
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
File:                     F5MB3Mf65PfOAeSYenfLgqM2q_8.mft (raw, json)
Hash identifier:          do5isCBemcPDpVJNJJK+//hyaHs3mCkIFI/ZY5NIMP4=
Subject key identifier:   39:02:B4:23:D7:8E:21:86:36:0E:01:A5:DA:5C:1F:7D:60:00:33:AB
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       019A4EBD521557A7A77E374DC5843502ACE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 12:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 12:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 12:00:21 +0000
Files and hashes:         1: 1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa (hash: apn2f97Dv4c5iyBIs02XeM7xNWUPUFTvtv/5kVJWl5E=)
                          2: 5hY0DjosoIfSaOxh5Ng3XkuAoWE.roa (hash: zlhYvo7Dd756ZyhVWxqlN4tDlyvI5VN1a9Hign3hS+8=)
                          3: 7A7LKn1o95EwmimmbWgqoklIVI0.roa (hash: BxZahgdbCLqm11e9NAIm5qcVZ6JaeYg01ekAjT/+ryA=)
                          4: 8Rf0japIE05N1Y5vujyR2Dd0trI.roa (hash: vcw9nl/fiRctjOwbBV/JrvSfRaMn3/hHGpzoyXDaC8w=)
                          5: BdwPPJJNXn-FSCXomapjXeZD9zs.roa (hash: TgcHeBuzrek9VSQCad/VCw8k4l19lhQEHsZDv6Sxid8=)
                          6: CmCZMVAUFYDrES4R1R0EnlAWPWU.roa (hash: SOwCciST5P31loSN+3o2tTo+KSkYf9jle8AlYvbZl+s=)
                          7: CvcLy-kMftRDnhFJ0e4Z3sTEHyY.roa (hash: Yet3DpNMZITYAum6tV6MuDT9XZJrmFWunKZqpCSSvYY=)
                          8: Dzjp0XUOyY6rldx3nm4f3UnI36E.roa (hash: 6kaFsU0I2rrHmyy/uDv2sBYFsyTxZyIZ3Q1YX+kOahQ=)
                          9: F5MB3Mf65PfOAeSYenfLgqM2q_8.crl (hash: QEokJWnwQs4lC2zMDtjikFVtsIClkez3n3jIjffx//M=)
                          10: FM2576U9_cO6KlGBeG-VwuXYLoE.roa (hash: ABfseUXrmOLElVcMYHQHihGPr5p5Ib0P+JYnpJwSJdg=)
                          11: J0-ezajpps3geFzCVvMnmJXzPKc.roa (hash: p4hKnmD1lGDL6Li7FPOJKRULALaKy1d038kjYStUEPk=)
                          12: JsCAp1aFhoIjld1wkH8voBbNhr8.roa (hash: f9bEOIQTZBMNpm1Gt9qzl/E0E0zUfedi/SkPs4DZ8I8=)
                          13: KWD7a0MawJkOY6KvjbHNLlSuvEs.roa (hash: qmNFcYO8QPUS9sWwzinUFDYzi6mb2+i7tCjnCVK3kIw=)
                          14: QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa (hash: /ncfGdoc/H6JYEaSn/PBOO+VMUl3/eKsR0IUffej0io=)
                          15: XlA1qfNQB0WYdkYaQ8Rvj1L2tb4.roa (hash: +4/ESRGuqWyL+/uODQWa3AjOUUB/k5+3UHyaNoG32/E=)
                          16: ZrTjnkyveLPrK0jTMWKKrihN2ow.roa (hash: 9Jyi49qBWk08J78Yv473h4V46VqPQ/HKB9I5PkE3ZOc=)
                          17: _0xzjWFSkzBLGLL_0JWnAmEsjDg.roa (hash: jnJ4LYTkpMfYjmbu6csGjYBdMnIp6t/TGOW8N7V0/jM=)
                          18: _WWxWL8Hn8pQ4epkeG1hkMzsULM.roa (hash: MsfVcxjNhCQJp9YqHylixAZChxNNKEXw3F+da8rjFfw=)
                          19: eshGAukJkuX-AE4GNhEXoHvgpDE.roa (hash: 7j5r7WqFUsTR5UqjVZvqFAE2NplYIRbJ/EoqmowNsP0=)
                          20: gHJucLDeNn72Z4YnTbDzcr70suE.roa (hash: X6NHV3AqWLuDzNFlvaXO3pKnS4ZKS+A8HYjFylVbHNQ=)
                          21: gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa (hash: XddsBmTvT7ew4EphkpQIc8aDEqjL+V8Jd1KR6KWc3o0=)
                          22: hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa (hash: EvZcqY0u0j8E3qud63Mfgc0SNbLfR+3aTCgDNKTv4/Y=)
                          23: hie0hXnIuAB4pedG0JZEzMyt0LI.roa (hash: gK4aKsvtB8FfBrgpZluMQ5b2y78leeRFaQAGGnAPFIo=)
                          24: iYA_2X6usQ-6YdR8PggDt72LFWo.roa (hash: cU7w4mp5wZ9b5vYC2DRlLeH7emv6re8WBMB//kfRpeA=)
                          25: kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa (hash: RNNZrUNA+CZKPf9RkgYbSIfAuTpPWf45VRn5TZAQ/g0=)
                          26: uRbDK03eXvXuybDY6ySDPk2j8jw.roa (hash: B7oHGHMZn6dcANuLv7P1ig3TcmZcB2OnwrCmsBplg3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:bd:52:15:57:a7:a7:7e:37:4d:c5:84:35:02:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Nov  4 12:00:21 2025 GMT
            Not After : Nov  5 12:00:21 2025 GMT
        Subject: CN=3902b423d78e2186360e01a5da5c1f7d600033ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:6a:58:a2:79:7e:18:e8:86:12:45:65:77:
                    81:47:be:32:d9:f1:79:ac:43:19:e5:92:29:d8:5f:
                    23:e4:33:36:09:cb:68:4b:9e:ca:64:52:5c:a4:d3:
                    ff:9e:04:db:8a:3d:0a:35:2e:d7:6f:37:3f:d4:04:
                    2d:d8:95:ac:9a:b0:41:93:12:e7:5d:5a:c6:b2:7b:
                    b3:ae:86:df:9b:ee:5d:96:59:2c:ca:2b:2f:e5:e1:
                    6b:f3:2c:32:a3:86:f2:68:d7:2a:5c:f0:6c:cd:b6:
                    f2:c8:35:7d:bd:f4:56:47:6b:cd:b8:6d:22:54:a7:
                    3f:ba:83:21:c8:d7:e6:d2:8b:7f:76:8f:2c:46:26:
                    56:5e:59:4a:64:e0:70:d5:3a:94:f6:5d:4b:b0:c5:
                    58:47:0f:99:e3:86:0a:29:73:54:e2:ad:28:67:a8:
                    66:d8:32:d5:ea:b1:fb:67:0c:19:c0:ca:27:29:1b:
                    6a:bf:fa:14:39:d2:45:ab:75:ff:e5:1a:51:58:ff:
                    7c:fb:27:d2:cb:dc:21:fc:2c:d1:02:9e:f8:d7:fe:
                    a7:5e:28:f1:11:d7:50:18:7b:41:99:c8:db:cc:5c:
                    3a:9a:de:3f:96:b5:e9:36:7b:4c:fe:69:6c:87:23:
                    2c:51:8c:a0:ca:27:2f:d5:18:ae:c9:07:ee:06:22:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:B4:23:D7:8E:21:86:36:0E:01:A5:DA:5C:1F:7D:60:00:33:AB
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         41:f3:75:60:a6:33:04:50:e5:a3:b4:d0:6e:53:7a:72:0c:14:
         ca:55:86:d3:67:19:c9:e6:31:60:8f:04:58:42:6e:70:81:ee:
         94:ea:c7:d9:75:f3:16:86:d3:6f:a1:b8:02:f3:6e:df:a2:99:
         4d:21:7d:63:40:df:f1:bf:7e:5b:d0:a0:f5:00:e0:a7:82:39:
         a1:12:8f:bb:37:80:6c:58:3e:bf:e3:42:5d:21:33:95:b1:72:
         b4:ad:35:c6:40:a3:f0:76:e8:05:79:22:94:c6:31:6c:cc:1d:
         31:4a:e6:d0:19:3d:64:41:c4:86:92:77:91:88:c9:ee:ac:d6:
         0b:c7:5f:e5:da:40:15:46:fa:bf:53:d3:b4:bb:fa:d1:32:27:
         ac:a4:f1:0f:05:96:cc:91:8e:22:8b:d3:31:4b:6f:d8:f5:e3:
         ab:76:e4:32:25:f1:d6:20:be:ef:24:09:bb:a1:0b:fc:64:25:
         ea:56:8c:8e:1f:4d:8b:72:73:e7:5b:de:8d:00:d5:9f:ac:54:
         41:cd:59:ce:90:7f:2d:57:c8:52:d0:31:11:85:04:c3:55:c6:
         41:c9:8d:c8:34:2e:26:17:c3:7b:ac:41:cf:65:69:a1:ce:a3:
         98:91:ee:90:34:bd:d8:92:a6:4a:91:36:58:38:6d:45:7d:5c:
         cb:97:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:09 2025 by rpki-client