$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: fQ6b8g+KeAc3DF25ToljwHuNUbI59bVaQdMzgGCu8W4= Subject key identifier: D6:B3:D9:64:04:AE:D9:01:37:A5:1A:7D:9C:9D:4A:C6:8F:BE:A9:FC Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 0198D69894684E892BF67FE8A59B37286EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0FB6 Signing time: Sat 23 Aug 2025 11:03:00 +0000 Manifest this update: Sat 23 Aug 2025 11:03:00 +0000 Manifest next update: Sun 24 Aug 2025 11:03:00 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: Hi4V3LlttdmHopN1UQmnuj7fW8SGvuFU28B3q55SyYY=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:94:68:4e:89:2b:f6:7f:e8:a5:9b:37:28:6e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Aug 23 11:03:00 2025 GMT Not After : Aug 24 11:03:00 2025 GMT Subject: CN=d6b3d96404aed90137a51a7d9c9d4ac68fbea9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f8:53:1b:08:16:5a:c4:da:e9:63:db:c5:32: c0:02:de:d2:40:14:e3:d0:61:c9:24:9f:de:cc:04: c7:e9:d3:d2:8f:49:dd:fd:26:60:a5:42:2b:52:e3: 4a:c3:2e:07:99:ea:b8:00:83:24:ef:f3:ce:2e:7e: 5d:25:50:30:64:74:f6:c5:d8:85:f6:5b:9d:d7:c4: 94:31:56:39:7d:15:2d:fb:64:7a:1f:4a:74:b2:a4: 23:ce:4c:bc:0e:e2:35:95:c3:2d:8e:6c:f9:60:8e: 17:5b:25:74:28:6c:73:ae:0a:51:74:11:a5:4b:a5: 79:88:2b:c6:57:52:a4:e9:cf:8e:5f:9f:6e:e7:e4: 01:e0:36:24:53:5d:74:f7:d0:bc:ec:89:56:d7:c8: b7:46:d5:e7:a7:2a:32:f1:ad:77:39:ed:3e:1f:df: 43:57:c4:20:31:71:8b:9c:54:1f:87:df:c1:a0:83: dd:da:4d:90:b8:c2:33:17:00:bf:07:66:4f:46:9f: 9c:8a:4b:51:5f:71:de:ec:85:e7:28:86:27:ab:93: 01:ae:56:51:7c:da:62:bf:dc:8b:d7:f2:29:50:ab: 3a:7d:15:60:9f:49:6f:ec:6a:3e:7f:59:7b:2f:70: 21:2f:06:07:ff:fe:64:9a:ec:c6:af:00:77:72:54: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B3:D9:64:04:AE:D9:01:37:A5:1A:7D:9C:9D:4A:C6:8F:BE:A9:FC X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:24:5c:6e:98:e2:76:db:3a:1b:7a:71:20:cd:e6:8d:9d:bf: 8c:bb:e6:be:28:43:e0:41:29:c3:65:73:61:0d:d8:fc:c8:17: 98:1f:f8:e6:ec:1d:fe:27:a7:3e:eb:a1:0e:59:d9:8e:4a:59: 35:da:6c:13:b7:94:78:90:c1:1d:9a:d1:b9:61:b2:40:28:06: 7e:a1:79:fa:7f:c2:17:07:73:50:33:87:1f:46:45:87:73:e8: bf:dc:62:81:77:61:eb:61:fb:e7:09:22:11:44:09:0d:6f:09: 1e:3c:9e:23:ae:6e:c7:61:df:42:a7:32:20:ae:d3:08:87:68: f0:c1:4d:4f:08:37:1e:3d:09:a2:91:25:e3:fc:c5:ad:01:bc: 9f:b2:4d:8d:aa:db:9b:1c:e5:8e:33:b3:2e:53:77:ed:ed:ab: 17:c5:70:b2:91:8e:b9:0a:d7:0c:75:3e:c3:f8:d7:35:f9:0e: 0b:25:3a:a2:41:ea:e8:d1:57:73:de:1f:4d:4c:96:0d:0e:6d: 25:1e:e0:7b:40:eb:8b:03:fe:c8:bf:67:89:d0:aa:dc:bd:50: b0:62:d4:86:de:8f:b9:23:1f:26:48:01:df:b7:40:ca:b1:18: b3:0a:ff:bc:95:b6:3f:40:d1:99:35:78:52:7b:c3:43:2a:c3: a3:b6:1a:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmJRoTokr9n/opZs3KG6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwODIzMTEwMzAwWhcNMjUwODI0MTEwMzAwWjAzMTEwLwYDVQQD EyhkNmIzZDk2NDA0YWVkOTAxMzdhNTFhN2Q5YzlkNGFjNjhmYmVhOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/hTGwgWWsTa6WPbxTLAAt7SQBTj 0GHJJJ/ezATH6dPSj0nd/SZgpUIrUuNKwy4Hmeq4AIMk7/POLn5dJVAwZHT2xdiF 9lud18SUMVY5fRUt+2R6H0p0sqQjzky8DuI1lcMtjmz5YI4XWyV0KGxzrgpRdBGl S6V5iCvGV1Kk6c+OX59u5+QB4DYkU11099C87IlW18i3RtXnpyoy8a13Oe0+H99D V8QgMXGLnFQfh9/BoIPd2k2QuMIzFwC/B2ZPRp+ciktRX3He7IXnKIYnq5MBrlZR fNpiv9yL1/IpUKs6fRVgn0lv7Go+f1l7L3AhLwYH//5kmuzGrwB3clRMYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaz2WQErtkBN6UafZydSsaPvqn8MB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSRcbpji dts6G3pxIM3mjZ2/jLvmvihD4EEpw2VzYQ3Y/MgXmB/45uwd/ienPuuhDlnZjkpZ NdpsE7eUeJDBHZrRuWGyQCgGfqF5+n/CFwdzUDOHH0ZFh3Pov9xigXdh62H75wki EUQJDW8JHjyeI65ux2HfQqcyIK7TCIdo8MFNTwg3Hj0JopEl4/zFrQG8n7JNjarb mxzljjOzLlN37e2rF8VwspGOuQrXDHU+w/jXNfkOCyU6okHq6NFXc94fTUyWDQ5t JR7ge0DriwP+yL9nidCq3L1QsGLUht6PuSMfJkgB37dAyrEYswr/vJW2P0DRmTV4 UnvDQyrDo7YaMA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:29:39 2025 by rpki-client