$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: 5gZtqvzzSilPGQlsOBvXsK7VOjibeYHcms/nqHZFhHo= Subject key identifier: B5:67:6A:DA:C9:FA:F2:88:E6:D9:01:7E:26:4A:B1:02:8D:12:5A:68 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 01983E73E8248105007D196FB4953F024333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0679 Signing time: Thu 24 Jul 2025 22:00:40 +0000 Manifest this update: Thu 24 Jul 2025 22:00:40 +0000 Manifest next update: Fri 25 Jul 2025 22:00:40 +0000 Files and hashes: 1: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 2: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 3: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 4: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: fA6DD/jzA9O12ITlJc2GTrvgt9BW/XWWHaUZqJ9nNCM=) 7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 13: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 14: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3e:73:e8:24:81:05:00:7d:19:6f:b4:95:3f:02:43:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jul 24 22:00:40 2025 GMT Not After : Jul 25 22:00:40 2025 GMT Subject: CN=b5676adac9faf288e6d9017e264ab1028d125a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:fb:b5:e6:5c:60:cd:1f:1f:ea:61:19:b8: e5:3a:c5:6c:44:bd:5c:27:50:b1:da:08:fa:bf:3d: db:9d:39:93:19:f6:b8:49:1c:b9:8b:e1:82:01:a3: ae:64:7b:8c:fe:3b:e0:db:f2:b5:e4:c4:8e:f2:09: dc:67:fe:3e:9f:cc:15:4a:16:fb:1c:f0:d5:d2:b8: 72:ed:1a:16:e9:83:c2:21:86:7c:73:bf:ed:51:89: 75:6b:d2:c0:01:31:01:69:f7:c9:74:9c:44:48:d1: 48:97:45:49:94:ce:c5:e1:fb:89:d7:31:15:3e:c2: e0:8d:e1:c7:63:69:c7:e8:bc:54:4a:d3:ee:b4:1c: a0:b4:c2:22:e1:fb:d4:55:85:18:76:f4:4d:7a:3e: af:88:9f:f0:f8:29:2d:bb:09:25:07:dd:1d:fa:69: a2:1b:49:df:76:48:32:24:74:fa:d5:04:11:b6:1c: c6:da:6a:60:f4:13:d9:93:9b:ad:29:9f:74:0c:16: 09:df:a7:20:ab:54:8d:20:ca:e4:fa:b0:fe:be:ed: fa:40:88:19:1b:b3:63:91:ca:6b:8a:2b:a9:26:e8: aa:89:d4:44:d5:e0:73:25:3e:33:f4:00:8b:9a:00: de:6a:3b:ed:66:77:4d:93:63:a8:72:4f:03:dc:35: 76:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:67:6A:DA:C9:FA:F2:88:E6:D9:01:7E:26:4A:B1:02:8D:12:5A:68 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:7c:00:7a:e1:a1:1b:63:ee:9c:31:9a:88:f8:de:c7:02:81: cb:6c:91:e8:e9:ea:01:e7:6c:31:1c:af:82:a7:f9:4f:1e:f6: 16:52:be:1f:cd:03:a9:66:57:eb:e0:6b:60:8f:c5:00:c8:d5: 27:52:43:6e:38:83:4e:fa:11:08:25:25:5c:94:61:15:d9:7f: 77:da:a5:fd:4f:da:44:b1:b6:db:0f:01:bf:e8:4e:ce:65:9f: a4:85:0d:5a:59:ab:a6:c9:f8:af:a8:f6:70:ff:de:80:5a:56: 1e:1e:78:74:0a:09:b7:51:19:27:0b:53:38:f4:7b:62:c0:d7: f1:d5:00:9d:17:1a:00:23:c5:44:c5:d5:24:d4:09:00:74:e6: 32:e8:eb:92:ea:83:eb:7e:70:ea:bd:f1:37:1d:11:13:f7:88: b1:fa:50:71:c6:21:57:ae:c7:b1:87:cb:aa:db:27:73:6b:5c: f6:7d:20:fa:62:de:d1:7f:31:88:15:4e:ba:09:d3:25:6f:7e: e5:ed:c1:c2:c5:33:3a:e4:b7:d7:c9:5f:77:8a:48:c4:09:02: fa:74:70:79:3d:8a:54:2e:2e:f6:3d:30:86:c8:50:f4:4a:90: de:ee:1d:eb:83:7e:36:69:5b:57:cf:61:30:65:ce:9b:8a:f9: 3e:1e:c4:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg+c+gkgQUAfRlvtJU/AkMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwNzI0MjIwMDQwWhcNMjUwNzI1MjIwMDQwWjAzMTEwLwYDVQQD EyhiNTY3NmFkYWM5ZmFmMjg4ZTZkOTAxN2UyNjRhYjEwMjhkMTI1YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytv7teZcYM0fH+phGbjlOsVsRL1c J1Cx2gj6vz3bnTmTGfa4SRy5i+GCAaOuZHuM/jvg2/K15MSO8gncZ/4+n8wVShb7 HPDV0rhy7RoW6YPCIYZ8c7/tUYl1a9LAATEBaffJdJxESNFIl0VJlM7F4fuJ1zEV PsLgjeHHY2nH6LxUStPutBygtMIi4fvUVYUYdvRNej6viJ/w+CktuwklB90d+mmi G0nfdkgyJHT61QQRthzG2mpg9BPZk5utKZ90DBYJ36cgq1SNIMrk+rD+vu36QIgZ G7NjkcpriiupJuiqidRE1eBzJT4z9ACLmgDeajvtZndNk2Oock8D3DV2dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVnatrJ+vKI5tkBfiZKsQKNElpoMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXwAeuGh G2PunDGaiPjexwKBy2yR6OnqAedsMRyvgqf5Tx72FlK+H80DqWZX6+BrYI/FAMjV J1JDbjiDTvoRCCUlXJRhFdl/d9ql/U/aRLG22w8Bv+hOzmWfpIUNWlmrpsn4r6j2 cP/egFpWHh54dAoJt1EZJwtTOPR7YsDX8dUAnRcaACPFRMXVJNQJAHTmMujrkuqD 635w6r3xNx0RE/eIsfpQccYhV67HsYfLqtsnc2tc9n0g+mLe0X8xiBVOugnTJW9+ 5e3BwsUzOuS318lfd4pIxAkC+nRweT2KVC4u9j0whshQ9EqQ3u4d64N+NmlbV89h MGXOm4r5Ph7EUA== -----END CERTIFICATE-----Generated at Fri Jul 25 06:11:09 2025 by rpki-client