$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: C5fmgMAod+yl/YmIlt+vc9ElEEa/nO6q8Y5H3/hQ8MA= Subject key identifier: 89:91:83:35:95:71:43:5F:95:10:1B:8D:D1:A8:D6:D1:9B:B7:16:3B Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 0199FCC68D51FF03B4BEA230376749862D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0763 Signing time: Sun 19 Oct 2025 14:01:34 +0000 Manifest this update: Sun 19 Oct 2025 14:01:34 +0000 Manifest next update: Mon 20 Oct 2025 14:01:34 +0000 Files and hashes: 1: 1wmzqwE2ku8n0Mm8ErGyhHCrJOk.roa (hash: c652pSMHzVee2CwYp/svFjVJzZcqt1kjmMsHG7p6sR4=) 2: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 3: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 4: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: AZ46OqaOB2g6nu1FOssTWm5631ewklQJmU+qzN8SPTI=) 7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 13: p8XI18_G0w6VQzp-cFuSc-YU7KU.roa (hash: 5L36hI/Ib9EXnAz7w+VyYhvbv64/xZKpeIB+xqORWK4=) 14: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 15: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:8d:51:ff:03:b4:be:a2:30:37:67:49:86:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Oct 19 14:01:34 2025 GMT Not After : Oct 20 14:01:34 2025 GMT Subject: CN=899183359571435f95101b8dd1a8d6d19bb7163b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:1a:1b:40:a7:0b:8a:83:4a:6f:86:92:ef: d1:48:3b:d2:5a:e8:23:60:a3:69:ba:de:b0:c3:ea: 8b:64:67:4d:1d:99:60:c2:7b:1e:ab:08:ef:14:04: e2:54:8a:d5:4d:f9:f1:80:b3:3b:6c:0c:49:4a:ed: 57:f0:79:22:18:43:3e:3b:fe:4f:c7:41:45:22:95: b9:fe:53:f6:8b:40:5b:31:5c:ce:a2:2f:97:a3:ec: 7e:63:e9:17:69:3d:57:03:ff:16:e2:c2:13:bd:fc: 2a:0c:fc:b0:b2:5a:9d:af:51:84:f3:ba:0d:62:8d: c6:99:b2:b1:ec:31:e6:a6:8a:16:18:6a:ac:d8:84: ab:0a:26:5b:6f:03:05:27:2c:c9:b7:d5:a9:f8:a6: c4:75:c7:8d:be:a1:ea:1f:a8:0f:96:dc:79:8c:b0: 45:97:36:60:78:81:0e:66:a2:46:46:62:a2:f4:3a: f7:35:e9:58:4c:a0:e7:e8:3a:83:f6:c6:7d:22:cb: b7:93:00:31:8b:d6:b9:cf:0e:8e:75:70:d0:31:65: be:62:69:2d:38:4b:ea:d5:85:1a:02:61:79:f1:a3: 04:fd:31:15:99:98:d2:09:99:1d:ec:d7:46:21:75: e4:4b:84:e5:0c:0d:93:82:ed:fe:a8:00:fd:3c:0d: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:83:35:95:71:43:5F:95:10:1B:8D:D1:A8:D6:D1:9B:B7:16:3B X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:27:8b:1d:d9:65:26:e8:21:1f:b4:47:e0:21:e6:2d:b3:86: ee:b2:49:73:e0:0c:d1:e4:05:0c:47:09:85:55:5e:6a:66:a6: d8:58:31:94:31:d8:99:1b:b7:da:9f:ca:b6:ca:da:45:57:d7: 49:fe:69:de:e5:74:80:8c:1d:c8:53:45:ab:10:07:e2:99:e0: ae:c1:70:95:12:2d:3c:cd:fd:33:e4:87:be:a0:29:56:56:39: 01:86:54:86:d8:54:c0:2d:73:34:39:a7:f1:0f:03:5f:51:e3: a6:1e:e9:11:90:00:22:c9:2d:01:09:3e:35:39:50:92:ee:94: a9:95:ac:05:d0:b4:b0:a5:7f:28:0d:ec:67:78:bc:51:9e:cb: 3e:c7:85:6e:30:e0:f0:0c:b0:55:aa:46:8e:89:84:fd:d0:ef: 18:0b:af:a1:86:4e:9b:be:12:d8:b0:7d:48:08:65:f8:49:99: bf:65:a7:d2:7e:9a:0a:9a:fc:c4:84:89:19:e7:3c:b0:5d:35: 8e:ce:8e:0a:2c:b0:28:fb:60:fc:18:4f:d5:8d:5e:0e:d2:18: d1:ca:54:39:80:00:5e:d0:75:d1:31:2c:90:ff:7c:30:25:b3: b4:69:b8:22:2a:2d:e1:cf:11:21:cc:8f:b2:5f:f9:c5:15:55: 15:c5:16:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xo1R/wO0vqIwN2dJhi1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMDE5MTQwMTM0WhcNMjUxMDIwMTQwMTM0WjAzMTEwLwYDVQQD Eyg4OTkxODMzNTk1NzE0MzVmOTUxMDFiOGRkMWE4ZDZkMTliYjcxNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3waG0CnC4qDSm+Gku/RSDvSWugj YKNput6ww+qLZGdNHZlgwnseqwjvFATiVIrVTfnxgLM7bAxJSu1X8HkiGEM+O/5P x0FFIpW5/lP2i0BbMVzOoi+Xo+x+Y+kXaT1XA/8W4sITvfwqDPywslqdr1GE87oN Yo3GmbKx7DHmpooWGGqs2ISrCiZbbwMFJyzJt9Wp+KbEdceNvqHqH6gPltx5jLBF lzZgeIEOZqJGRmKi9Dr3NelYTKDn6DqD9sZ9Isu3kwAxi9a5zw6OdXDQMWW+Ymkt OEvq1YUaAmF58aME/TEVmZjSCZkd7NdGIXXkS4TlDA2Tgu3+qAD9PA3gbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImRgzWVcUNflRAbjdGo1tGbtxY7MB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyeLHdll JughH7RH4CHmLbOG7rJJc+AM0eQFDEcJhVVeamam2FgxlDHYmRu32p/KtsraRVfX Sf5p3uV0gIwdyFNFqxAH4pngrsFwlRItPM39M+SHvqApVlY5AYZUhthUwC1zNDmn 8Q8DX1Hjph7pEZAAIsktAQk+NTlQku6UqZWsBdC0sKV/KA3sZ3i8UZ7LPseFbjDg 8AywVapGjomE/dDvGAuvoYZOm74S2LB9SAhl+EmZv2Wn0n6aCpr8xISJGec8sF01 js6OCiywKPtg/BhP1Y1eDtIY0cpUOYAAXtB10TEskP98MCWztGm4Iiot4c8RIcyP sl/5xRVVFcUWCQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:28:01 2025 by rpki-client