$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: K7sOO7n/HluBszdvhjmfe7ASisUDXP0wg0YbfAcuHkE= Subject key identifier: 69:8D:67:50:6F:C6:CF:FF:54:42:F3:DD:E4:51:74:1A:B6:95:80:43 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 0198D629809ED12CF755949573A41372AE66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 165E Signing time: Sat 23 Aug 2025 09:01:40 +0000 Manifest this update: Sat 23 Aug 2025 09:01:40 +0000 Manifest next update: Sun 24 Aug 2025 09:01:40 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: AUJlTI7qlFuZBqYNtseczKVZY7o.roa (hash: lrFJFDQHqIF3d1QaDadpDFGnq9WB4xACkbFUlWi2D+Q=) 4: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 5: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 6: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: HQEMOk7I0oWlxOYMRxUDRr8p7NPCVZ3w+x64yE3oT0Q=) 7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 12: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 13: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:80:9e:d1:2c:f7:55:94:95:73:a4:13:72:ae:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Aug 23 09:01:40 2025 GMT Not After : Aug 24 09:01:40 2025 GMT Subject: CN=698d67506fc6cfff5442f3dde451741ab6958043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:2f:ef:69:d6:d1:69:91:ca:70:e1:61:6f: 40:9c:7c:7f:34:57:e6:b0:c1:33:f2:fa:88:fc:ef: 79:31:e0:a2:bd:ea:82:e3:c2:7d:c9:86:21:c3:ce: f7:37:4c:83:7d:26:f0:b3:17:d3:04:b5:0f:02:81: 12:da:33:b5:b4:67:50:f3:ea:3f:59:46:f5:c1:89: e9:d2:28:62:d4:f4:66:7e:dd:67:ee:b8:d1:d5:89: b1:55:f4:23:96:f1:3f:0d:19:e1:96:d8:6a:aa:ea: 28:30:0b:78:79:cb:1a:7a:4b:1f:da:fb:f2:c3:ed: be:0a:d2:c2:34:b3:9a:ba:c4:57:0f:47:66:02:ab: f0:a8:b0:43:ce:69:cb:d5:20:e2:49:07:4a:69:0d: 1a:47:de:38:36:1f:ff:48:a7:4a:c2:b8:64:41:e3: ca:81:b0:98:44:d7:67:cc:97:8f:91:8f:e1:a0:fb: 83:08:7c:2e:17:30:12:d6:dc:9d:c3:65:fe:38:3d: 4b:5e:37:50:9f:62:bf:0a:23:37:1e:7a:12:d0:3b: 24:09:9a:70:af:0c:87:3b:00:a4:e6:d9:18:c8:46: 00:7e:b0:5c:57:f7:21:09:21:ef:95:4f:e5:8a:98: 6a:5f:a7:94:ce:94:3a:60:df:d3:b8:f2:b9:8c:eb: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8D:67:50:6F:C6:CF:FF:54:42:F3:DD:E4:51:74:1A:B6:95:80:43 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a4:d1:36:3d:8f:32:03:e0:ad:37:db:5d:5b:da:10:0f:ce: f9:6e:68:37:8a:ad:83:5b:3b:a9:c0:28:17:3a:f6:a3:b8:16: 05:4b:2d:42:8c:fc:aa:1a:46:9f:05:16:5b:16:b6:7b:7a:c1: 69:cf:5b:5f:8b:a7:76:28:d8:f2:b9:b8:ba:e7:ec:ca:29:ab: e5:b7:d7:e7:2d:33:1b:76:4e:b9:47:c0:46:2d:bf:d0:5b:09: 3c:0c:fa:52:d6:47:3f:ea:1d:3c:0b:d1:bb:ab:af:0b:49:e6: c0:d9:a6:04:f5:9e:64:aa:67:3c:82:65:33:2b:88:38:a3:1b: 95:fd:7b:18:41:9d:11:dc:1a:4c:6b:83:cd:c1:ae:6a:b9:fb: a2:b5:50:7f:50:a1:5a:58:81:95:97:e4:77:4a:da:13:81:e5: 82:f8:ff:ff:3d:fc:bf:3e:c8:54:30:e2:e2:7d:d0:3c:83:06: 56:86:f1:82:50:3f:21:3d:af:a6:c3:e8:23:96:63:b4:5b:78: c0:ce:38:b0:d1:dc:dd:6f:cd:7c:dd:21:30:50:ca:73:0f:55: b6:13:18:49:6b:dd:a0:4d:a8:b9:7d:6d:fb:7c:05:7a:b6:de: 82:85:f3:b7:1a:f0:99:a7:7c:2c:56:ed:c5:79:4b:0f:1b:b0: 56:7e:6d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYCe0Sz3VZSVc6QTcq5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD Eyg2OThkNjc1MDZmYzZjZmZmNTQ0MmYzZGRlNDUxNzQxYWI2OTU4MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4gv72nW0WmRynDhYW9AnHx/NFfm sMEz8vqI/O95MeCiveqC48J9yYYhw873N0yDfSbwsxfTBLUPAoES2jO1tGdQ8+o/ WUb1wYnp0ihi1PRmft1n7rjR1YmxVfQjlvE/DRnhlthqquooMAt4ecsaeksf2vvy w+2+CtLCNLOausRXD0dmAqvwqLBDzmnL1SDiSQdKaQ0aR944Nh//SKdKwrhkQePK gbCYRNdnzJePkY/hoPuDCHwuFzAS1tydw2X+OD1LXjdQn2K/CiM3HnoS0DskCZpw rwyHOwCk5tkYyEYAfrBcV/chCSHvlU/liphqX6eUzpQ6YN/TuPK5jOt1KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmNZ1Bvxs//VELz3eRRdBq2lYBDMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6TRNj2P MgPgrTfbXVvaEA/O+W5oN4qtg1s7qcAoFzr2o7gWBUstQoz8qhpGnwUWWxa2e3rB ac9bX4undijY8rm4uufsyimr5bfX5y0zG3ZOuUfARi2/0FsJPAz6UtZHP+odPAvR u6uvC0nmwNmmBPWeZKpnPIJlMyuIOKMblf17GEGdEdwaTGuDzcGuarn7orVQf1Ch WliBlZfkd0raE4Hlgvj//z38vz7IVDDi4n3QPIMGVobxglA/IT2vpsPoI5ZjtFt4 wM44sNHc3W/NfN0hMFDKcw9VthMYSWvdoE2ouX1t+3wFerbegoXztxrwmad8LFbt xXlLDxuwVn5tWA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:30 2025 by rpki-client