$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: t1d0dOVHTsyvLCZba/4AO3Twc9HskQK4zyvZk5/IfMY= Subject key identifier: 98:96:A0:C7:EF:39:66:A2:D0:42:2D:F3:D5:92:A4:22:6A:DA:4B:8A Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019838051D6B9A30DFF074BBA48BE8EB547E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 160B Signing time: Wed 23 Jul 2025 16:01:55 +0000 Manifest this update: Wed 23 Jul 2025 16:01:55 +0000 Manifest next update: Thu 24 Jul 2025 16:01:55 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: NxGqub5UVerr7atDOJwnzf0Q+EIzBvix0Y3TZ+1T6K0=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:05:1d:6b:9a:30:df:f0:74:bb:a4:8b:e8:eb:54:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jul 23 16:01:55 2025 GMT Not After : Jul 24 16:01:55 2025 GMT Subject: CN=9896a0c7ef3966a2d0422df3d592a4226ada4b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:b5:88:9a:9f:ef:2c:2f:9e:c8:66:f7:45: cf:42:a7:8b:1d:eb:2d:24:38:ea:ff:05:6a:9d:5c: 4a:da:78:27:61:51:53:dc:61:c5:4b:c3:40:66:3f: 7c:49:1a:89:52:b8:e2:d7:c9:3e:6e:84:be:eb:e5: 62:64:9c:5a:0a:94:7a:3e:7d:9a:2c:a3:8e:91:98: f5:c7:2f:9d:f1:f9:b6:64:3c:e0:0f:60:46:9b:ad: 44:63:ab:13:c9:e9:ff:49:23:46:15:fd:13:52:01: 10:45:53:05:85:10:8d:83:c0:48:b8:79:0b:84:70: 56:9b:02:35:14:87:5d:85:54:9f:9a:e4:e0:12:94: bf:32:aa:ff:b0:c1:58:c5:9f:fc:44:13:87:d2:5c: c4:ef:ea:55:9a:42:41:51:50:97:d5:b6:11:ff:ea: 41:57:fe:8c:b3:ff:2e:0f:e6:c8:d5:0a:d9:93:9e: 5f:5e:29:5e:1c:d3:4f:90:6a:df:8c:0a:74:e3:9c: 93:19:d0:e4:15:a7:55:a4:2c:d4:d2:08:e1:b0:f6: 51:51:cc:11:b4:2d:0d:de:48:9c:e0:7e:e6:25:53: 1d:1f:d0:83:bc:0c:38:99:77:aa:88:88:d5:7f:ff: 07:b5:f0:55:66:cd:c5:ee:99:3d:d9:d8:28:96:eb: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:96:A0:C7:EF:39:66:A2:D0:42:2D:F3:D5:92:A4:22:6A:DA:4B:8A X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:37:41:e5:53:f6:c8:25:ee:25:1a:d4:aa:80:d2:b8:64:76: 4d:54:2b:8b:da:b5:a7:ce:85:de:8a:08:48:28:39:05:87:67: 44:b4:19:4f:84:56:79:b7:c6:e6:bd:e3:3a:e8:48:cb:79:62: 67:00:c2:8a:aa:d7:19:4a:31:80:0f:8b:45:2b:c0:6d:2a:9d: 08:ea:1f:52:bc:fd:65:5a:3f:ef:68:d5:78:9f:19:5f:96:f9: a5:c8:f5:04:36:13:ec:68:68:cc:3d:7e:cd:8d:9e:e1:de:d9: f0:af:6d:34:9b:e0:3e:de:6b:98:68:d6:54:13:a4:9e:1b:88: d6:a8:de:43:a9:71:93:e8:06:e9:06:cc:30:76:d2:f3:90:ba: 0e:5d:7e:86:7f:ef:f2:c4:94:32:cb:d2:1f:6c:42:17:e0:a1: 1d:b4:2f:2d:74:13:dc:72:8a:12:c1:ea:7e:26:db:ce:76:f1: 2c:36:c5:70:98:a5:63:f2:ca:85:11:39:76:6e:4b:18:26:66: c4:48:5c:b0:2c:75:68:3a:bf:6e:fa:89:5e:81:0e:bf:d6:b8: 50:b8:90:12:b1:8d:da:3d:b2:6e:e7:86:93:6c:a3:e5:a4:3e: 8b:96:20:30:74:1e:e1:bd:1f:52:6b:23:22:3e:a1:01:75:ad: 8f:ef:7e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4BR1rmjDf8HS7pIvo61R+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwNzIzMTYwMTU1WhcNMjUwNzI0MTYwMTU1WjAzMTEwLwYDVQQD Eyg5ODk2YTBjN2VmMzk2NmEyZDA0MjJkZjNkNTkyYTQyMjZhZGE0YjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mm1iJqf7ywvnshm90XPQqeLHest JDjq/wVqnVxK2ngnYVFT3GHFS8NAZj98SRqJUrji18k+boS+6+ViZJxaCpR6Pn2a LKOOkZj1xy+d8fm2ZDzgD2BGm61EY6sTyen/SSNGFf0TUgEQRVMFhRCNg8BIuHkL hHBWmwI1FIddhVSfmuTgEpS/Mqr/sMFYxZ/8RBOH0lzE7+pVmkJBUVCX1bYR/+pB V/6Ms/8uD+bI1QrZk55fXileHNNPkGrfjAp045yTGdDkFadVpCzU0gjhsPZRUcwR tC0N3kic4H7mJVMdH9CDvAw4mXeqiIjVf/8HtfBVZs3F7pk92dgoluuM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiWoMfvOWai0EIt89WSpCJq2kuKMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjdB5VP2 yCXuJRrUqoDSuGR2TVQri9q1p86F3ooISCg5BYdnRLQZT4RWebfG5r3jOuhIy3li ZwDCiqrXGUoxgA+LRSvAbSqdCOofUrz9ZVo/72jVeJ8ZX5b5pcj1BDYT7GhozD1+ zY2e4d7Z8K9tNJvgPt5rmGjWVBOknhuI1qjeQ6lxk+gG6QbMMHbS85C6Dl1+hn/v 8sSUMsvSH2xCF+ChHbQvLXQT3HKKEsHqfibbznbxLDbFcJilY/LKhRE5dm5LGCZm xEhcsCx1aDq/bvqJXoEOv9a4ULiQErGN2j2ybueGk2yj5aQ+i5YgMHQe4b0fUmsj Ij6hAXWtj+9+6w== -----END CERTIFICATE-----Generated at Wed Jul 23 23:46:16 2025 by rpki-client