$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: eyg9QkO1JxV0a5VcXbxLBQsmOq67IiSu28e4xZwqkHA= Subject key identifier: 6F:34:E1:71:3E:F4:F4:FE:CF:33:C2:68:57:FF:CA:BB:F6:D2:DD:D0 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019832DDF5B971787F2BAE4AE8647ED237AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0673 Signing time: Tue 22 Jul 2025 16:01:03 +0000 Manifest this update: Tue 22 Jul 2025 16:01:03 +0000 Manifest next update: Wed 23 Jul 2025 16:01:03 +0000 Files and hashes: 1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: 0mF23dQng8zGYIiMTlQnnKy6d4e/yvLp0U30pkIpwAg=) 7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:32:dd:f5:b9:71:78:7f:2b:ae:4a:e8:64:7e:d2:37:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jul 22 16:01:03 2025 GMT Not After : Jul 23 16:01:03 2025 GMT Subject: CN=6f34e1713ef4f4fecf33c26857ffcabbf6d2ddd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:eb:1b:b0:fe:29:04:a9:3f:97:f3:ce:32: a7:43:50:50:6b:5d:78:e8:79:82:5e:47:41:05:11: af:fd:83:f6:e9:a9:c0:53:48:76:b8:27:ed:de:52: 59:c3:10:eb:8c:13:8d:3d:4f:ac:87:91:81:88:a6: 5a:58:6a:e9:8b:8d:91:d3:3a:11:86:e8:b6:d1:8d: 27:23:78:a0:91:52:65:2e:94:0c:92:0c:7e:2f:1c: 2a:7a:06:4a:76:0e:22:f6:11:46:24:09:e7:8e:14: eb:58:f1:ec:63:18:a6:5d:4b:57:44:98:a3:29:89: a4:dc:50:dd:02:4d:44:02:50:83:4f:36:65:b5:68: 96:22:d6:97:64:7c:5e:5d:57:a3:40:99:f9:48:d0: be:d3:5b:a6:d7:36:8f:74:af:9a:da:2d:dd:25:3f: 14:f6:20:8a:82:fd:82:41:76:0c:6c:4b:0d:2f:3b: b2:64:b0:f3:96:7c:4e:4e:05:02:8e:1a:86:5b:ff: 7e:ab:a9:e3:65:92:a2:d5:df:56:bd:6f:72:dd:4d: 40:f8:5c:49:71:94:28:b2:35:61:04:c4:a3:ca:c6: 45:a2:98:49:cd:bc:8b:53:77:5a:09:05:bc:dd:bf: b0:84:ca:1f:37:96:7b:72:e3:4a:25:ef:8d:5b:f4: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:34:E1:71:3E:F4:F4:FE:CF:33:C2:68:57:FF:CA:BB:F6:D2:DD:D0 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7c:8d:c0:6f:1c:99:9c:d8:af:24:67:42:4a:52:a0:32:a6: 02:30:07:1d:75:ed:29:97:71:b4:ee:b5:4d:bd:5a:ae:8d:bd: 50:30:cf:49:86:c0:ce:34:58:0d:de:dc:3d:7f:1f:5a:a5:e2: 07:2c:52:d2:60:c1:05:3c:da:fc:30:be:9d:b9:bc:1c:c8:0a: 63:77:30:ed:cb:29:e2:bb:c5:4b:64:d7:c4:42:0a:d0:59:93: 6e:66:aa:7a:d4:34:5d:87:ef:31:79:6f:59:2b:b1:ec:1f:68: 0d:08:76:2e:b4:dc:22:11:19:9f:44:fd:8b:4f:d3:d3:bb:ff: df:ac:27:36:43:5a:4c:41:98:36:73:4d:19:a3:08:70:aa:4b: 37:a0:d9:37:d7:ac:9e:be:a2:df:76:6d:82:ee:b1:ad:31:11: 09:f0:80:9d:87:19:0a:81:d4:fa:b5:01:62:83:9e:0a:0b:e1: 4f:74:55:f9:15:5d:f4:72:85:1a:c7:08:6f:6d:c5:df:eb:c5: de:19:94:22:d6:12:77:33:0b:12:56:64:7e:e5:a9:f1:1c:3c: ca:8a:59:db:fc:e2:b5:12:38:38:5b:18:f7:b1:76:18:94:8f: ce:99:65:71:36:f3:9c:8e:e7:e9:c7:a2:bb:78:33:59:a7:e8: 01:51:d0:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgy3fW5cXh/K65K6GR+0jeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwNzIyMTYwMTAzWhcNMjUwNzIzMTYwMTAzWjAzMTEwLwYDVQQD Eyg2ZjM0ZTE3MTNlZjRmNGZlY2YzM2MyNjg1N2ZmY2FiYmY2ZDJkZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBXrG7D+KQSpP5fzzjKnQ1BQa114 6HmCXkdBBRGv/YP26anAU0h2uCft3lJZwxDrjBONPU+sh5GBiKZaWGrpi42R0zoR hui20Y0nI3igkVJlLpQMkgx+LxwqegZKdg4i9hFGJAnnjhTrWPHsYximXUtXRJij KYmk3FDdAk1EAlCDTzZltWiWItaXZHxeXVejQJn5SNC+01um1zaPdK+a2i3dJT8U 9iCKgv2CQXYMbEsNLzuyZLDzlnxOTgUCjhqGW/9+q6njZZKi1d9WvW9y3U1A+FxJ cZQosjVhBMSjysZFophJzbyLU3daCQW83b+whMofN5Z7cuNKJe+NW/SFswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG804XE+9PT+zzPCaFf/yrv20t3QMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnyNwG8c mZzYryRnQkpSoDKmAjAHHXXtKZdxtO61Tb1aro29UDDPSYbAzjRYDd7cPX8fWqXi ByxS0mDBBTza/DC+nbm8HMgKY3cw7csp4rvFS2TXxEIK0FmTbmaqetQ0XYfvMXlv WSux7B9oDQh2LrTcIhEZn0T9i0/T07v/36wnNkNaTEGYNnNNGaMIcKpLN6DZN9es nr6i33Ztgu6xrTERCfCAnYcZCoHU+rUBYoOeCgvhT3RV+RVd9HKFGscIb23F3+vF 3hmUItYSdzMLElZkfuWp8Rw8yopZ2/zitRI4OFsY97F2GJSPzpllcTbznI7n6cei u3gzWafoAVHQpA== -----END CERTIFICATE-----Generated at Wed Jul 23 01:28:48 2025 by rpki-client