$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: vtKOAVRLwdM1cym6iAN9nBr9PaEg9ywvKFE/FbARe7g= Subject key identifier: 4D:8B:18:4F:DA:81:2D:3B:84:F8:3F:15:12:CA:A7:1D:A5:06:EE:93 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 0199FC2194E3CC43A6FDD6C3C9DBCC8D195C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 104E Signing time: Sun 19 Oct 2025 11:01:23 +0000 Manifest this update: Sun 19 Oct 2025 11:01:23 +0000 Manifest next update: Mon 20 Oct 2025 11:01:23 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: XIdh84RzTvvcB7mc3os/HUYaS28Qm79px0WcFZzlhso=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:94:e3:cc:43:a6:fd:d6:c3:c9:db:cc:8d:19:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Oct 19 11:01:23 2025 GMT Not After : Oct 20 11:01:23 2025 GMT Subject: CN=4d8b184fda812d3b84f83f1512caa71da506ee93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:31:08:7a:1f:f8:f5:19:34:c6:61:e3:91: 03:80:08:1c:29:d7:00:d6:3e:d5:c8:92:78:da:fb: 0b:ad:70:ec:89:c6:2c:8f:23:63:fc:cf:54:e6:e3: d5:29:4f:05:d3:6f:81:59:9f:38:9b:b4:b5:1b:58: 5b:62:4c:20:b4:7b:0d:aa:6f:b9:41:21:77:13:5c: 60:fb:2a:47:25:41:cc:8f:67:92:24:32:e6:db:9f: e2:1d:bc:0e:63:7f:c8:ae:a9:ac:3f:5e:1d:8e:9b: bb:70:6d:2f:d0:db:db:27:37:a1:d8:bb:e0:bf:4b: 8a:4d:18:f3:77:60:02:63:f1:41:a7:38:7b:8c:2a: b5:f3:2a:43:8f:35:82:2f:25:3e:d8:22:bc:87:8a: de:a3:bd:53:97:83:71:3b:de:17:91:e8:c3:60:ca: bd:4b:b3:e0:83:e8:08:4e:c0:3d:0c:4c:51:05:9d: 44:f6:f1:6d:7d:16:30:44:e7:9e:a2:2d:1b:8d:55: 96:a9:3e:c8:b0:9d:1a:16:82:82:f1:de:43:27:d6: ad:ac:fc:88:7a:1e:13:26:0e:21:e8:6c:a5:d0:cc: 41:ff:0c:63:6a:5d:cb:fe:d4:97:35:e4:95:ad:ed: 78:36:ea:f6:cd:a0:83:59:2b:02:df:95:8e:c0:5c: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8B:18:4F:DA:81:2D:3B:84:F8:3F:15:12:CA:A7:1D:A5:06:EE:93 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c0:90:ea:dd:a5:9f:2f:de:10:d5:7b:98:95:91:d4:1d:43: 9e:52:14:24:43:73:2f:8a:bd:18:2b:f5:1b:7b:c2:07:47:01: c7:97:46:ff:5e:e3:8b:17:2d:30:b1:68:46:43:1c:c2:62:c4: 32:dc:b1:b3:95:51:87:e7:1b:4a:37:54:b7:65:0e:c1:6b:5a: f0:5c:38:e2:37:e1:9c:81:18:f5:aa:15:e4:5d:da:d9:3c:b4: 52:f4:9c:1c:fb:ac:9b:26:b5:48:89:6e:36:de:46:8c:cd:35: ab:4b:49:68:c2:65:6b:0c:31:5b:85:b9:75:81:38:ef:f9:00: e9:26:b3:52:5a:e7:ad:33:d4:2a:87:65:39:26:a4:6f:7d:66: 9a:3f:54:b3:2b:a0:f0:0c:9d:10:65:33:a1:f2:53:34:37:4a: 66:81:c6:79:61:74:af:05:50:59:9e:36:61:5f:6e:d6:0c:de: 2d:4b:93:df:44:cd:7d:5b:ce:30:b2:15:0e:bd:bf:49:e7:7c: 56:ef:3d:7b:d6:89:aa:fa:37:1e:de:8a:5f:72:ee:4e:b9:c9: 6e:7c:36:6f:f5:29:f1:f7:d3:c0:ff:60:6d:75:1c:b7:f7:71: 16:34:e9:dc:22:ae:63:83:ae:83:18:b1:c4:87:b6:86:10:70: 69:10:67:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IZTjzEOm/dbDydvMjRlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUxMDE5MTEwMTIzWhcNMjUxMDIwMTEwMTIzWjAzMTEwLwYDVQQD Eyg0ZDhiMTg0ZmRhODEyZDNiODRmODNmMTUxMmNhYTcxZGE1MDZlZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CMxCHof+PUZNMZh45EDgAgcKdcA 1j7VyJJ42vsLrXDsicYsjyNj/M9U5uPVKU8F02+BWZ84m7S1G1hbYkwgtHsNqm+5 QSF3E1xg+ypHJUHMj2eSJDLm25/iHbwOY3/IrqmsP14djpu7cG0v0NvbJzeh2Lvg v0uKTRjzd2ACY/FBpzh7jCq18ypDjzWCLyU+2CK8h4reo71Tl4NxO94XkejDYMq9 S7Pgg+gITsA9DExRBZ1E9vFtfRYwROeeoi0bjVWWqT7IsJ0aFoKC8d5DJ9atrPyI eh4TJg4h6Gyl0MxB/wxjal3L/tSXNeSVre14Nur2zaCDWSsC35WOwFzqKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2LGE/agS07hPg/FRLKpx2lBu6TMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8CQ6t2l ny/eENV7mJWR1B1DnlIUJENzL4q9GCv1G3vCB0cBx5dG/17jixctMLFoRkMcwmLE Mtyxs5VRh+cbSjdUt2UOwWta8Fw44jfhnIEY9aoV5F3a2Ty0UvScHPusmya1SIlu Nt5GjM01q0tJaMJlawwxW4W5dYE47/kA6SazUlrnrTPUKodlOSakb31mmj9Usyug 8AydEGUzofJTNDdKZoHGeWF0rwVQWZ42YV9u1gzeLUuT30TNfVvOMLIVDr2/Sed8 Vu89e9aJqvo3Ht6KX3LuTrnJbnw2b/Up8ffTwP9gbXUct/dxFjTp3CKuY4Ougxix xIe2hhBwaRBnzw== -----END CERTIFICATE-----Generated at Sun Oct 19 12:52:15 2025 by rpki-client