$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft File: fiCwNOLEl7GIRIje8QaXJwR2UCk.mft (raw, json) Hash identifier: cFUTDxmKuM+1f+f+W//38gHUEs9SnBioWTJ1Vs9brs0= Subject key identifier: 2E:E6:B8:31:37:9E:A9:7B:CB:52:22:BE:DC:44:51:0F:98:5A:00:4E Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 0198D404D0E78AB295FA37BCAE80557862C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft Manifest number: 07D8 Signing time: Fri 22 Aug 2025 23:02:22 +0000 Manifest this update: Fri 22 Aug 2025 23:02:22 +0000 Manifest next update: Sat 23 Aug 2025 23:02:22 +0000 Files and hashes: 1: 1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa (hash: ta8CMfbMk29Fhndl6ZZIYNJy1DPsZd7Ckx7RxOALCt0=) 2: EZ6GvQ5OJx9hJ9bye3YVuWnx4SA.roa (hash: DLhGIqBbrMSXsmwMEMMTuhsVW574+yfjuG4Z26XUuqg=) 3: H8rXW80yzjDwYfO1_MwWk5OH3jU.roa (hash: zhGby14CHFbYwyq/g0pFACCjs2O75GSjpQWLRvdMLlc=) 4: MX-RxL21AwQXVelzA4IrJb3dj-4.roa (hash: dxUOm/3bYpTRNviiYZNfM07knnqfGC+IudqU1B6rLJM=) 5: NPUEpZ4h19WtFvLgpubAEAvedaY.roa (hash: 3sPH63d3TcoprXu5QSKKo21b+DlJWtRetrDy8WvW554=) 6: PaJ1NV9XG903UofLMhbqDFeoGRI.roa (hash: cV1+9IwWjMr3CVVFN5PwdUeZyMxTTrMoErA9Ufghrjc=) 7: U9KdXmhyHuPRB4I24nyIZuy9hRA.roa (hash: sYu5pSPe7UpfkonZAKhKhsjpVtyLZPnhGwSbbl2Qc+0=) 8: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (hash: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=) 9: e6ZG1PGYjUHyi4CUDkZ2N9ASRQo.roa (hash: jnhCXJBws3bktWWp2eJKi7mQgOmukoDVq7RoHExPILE=) 10: fiCwNOLEl7GIRIje8QaXJwR2UCk.crl (hash: 4OOq1Cg+dhfpg1DlG7pIG1wsHzdDO+ZW/ns574ttdOM=) 11: lvS6vh9BhXk-DDoC3lHO0j30XVs.roa (hash: NE22Cbu2Lr6NtvVCV3Mb0Mbcy2GjF6nALD39UXv5vqw=) 12: rDdl4wb7d9_eC22yvGjUcZm-ZF0.roa (hash: IxVCz/Sbbi4L+BIjve8uTsWyEfGjkV7LQaO0qi7hXQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:d0:e7:8a:b2:95:fa:37:bc:ae:80:55:78:62:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Aug 22 23:02:22 2025 GMT Not After : Aug 23 23:02:22 2025 GMT Subject: CN=2ee6b831379ea97bcb5222bedc44510f985a004e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:09:50:68:dd:90:54:67:5b:87:9b:41:87: ef:1a:53:d6:72:98:0b:27:dc:b4:d5:6f:9c:a4:ce: ce:44:04:7f:17:22:4d:e1:cf:a1:60:d0:ab:11:0c: c4:06:7f:4c:42:e9:43:ab:1b:32:12:db:90:f8:6d: 02:27:b1:16:4d:3e:bb:e7:a8:c5:7e:e7:0a:b1:fe: ad:8d:fe:7d:66:5f:8d:ce:12:c9:5a:80:e2:50:3e: 0b:ea:37:64:25:75:80:f1:9e:10:ce:09:3e:ce:b1: 46:6d:67:b3:82:32:4d:31:8f:93:77:39:30:5d:c8: 5a:29:1d:41:df:07:5a:03:11:ef:b6:a8:da:27:b1: f8:78:26:c8:f4:50:b0:e2:36:8c:bc:ac:3f:f6:c4: ad:68:0f:6a:dd:ac:42:bb:98:42:db:1e:3c:0c:d7: 14:74:24:b5:0f:a1:7e:7b:31:26:29:52:94:a6:55: 4f:d7:ad:66:e1:26:93:ca:08:19:97:17:e7:9d:02: 42:79:00:8c:5e:e1:86:eb:5e:3c:2c:65:21:19:93: ec:ba:13:57:34:4e:1e:40:f1:68:a0:8c:d1:91:1f: cf:42:6c:06:3b:6a:99:db:33:5f:65:06:bb:98:be: 5b:71:1e:9d:84:2a:5f:73:09:8f:c3:97:c1:7c:ac: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E6:B8:31:37:9E:A9:7B:CB:52:22:BE:DC:44:51:0F:98:5A:00:4E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cf:15:d6:f0:ae:8e:76:86:68:1f:e9:93:97:54:07:0c:a3: 27:e7:3e:e5:a2:d2:e2:fa:80:ee:68:c4:0a:08:c2:11:a6:3d: a3:cd:3b:7c:68:2d:ba:b1:0c:e1:cc:cb:81:10:43:a9:a2:b3: cb:59:2e:1c:f3:3e:0f:58:c2:24:86:10:29:7d:e2:13:49:41: 11:0d:6b:b3:89:6b:9c:1b:76:d5:11:47:51:7b:85:48:4f:53: 7d:aa:11:2d:bc:ea:9f:39:2d:cf:e6:ce:da:95:23:09:71:09: fc:5f:ff:1f:04:85:eb:57:d7:e9:95:0a:ff:08:37:b6:e2:24: 2c:eb:bb:50:4b:00:5c:67:00:74:ca:3a:fd:d7:cd:8e:13:71: 03:00:81:3c:79:fc:01:57:64:56:ca:c3:07:8d:7d:81:0d:3c: 3c:8f:2c:d5:59:ab:9d:12:77:47:ef:ef:75:44:64:36:a1:61: 14:a2:4f:79:69:6a:7b:46:a9:1d:ca:13:33:7b:7a:f9:68:eb: 02:2f:2a:00:bf:78:9b:a7:93:83:b0:ed:d3:fa:ef:b7:b2:c6: 67:1f:3e:67:85:f1:6b:2f:3d:99:e2:02:50:29:29:9e:76:87: 2f:01:d7:07:64:71:25:3b:89:74:72:2b:10:8f:3e:76:cc:e1: 33:d3:7d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBNDnirKV+je8roBVeGLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUwODIyMjMwMjIyWhcNMjUwODIzMjMwMjIyWjAzMTEwLwYDVQQD EygyZWU2YjgzMTM3OWVhOTdiY2I1MjIyYmVkYzQ0NTEwZjk4NWEwMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFQJUGjdkFRnW4ebQYfvGlPWcpgL J9y01W+cpM7ORAR/FyJN4c+hYNCrEQzEBn9MQulDqxsyEtuQ+G0CJ7EWTT6756jF fucKsf6tjf59Zl+NzhLJWoDiUD4L6jdkJXWA8Z4Qzgk+zrFGbWezgjJNMY+Tdzkw XchaKR1B3wdaAxHvtqjaJ7H4eCbI9FCw4jaMvKw/9sStaA9q3axCu5hC2x48DNcU dCS1D6F+ezEmKVKUplVP161m4SaTyggZlxfnnQJCeQCMXuGG6148LGUhGZPsuhNX NE4eQPFooIzRkR/PQmwGO2qZ2zNfZQa7mL5bcR6dhCpfcwmPw5fBfKyJ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7muDE3nql7y1IivtxEUQ+YWgBOMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd88V1vCu jnaGaB/pk5dUBwyjJ+c+5aLS4vqA7mjECgjCEaY9o807fGgturEM4czLgRBDqaKz y1kuHPM+D1jCJIYQKX3iE0lBEQ1rs4lrnBt21RFHUXuFSE9TfaoRLbzqnzktz+bO 2pUjCXEJ/F//HwSF61fX6ZUK/wg3tuIkLOu7UEsAXGcAdMo6/dfNjhNxAwCBPHn8 AVdkVsrDB419gQ08PI8s1VmrnRJ3R+/vdURkNqFhFKJPeWlqe0apHcoTM3t6+Wjr Ai8qAL94m6eTg7Dt0/rvt7LGZx8+Z4Xxay89meICUCkpnnaHLwHXB2RxJTuJdHIr EI8+dszhM9N9Bw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:37 2025 by rpki-client