$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: 2449At+MmzxpSihwXWjyuNrSri3jSceyP2frpt6kvG4= Subject key identifier: A5:FA:E1:65:C0:06:C0:0E:9D:8F:25:8A:B0:3A:0D:20:D5:73:B2:96 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019A4D3CFBF402F2820EA6B0F222144BD1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 1078 Signing time: Tue 04 Nov 2025 05:00:33 +0000 Manifest this update: Tue 04 Nov 2025 05:00:33 +0000 Manifest next update: Wed 05 Nov 2025 05:00:33 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: uHaRUFBiN4nRo2vF+VXtVBI8nTraSeh87OLs2tClaDk=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:3c:fb:f4:02:f2:82:0e:a6:b0:f2:22:14:4b:d1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Nov 4 05:00:33 2025 GMT Not After : Nov 5 05:00:33 2025 GMT Subject: CN=a5fae165c006c00e9d8f258ab03a0d20d573b296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:1d:36:d6:7c:d3:c7:ab:e2:d3:62:eb:f9: 87:26:dc:83:09:76:70:d0:65:29:d6:92:4f:0c:34: 0c:64:0f:62:2e:4a:36:c0:92:77:2f:c4:6d:94:ee: 59:11:aa:1b:29:87:59:11:58:aa:d5:50:65:e6:11: 2f:fb:9e:1f:19:ff:71:14:20:5d:70:ea:96:c4:50: 25:ae:5f:5b:99:c2:a3:08:4f:e9:e4:2e:d5:0c:6d: a4:87:26:ce:25:57:c0:ec:83:a0:cd:cc:2a:48:39: 85:91:a7:2d:78:ee:6d:2a:ca:ee:46:00:b6:48:01: df:4c:2b:9e:0b:6e:2e:d2:8f:df:37:14:12:c0:67: 99:70:07:f5:f5:5e:f4:74:aa:5f:2a:f3:6a:c0:c5: 63:8b:0f:b6:b8:a2:89:ca:44:8b:70:d7:0e:cb:90: 38:62:d1:72:75:0e:69:5b:86:61:c9:4d:7f:73:ab: 6a:38:9d:35:a5:87:63:d7:3e:53:d7:38:a3:93:63: 4c:cb:f6:04:56:10:93:92:d8:05:74:18:1c:7f:d0: 32:2c:36:66:57:6c:a0:c3:56:ac:58:60:1e:8f:13: 8b:2b:ff:76:0f:77:93:d8:62:4e:a0:b8:21:89:93: f9:8f:c7:e4:c4:42:a3:1d:a7:5b:ca:e8:2a:6f:eb: ae:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FA:E1:65:C0:06:C0:0E:9D:8F:25:8A:B0:3A:0D:20:D5:73:B2:96 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a4:cf:4c:99:35:7c:f5:dc:20:9b:72:3f:a7:f5:c7:eb:5f: d1:4f:11:ec:cf:4b:69:a0:23:ff:93:dc:8b:2b:fd:8a:76:11: 91:c2:cd:18:36:33:e5:be:22:c9:34:61:8f:bf:b8:29:ab:d1: 33:fe:0c:c3:0f:16:52:c9:0e:44:dd:e5:7f:f6:96:25:22:28: 60:48:6b:82:48:b8:b4:f2:03:89:d9:ec:da:9b:2a:e9:94:d1: e5:6b:14:df:f1:98:81:10:12:dd:98:b5:8c:b9:78:c4:c5:1d: ae:bb:4f:2c:05:ca:b4:d9:cd:5a:67:be:de:b1:3f:8b:37:d6: c0:3e:6a:98:db:46:10:98:c9:e2:ba:9b:f9:81:c1:ba:bc:52: c2:04:29:fc:7c:e1:d5:d1:99:8f:49:bd:e0:e4:48:5c:82:52: b3:e1:c9:2c:a9:4e:30:8e:ba:e7:d9:53:2c:85:23:37:b0:81: f9:74:24:3d:8c:a0:03:38:49:dc:ee:4a:41:bb:a3:7a:b9:06: 73:8e:fb:b6:87:c0:42:df:73:f0:89:01:66:20:d4:94:0f:a8: 5c:b9:2b:e2:94:93:4a:e8:44:42:b7:ff:a2:26:12:0a:af:8c: 15:60:06:0f:58:df:b9:96:bf:41:87:d6:07:8a:34:22:13:a6: 8d:76:53:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNPPv0AvKCDqaw8iIUS9HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUxMTA0MDUwMDMzWhcNMjUxMTA1MDUwMDMzWjAzMTEwLwYDVQQD EyhhNWZhZTE2NWMwMDZjMDBlOWQ4ZjI1OGFiMDNhMGQyMGQ1NzNiMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17QdNtZ808er4tNi6/mHJtyDCXZw 0GUp1pJPDDQMZA9iLko2wJJ3L8RtlO5ZEaobKYdZEViq1VBl5hEv+54fGf9xFCBd cOqWxFAlrl9bmcKjCE/p5C7VDG2khybOJVfA7IOgzcwqSDmFkacteO5tKsruRgC2 SAHfTCueC24u0o/fNxQSwGeZcAf19V70dKpfKvNqwMVjiw+2uKKJykSLcNcOy5A4 YtFydQ5pW4ZhyU1/c6tqOJ01pYdj1z5T1zijk2NMy/YEVhCTktgFdBgcf9AyLDZm V2ygw1asWGAejxOLK/92D3eT2GJOoLghiZP5j8fkxEKjHadbyugqb+uuSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX64WXABsAOnY8lirA6DSDVc7KWMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaTPTJk1 fPXcIJtyP6f1x+tf0U8R7M9LaaAj/5Pciyv9inYRkcLNGDYz5b4iyTRhj7+4KavR M/4Mww8WUskORN3lf/aWJSIoYEhrgki4tPIDidns2psq6ZTR5WsU3/GYgRAS3Zi1 jLl4xMUdrrtPLAXKtNnNWme+3rE/izfWwD5qmNtGEJjJ4rqb+YHBurxSwgQp/Hzh 1dGZj0m94ORIXIJSs+HJLKlOMI6659lTLIUjN7CB+XQkPYygAzhJ3O5KQbujerkG c477tofAQt9z8IkBZiDUlA+oXLkr4pSTSuhEQrf/oiYSCq+MFWAGD1jfuZa/QYfW B4o0IhOmjXZTgg== -----END CERTIFICATE-----Generated at Tue Nov 4 10:47:28 2025 by rpki-client