$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: wqEBaCRoldM3vWT1dbxufqtWfTran9P7XdZhFCeL3+A= Subject key identifier: 20:A5:9D:DE:52:60:E9:45:70:3E:44:45:D9:AC:1A:E6:95:20:9B:9F Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 01988B0F8EB2F931B2BFE35C257AACD6717A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0FCA Signing time: Fri 08 Aug 2025 19:01:49 +0000 Manifest this update: Fri 08 Aug 2025 19:01:49 +0000 Manifest next update: Sat 09 Aug 2025 19:01:49 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: uyJXWFiEGP8cXFHCA7FFUAwlSojYKY029qbRKcsT/wk=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 8: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 9: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 10: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 11: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 12: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 13: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 14: p5_bRG9M5kT8MStfkRHRT1v8cg0.roa (hash: ZjQG7VMMupt1nuY8BdmGWD7HOxruqtYbna7mlcKvAUo=) 15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) 18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:0f:8e:b2:f9:31:b2:bf:e3:5c:25:7a:ac:d6:71:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Aug 8 19:01:49 2025 GMT Not After : Aug 9 19:01:49 2025 GMT Subject: CN=20a59dde5260e945703e4445d9ac1ae695209b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:22:62:bd:35:3a:8d:97:ed:e8:22:7d:6c: 8f:93:12:3b:a6:59:e0:69:f9:8b:24:2a:c1:c6:d8: c1:ca:3a:46:ed:3f:4e:b7:43:48:4b:ab:42:cc:ef: 60:48:96:74:f0:05:bf:14:26:04:b8:fb:43:b8:0f: ba:8a:57:90:d7:5b:d2:03:73:da:94:d6:97:bf:17: 66:1f:90:ec:0c:ec:28:8b:78:93:c6:9c:0b:c7:e8: 5e:66:f0:5e:5a:0f:e5:25:80:52:40:1f:2a:a9:6c: ea:24:f6:69:ea:b8:c2:6a:44:7f:ad:fd:5e:9d:72: f8:3a:6b:d0:e7:00:d0:44:a8:8a:5c:e4:0a:22:61: dc:bb:5c:82:2d:ba:05:d6:b0:6e:0c:c1:e2:e7:a8: fd:95:8c:18:a5:42:0d:c5:cc:c2:86:63:6b:ce:73: 4d:49:df:22:3f:6b:c4:50:35:3c:5c:1b:2e:f0:49: 88:94:ce:7a:46:18:52:85:c0:e7:45:66:c5:26:85: 89:0d:04:26:a8:de:f7:99:62:ad:55:5c:54:4b:8d: dc:32:88:41:d4:d7:ce:78:fa:a8:64:ae:1b:07:9e: 23:69:93:40:0b:2b:5c:de:86:ad:8d:59:bf:0d:05: b5:2c:f8:0b:41:74:7f:06:26:8b:2c:ef:5c:c5:37: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:9D:DE:52:60:E9:45:70:3E:44:45:D9:AC:1A:E6:95:20:9B:9F X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6f:11:b2:bb:d2:f1:7e:d2:c1:a3:5e:c0:48:8d:25:41:c0: 2b:db:1e:26:8b:ce:a5:b1:5c:65:e5:03:b0:5a:87:f3:5f:0f: 6a:03:17:20:f3:9b:a4:73:88:ff:2c:e6:e4:17:70:c0:88:1f: ce:3f:57:b9:f7:2c:57:cd:b0:d8:10:c4:73:a4:fa:eb:eb:36: cb:89:94:e6:c8:74:28:6a:d6:62:77:30:ae:51:63:77:7e:35: b6:65:bf:18:f4:99:96:be:a3:2f:17:7b:b1:c7:b1:09:5b:25: 96:e5:05:91:8e:35:13:84:a2:25:e5:0f:0f:b9:2c:0d:83:f9: 96:49:f5:44:35:63:e9:65:e7:b5:3d:62:b5:23:d2:db:cf:74: 16:ff:a1:94:8c:c6:c4:6f:b0:db:b1:01:1b:64:00:27:22:56: b1:40:e8:35:64:97:4b:bc:3a:f7:52:7f:bd:1e:ef:44:64:17: 27:9e:0c:87:c9:fb:79:34:30:b3:5f:fa:5b:f7:f3:74:a9:65: aa:15:1f:d0:f5:c7:d1:0b:58:19:fe:39:cd:6f:e9:61:61:5d: d4:ca:85:5e:bf:00:a6:11:e8:e0:8a:a4:91:05:bb:b6:15:7c: 88:e5:b6:0e:c9:a0:69:d9:08:b7:d7:8c:34:72:20:fb:fd:9f: bc:14:a0:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiLD46y+TGyv+NcJXqs1nF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwODA4MTkwMTQ5WhcNMjUwODA5MTkwMTQ5WjAzMTEwLwYDVQQD EygyMGE1OWRkZTUyNjBlOTQ1NzAzZTQ0NDVkOWFjMWFlNjk1MjA5YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA470iYr01Oo2X7egifWyPkxI7plng afmLJCrBxtjByjpG7T9Ot0NIS6tCzO9gSJZ08AW/FCYEuPtDuA+6ileQ11vSA3Pa lNaXvxdmH5DsDOwoi3iTxpwLx+heZvBeWg/lJYBSQB8qqWzqJPZp6rjCakR/rf1e nXL4OmvQ5wDQRKiKXOQKImHcu1yCLboF1rBuDMHi56j9lYwYpUINxczChmNrznNN Sd8iP2vEUDU8XBsu8EmIlM56RhhShcDnRWbFJoWJDQQmqN73mWKtVVxUS43cMohB 1NfOePqoZK4bB54jaZNACytc3oatjVm/DQW1LPgLQXR/BiaLLO9cxTfkXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCClnd5SYOlFcD5ERdmsGuaVIJufMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW28RsrvS 8X7SwaNewEiNJUHAK9seJovOpbFcZeUDsFqH818PagMXIPObpHOI/yzm5BdwwIgf zj9XufcsV82w2BDEc6T66+s2y4mU5sh0KGrWYncwrlFjd341tmW/GPSZlr6jLxd7 scexCVslluUFkY41E4SiJeUPD7ksDYP5lkn1RDVj6WXntT1itSPS2890Fv+hlIzG xG+w27EBG2QAJyJWsUDoNWSXS7w691J/vR7vRGQXJ54Mh8n7eTQws1/6W/fzdKll qhUf0PXH0QtYGf45zW/pYWFd1MqFXr8AphHo4IqkkQW7thV8iOW2DsmgadkIt9eM NHIg+/2fvBSgTg== -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:37 2025 by rpki-client