$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: +v6RdQDiY4fPnP5YJKsjaHrUm+uIJHvN2doVymv0rxE= Subject key identifier: 70:38:A1:5A:BF:17:DA:AA:BB:5B:37:7F:C9:43:4E:9C:E0:C8:4E:32 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 0197CA5EA5DA6D016AA35E78F56351715813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 15D3 Signing time: Wed 02 Jul 2025 09:01:29 +0000 Manifest this update: Wed 02 Jul 2025 09:01:29 +0000 Manifest next update: Thu 03 Jul 2025 09:01:29 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: 1f/LNEMnWwCwwyNA//WbwS1G134Hu7XCFWbAIzLSk5c=) 6: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 7: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 8: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 9: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 10: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 11: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 12: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 13: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:5e:a5:da:6d:01:6a:a3:5e:78:f5:63:51:71:58:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jul 2 09:01:29 2025 GMT Not After : Jul 3 09:01:29 2025 GMT Subject: CN=7038a15abf17daaabb5b377fc9434e9ce0c84e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:6d:96:d6:d3:25:c0:16:c2:a2:fb:6f:c1: df:ed:75:7a:ea:c9:8c:28:ca:6d:7f:58:c7:92:13: 2b:57:13:bc:c7:72:f1:02:40:43:f9:8d:03:cb:85: 5b:d8:66:da:1b:b8:5c:b3:aa:c8:b8:f5:06:cf:02: f4:13:84:ab:2c:8d:57:b3:f5:32:88:65:98:fe:17: 92:dc:37:6b:96:5a:c6:bf:7e:2a:4f:dc:ff:44:97: 59:12:80:89:f5:56:81:6a:db:9b:58:2e:c5:fa:d2: fd:99:de:2d:6e:25:7b:a7:78:4b:fe:cf:e5:77:10: f7:4c:97:1f:ef:97:a2:b4:44:d6:08:60:b9:29:13: 54:57:9d:45:9c:9f:ce:f4:7a:1a:e4:5f:96:dc:77: af:3f:14:15:46:1d:fd:5f:65:31:68:c3:8e:00:15: 75:13:02:66:30:6b:fa:47:de:9b:41:4e:92:a8:6c: c7:8d:f7:a4:86:58:f2:30:9e:dd:6f:7f:ba:e3:8d: 93:b4:db:07:dd:a1:71:55:bc:91:c3:85:c9:a8:dd: a7:67:fb:e8:ef:cf:63:1d:13:7a:9b:7a:f4:a1:4a: 44:40:95:2d:a3:92:33:3a:46:52:ad:eb:d2:3f:62: 7f:ff:5a:41:e2:cd:e6:ea:e7:4d:c9:98:70:6a:08: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:A1:5A:BF:17:DA:AA:BB:5B:37:7F:C9:43:4E:9C:E0:C8:4E:32 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8b:31:3f:3e:79:e3:1a:02:7f:1f:81:a1:dd:40:33:91:1c: 04:e6:54:4a:f3:be:95:4b:5a:be:27:6e:fa:3c:1f:d1:a3:a4: bb:70:f3:70:04:39:42:29:bd:a4:0c:ad:42:0d:64:79:ab:19: 52:bc:5d:50:b0:56:b2:55:7c:fd:77:74:4e:96:97:a5:41:61: b3:88:9f:f8:60:64:1a:d1:68:7e:1e:9f:ec:b4:63:18:6c:d4: db:da:7e:e0:72:b2:ee:32:54:55:1f:e1:97:99:b8:70:e5:92: af:10:b6:26:fb:c4:c4:9c:01:02:d1:24:12:d2:ca:d5:92:ca: 0a:72:40:52:f2:7b:72:ef:26:4c:63:4b:a6:f3:79:77:2c:92: 25:df:e2:82:9e:f9:dc:e9:b1:7a:0e:17:ff:b7:08:c5:3a:8e: 56:fd:db:2d:63:6b:af:62:bc:54:a9:b1:27:9b:9e:90:b9:d0: 07:b6:2a:26:d5:1f:00:df:23:26:26:6d:54:0a:ba:46:5b:13: f2:b3:70:5a:74:30:33:a9:8a:2b:e1:6a:b8:76:3a:0b:84:5c: a5:aa:c8:ef:69:1b:70:c6:95:09:f1:e5:34:17:59:22:f5:a5: 1c:e5:99:cb:89:a6:20:e6:1c:c4:29:67:bb:4b:6e:b1:f0:2d: cf:9b:8e:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKXqXabQFqo1549WNRcVgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNzAyMDkwMTI5WhcNMjUwNzAzMDkwMTI5WjAzMTEwLwYDVQQD Eyg3MDM4YTE1YWJmMTdkYWFhYmI1YjM3N2ZjOTQzNGU5Y2UwYzg0ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqptltbTJcAWwqL7b8Hf7XV66smM KMptf1jHkhMrVxO8x3LxAkBD+Y0Dy4Vb2GbaG7hcs6rIuPUGzwL0E4SrLI1Xs/Uy iGWY/heS3DdrllrGv34qT9z/RJdZEoCJ9VaBatubWC7F+tL9md4tbiV7p3hL/s/l dxD3TJcf75eitETWCGC5KRNUV51FnJ/O9Hoa5F+W3HevPxQVRh39X2UxaMOOABV1 EwJmMGv6R96bQU6SqGzHjfekhljyMJ7db3+6442TtNsH3aFxVbyRw4XJqN2nZ/vo 789jHRN6m3r0oUpEQJUto5IzOkZSrevSP2J//1pB4s3m6udNyZhwagi3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHA4oVq/F9qqu1s3f8lDTpzgyE4yMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhosxPz55 4xoCfx+Bod1AM5EcBOZUSvO+lUtavidu+jwf0aOku3DzcAQ5Qim9pAytQg1keasZ UrxdULBWslV8/Xd0TpaXpUFhs4if+GBkGtFofh6f7LRjGGzU29p+4HKy7jJUVR/h l5m4cOWSrxC2JvvExJwBAtEkEtLK1ZLKCnJAUvJ7cu8mTGNLpvN5dyySJd/igp75 3Omxeg4X/7cIxTqOVv3bLWNrr2K8VKmxJ5uekLnQB7YqJtUfAN8jJiZtVAq6RlsT 8rNwWnQwM6mKK+FquHY6C4RcparI72kbcMaVCfHlNBdZIvWlHOWZy4mmIOYcxCln u0tusfAtz5uOCA== -----END CERTIFICATE-----Generated at Wed Jul 2 16:35:48 2025 by rpki-client