$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: ADnZZhQybsVzbnAA1pQ2q2v6PX03y4IolN1ft0aDf2I= Subject key identifier: D9:40:8A:24:19:76:5C:63:16:EB:88:CD:3D:2A:55:76:C9:40:0D:1C Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019873E2BA43D428F97CEF97650925013BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 162A Signing time: Mon 04 Aug 2025 07:01:35 +0000 Manifest this update: Mon 04 Aug 2025 07:01:35 +0000 Manifest next update: Tue 05 Aug 2025 07:01:35 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: o7iPKw1YJwPeArp8qeY9973ryuAbEPEvLtQhspAw/O4=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:ba:43:d4:28:f9:7c:ef:97:65:09:25:01:3b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Aug 4 07:01:35 2025 GMT Not After : Aug 5 07:01:35 2025 GMT Subject: CN=d9408a2419765c6316eb88cd3d2a5576c9400d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:90:65:e2:1c:6d:51:05:9b:2e:4e:89:f2: d4:c9:d9:b9:ff:b0:e6:bc:d6:91:e3:8a:f6:03:e9: 5a:ae:5d:97:6f:5e:17:2c:63:73:bc:86:7e:36:d4: aa:87:ac:47:f6:0c:31:80:d4:6c:a3:be:03:41:b6: 3c:15:48:e1:a1:7d:ec:e3:80:06:84:fc:b5:36:67: b5:d1:9d:73:da:bf:67:7e:b6:bc:e4:e4:a7:86:38: 44:af:01:90:6e:ac:82:ab:9d:de:2e:af:73:0c:03: 0c:fa:c4:ca:c7:aa:26:6b:f7:2b:e5:d3:3d:bf:a5: 14:d2:60:32:37:b0:06:0b:b0:24:34:18:2e:43:40: 63:b7:93:ad:02:61:59:2e:c4:ec:0a:d8:33:c6:ce: 3f:5e:c8:71:71:48:b4:4a:1b:31:0d:9c:25:f2:3f: 8b:77:08:65:f8:58:65:ab:24:43:fd:55:f4:3e:ae: 09:ec:6d:36:6c:e3:a9:29:93:41:94:5b:da:3f:48: bc:1a:e1:b1:4e:1a:4a:54:25:5c:35:97:3e:5f:7a: 89:0a:f1:b6:b2:9f:0e:fb:3b:51:e1:87:47:f1:d2: c3:7b:62:16:0e:e0:07:a7:56:2a:cb:52:5d:65:2a: db:bc:56:0d:c1:f1:32:63:1c:7d:12:f5:32:f8:07: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:40:8A:24:19:76:5C:63:16:EB:88:CD:3D:2A:55:76:C9:40:0D:1C X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:e8:9d:99:86:8e:2d:b9:0a:2d:20:e3:00:6a:ec:65:72: b2:53:55:88:51:93:3c:27:12:08:d6:d3:5b:21:88:2b:dc:45: bc:d0:64:3a:f2:cf:3f:60:e4:33:fe:54:cc:30:3d:43:e5:f3: 56:f0:cf:b6:54:5c:bf:50:cb:46:f4:d5:70:9e:33:c1:0c:37: 73:7e:a9:a8:41:31:f9:79:46:6d:ff:f8:d5:bd:12:20:ea:c3: ab:16:d7:d1:e4:4b:73:bb:4d:01:22:e3:e0:91:1d:92:99:db: 2a:ad:00:a3:7d:6f:15:80:0d:9e:d5:2e:cc:7b:86:28:0d:96: c1:fa:1e:97:61:70:fd:2e:83:ee:63:23:64:e6:4a:69:84:8e: 2b:d0:ba:e4:17:7b:25:b6:40:17:db:5a:db:41:b4:64:55:49: ac:ec:56:e9:ef:0c:d9:29:7f:2e:f2:fe:6a:c3:01:e0:8a:db: ae:db:92:26:37:4c:5a:db:00:90:7e:9a:73:ee:1b:00:f2:ae: 85:a1:b7:e5:fa:ba:43:40:38:86:d5:16:d9:6d:a4:28:98:6d: 6f:5b:8c:18:a8:68:62:41:02:f1:5e:8e:5f:73:3c:b7:19:11: eb:7f:f3:53:92:11:50:dc:6d:35:10:34:70:d8:c2:cd:65:81: 6b:2a:56:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4rpD1Cj5fO+XZQklATvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwODA0MDcwMTM1WhcNMjUwODA1MDcwMTM1WjAzMTEwLwYDVQQD EyhkOTQwOGEyNDE5NzY1YzYzMTZlYjg4Y2QzZDJhNTU3NmM5NDAwZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkiQZeIcbVEFmy5OifLUydm5/7Dm vNaR44r2A+larl2Xb14XLGNzvIZ+NtSqh6xH9gwxgNRso74DQbY8FUjhoX3s44AG hPy1Nme10Z1z2r9nfra85OSnhjhErwGQbqyCq53eLq9zDAMM+sTKx6oma/cr5dM9 v6UU0mAyN7AGC7AkNBguQ0Bjt5OtAmFZLsTsCtgzxs4/XshxcUi0ShsxDZwl8j+L dwhl+FhlqyRD/VX0Pq4J7G02bOOpKZNBlFvaP0i8GuGxThpKVCVcNZc+X3qJCvG2 sp8O+ztR4YdH8dLDe2IWDuAHp1Yqy1JdZSrbvFYNwfEyYxx9EvUy+AcWZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlAiiQZdlxjFuuIzT0qVXbJQA0cMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMPonZmG ji25Ci0g4wBq7GVyslNViFGTPCcSCNbTWyGIK9xFvNBkOvLPP2DkM/5UzDA9Q+Xz VvDPtlRcv1DLRvTVcJ4zwQw3c36pqEEx+XlGbf/41b0SIOrDqxbX0eRLc7tNASLj 4JEdkpnbKq0Ao31vFYANntUuzHuGKA2Wwfoel2Fw/S6D7mMjZOZKaYSOK9C65Bd7 JbZAF9ta20G0ZFVJrOxW6e8M2Sl/LvL+asMB4IrbrtuSJjdMWtsAkH6ac+4bAPKu haG35fq6Q0A4htUW2W2kKJhtb1uMGKhoYkEC8V6OX3M8txkR63/zU5IRUNxtNRA0 cNjCzWWBaypW+Q== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:54 2025 by rpki-client