$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: fO0duXR29X8I5VQ0hEuXtnrHGR8LjybIrMop1a5UhR8= Subject key identifier: FF:36:C0:24:5B:C2:F8:15:00:71:92:E2:2B:4D:68:2D:76:D9:78:B3 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019A4EF56347B071D42D9B649813E684CDA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1720 Signing time: Tue 04 Nov 2025 13:01:35 +0000 Manifest this update: Tue 04 Nov 2025 13:01:35 +0000 Manifest next update: Wed 05 Nov 2025 13:01:35 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: 31JUNLS7UBDU1JZF3feIShJJP0/2NoEc5c2aYckKqAw=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:63:47:b0:71:d4:2d:9b:64:98:13:e6:84:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Nov 4 13:01:35 2025 GMT Not After : Nov 5 13:01:35 2025 GMT Subject: CN=ff36c0245bc2f815007192e22b4d682d76d978b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:34:5c:05:7a:5e:de:1a:b2:67:60:97:cc:58: f9:fd:15:d7:d4:00:76:ab:5d:d3:ea:9d:a4:dd:2c: a8:a9:7f:4a:9f:6f:c8:7b:82:c4:4a:b2:23:e1:a2: 9c:24:d4:17:63:d0:78:ac:f5:e6:d0:6f:83:cd:5a: 6b:21:4a:12:2a:c4:5a:d6:da:b0:0b:73:e2:f2:09: 51:77:5b:c0:cb:1e:a9:a6:c2:7b:19:ca:80:cf:92: f8:51:6f:4e:4b:98:db:cb:21:e0:4f:f0:f4:98:35: ae:45:22:2f:cc:82:da:a6:c1:42:b4:2b:41:7b:e4: ca:de:08:88:44:56:de:dc:55:77:77:a5:2a:50:d0: 65:b2:e6:97:da:de:5a:bb:ff:c7:da:2f:22:7e:32: a2:0c:c6:9c:a7:6c:3a:f4:a4:1f:0f:01:cf:41:13: c0:38:99:f8:ac:55:5e:97:e7:70:0b:c3:06:8a:10: 0e:33:42:5a:48:44:2d:cc:f8:db:f9:26:ce:71:b0: 96:19:3b:ed:ae:10:f7:cc:37:eb:0e:ff:20:ec:65: 7d:ed:f1:c1:6d:55:8d:ff:3b:65:18:b1:af:2d:75: c2:fa:87:7b:2b:93:bf:e0:f8:d1:e6:3d:74:bc:bd: 44:7f:b2:76:fb:f5:b8:e7:76:41:6d:e5:ef:ed:66: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:36:C0:24:5B:C2:F8:15:00:71:92:E2:2B:4D:68:2D:76:D9:78:B3 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:cf:61:50:e7:01:66:fe:4e:ff:73:a6:f1:f9:ca:45:f9:be: bd:a0:7d:b0:5f:3c:07:19:8f:60:0c:2f:b4:13:8e:00:08:e4: ad:3e:60:69:18:4b:21:da:b2:55:08:29:e4:53:ca:25:2a:71: 39:4b:eb:03:f5:db:6f:1e:53:91:57:48:4e:6a:1d:80:64:95: 98:1e:8e:8f:83:86:df:88:78:59:4e:6b:d6:34:b8:71:e2:8e: 21:4c:b0:20:67:c0:7e:1f:2e:79:5d:23:26:13:09:43:12:a6: 7d:58:f5:6f:72:48:58:52:bb:16:29:dc:d4:6d:1e:55:5d:c4: 37:6f:fb:9b:ad:3c:6d:fd:5a:db:13:42:85:80:c8:fd:e0:f1: 7c:43:25:0c:ab:bf:b9:97:fd:b4:e8:e7:54:fd:a1:80:40:51: 2d:ab:8b:56:a2:84:3b:d9:d1:8f:93:65:29:bc:89:48:78:db: 0a:0d:8d:be:04:ed:90:23:06:19:f6:81:fa:29:7c:f6:42:6c: 4d:1a:a8:7f:c1:a0:8f:08:82:79:93:b2:02:c6:ff:a5:7c:94: 36:4e:6e:ab:45:c0:46:e0:72:24:1b:a5:75:d3:86:4f:da:27: 51:24:2c:73:2e:52:b3:de:90:90:83:f9:67:17:8f:67:48:a8: 5e:3b:4d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9WNHsHHULZtkmBPmhM2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUxMTA0MTMwMTM1WhcNMjUxMTA1MTMwMTM1WjAzMTEwLwYDVQQD EyhmZjM2YzAyNDViYzJmODE1MDA3MTkyZTIyYjRkNjgyZDc2ZDk3OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jRcBXpe3hqyZ2CXzFj5/RXX1AB2 q13T6p2k3SyoqX9Kn2/Ie4LESrIj4aKcJNQXY9B4rPXm0G+DzVprIUoSKsRa1tqw C3Pi8glRd1vAyx6ppsJ7GcqAz5L4UW9OS5jbyyHgT/D0mDWuRSIvzILapsFCtCtB e+TK3giIRFbe3FV3d6UqUNBlsuaX2t5au//H2i8ifjKiDMacp2w69KQfDwHPQRPA OJn4rFVel+dwC8MGihAOM0JaSEQtzPjb+SbOcbCWGTvtrhD3zDfrDv8g7GV97fHB bVWN/ztlGLGvLXXC+od7K5O/4PjR5j10vL1Ef7J2+/W453ZBbeXv7WaZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP82wCRbwvgVAHGS4itNaC122XizMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ89hUOcB Zv5O/3Om8fnKRfm+vaB9sF88BxmPYAwvtBOOAAjkrT5gaRhLIdqyVQgp5FPKJSpx OUvrA/Xbbx5TkVdITmodgGSVmB6Oj4OG34h4WU5r1jS4ceKOIUywIGfAfh8ueV0j JhMJQxKmfVj1b3JIWFK7Finc1G0eVV3EN2/7m608bf1a2xNChYDI/eDxfEMlDKu/ uZf9tOjnVP2hgEBRLauLVqKEO9nRj5NlKbyJSHjbCg2NvgTtkCMGGfaB+il89kJs TRqof8GgjwiCeZOyAsb/pXyUNk5uq0XARuByJBulddOGT9onUSQscy5Ss96QkIP5 ZxePZ0ioXjtNTg== -----END CERTIFICATE-----Generated at Tue Nov 4 20:39:36 2025 by rpki-client