$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: r28bXKB54XhlZAXj0h1vwc3yO/kadin//Kv5uZo0710= Subject key identifier: B8:8E:9A:0C:43:01:1F:74:85:E9:34:DB:88:D8:FC:47:F3:1B:1C:6C Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019776E643E8EAB2A78E5D2B7C82280ABDAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 15A7 Signing time: Mon 16 Jun 2025 04:01:31 +0000 Manifest this update: Mon 16 Jun 2025 04:01:31 +0000 Manifest next update: Tue 17 Jun 2025 04:01:31 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: y/Lj0lHsE4SNl0EJUWqeiIgcte0DhzW/h6VyRdCTe0Q=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:e6:43:e8:ea:b2:a7:8e:5d:2b:7c:82:28:0a:bd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jun 16 04:01:31 2025 GMT Not After : Jun 17 04:01:31 2025 GMT Subject: CN=b88e9a0c43011f7485e934db88d8fc47f31b1c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:4a:b5:92:20:ae:c8:5f:ca:33:90:04:df: a4:92:45:39:b8:4f:cb:25:74:04:82:4b:72:7a:30: 53:d2:d5:1c:5f:15:51:e3:4d:ad:cb:42:93:3b:b5: 29:90:47:b0:7e:68:6b:dc:5c:8a:23:89:4f:2c:81: 53:39:23:55:f2:b2:32:ec:1a:35:15:48:49:c2:a4: e8:28:0c:e5:52:ba:42:38:4f:e5:fd:01:13:42:58: 56:13:69:54:f1:1c:b9:3d:60:1d:9e:99:48:46:b8: 4e:50:f8:67:36:30:09:85:2b:30:8b:79:bd:f0:26: 53:c5:5a:9c:67:6e:db:b5:84:a1:ae:99:af:f0:42: 62:70:d1:c9:e2:65:db:43:b5:85:82:22:b8:66:b6: bf:fb:29:34:44:27:10:77:77:9c:da:c8:8b:5f:c8: db:08:4a:f9:76:e1:c3:6e:ad:e6:57:be:4e:78:a7: 96:ce:7c:81:92:10:bf:30:b7:41:bd:a7:f9:e0:ce: ff:6d:1f:66:f5:57:fe:49:aa:22:b7:5c:c1:36:c6: fc:68:51:e2:1c:bb:7b:95:72:7f:d5:3c:5b:b6:8c: a8:a4:9a:9d:06:a2:24:26:7e:59:b9:f9:9a:b9:c9: 13:37:e1:f1:00:13:09:13:1d:de:c1:53:c6:6f:02: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:9A:0C:43:01:1F:74:85:E9:34:DB:88:D8:FC:47:F3:1B:1C:6C X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c0:d2:30:81:ca:18:a2:0c:68:e2:58:f6:e2:76:71:9c:6a: 12:2b:d8:ae:a9:0c:39:c2:9f:cf:8e:59:18:cb:0e:d6:84:a9: 94:48:e0:a9:e3:e9:5f:93:9d:bf:64:9c:4d:87:1e:f1:f8:ad: 35:3f:3d:9f:48:44:3d:19:92:c5:d6:ca:8a:db:cc:20:81:18: 24:b3:f5:ba:ea:bc:70:de:e6:43:9b:31:23:30:cf:4a:2a:d3: 92:14:94:f4:10:d0:b1:2c:91:6b:1c:6f:1f:ec:ec:7c:2f:1f: ec:42:72:36:2e:53:6e:30:4b:01:5c:60:72:f1:d3:d7:5e:e0: c8:63:19:8f:58:b6:02:c8:4c:a8:b9:d3:0e:a5:d5:02:32:31: 17:c7:86:bc:d6:85:37:bd:93:5e:b8:5a:23:da:85:6a:60:46: b9:3b:e9:a0:64:c3:d9:8a:97:dc:d0:33:0e:da:07:5a:64:8e: a7:d9:e8:dd:9a:4f:15:a3:f5:3d:45:41:20:59:67:af:2b:b9: 5b:4c:3d:98:37:b0:a1:34:8d:0e:5c:c2:77:ca:de:74:4b:88: d8:59:2c:11:09:cc:30:7f:00:e5:65:e3:58:f1:64:f1:0b:d2: 1c:b7:e1:6e:41:18:8b:7a:73:99:78:9d:95:e6:b0:6d:53:f3: 37:a8:3d:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd25kPo6rKnjl0rfIIoCr2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwNjE2MDQwMTMxWhcNMjUwNjE3MDQwMTMxWjAzMTEwLwYDVQQD EyhiODhlOWEwYzQzMDExZjc0ODVlOTM0ZGI4OGQ4ZmM0N2YzMWIxYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCZKtZIgrshfyjOQBN+kkkU5uE/L JXQEgktyejBT0tUcXxVR402ty0KTO7UpkEewfmhr3FyKI4lPLIFTOSNV8rIy7Bo1 FUhJwqToKAzlUrpCOE/l/QETQlhWE2lU8Ry5PWAdnplIRrhOUPhnNjAJhSswi3m9 8CZTxVqcZ27btYShrpmv8EJicNHJ4mXbQ7WFgiK4Zra/+yk0RCcQd3ec2siLX8jb CEr5duHDbq3mV75OeKeWznyBkhC/MLdBvaf54M7/bR9m9Vf+Saoit1zBNsb8aFHi HLt7lXJ/1TxbtoyopJqdBqIkJn5ZufmauckTN+HxABMJEx3ewVPGbwJ0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiOmgxDAR90hek024jY/EfzGxxsMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8DSMIHK GKIMaOJY9uJ2cZxqEivYrqkMOcKfz45ZGMsO1oSplEjgqePpX5Odv2ScTYce8fit NT89n0hEPRmSxdbKitvMIIEYJLP1uuq8cN7mQ5sxIzDPSirTkhSU9BDQsSyRaxxv H+zsfC8f7EJyNi5TbjBLAVxgcvHT117gyGMZj1i2AshMqLnTDqXVAjIxF8eGvNaF N72TXrhaI9qFamBGuTvpoGTD2YqX3NAzDtoHWmSOp9no3ZpPFaP1PUVBIFlnryu5 W0w9mDewoTSNDlzCd8redEuI2FksEQnMMH8A5WXjWPFk8QvSHLfhbkEYi3pzmXid leawbVPzN6g9TQ== -----END CERTIFICATE-----Generated at Mon Jun 16 12:11:16 2025 by rpki-client