$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: vAwDwnE14MbGiH4yfukHrRrjp/8cU6VygFw+YAX4DqI= Subject key identifier: 08:E9:70:92:8F:5A:88:83:88:7E:F1:C0:C5:E5:33:C3:34:19:41:6E Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 01976C2AB89A6FAB7A06151272B8670A61B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 15A2 Signing time: Sat 14 Jun 2025 02:00:28 +0000 Manifest this update: Sat 14 Jun 2025 02:00:28 +0000 Manifest next update: Sun 15 Jun 2025 02:00:28 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: PEKNw5liTwcX2AZqfHg6OnpsJ0XUYbKcfxK0zU9Hv24=) 6: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 7: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 8: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 9: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 10: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 11: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 12: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:2a:b8:9a:6f:ab:7a:06:15:12:72:b8:67:0a:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jun 14 02:00:28 2025 GMT Not After : Jun 15 02:00:28 2025 GMT Subject: CN=08e970928f5a8883887ef1c0c5e533c33419416e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:be:89:7a:66:9f:6a:55:f7:e4:5f:58:ca: 96:9c:d0:b1:e3:81:8a:50:80:9f:94:cb:d0:a8:28: 20:65:9a:74:41:e3:bd:f2:af:71:70:fa:54:db:5a: d6:ad:ba:ba:f9:fe:d1:10:cc:d3:f1:c6:a2:59:f1: a8:78:99:c8:bc:23:08:4c:6a:3b:4a:8a:d4:ea:88: 5e:77:0f:3d:74:77:49:9a:40:ef:d0:57:77:76:b2: c2:77:58:c8:53:02:79:dc:78:50:76:9e:86:e0:fc: 07:51:93:29:30:d7:fd:04:05:0a:a3:b7:3c:9c:9a: 1b:f5:a4:e0:0f:59:45:fd:d1:4e:38:a9:48:0b:c4: d3:44:de:06:8e:5f:87:24:12:31:91:68:86:ae:e6: c2:cb:c9:4a:91:83:f6:a8:ab:cc:a9:74:21:ce:a2: 4c:50:7c:0d:a6:9c:5f:17:c0:bb:26:33:57:bf:69: d9:76:9b:fc:1d:54:d8:c6:44:8f:ed:fc:49:a7:5a: 5d:32:75:72:1e:ce:4e:77:1e:c9:a6:3b:25:2f:94: 2a:ef:60:b2:c9:07:f5:4f:20:e1:72:53:ed:de:e6: cd:04:cd:8f:f2:5e:6a:43:cb:f0:1d:fb:69:67:69: d4:36:a6:51:08:a9:ff:3c:d3:ac:6d:34:db:43:ba: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:70:92:8F:5A:88:83:88:7E:F1:C0:C5:E5:33:C3:34:19:41:6E X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c7:05:c9:8a:0d:c9:09:30:33:e7:2d:c5:82:2e:ab:a4:22: 93:35:10:38:a1:c1:d8:34:fa:67:1d:63:42:ad:8e:9f:9f:5f: 1e:e6:e7:49:a4:9e:ca:97:53:cb:f9:f5:6b:92:aa:eb:28:e9: e3:54:e8:bf:57:7a:74:a0:35:e8:d3:6f:36:83:1a:31:fa:fb: e0:cb:8c:48:65:74:d8:f8:4f:b2:6b:6f:17:13:e5:0d:42:74: 13:02:f1:70:68:86:c6:eb:72:3c:70:64:ea:19:6e:a6:86:c0: 16:81:03:de:3c:3e:c9:93:f4:be:06:3c:cf:d1:93:77:8e:90: 44:75:c0:d8:ad:ee:c8:fb:42:7e:c9:c2:b2:e1:f2:41:94:70: d7:6c:85:8f:3e:1e:9e:5a:29:60:69:47:78:61:ab:9b:48:be: ab:f0:31:70:5e:7c:6c:4f:3b:49:54:69:e5:7b:f8:d2:fb:ad: 29:ee:7f:e6:e2:a5:34:1c:e1:35:f9:ad:5b:d0:29:6c:45:f6: f9:0e:7f:65:05:32:43:31:d3:7b:fa:05:87:31:4d:48:8c:97: 7a:d3:b5:9a:10:f9:44:49:51:96:9b:8f:fc:c0:47:05:96:4f: 7d:c0:33:b4:71:a6:b9:9b:78:ee:bc:ae:43:8a:21:49:80:e7: f7:2f:fd:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsKriab6t6BhUScrhnCmG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNjE0MDIwMDI4WhcNMjUwNjE1MDIwMDI4WjAzMTEwLwYDVQQD EygwOGU5NzA5MjhmNWE4ODgzODg3ZWYxYzBjNWU1MzNjMzM0MTk0MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuey+iXpmn2pV9+RfWMqWnNCx44GK UICflMvQqCggZZp0QeO98q9xcPpU21rWrbq6+f7REMzT8caiWfGoeJnIvCMITGo7 SorU6ohedw89dHdJmkDv0Fd3drLCd1jIUwJ53HhQdp6G4PwHUZMpMNf9BAUKo7c8 nJob9aTgD1lF/dFOOKlIC8TTRN4Gjl+HJBIxkWiGrubCy8lKkYP2qKvMqXQhzqJM UHwNppxfF8C7JjNXv2nZdpv8HVTYxkSP7fxJp1pdMnVyHs5Odx7JpjslL5Qq72Cy yQf1TyDhclPt3ubNBM2P8l5qQ8vwHftpZ2nUNqZRCKn/PNOsbTTbQ7rArQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjpcJKPWoiDiH7xwMXlM8M0GUFuMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQccFyYoN yQkwM+ctxYIuq6QikzUQOKHB2DT6Zx1jQq2On59fHubnSaSeypdTy/n1a5Kq6yjp 41Tov1d6dKA16NNvNoMaMfr74MuMSGV02PhPsmtvFxPlDUJ0EwLxcGiGxutyPHBk 6hlupobAFoED3jw+yZP0vgY8z9GTd46QRHXA2K3uyPtCfsnCsuHyQZRw12yFjz4e nlopYGlHeGGrm0i+q/AxcF58bE87SVRp5Xv40vutKe5/5uKlNBzhNfmtW9ApbEX2 +Q5/ZQUyQzHTe/oFhzFNSIyXetO1mhD5RElRlpuP/MBHBZZPfcAztHGmuZt47ryu Q4ohSYDn9y/9Ug== -----END CERTIFICATE-----Generated at Sat Jun 14 10:43:43 2025 by rpki-client