$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: abg8D2oPog3QMutHG0ChhGDNr8QXEk/P21iQMUtCqLI= Subject key identifier: D2:7E:68:1E:8D:EC:0A:A1:FD:8F:9E:94:53:2E:32:34:1C:97:CD:35 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 01988B7D649B0B5D250D6422AFD03053B310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1637 Signing time: Fri 08 Aug 2025 21:01:47 +0000 Manifest this update: Fri 08 Aug 2025 21:01:47 +0000 Manifest next update: Sat 09 Aug 2025 21:01:47 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: bexNEzf3eh4Xw4MrvCUfm6jBARdAoLmcyFKkUyGEbQU=) 6: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 7: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 8: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 9: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 10: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 11: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 12: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 13: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:7d:64:9b:0b:5d:25:0d:64:22:af:d0:30:53:b3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Aug 8 21:01:47 2025 GMT Not After : Aug 9 21:01:47 2025 GMT Subject: CN=d27e681e8dec0aa1fd8f9e94532e32341c97cd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:b3:d2:0d:33:1e:fb:29:7f:ff:00:93:51: a6:15:15:46:e1:1b:53:f2:fd:fb:87:f5:4d:55:73: 26:c9:a8:d8:1b:3f:6d:15:5f:c7:47:08:a7:31:12: 03:60:ce:88:10:b4:53:82:51:ee:d1:9a:b9:42:f7: 9e:d3:a3:a0:3d:d6:2e:f7:bb:f7:28:5b:64:34:57: d4:c6:fe:28:4a:fc:ee:d1:bf:c2:85:10:9c:e8:3b: e6:15:67:09:28:15:f7:c6:03:41:aa:ea:75:47:2f: 38:fa:8b:a8:ea:19:82:5a:d5:a8:91:58:85:1b:d4: 02:97:5e:9a:d9:3a:02:b3:51:ec:c5:3c:ff:de:00: ea:f6:f9:4b:7a:9c:26:96:8e:db:df:2f:c5:ff:54: 7d:96:a7:c9:1a:e3:f6:c0:1e:49:8b:b2:99:0b:e0: 7c:4c:51:1f:01:8d:f9:f5:76:31:fe:cd:ce:4e:bd: 9c:a8:49:7c:3f:12:21:c3:fb:87:a9:e6:08:c5:b3: 5b:3c:ef:4d:76:f1:31:18:6a:e4:7e:70:fd:44:e0: 38:88:3e:df:34:a4:57:25:30:60:8b:1c:7a:89:05: 5e:5c:8e:23:63:34:68:74:76:a3:3c:ab:a4:42:5e: 7f:bb:d5:bc:f7:60:9d:5f:c1:24:4e:93:bb:0f:d5: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7E:68:1E:8D:EC:0A:A1:FD:8F:9E:94:53:2E:32:34:1C:97:CD:35 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:18:4d:95:ba:bf:e1:78:86:4f:ad:19:f2:d1:25:b2:8b:1e: 46:70:25:28:f7:d1:f0:83:26:ca:ad:8e:bc:f0:54:6a:c8:e4: 55:0e:27:f3:f6:aa:44:22:15:f9:89:60:f3:d5:b3:a2:06:b7: 6e:48:8e:11:4e:63:af:e8:dc:24:1d:2a:2e:f9:ac:2b:8b:57: 86:a7:20:19:33:50:ae:0d:8c:f1:91:9d:1b:bd:47:f6:7a:25: 35:f9:1c:3d:1e:06:2d:ea:07:42:da:ec:6a:92:f3:ad:b8:04: b5:73:35:33:60:9b:68:4c:ac:5e:81:65:a7:9b:f2:ba:0a:b8: 33:50:9a:55:49:7f:8f:5a:0f:24:c3:e5:4a:a8:7c:8d:b2:18: 78:6e:8d:b4:24:17:68:8e:c9:f7:9f:47:86:a7:01:60:01:90: 77:9c:b6:1a:80:e3:60:7a:ed:14:51:71:02:1e:35:d9:b2:25: 92:8a:b4:d8:c1:e5:76:52:0f:4a:0c:2f:85:83:17:a5:2e:58: 3d:e7:30:4e:7e:d5:89:39:3f:97:19:da:97:8e:27:01:75:26: ca:6b:a8:bf:80:6f:9d:65:a3:ee:c8:4f:f3:1f:4b:13:91:94: 28:f1:63:c4:84:d0:63:40:10:35:66:0b:8a:0c:7e:7b:cd:54: 94:e1:81:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiLfWSbC10lDWQir9AwU7MQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwODA4MjEwMTQ3WhcNMjUwODA5MjEwMTQ3WjAzMTEwLwYDVQQD EyhkMjdlNjgxZThkZWMwYWExZmQ4ZjllOTQ1MzJlMzIzNDFjOTdjZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeGz0g0zHvspf/8Ak1GmFRVG4RtT 8v37h/VNVXMmyajYGz9tFV/HRwinMRIDYM6IELRTglHu0Zq5Qvee06OgPdYu97v3 KFtkNFfUxv4oSvzu0b/ChRCc6DvmFWcJKBX3xgNBqup1Ry84+ouo6hmCWtWokViF G9QCl16a2ToCs1HsxTz/3gDq9vlLepwmlo7b3y/F/1R9lqfJGuP2wB5Ji7KZC+B8 TFEfAY359XYx/s3OTr2cqEl8PxIhw/uHqeYIxbNbPO9NdvExGGrkfnD9ROA4iD7f NKRXJTBgixx6iQVeXI4jYzRodHajPKukQl5/u9W892CdX8EkTpO7D9V6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ+aB6N7Aqh/Y+elFMuMjQcl801MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhhNlbq/ 4XiGT60Z8tElsoseRnAlKPfR8IMmyq2OvPBUasjkVQ4n8/aqRCIV+Ylg89Wzoga3 bkiOEU5jr+jcJB0qLvmsK4tXhqcgGTNQrg2M8ZGdG71H9nolNfkcPR4GLeoHQtrs apLzrbgEtXM1M2CbaEysXoFlp5vyugq4M1CaVUl/j1oPJMPlSqh8jbIYeG6NtCQX aI7J959HhqcBYAGQd5y2GoDjYHrtFFFxAh412bIlkoq02MHldlIPSgwvhYMXpS5Y PecwTn7ViTk/lxnal44nAXUmymuov4BvnWWj7shP8x9LE5GUKPFjxITQY0AQNWYL igx+e81UlOGBWQ== -----END CERTIFICATE-----Generated at Sat Aug 9 02:47:38 2025 by rpki-client