
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
File:                     FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft (raw, json)
Hash identifier:          qMuJUJoDDgjtRzVVWOTZ8ULTo6oor40qutmIUTo+kRA=
Subject key identifier:   C1:10:70:CC:A9:91:F3:AE:F5:EA:23:A3:51:55:F1:E4:D8:E2:B8:6F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019A4D7485A2165871F28B5D2CE3B7BDAC6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
Manifest number:          1318
Signing time:             Tue 04 Nov 2025 06:01:13 +0000
Manifest this update:     Tue 04 Nov 2025 06:01:13 +0000
Manifest next update:     Wed 05 Nov 2025 06:01:13 +0000
Files and hashes:         1: 1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa (hash: yVOsoV3yJ2B3NS6xPJkpc/bYU0gh14t4/0w2H7T8rs8=)
                          2: 1im9hEU1Zy9gvDtniuhopIsSAfI.roa (hash: KW9osimLZTsfRmjZlDNM2cTfJYEvT/L6ZQhgwqfwXrg=)
                          3: 4iA6JSRt9iOXLjSJo4FPcvo5850.roa (hash: Y6iNsmOmNRn1t0IzHy7GGa6of/n7DvPOfcUdK5WYltI=)
                          4: 5T-uWj9twPgW88xOoqQzKkjJJ24.roa (hash: sqAIwpwqapzYO2+lY5/AGADk25rfARYCO45gc5xFmSQ=)
                          5: 5ViRj5UOP26C2K_cQDvWpvsGWtY.roa (hash: FTaUWpoFHfHOaNS+eZLYDwPpxcO9OpNzf+cUKjmhjJg=)
                          6: 5rXL0JsGBTdFgmilGhjy5ibNnPE.roa (hash: CGdxIHgH+xiIc8F/6l7wNpGL/7q47aq5LVwWjCCh0FI=)
                          7: 5sP9AUGchNWq9z-ewhSavIILNHs.roa (hash: AuCjYL0TN0EWfTEbYCBZhYsII9mCs+B7At3SazH6Kpg=)
                          8: 8DJ685XS7FFhXpTi96HwIs1c-E8.roa (hash: P3RV7SHn5Nd362yPOhJ1roOU2udG/g0q/278EWXSOPo=)
                          9: 8b5XsU_ykhlua86XBDQUS1Mo7FI.roa (hash: WWCuXlQD4j8DR63+O4KA60gHpfsjP5jXzLpDX6ZJvWA=)
                          10: AECbsIhKbWJ_Ff0F92F1-4KSX08.roa (hash: XeOu6WbkVXZWORsNFez3zH3cLGNSOvG9l/JIT9zyGeY=)
                          11: CCs7s7qtTwTA4v_cUzv1kNWH5cs.roa (hash: n9IEvGnZo2t/xTYkauWQNpybghOPxemj5Hqf6XCpTTU=)
                          12: CvYPnO9n9wAN8861pn_AlstUSmc.roa (hash: AhTYD+mPr3Q/UsUfGKJ2zJxIpB92wOFsAXppP+mD++w=)
                          13: D8XaxT7I5JFRJkvo3J2dhv_ELuY.roa (hash: C/8xNeqRzXC3cmESXdioUHl9JoWebCZTdFUNWemwOfY=)
                          14: E8a1_PGMprGsOEhvFqqS6i5Tdz4.roa (hash: df9z/ZIg8AUrgWm4WPTjfTwd5PEvval7nDbnweaPaGU=)
                          15: EHANXORuuFW-bF-qP_Ewlxhr-nY.roa (hash: zrxGCCVowaTZG19wQV3mSr3hCcJg9eM34gCGRKeKgvw=)
                          16: EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa (hash: Zh9Sz85xAOxdRH/TSTK08WUiIZwDMKmp8n0eSS6ma5U=)
                          17: FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl (hash: rn1m5sFC5sq6a1NB/+Ovuyf3K/tD0eKBAoef1nCj3YY=)
                          18: FhVVLOSaxxu76faY814MnjaKzto.roa (hash: 9AmDzH895DDiPDx+GJM625gim3dI0bqS449682uf9QU=)
                          19: HnQUzsHGqdLWhe9eJs25T-3zS14.roa (hash: YP146by7eQkbB1DmmOOCpv5/ycsCOlnjnTQYlXQrPFY=)
                          20: IBQePbUiBM5g94FVwIacCAEuPao.roa (hash: KLM5pCcoF2f0RYayCLzM4NVj30QUjygkx0XcB71JnNA=)
                          21: IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa (hash: x1bR2iw79o2n2CiabiJSxb3FYLKksGeSqDdvgl7oOyQ=)
                          22: J8B9b5nFvg0BXqbPVc8DoON7oaI.roa (hash: ZBKlCuKxq+Fhxp6ngyIeTvrnOGmVjLjKODM2yKkJTGk=)
                          23: MR1g3BBi_xl1gx5Y0lGmfE-MYoU.roa (hash: H1hmCwZT9JBFGwEqv/yJBQon6hUn8vTsaw2M6wo0nSY=)
                          24: NySPVsdxhZ8CG1ciPcyrg5Y00Jg.roa (hash: eLBB/ryFtyh0U5kDNzJU01/rb6XqOa1SNpNvfukI4VM=)
                          25: OtfNIp_jb6HOI2uijeGzs2i4R7Q.roa (hash: x7yqlpuzOUYTjhI9koKYGYix8ZFmxFeUptiD8PTHtzo=)
                          26: P0zP1jJVbq5izuOS18FYTI1YHxs.roa (hash: s6fzct44ef1GEvO9VXyOMf9H83k5wEPaumVmsRJC6ns=)
                          27: RKiPm9TAvbuh_hM-_lIBxDZv6rg.roa (hash: wmQF1xmI2xLjnYrkheVh+QF2nwc1FwtPu4Q6cucZc/A=)
                          28: TKLwlj_hhD4ChnDkZIEH511OIGQ.roa (hash: d5LelJw+wBPleYzumiiB1DR6XbgaSt39j02f16QfxpA=)
                          29: UssQ3uaWIBR-jRSPRfVK4dqtyZw.roa (hash: jSCB75UJBI6CVBgbXnymkTQet8MviTNNi1b+iGWhqX8=)
                          30: UueWcU4Q00o_IZEjIn0tQkIZHVg.roa (hash: K04uztC+U5jxVpEpYWqdgCa99Lrsgi/1SgksZlSEIKc=)
                          31: ZE5HXP4DhKEPM6Gv1wOErPS1cz0.roa (hash: O/2TK/NX3+tm+RkMY/59BD1XnfP0CTYDGNxOF5SY9hE=)
                          32: ZdkeFapLB0pE43XGcxXzUYNmBic.roa (hash: 23eZYQkUReYe43mS88wzW1NrxauMIJmVLoWsRcooMao=)
                          33: _rbgiNGO-S27H5VBRvlSaosM5pA.roa (hash: F4Wzd0keTC9/E8Yr8BBEUoGpX4zOhFgL+3EUdrKLPwg=)
                          34: b9747bu6F3orHJcVTx2KhvjyqKA.roa (hash: H3wknujwm2p7sLOwETgecFsrpjupwjmW1r2yHz878yc=)
                          35: bDYS4al9maBekHp3cZ5w3zMia7U.roa (hash: pOCmKySw+Tb1sm3NtefhOmKXAvO+WJqWskvC+nl7KhQ=)
                          36: dhvrao9cqDtu4cNL7P7VwKji0UM.roa (hash: DXIuFC1u6zXUhH/posDaRLzzQjM/I3jLYYQrFJ8rMq0=)
                          37: ed1jORhWSi7ng65aRGJvId8bpXw.roa (hash: V1NGOKlYDvJUTPipPut4jDpgPnuzNxC4hJ0tFfqQYgM=)
                          38: feDTL9Rz8deEhu6DJ300IQPeawQ.roa (hash: cTo8/ey5Hnq+vJG5i7RIZlUTavcPH0vRNtIR93h3u/c=)
                          39: g7XSFMyOFdfU8FCy9OGbf6MYoZY.roa (hash: n9yM7dyLNiBrfDvEbmkvhz7bFD53KNqtuiSWk/NDtDw=)
                          40: grkpzxJson0VO7xVFrMikGMv36c.roa (hash: YMm6A4zlYtaXgWVdkGysieoloVta9ggqSz989h7KXRQ=)
                          41: hRkfWek6x-vExSIgkwy_44n-0R8.roa (hash: Jw1jYBu4t1JSgiHUdnnTnbxfd7dT4zMqdCScHCXuMGo=)
                          42: iDsVGhUzM9wIiGAdd7UL3QbsAlU.roa (hash: CSbthrtDlT3wO3U8KcYsreaOD2U29zr8MXYvaDSeDTs=)
                          43: ilkQ7l85HQmR_JVmkd_hGC8Di00.roa (hash: TFb4vPDvFn3NHoDA2wS5sAtOgJMIPvQ/3QpJDKqOZjg=)
                          44: jHRs2CdaoDudTKV1UxeprvvPaJs.roa (hash: 1WGZ/i/Wlhh6+utA+tb7JAVK7IH3dTYaxIkabtzpM/w=)
                          45: ka9Kg1mP_UGoOXD67l2s092h9eY.roa (hash: gHOj1YrfYiq5kNzFwLUGBr3drQZHXZ/djO0mPNqlklo=)
                          46: lOXttIBfThT0VgY7ljjG4tEpJ7Y.roa (hash: fiZK9BjaPjO7qpd4ZBMfJGJpGVtukLbE3FtVCjB2QWI=)
                          47: oSktbEz0CouLjJ7YPnkmyrcQfcw.roa (hash: V6P4xLHRE/6CaQ7pxwLQqH6zR4WlFEsCjnepA34qqx0=)
                          48: pGVWe0w8lugoUQZ-979xl_-B-3I.roa (hash: LbElaUnKCk9Bg+fLyXmgBn+O2zSzwnYHINbqbS5NZdI=)
                          49: sVO_hwOUMLHjYiUFYzC6ZlJnNjg.roa (hash: A+S9gnFkAJ3wbXU2lCWRPwZRzZuYDwzqjjLfNzaAhnw=)
                          50: vpZ9pBlUZn9RHhWYszmcUSXh8xU.roa (hash: +lZGQ6hqM+WWBVf6jKaZ0gprTcSn3A0Dos8SvpePtso=)
                          51: wLoUUdSvg4mybpd990iExJeHUJs.roa (hash: eK4QhV/Upj6LcnsWEPnxaYJD29t58deZI0lM+T3uQOg=)
                          52: wRHBU_tIlHPadsLQLwBGJFuQGqc.roa (hash: HGZ2hfZbOO64qRGA+DNha/b0kQHhKQIKwFw+uvw3jek=)
                          53: xtowxRamwFXLEsXOBC5y8raNQsg.roa (hash: t/xR47ZdzknVJS1VuGL8SGn/NCyw9q5prCwcInTElro=)
                          54: yLcbHMgRfnm3GP6mvQgxG6m7W4E.roa (hash: Ezieh4C0OjR9hVJWQfbuNJn+pjhzzmPKBbae2Gg46+w=)
                          55: yaQ7VGjAsEQRr3MX_AiuNL7A9jE.roa (hash: io+LzSfCXNwPFD3txUCEZ0tHgOdPVC0wYWBLcgYdkFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:01:13 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:85:a2:16:58:71:f2:8b:5d:2c:e3:b7:bd:ac:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Nov  4 06:01:13 2025 GMT
            Not After : Nov  5 06:01:13 2025 GMT
        Subject: CN=c11070cca991f3aef5ea23a35155f1e4d8e2b86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:dc:f6:17:72:5b:59:b2:6c:06:72:db:22:
                    87:86:d2:4c:c5:9f:5a:02:04:b4:96:25:c8:9a:54:
                    a5:91:f1:09:4d:90:a6:f8:1f:d7:54:15:00:f6:e6:
                    16:d1:c3:8b:a5:9c:35:5b:0b:c9:04:de:8d:e6:78:
                    54:a0:32:b4:38:8f:94:ea:b9:79:07:0f:14:0b:7a:
                    45:4b:d2:49:2b:be:1d:bd:be:be:79:59:a2:c6:7b:
                    b7:f2:fb:fe:67:b2:a9:6e:61:69:1a:9a:1f:5e:43:
                    2a:ef:37:c7:20:97:ba:3a:f8:ca:e2:74:6e:ad:86:
                    3e:8e:3b:8c:b1:33:2f:96:28:4a:38:08:cf:5e:f1:
                    42:8e:8f:2e:ac:2e:50:20:d2:f9:9a:c7:d7:89:13:
                    0a:97:38:cb:d6:01:a2:f9:cb:80:7b:3d:ff:bf:d2:
                    d5:37:ed:31:2a:6a:58:64:43:56:e9:58:df:6d:c8:
                    c7:01:98:93:4c:10:7f:3c:34:f7:82:2a:da:a6:bc:
                    e4:32:18:3c:3d:74:32:86:4d:a6:46:cc:a9:00:56:
                    18:87:d9:70:6b:8f:75:81:1d:2b:48:2d:a6:26:1c:
                    78:eb:6c:cf:b1:5c:76:83:3d:8a:b3:89:02:ac:55:
                    b3:0d:b1:4d:06:69:2d:6f:32:7e:39:1b:8d:f3:d4:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:70:CC:A9:91:F3:AE:F5:EA:23:A3:51:55:F1:E4:D8:E2:B8:6F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         89:23:2e:77:6f:b2:93:b4:7b:90:88:6a:ed:2d:68:a4:98:28:
         bc:0d:a3:8c:28:5c:70:cb:29:15:cc:91:54:95:03:67:b5:90:
         11:85:58:bf:ba:b5:5f:13:f9:3c:fc:a5:b5:fb:60:84:3f:a5:
         7e:f0:80:0f:0a:ca:98:1b:ab:69:7f:f3:52:d1:67:45:79:1e:
         83:cf:5d:11:4d:5e:71:fc:77:13:02:4c:9d:cf:92:7f:fc:be:
         e0:d6:9e:48:08:43:9d:26:4f:88:af:8a:c9:54:04:03:52:8f:
         e7:8c:dc:b0:65:3c:3e:c5:da:54:b3:a0:41:37:c0:e7:5b:c4:
         58:49:85:97:f7:7f:9a:b1:0d:2a:46:64:cc:0c:cc:2f:16:28:
         df:80:00:05:5e:85:46:3d:ef:2b:d8:29:69:6e:76:bd:62:b5:
         86:e8:23:63:c1:78:4b:91:4b:07:f5:2e:34:45:cd:f0:bb:75:
         66:1c:1e:a5:0d:41:34:c2:ec:b2:06:62:74:ef:fc:d9:1e:0f:
         9e:fd:e7:40:bf:c9:5c:9f:5c:93:33:28:d2:9d:18:5b:20:ae:
         09:dd:50:b4:08:f2:d8:97:1d:8a:61:63:48:3c:94:17:68:bb:
         3a:c9:f1:f5:07:43:2b:cc:c9:f3:3e:8b:73:ff:87:8b:aa:d2:
         19:dc:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:55:35 2025 by rpki-client