$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: xI7IYlXWr3FPecZz6zkMR3vge5HM4hZUQvQ8U7wSb0M= Subject key identifier: FB:D7:5A:E8:C1:DC:47:D3:63:BF:DC:8B:B6:53:C4:A6:48:2D:49:6D Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 01987418DB0EA0023B22421C6B8FDF51CEEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0F83 Signing time: Mon 04 Aug 2025 08:00:42 +0000 Manifest this update: Mon 04 Aug 2025 08:00:42 +0000 Manifest next update: Tue 05 Aug 2025 08:00:42 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: cacc2ORJ+BE4j+/GRWTu6D6OObpuaR5WkwXmg2MbBSQ=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:18:db:0e:a0:02:3b:22:42:1c:6b:8f:df:51:ce:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Aug 4 08:00:42 2025 GMT Not After : Aug 5 08:00:42 2025 GMT Subject: CN=fbd75ae8c1dc47d363bfdc8bb653c4a6482d496d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:13:d2:36:84:eb:a7:9b:ab:76:da:95:99: a2:94:1a:9f:23:4b:5a:5f:e8:4e:eb:c1:b9:94:df: ed:d4:73:a5:d7:74:cb:18:d3:eb:bc:37:31:cc:37: 22:73:46:18:5d:03:82:3e:77:9d:82:42:47:2c:7e: 3c:cd:f2:1e:d1:98:a1:1c:26:67:f5:38:22:09:68: a1:95:02:2a:5d:99:57:a5:f4:d0:88:b0:29:9f:3e: ba:4b:45:b1:c2:5c:1f:07:19:b2:07:2a:52:2e:34: 42:94:ca:e7:12:e9:cd:ce:31:90:be:0d:20:45:59: 7c:66:c4:42:2a:9c:54:e8:f0:a3:ef:df:49:7a:45: 53:d8:2c:90:07:14:7c:01:45:46:61:77:90:50:fc: 2b:07:e0:d5:94:94:14:6a:70:6d:ca:a1:ce:0a:e5: 34:1f:a1:e6:8d:f3:92:82:13:47:67:88:eb:15:43: 91:f2:a5:bd:e5:ee:5e:a9:45:cf:1a:0b:b5:4a:7c: 9f:fc:e9:c3:a1:1a:c7:14:51:19:15:af:41:7b:8d: d1:09:4e:43:6e:ea:82:b3:0e:b8:b0:20:16:3b:ec: bc:6b:c0:3e:02:74:8d:4d:97:e4:24:ad:fe:01:6c: 1d:b8:3a:fa:7c:5d:ee:f2:d5:e8:fc:28:82:74:2a: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D7:5A:E8:C1:DC:47:D3:63:BF:DC:8B:B6:53:C4:A6:48:2D:49:6D X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f6:6e:de:d8:bc:e2:5d:bf:82:95:d9:8d:f9:cc:1b:99:e0: de:10:0f:8b:3f:50:80:06:30:d6:5e:e9:9b:3d:e0:a7:22:8b: 8c:96:9e:10:92:a2:a6:78:98:58:42:3c:0b:3f:f1:bd:e5:d4: 8c:43:46:01:e3:f9:48:32:ce:60:e4:9c:ed:ab:e9:0f:81:ba: 65:ab:b9:68:28:34:fc:b5:42:76:26:47:19:a4:b2:1e:73:e6: 44:7d:12:8e:e4:72:a8:df:93:16:32:b0:2e:5d:be:2e:af:0e: 40:bc:25:71:8f:4a:35:3d:d0:bd:1b:a9:0a:59:00:70:3f:a6: 8a:f4:38:31:5b:cd:1d:89:e2:7e:92:d0:10:91:ae:29:4a:5a: 1c:d9:41:70:65:28:6a:25:c5:68:53:71:02:0c:e1:5b:48:9e: 6d:ec:7d:1d:d1:97:d4:91:20:4e:a1:38:a5:74:97:6c:dd:4c: 31:d4:9e:b0:03:83:da:ad:f9:c9:ea:03:44:ea:12:15:24:0a: 7f:15:86:7b:8c:9b:97:17:63:86:b5:61:a1:fc:b4:4c:d0:bb: e0:ce:f7:fa:5b:e6:76:79:dd:1b:31:0e:88:6d:54:26:38:24: e0:c9:9e:51:36:b4:77:4a:69:4e:89:9b:6b:58:f5:c8:fc:55: ec:97:aa:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GNsOoAI7IkIca4/fUc7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwODA0MDgwMDQyWhcNMjUwODA1MDgwMDQyWjAzMTEwLwYDVQQD EyhmYmQ3NWFlOGMxZGM0N2QzNjNiZmRjOGJiNjUzYzRhNjQ4MmQ0OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVgT0jaE66ebq3balZmilBqfI0ta X+hO68G5lN/t1HOl13TLGNPrvDcxzDcic0YYXQOCPnedgkJHLH48zfIe0ZihHCZn 9TgiCWihlQIqXZlXpfTQiLApnz66S0WxwlwfBxmyBypSLjRClMrnEunNzjGQvg0g RVl8ZsRCKpxU6PCj799JekVT2CyQBxR8AUVGYXeQUPwrB+DVlJQUanBtyqHOCuU0 H6HmjfOSghNHZ4jrFUOR8qW95e5eqUXPGgu1Snyf/OnDoRrHFFEZFa9Be43RCU5D buqCsw64sCAWO+y8a8A+AnSNTZfkJK3+AWwduDr6fF3u8tXo/CiCdCrkRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvXWujB3EfTY7/ci7ZTxKZILUltMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPZu3ti8 4l2/gpXZjfnMG5ng3hAPiz9QgAYw1l7pmz3gpyKLjJaeEJKipniYWEI8Cz/xveXU jENGAeP5SDLOYOSc7avpD4G6Zau5aCg0/LVCdiZHGaSyHnPmRH0SjuRyqN+TFjKw Ll2+Lq8OQLwlcY9KNT3QvRupClkAcD+mivQ4MVvNHYnifpLQEJGuKUpaHNlBcGUo aiXFaFNxAgzhW0iebex9HdGX1JEgTqE4pXSXbN1MMdSesAOD2q35yeoDROoSFSQK fxWGe4yblxdjhrVhofy0TNC74M73+lvmdnndGzEOiG1UJjgk4MmeUTa0d0ppTomb a1j1yPxV7JeqpQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:18 2025 by rpki-client