$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: JJhZQM4iRc2ZAD1QAUWC0byGSIYpAAF/luOrmkKafbQ= Subject key identifier: 57:EB:4D:07:39:19:D3:37:7D:64:7F:62:B0:E1:27:D7:67:95:50:C5 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019849D3A7C35A4A52B71D8AD95B4FB9772A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1615 Signing time: Sun 27 Jul 2025 03:01:04 +0000 Manifest this update: Sun 27 Jul 2025 03:01:04 +0000 Manifest next update: Mon 28 Jul 2025 03:01:04 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: GlldveuNBo22LH/M4yOE1m+v2ZFSU61/iO9tosu0DEE=) 6: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 7: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 8: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 9: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 10: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 11: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 12: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 13: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:d3:a7:c3:5a:4a:52:b7:1d:8a:d9:5b:4f:b9:77:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jul 27 03:01:04 2025 GMT Not After : Jul 28 03:01:04 2025 GMT Subject: CN=57eb4d073919d3377d647f62b0e127d7679550c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:2e:ec:b9:4c:90:21:51:b4:a3:71:ff:e3: 79:c6:ef:3b:43:39:87:e4:33:c2:60:9c:db:53:6d: b3:21:42:d8:80:1b:f0:f5:a0:d3:87:bc:58:96:4d: 67:d1:e2:9f:52:6d:24:ed:76:bf:9e:1a:86:ab:ff: 4a:c2:45:49:1f:ae:ee:a7:06:ba:3b:10:aa:a2:b8: cd:21:d1:d0:d2:d1:b5:83:2e:b0:17:8a:7c:9d:8a: 94:43:37:20:e7:af:b8:e0:47:58:d0:54:32:2a:a5: 6e:61:90:9c:8f:a4:ce:cd:a1:36:a9:09:a6:b4:0a: b3:29:35:30:db:3c:60:36:f6:fc:a5:ea:cc:1e:c9: db:71:a1:4c:d0:2b:9e:4e:bf:b4:e6:01:9b:96:e2: a0:39:37:19:f1:3c:d1:0a:8c:18:43:42:c6:34:d7: c1:87:ad:01:b8:81:da:37:e7:d5:65:42:6f:1a:89: a2:59:7d:24:b8:70:b2:03:1d:c3:00:8c:4b:ac:3b: 1a:97:db:6d:25:07:4f:7f:bb:65:8b:a6:8c:d1:c2: e9:73:f0:df:9c:fa:43:a8:4c:86:66:75:77:c0:19: 0c:c7:e4:e2:ff:64:ba:b9:f5:d3:09:35:5c:da:b6: 44:97:c8:6d:9b:27:87:bb:45:35:49:c0:a3:62:6f: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EB:4D:07:39:19:D3:37:7D:64:7F:62:B0:E1:27:D7:67:95:50:C5 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2c:64:56:ff:99:6e:d0:70:a9:72:9c:1d:43:97:a1:42:21: 0e:95:33:cc:84:e3:77:61:bb:c5:34:ad:fc:c6:30:02:c4:55: c2:0c:c4:0e:d2:57:66:b0:d9:15:ba:2c:8a:55:93:5c:be:5a: d4:83:9b:5a:39:af:4a:da:1e:79:21:84:e2:dc:cd:8b:8e:8c: a7:60:ea:73:14:a7:12:05:fa:a2:4c:8b:e2:59:6b:a1:9c:4f: f6:70:2a:b7:bf:ed:1e:10:60:52:24:57:a5:aa:17:9a:d9:33: 59:3f:54:7c:2c:fd:ef:d0:52:67:39:1a:62:ff:da:4e:5c:95: 1a:32:2b:b9:00:e8:53:88:fb:e6:fd:b5:dd:ff:14:89:4e:3c: 23:48:52:99:7f:07:9a:ea:59:2b:69:45:7f:9a:48:cb:56:66: db:55:3f:1f:0d:ed:67:f1:28:fc:30:64:3b:c6:7c:5c:73:22: 47:e6:2d:76:dd:e8:33:d8:d8:0a:07:ba:36:43:b4:0d:73:17: 93:49:06:6f:ce:82:07:7d:52:6c:63:a5:e2:2d:6d:79:c0:96: 7b:0d:cc:a9:e7:23:dd:c2:23:1e:8c:77:d7:8b:e6:a0:e3:cf: af:83:3d:11:b8:f4:b6:cf:ba:6c:b6:cc:86:fd:a7:bc:e8:4b: bb:05:65:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJ06fDWkpStx2K2VtPuXcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNzI3MDMwMTA0WhcNMjUwNzI4MDMwMTA0WjAzMTEwLwYDVQQD Eyg1N2ViNGQwNzM5MTlkMzM3N2Q2NDdmNjJiMGUxMjdkNzY3OTU1MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcou7LlMkCFRtKNx/+N5xu87QzmH 5DPCYJzbU22zIULYgBvw9aDTh7xYlk1n0eKfUm0k7Xa/nhqGq/9KwkVJH67upwa6 OxCqorjNIdHQ0tG1gy6wF4p8nYqUQzcg56+44EdY0FQyKqVuYZCcj6TOzaE2qQmm tAqzKTUw2zxgNvb8perMHsnbcaFM0CueTr+05gGbluKgOTcZ8TzRCowYQ0LGNNfB h60BuIHaN+fVZUJvGomiWX0kuHCyAx3DAIxLrDsal9ttJQdPf7tli6aM0cLpc/Df nPpDqEyGZnV3wBkMx+Ti/2S6ufXTCTVc2rZEl8htmyeHu0U1ScCjYm+I1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfrTQc5GdM3fWR/YrDhJ9dnlVDFMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyxkVv+Z btBwqXKcHUOXoUIhDpUzzITjd2G7xTSt/MYwAsRVwgzEDtJXZrDZFbosilWTXL5a 1IObWjmvStoeeSGE4tzNi46Mp2DqcxSnEgX6okyL4llroZxP9nAqt7/tHhBgUiRX paoXmtkzWT9UfCz979BSZzkaYv/aTlyVGjIruQDoU4j75v213f8UiU48I0hSmX8H mupZK2lFf5pIy1Zm21U/Hw3tZ/Eo/DBkO8Z8XHMiR+Ytdt3oM9jYCge6NkO0DXMX k0kGb86CB31SbGOl4i1tecCWew3Mqecj3cIjHox314vmoOPPr4M9Ebj0ts+6bLbM hv2nvOhLuwVl9A== -----END CERTIFICATE-----Generated at Sun Jul 27 10:41:40 2025 by rpki-client