$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: elIlx7bZYx+UsjfVvWFfkmiwpi10KilePTqVZBAx+CU= Subject key identifier: 2B:95:2F:C5:FA:13:89:5D:86:B5:18:16:B7:62:16:1B:1C:8E:CA:A8 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019A5299D1EEA3A66D0EDB994A9BA239B44C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1723 Signing time: Wed 05 Nov 2025 06:00:03 +0000 Manifest this update: Wed 05 Nov 2025 06:00:03 +0000 Manifest next update: Thu 06 Nov 2025 06:00:03 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: AUJlTI7qlFuZBqYNtseczKVZY7o.roa (hash: lrFJFDQHqIF3d1QaDadpDFGnq9WB4xACkbFUlWi2D+Q=) 4: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 5: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 6: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: z48XN3SRpMGMr0cv1cyhsnTU8cLCDG8vtvHkoLT9lbo=) 7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 12: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 13: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:99:d1:ee:a3:a6:6d:0e:db:99:4a:9b:a2:39:b4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Nov 5 06:00:03 2025 GMT Not After : Nov 6 06:00:03 2025 GMT Subject: CN=2b952fc5fa13895d86b51816b762161b1c8ecaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:f9:a8:b1:4b:fa:d5:ec:42:1b:b7:62:93: 2c:b1:e9:3c:ea:a2:18:3e:ec:93:65:53:ce:0d:a4: 9c:2e:cc:22:7c:5b:f9:1c:e1:f2:72:ca:dc:e9:bb: 30:f8:94:4f:f2:d6:69:be:2c:2f:fc:c5:f0:cf:54: a9:97:66:53:e7:59:50:77:d0:14:cb:63:54:d4:d9: 51:7f:dd:24:80:e8:cd:c3:e1:90:06:e0:d3:0d:9f: fc:5a:48:7d:8b:4c:bd:81:4e:6d:ef:fb:f2:cd:6f: be:4a:df:5e:83:80:e1:94:70:62:95:1b:55:e7:4d: cb:d5:d2:8f:0e:45:db:40:0e:2a:a4:da:1c:62:d2: 86:e5:ab:05:a6:34:50:4f:10:13:0d:53:ee:4d:73: 46:af:62:fb:f4:04:aa:ac:af:02:4c:2c:04:54:8f: 69:fa:9c:11:66:54:7c:9f:b1:60:b2:61:2b:df:9a: 42:8a:69:59:3b:67:f9:b6:f2:89:58:4c:9a:93:8a: 79:fa:28:26:fd:a6:1c:8f:b4:7e:8a:99:62:95:d3: 9e:8e:58:1b:09:8d:af:0f:dd:a5:60:a1:75:c1:8a: c3:c6:d3:bb:db:dd:bb:65:30:0e:63:be:31:0e:e3: d8:fa:c9:0a:a4:ae:6e:79:9f:d9:46:9b:78:e9:39: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:2F:C5:FA:13:89:5D:86:B5:18:16:B7:62:16:1B:1C:8E:CA:A8 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f7:3e:be:da:1b:89:27:f3:69:0e:7d:36:1b:c2:1c:d2:b4: a5:b4:19:d9:74:f5:13:6c:dc:aa:9a:63:83:01:fc:c0:7c:69: e1:e6:be:87:a6:ec:ef:d5:ea:09:36:6c:a3:86:5f:50:29:7a: 82:c4:7b:01:79:84:98:2e:78:e7:ec:aa:3e:7c:f9:db:06:23: d3:49:73:1d:8b:a5:8e:3d:ad:a7:ed:e7:0f:7d:5b:3b:83:72: f3:9d:60:46:f0:35:ff:d4:6c:58:9d:c3:b0:c3:83:cc:cf:95: 34:cf:9d:19:af:0e:65:71:0d:be:28:16:91:2c:35:0c:26:9b: 56:93:60:4d:2b:41:96:78:1e:5f:c3:5b:f5:04:59:9b:b3:3b: 13:29:8e:d4:dc:eb:e1:e8:f8:b7:e7:b1:0e:ce:75:0b:4d:13: 8a:35:43:6f:01:b8:df:10:08:8f:9a:be:3a:4f:b1:25:1b:6d: 54:c1:80:09:c0:63:b7:11:d6:04:d5:a5:e9:15:cb:2b:5c:0f: 40:29:22:b6:05:ae:ab:40:da:30:b2:b5:ba:63:ba:5e:cd:a9: e5:c4:aa:25:92:9d:e2:1f:61:0f:34:93:e1:32:33:50:16:eb: 5f:08:25:43:ae:58:05:7d:a0:5a:53:ea:c7:22:f9:b7:7f:dd: 38:c2:d6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSmdHuo6ZtDtuZSpuiObRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUxMTA1MDYwMDAzWhcNMjUxMTA2MDYwMDAzWjAzMTEwLwYDVQQD EygyYjk1MmZjNWZhMTM4OTVkODZiNTE4MTZiNzYyMTYxYjFjOGVjYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD35qLFL+tXsQhu3YpMssek86qIY PuyTZVPODaScLswifFv5HOHycsrc6bsw+JRP8tZpviwv/MXwz1Spl2ZT51lQd9AU y2NU1NlRf90kgOjNw+GQBuDTDZ/8Wkh9i0y9gU5t7/vyzW++St9eg4DhlHBilRtV 503L1dKPDkXbQA4qpNocYtKG5asFpjRQTxATDVPuTXNGr2L79ASqrK8CTCwEVI9p +pwRZlR8n7FgsmEr35pCimlZO2f5tvKJWEyak4p5+igm/aYcj7R+iplildOejlgb CY2vD92lYKF1wYrDxtO72927ZTAOY74xDuPY+skKpK5ueZ/ZRpt46TkzEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuVL8X6E4ldhrUYFrdiFhscjsqoMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvc+vtob iSfzaQ59NhvCHNK0pbQZ2XT1E2zcqppjgwH8wHxp4ea+h6bs79XqCTZso4ZfUCl6 gsR7AXmEmC545+yqPnz52wYj00lzHYuljj2tp+3nD31bO4Ny851gRvA1/9RsWJ3D sMODzM+VNM+dGa8OZXENvigWkSw1DCabVpNgTStBlngeX8Nb9QRZm7M7EymO1Nzr 4ej4t+exDs51C00TijVDbwG43xAIj5q+Ok+xJRttVMGACcBjtxHWBNWl6RXLK1wP QCkitgWuq0DaMLK1umO6Xs2p5cSqJZKd4h9hDzST4TIzUBbrXwglQ65YBX2gWlPq xyL5t3/dOMLWJg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:03:30 2025 by rpki-client