$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: 1kEiDUqJLSAiis3y2NpBSAcNPiVWQmO2rYv74Ejq05A= Subject key identifier: 51:B2:AA:F1:15:6B:39:5B:50:A3:0B:DE:0D:C2:CF:2E:B5:F8:81:9C Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 0197B745AB74865A2AD9348AB7DF920F4BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0633 Signing time: Sat 28 Jun 2025 16:01:25 +0000 Manifest this update: Sat 28 Jun 2025 16:01:25 +0000 Manifest next update: Sun 29 Jun 2025 16:01:25 +0000 Files and hashes: 1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: +YXNVgPF3YW4iAKwxrQmytT5wKzsvlZsVL06Xdu3MiA=) 7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:ab:74:86:5a:2a:d9:34:8a:b7:df:92:0f:4b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jun 28 16:01:25 2025 GMT Not After : Jun 29 16:01:25 2025 GMT Subject: CN=51b2aaf1156b395b50a30bde0dc2cf2eb5f8819c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:43:ff:32:d3:6c:dc:fb:a0:69:b9:8c:34: 09:b1:8b:6d:c8:38:91:af:51:0c:0a:6a:b6:20:ef: 77:22:8d:0b:5d:4a:ed:f5:36:5b:f4:6e:09:6b:f6: ca:75:79:aa:b9:db:11:d2:62:7e:82:a9:41:c7:95: 1f:e8:90:4f:e0:e7:85:1e:47:22:da:fb:ed:51:43: 54:22:02:56:df:dd:d5:59:b8:b8:c6:8b:6f:19:e3: 90:61:f6:99:87:7e:5b:db:3e:27:33:13:e2:24:27: c9:41:56:a8:0e:f8:31:6f:89:46:d2:27:fa:40:63: 24:70:b1:da:08:ed:a5:30:fb:7f:8c:22:9a:ac:52: a5:a0:43:fc:77:28:bd:09:52:60:e4:32:66:1c:32: 22:37:38:26:46:af:a9:24:57:36:90:35:68:96:e8: 70:52:47:a7:3e:ab:8a:14:1b:0e:d8:e2:5b:5d:b4: f0:47:00:45:fa:01:bb:a9:fd:73:26:00:3e:b4:bb: f5:95:6a:54:5e:f9:b4:b4:11:3d:48:81:47:db:35: ce:de:5e:6c:11:78:5f:93:85:29:87:20:b7:45:e7: 24:41:71:69:77:7a:ec:92:04:0c:fd:44:b3:c8:d4: 77:e8:8f:9b:d0:5f:e2:71:90:9c:16:63:2b:f8:5f: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:AA:F1:15:6B:39:5B:50:A3:0B:DE:0D:C2:CF:2E:B5:F8:81:9C X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4b:e2:2d:ea:5a:6e:e3:66:36:eb:a2:62:25:5f:63:e6:27: f1:49:0a:30:71:bd:64:e6:53:b5:53:40:77:c6:07:f2:9b:8c: 30:18:53:92:ac:5a:46:fa:73:2b:43:12:ac:4d:4b:c5:f4:dd: 43:c8:d1:6d:ca:11:c3:99:6e:82:37:d5:f0:d3:2e:f0:33:49: e0:ac:aa:7a:ac:02:91:13:75:a3:94:5f:66:5f:53:42:a3:be: cb:46:bf:3b:ad:10:cc:73:55:1c:cb:5f:8e:23:c0:5e:74:a9: cb:32:2a:1b:b5:fe:4b:17:1c:ce:44:9f:ac:4a:91:09:16:c5: 8e:63:80:dd:c3:4f:4b:e2:55:3e:f2:f4:81:7c:2a:73:d2:24: 17:e4:4f:ab:f9:c4:ae:6f:9e:6e:e1:3a:d5:82:e3:60:c3:e2: e7:dd:22:7a:60:45:ef:10:de:4b:c7:aa:87:0f:f2:e1:b7:5d: 33:87:f2:7f:69:9d:36:41:55:13:9f:33:4b:83:24:6d:21:ea: 0b:41:2e:9b:b2:43:38:e0:bb:ed:d6:91:32:60:05:f9:9a:83: 0f:c9:19:ee:7f:f3:49:5d:3d:e2:14:98:ab:13:41:1f:8e:97: 81:e6:59:38:72:a6:79:00:d3:6b:24:ec:96:ac:3d:c4:b9:3c: 1f:ff:26:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Rat0hloq2TSKt9+SD0vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwNjI4MTYwMTI1WhcNMjUwNjI5MTYwMTI1WjAzMTEwLwYDVQQD Eyg1MWIyYWFmMTE1NmIzOTViNTBhMzBiZGUwZGMyY2YyZWI1Zjg4MTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOVD/zLTbNz7oGm5jDQJsYttyDiR r1EMCmq2IO93Io0LXUrt9TZb9G4Ja/bKdXmqudsR0mJ+gqlBx5Uf6JBP4OeFHkci 2vvtUUNUIgJW393VWbi4xotvGeOQYfaZh35b2z4nMxPiJCfJQVaoDvgxb4lG0if6 QGMkcLHaCO2lMPt/jCKarFKloEP8dyi9CVJg5DJmHDIiNzgmRq+pJFc2kDVoluhw UkenPquKFBsO2OJbXbTwRwBF+gG7qf1zJgA+tLv1lWpUXvm0tBE9SIFH2zXO3l5s EXhfk4UphyC3ReckQXFpd3rskgQM/USzyNR36I+b0F/icZCcFmMr+F/0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGyqvEVazlbUKML3g3Czy61+IGcMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkviLepa buNmNuuiYiVfY+Yn8UkKMHG9ZOZTtVNAd8YH8puMMBhTkqxaRvpzK0MSrE1LxfTd Q8jRbcoRw5lugjfV8NMu8DNJ4KyqeqwCkRN1o5RfZl9TQqO+y0a/O60QzHNVHMtf jiPAXnSpyzIqG7X+SxcczkSfrEqRCRbFjmOA3cNPS+JVPvL0gXwqc9IkF+RPq/nE rm+ebuE61YLjYMPi590iemBF7xDeS8eqhw/y4bddM4fyf2mdNkFVE58zS4MkbSHq C0Eum7JDOOC77daRMmAF+ZqDD8kZ7n/zSV094hSYqxNBH46XgeZZOHKmeQDTayTs lqw9xLk8H/8mDQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:37:07 2025 by rpki-client