4b:2c:73:ac:0d:b8:8f:d1:fa:ff:00: 0f:39:be:c0:08:d9:5a:a5:3f:41:40:9b:bf:f6:20:84:5b:bf: c7:7f:aa:82:b2:32:1d:bc:25:9e:0d:f0:55:21:e4:5a:a6:2d: 58:8d:e9:c3:20:75:c7:5e:c6:90:71:8c:6d:39:c7:46:df:05: 3e:ae:06:1d:3a:1e:31:ba:78:84:7e:1f:c6:9b:c7:e1:54:85: f6:fd:63:56:5f:91:73:d0:71:38:c8:ea:10:a6:52:f5:6c:d6: b8:fd:95:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFcJI3uYGNdQusrFZPMDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUwODIzMDQwMDI5WhcNMjUwODI0MDQwMDI5WjAzMTEwLwYDVQQD EyhjYjU1NGMyMjlkNDdlZmMyY2NmNWVhODU4YmU0Y2M1NTcwNzdiMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNyf5VfnFEEJX7xPHDHRh4v1gaLD /a2f0CU1K4Ndic9bi8tVkbne/mEqoApot1/fXfkkey1vpvY+KgEaX47HE93T4mbi gW2L0MBV076cJkYHUtzd+fKvztpDPKbRr4njN+6LmIt2cFAi3lfWKFkUpMqKTjGJ FTMcLgdUVLQpAXun9EA+CGdzPO0YnjaShI8xQA0jLBaoPvaD6g2nHEpxlOGV+LdU FXzwXe1d8HQhMrPBDu0Lwf75/shfWPImzGLFXCa420VVUchodh2DOgYYi9p/vcrT 5PHcC1M7PhJZtSGalePWp/4mnWUT8zfJhnhUge+/jULXzP1VrSJEKnHXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtVTCKdR+/CzPXqhYvkzFVwd7LzMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7+NbJ1s jFxkclhJuYvI6R4HakTwd7ox0IZ4yn6mSqbHUfw3mT7yEJ6KWtaAz4JXF4WyGkmU SVoBIlYBac+rfUEitubTG0amzgU3xKlRFBvu01I871bcbSUO/X7UeAsc+kOh5Mua IZvo7/HuzzIewybjqSXxWQ8O7Wwq6TAv0HpOGpgkVrxqOO5uP3rwTdSfh26qBhdN pEssc6wNuI/R+v8ADzm+wAjZWqU/QUCbv/YghFu/x3+qgrIyHbwlng3wVSHkWqYt WI3pwyB1x17GkHGMbTnHRt8FPq4GHToeMbp4hH4fxpvH4VSF9v1jVl+Rc9BxOMjq EKZS9WzWuP2V0w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:51 2025 by rpki-client