$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: Ag0zuTmWbTsVFbCUbQ8NRpFqwGr00eePEz7X6fiTjBU= Subject key identifier: 8E:74:65:FB:61:0C:D4:5E:BA:8B:51:E8:81:31:6A:16:77:9B:E1:F6 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 01A0DA28899FA807B7934938496CA767850F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1A8A Signing time: Fri 25 Sep 2026 20:01:24 +0000 Manifest this update: Fri 25 Sep 2026 20:01:24 +0000 Manifest next update: Sat 26 Sep 2026 20:01:24 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: O/ZupLe9ZRs4xRsHcSS1fF0N9+2tlVGLNjrCCyCEEh4=) 3: GNjPKxixkcQlInXuEMN64INqg7U.roa (hash: uBUzDZtMXDo9MHMuc5AmdM0QZsLzdtsUdcLzN4QCg6I=) 4: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 5: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 6: OKbKbtfbhqmIaTZwCyUi7VGbgqQ.roa (hash: ECSlBJqqVPIJ5kMulrMoMWXmuRXynI0Ykrvegui4DOM=) 7: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 8: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 9: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 10: iPnTc91ebSMaofS6kDoPi4bQbv0.roa (hash: ciyDlM9rMaewWpDyGPla/vLzi7InCFea7o3EX2VoNsQ=) 11: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 12: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) 13: z6SO2tJUlnIrONOK_zqkp4ZdPp0.roa (hash: lo78lRvLy8MXZasgpvKxTb4n7+P6rOCdlzO/gLJeg+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:28:89:9f:a8:07:b7:93:49:38:49:6c:a7:67:85:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Sep 25 20:01:24 2026 GMT Not After : Sep 26 20:01:24 2026 GMT Subject: CN=8e7465fb610cd45eba8b51e881316a16779be1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:9f:3f:f6:14:6e:1e:a3:ce:20:b8:5d:2a: 64:9e:57:5f:61:96:01:80:01:fe:29:69:d3:c8:d0: 27:1d:89:6a:8e:89:8c:d7:0c:ba:ed:9e:95:7d:cc: e0:00:80:41:39:22:7d:3d:b2:0a:bf:ad:23:0b:8c: b8:39:6c:4e:f3:a1:05:af:1d:18:b3:41:db:3e:14: 6d:9f:77:02:71:aa:46:e9:97:92:7b:74:4c:85:3c: 96:d5:50:fe:70:52:5d:b9:b4:20:07:ab:e0:38:47: 36:fa:a9:14:b9:0b:bc:ac:cc:78:52:38:dd:01:08: 80:62:93:db:2a:1f:23:f3:55:cb:5f:b2:fc:bf:1d: 15:85:0b:06:7f:94:27:3b:a8:ca:70:18:9f:c4:58: 3e:23:99:a7:f1:65:87:8d:1f:6a:9d:b8:1a:dd:de: 26:ec:b4:60:0f:80:73:f8:6e:3f:2e:b8:cb:d6:14: 74:13:7f:80:05:f3:3b:8a:0a:7c:6c:62:5b:e9:12: 16:33:b5:4b:f0:fb:1f:02:50:2d:d7:e7:56:b5:0c: 32:b6:ae:ac:da:81:70:63:0c:f1:1b:f4:82:a5:a9: a4:74:2c:33:62:6b:12:ec:25:d9:b4:fd:52:ec:e2: ba:36:ec:3a:3c:c7:f7:51:af:83:38:80:75:1a:36: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:74:65:FB:61:0C:D4:5E:BA:8B:51:E8:81:31:6A:16:77:9B:E1:F6 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7f:da:35:93:94:bb:ee:8a:86:3f:30:c8:5d:18:96:21:ae: e8:2e:21:21:d5:67:85:ef:3d:fb:cb:ec:48:c9:13:d7:89:47: b6:e0:25:3d:3c:75:46:5a:16:52:56:f3:a1:5c:11:54:3e:f8: 39:a4:f5:6e:54:26:0c:14:42:fd:e9:9e:3c:4a:65:28:ea:b3: 15:1b:73:15:1c:cd:b7:aa:eb:59:8b:0b:bf:f1:f6:eb:b4:cd: db:7b:54:29:7b:87:6a:10:34:fc:1c:88:fd:a9:67:f5:96:9d: 80:b1:fb:d4:b2:b1:5a:63:f6:9e:7b:5d:06:2d:2c:6b:a3:3a: 8f:48:2c:fc:58:b1:af:22:20:cc:39:f9:d2:77:65:c9:5e:09: 45:03:5d:4f:bc:5d:26:d0:63:95:ea:e2:c2:a6:1a:14:df:55: 60:e6:6b:93:86:70:e6:eb:29:43:26:31:2d:2e:b9:b9:cc:08: 9e:ca:48:06:f0:cb:90:de:fe:82:fc:2b:87:ae:b3:d8:d3:68: 21:3c:60:c9:f0:06:0d:1a:09:9c:bc:59:15:ab:85:2f:ec:11: 57:93:50:76:1e:8b:04:78:67:86:b3:37:3b:72:d0:e8:c4:94: 12:e3:7d:6e:bc:0c:af:57:ab:87:43:de:79:57:0f:e2:08:43: 6e:c3:19:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDaKImfqAe3k0k4SWynZ4UPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwOTI1MjAwMTI0WhcNMjYwOTI2MjAwMTI0WjAzMTEwLwYDVQQD Eyg4ZTc0NjVmYjYxMGNkNDVlYmE4YjUxZTg4MTMxNmExNjc3OWJlMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZOfP/YUbh6jziC4XSpknldfYZYB gAH+KWnTyNAnHYlqjomM1wy67Z6VfczgAIBBOSJ9PbIKv60jC4y4OWxO86EFrx0Y s0HbPhRtn3cCcapG6ZeSe3RMhTyW1VD+cFJdubQgB6vgOEc2+qkUuQu8rMx4Ujjd AQiAYpPbKh8j81XLX7L8vx0VhQsGf5QnO6jKcBifxFg+I5mn8WWHjR9qnbga3d4m 7LRgD4Bz+G4/LrjL1hR0E3+ABfM7igp8bGJb6RIWM7VL8PsfAlAt1+dWtQwytq6s 2oFwYwzxG/SCpamkdCwzYmsS7CXZtP1S7OK6Nuw6PMf3Ua+DOIB1GjbiLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI50ZfthDNReuotR6IExahZ3m+H2MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX/aNZOU u+6Khj8wyF0YliGu6C4hIdVnhe89+8vsSMkT14lHtuAlPTx1RloWUlbzoVwRVD74 OaT1blQmDBRC/emePEplKOqzFRtzFRzNt6rrWYsLv/H267TN23tUKXuHahA0/ByI /aln9ZadgLH71LKxWmP2nntdBi0sa6M6j0gs/FixryIgzDn50ndlyV4JRQNdT7xd JtBjleriwqYaFN9VYOZrk4Zw5uspQyYxLS65ucwInspIBvDLkN7+gvwrh66z2NNo ITxgyfAGDRoJnLxZFauFL+wRV5NQdh6LBHhnhrM3O3LQ6MSUEuN9brwMr1erh0Pe eVcP4ghDbsMZ5g== -----END CERTIFICATE-----Generated at Sat Sep 26 03:33:33 2026 by rpki-client