$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: dgawhk3fJ1Yk/dY7K/dcNHvNjRr2X0Ruh5hNoPrds8U= Subject key identifier: 81:8F:69:C9:20:BC:2B:E2:D6:96:F8:75:62:E9:4B:05:E1:F3:F5:10 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 0196C42734F8D8529D9C38543E2B50220B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 154B Signing time: Mon 12 May 2025 11:00:25 +0000 Manifest this update: Mon 12 May 2025 11:00:25 +0000 Manifest next update: Tue 13 May 2025 11:00:25 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: ZdYqaqhn0aBVCCzeCPZge27/SElpwqqUWtZb5ynYA0g=) 6: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 7: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 8: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 9: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 10: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 11: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 12: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c4:27:34:f8:d8:52:9d:9c:38:54:3e:2b:50:22:0b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: May 12 11:00:25 2025 GMT Not After : May 13 11:00:25 2025 GMT Subject: CN=818f69c920bc2be2d696f87562e94b05e1f3f510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9e:c1:05:b9:cc:93:ee:c7:a8:61:60:c2:d9: b8:88:73:45:5b:c1:fb:35:7d:24:d4:91:19:6c:50: e9:c8:74:95:fd:b7:b6:9a:41:55:92:8f:ed:d2:d6: a8:51:d1:8b:49:5a:12:b3:47:09:dc:41:a7:43:38: 0c:08:8e:fa:f2:c4:1e:0f:96:bd:f6:e2:e1:59:7a: 3c:5e:2b:99:57:2b:b4:9b:50:83:b0:5b:9b:c6:9c: 1f:e2:2a:8c:38:a1:28:4b:fe:c5:9d:60:73:4d:26: 45:ca:fa:2e:c2:ed:49:e9:de:48:42:7d:65:1b:d8: a1:5f:69:3b:d8:0f:b7:6f:f7:4b:17:5f:cc:f1:d9: 1a:d4:17:c8:a6:66:fe:5e:c1:00:49:c7:13:4d:85: 99:92:84:45:cc:6f:c9:a7:e2:bc:3f:fd:07:71:1b: 81:ae:8c:07:35:d6:ce:58:57:fd:d1:1e:47:77:13: 12:e2:9c:20:69:9d:d0:1b:4a:3f:a0:64:ca:ed:b6: 05:36:58:94:ab:35:f4:44:fe:4f:7c:79:35:c3:a3: 32:1f:84:78:e4:b4:fc:c8:d3:23:66:5c:1b:2d:e4: 53:8e:0e:05:9c:a6:f9:d2:af:41:b6:79:d8:69:fb: 3f:20:d6:de:73:e2:7f:0f:8b:a1:44:c5:e2:c2:9c: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8F:69:C9:20:BC:2B:E2:D6:96:F8:75:62:E9:4B:05:E1:F3:F5:10 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c8:18:18:f4:87:6e:6c:27:36:20:54:6c:92:d5:d0:06:a7: 54:86:74:12:2f:ed:c7:b3:07:54:7a:d3:07:cb:5b:bc:04:5e: 3f:ad:d4:9c:1b:b8:68:55:e7:e4:9f:97:f8:e7:cc:66:0a:b7: 2c:3d:21:5e:24:cd:0e:7f:8a:64:e4:3d:45:b3:40:4b:4f:74: cb:d5:19:5e:43:45:7c:81:85:dc:59:44:6f:eb:2c:e1:91:62: 85:1b:48:a6:bd:f2:fc:67:51:50:fa:37:1f:63:23:4f:73:cd: 0e:cf:0c:11:13:73:62:b1:3e:12:95:39:73:cd:ee:ca:a1:c3: 01:24:fa:3f:b5:1f:c3:54:0c:48:da:84:1b:65:e9:3a:ce:0d: 64:f2:fb:e5:d4:74:b0:5c:ba:bd:01:e6:eb:bd:82:91:43:3e: c8:57:90:a1:07:03:72:9c:06:d4:25:0c:12:b0:38:ae:b5:24: cc:32:01:de:1a:1b:d4:f5:ce:ee:d9:e6:51:cf:e0:2b:ed:86: 56:b5:23:e6:fb:f5:21:1a:2f:eb:76:97:ca:c0:88:cf:6c:46: 6b:81:7d:3b:2e:1c:e6:16:8a:fb:b9:7c:7d:38:ab:bd:ca:52: 3f:39:89:93:a5:28:4a:be:f4:6d:23:38:7d:3e:a3:f2:b4:95: 2e:eb:01:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbEJzT42FKdnDhUPitQIgs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNTEyMTEwMDI1WhcNMjUwNTEzMTEwMDI1WjAzMTEwLwYDVQQD Eyg4MThmNjljOTIwYmMyYmUyZDY5NmY4NzU2MmU5NGIwNWUxZjNmNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J7BBbnMk+7HqGFgwtm4iHNFW8H7 NX0k1JEZbFDpyHSV/be2mkFVko/t0taoUdGLSVoSs0cJ3EGnQzgMCI768sQeD5a9 9uLhWXo8XiuZVyu0m1CDsFubxpwf4iqMOKEoS/7FnWBzTSZFyvouwu1J6d5IQn1l G9ihX2k72A+3b/dLF1/M8dka1BfIpmb+XsEASccTTYWZkoRFzG/Jp+K8P/0HcRuB rowHNdbOWFf90R5HdxMS4pwgaZ3QG0o/oGTK7bYFNliUqzX0RP5PfHk1w6MyH4R4 5LT8yNMjZlwbLeRTjg4FnKb50q9BtnnYafs/INbec+J/D4uhRMXiwpyZ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGPackgvCvi1pb4dWLpSwXh8/UQMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMgYGPSH bmwnNiBUbJLV0AanVIZ0Ei/tx7MHVHrTB8tbvAReP63UnBu4aFXn5J+X+OfMZgq3 LD0hXiTNDn+KZOQ9RbNAS090y9UZXkNFfIGF3FlEb+ss4ZFihRtIpr3y/GdRUPo3 H2MjT3PNDs8MERNzYrE+EpU5c83uyqHDAST6P7Ufw1QMSNqEG2XpOs4NZPL75dR0 sFy6vQHm672CkUM+yFeQoQcDcpwG1CUMErA4rrUkzDIB3hob1PXO7tnmUc/gK+2G VrUj5vv1IRov63aXysCIz2xGa4F9Oy4c5haK+7l8fTirvcpSPzmJk6UoSr70bSM4 fT6j8rSVLusBDw== -----END CERTIFICATE-----Generated at Mon May 12 16:36:58 2025 by rpki-client