$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: fIeXvznw5/msZCgHGjG6qh2pDj5HX5lbLCeseiKx++A= Subject key identifier: F1:6F:F9:B4:EE:94:84:C5:5B:24:83:93:CC:09:2D:F6:70:08:D1:CD Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 0198D4A820B2328DF79A3CACB80C7E855485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 06C7 Signing time: Sat 23 Aug 2025 02:00:44 +0000 Manifest this update: Sat 23 Aug 2025 02:00:44 +0000 Manifest next update: Sun 24 Aug 2025 02:00:44 +0000 Files and hashes: 1: 1wmzqwE2ku8n0Mm8ErGyhHCrJOk.roa (hash: c652pSMHzVee2CwYp/svFjVJzZcqt1kjmMsHG7p6sR4=) 2: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 3: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 4: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 5: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 6: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 7: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: PnkV02ddx45oe1tFkt9WYy+wFsVI713NpNDkNFWDynY=) 8: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 9: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 10: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 11: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 12: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 13: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 14: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 15: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a8:20:b2:32:8d:f7:9a:3c:ac:b8:0c:7e:85:54:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Aug 23 02:00:44 2025 GMT Not After : Aug 24 02:00:44 2025 GMT Subject: CN=f16ff9b4ee9484c55b248393cc092df67008d1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:f3:a0:7a:1b:89:86:95:38:6a:84:0e:27: 9a:b6:5d:77:ce:47:f4:64:86:7b:a2:39:c2:39:03: db:ee:d3:0c:ac:b9:43:5e:32:7c:4d:15:86:f5:c2: 10:08:4c:58:70:66:c1:d2:66:ee:b6:2a:5f:11:dd: 5b:b2:59:42:02:61:ac:42:ab:86:75:b7:9e:d2:e0: 57:17:c8:36:19:1d:ee:28:c4:f2:49:5f:05:fc:1b: ab:25:7c:87:c2:c0:db:d8:16:b8:f9:4f:d1:93:43: fd:0f:ad:3e:d7:99:06:f8:e5:10:1c:5f:ae:8d:dc: eb:e4:c0:d1:e5:08:c4:0b:47:3e:30:86:7e:90:ee: f5:88:6d:f6:7d:23:11:1f:ae:e6:ee:46:a9:f7:06: f3:a4:1c:c1:4d:a9:f7:1c:60:a1:9b:61:17:35:f3: 94:a4:9c:63:d7:cf:21:c1:d9:b2:57:6f:df:64:85: df:cc:5f:44:e7:84:b3:9d:59:1f:ae:a3:7c:a3:3f: 84:3b:d8:ca:08:34:a4:c6:e5:a5:b3:18:2b:bb:d2: b4:4d:dd:6a:65:db:d5:56:20:8a:49:a6:3c:ea:42: 05:13:86:e5:b0:a0:5f:2b:34:87:22:d4:b9:ac:04: 6a:2e:87:87:b1:b8:12:b8:85:0e:4a:f7:38:61:47: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6F:F9:B4:EE:94:84:C5:5B:24:83:93:CC:09:2D:F6:70:08:D1:CD X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e8:af:a2:0e:db:2a:f4:be:77:ad:8f:f3:8f:12:27:5c:6c: d3:88:95:62:92:4a:76:6b:b0:aa:c8:6c:61:34:ff:e0:a0:60: 75:69:b0:65:17:93:47:83:7b:49:d7:53:a7:25:df:a6:3c:31: 6c:0a:03:6e:23:5a:15:18:eb:ff:a7:07:af:8b:9e:77:b2:44: ad:4e:1c:ad:41:f3:f3:51:db:0c:42:6f:d1:eb:4e:81:e6:7b: 2f:6d:eb:49:c7:47:e5:3a:a2:06:3b:f7:6d:e0:a1:7c:32:a4: 4e:d8:bb:e4:af:ac:d3:07:50:2c:92:df:9a:a2:20:6a:e1:5f: 74:1e:33:bd:ce:82:c0:76:ae:f5:db:e0:1c:49:f6:a2:4b:f4: 07:77:c7:27:43:d5:37:49:d6:e4:a6:a1:ab:82:49:4d:60:85: f5:2e:72:91:47:d2:88:5a:fd:40:03:2b:8f:50:74:99:fc:d2: fd:c8:70:16:bd:11:a6:7c:3e:83:e3:61:ca:82:78:40:fd:b1: 63:50:8a:74:23:4b:e4:c0:f2:c4:04:41:1c:0e:8c:6f:54:4f: fb:7b:f3:c7:ee:2d:1f:45:57:e5:c4:b7:8c:7a:fc:25:56:81: a0:44:05:40:91:08:be:7c:f8:e9:4c:e2:a6:7e:28:a4:a1:0c: 4c:c6:92:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUqCCyMo33mjysuAx+hVSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwODIzMDIwMDQ0WhcNMjUwODI0MDIwMDQ0WjAzMTEwLwYDVQQD EyhmMTZmZjliNGVlOTQ4NGM1NWIyNDgzOTNjYzA5MmRmNjcwMDhkMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk/zoHobiYaVOGqEDieatl13zkf0 ZIZ7ojnCOQPb7tMMrLlDXjJ8TRWG9cIQCExYcGbB0mbutipfEd1bsllCAmGsQquG dbee0uBXF8g2GR3uKMTySV8F/BurJXyHwsDb2Ba4+U/Rk0P9D60+15kG+OUQHF+u jdzr5MDR5QjEC0c+MIZ+kO71iG32fSMRH67m7kap9wbzpBzBTan3HGChm2EXNfOU pJxj188hwdmyV2/fZIXfzF9E54SznVkfrqN8oz+EO9jKCDSkxuWlsxgru9K0Td1q ZdvVViCKSaY86kIFE4blsKBfKzSHItS5rARqLoeHsbgSuIUOSvc4YUeikwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFv+bTulITFWySDk8wJLfZwCNHNMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuivog7b KvS+d62P848SJ1xs04iVYpJKdmuwqshsYTT/4KBgdWmwZReTR4N7SddTpyXfpjwx bAoDbiNaFRjr/6cHr4ued7JErU4crUHz81HbDEJv0etOgeZ7L23rScdH5TqiBjv3 beChfDKkTti75K+s0wdQLJLfmqIgauFfdB4zvc6CwHau9dvgHEn2okv0B3fHJ0PV N0nW5Kahq4JJTWCF9S5ykUfSiFr9QAMrj1B0mfzS/chwFr0Rpnw+g+NhyoJ4QP2x Y1CKdCNL5MDyxARBHA6Mb1RP+3vzx+4tH0VX5cS3jHr8JVaBoEQFQJEIvnz46Uzi pn4opKEMTMaSqw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:23 2025 by rpki-client