$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: fVwVzh2aUvYJlfKTJhaz26HUjrdKyGcdW8/d57ih/kI= Subject key identifier: A4:2E:23:26:64:54:C9:99:6D:A5:B9:E8:CF:AB:A7:81:FA:D6:5B:4C Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019832701A907F7B4026DE73037D2E3277D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0F61 Signing time: Tue 22 Jul 2025 14:01:04 +0000 Manifest this update: Tue 22 Jul 2025 14:01:04 +0000 Manifest next update: Wed 23 Jul 2025 14:01:04 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: 4cLUDhsD75aTSmZlp5ynQC5AD8A8jcHVyQMxS7gCbjk=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 13:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:32:70:1a:90:7f:7b:40:26:de:73:03:7d:2e:32:77:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jul 22 14:01:04 2025 GMT Not After : Jul 23 14:01:04 2025 GMT Subject: CN=a42e23266454c9996da5b9e8cfaba781fad65b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:6a:55:52:09:da:72:a2:bb:8e:d3:85:69: 8b:e7:5e:97:40:2e:cf:43:63:a2:fe:4c:40:0a:de: 54:53:23:64:0e:c7:de:5a:1f:65:e2:e6:8b:c8:bd: d3:c9:91:a4:72:81:df:f3:55:db:e7:eb:97:3c:58: e4:25:26:b6:53:54:63:d4:c1:be:81:c5:50:88:dd: fa:d1:d5:05:2c:67:15:0b:ac:c4:1f:49:53:80:77: 86:9b:37:2a:2c:09:84:6f:72:30:3e:10:3b:45:db: 0e:22:1a:5b:33:1c:11:01:64:da:70:e1:e3:90:1a: 4e:e4:3b:a3:92:c4:cb:5b:d8:23:58:bf:b3:ca:01: 88:e3:33:07:9d:62:f3:51:8b:6c:fa:bd:1b:52:68: 72:1b:c0:1b:e6:b2:b4:b5:0c:f2:0f:59:05:e7:44: 9d:c5:7a:f6:56:b1:0e:d3:12:6b:4c:d4:90:88:d9: 86:54:57:bc:10:5a:29:82:e3:36:9b:64:00:b0:29: 79:2b:ee:1e:a1:a1:da:7d:e9:84:d0:b4:ef:65:63: 05:9a:05:c9:13:cc:3d:44:16:de:0d:0e:ec:5d:65: 01:76:3a:3a:fc:bd:01:1e:7d:b5:72:5c:65:17:05: a3:a5:8b:ea:34:d8:9a:8e:20:91:49:1b:01:65:3e: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:23:26:64:54:C9:99:6D:A5:B9:E8:CF:AB:A7:81:FA:D6:5B:4C X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:59:9a:fa:0c:a4:cb:85:0a:72:b7:cd:cd:df:5d:8d:ec:73: 58:69:a7:0f:cc:dc:26:d9:8e:8f:8f:7b:d5:fc:02:e9:c5:93: a9:18:ce:83:c7:cf:23:f3:3c:6c:0e:8e:2c:c0:d7:03:56:05: f0:3d:a9:e9:a6:08:da:ab:37:88:6b:e9:32:9f:11:5d:dc:4a: e2:b4:20:27:05:b5:98:f2:64:bb:5f:7f:26:6f:4d:01:51:5b: f3:ad:8e:f0:1f:9d:17:4f:16:50:53:69:e8:e0:33:6f:e9:b3: 72:92:5b:df:73:26:6b:ba:70:4c:c6:1a:85:cf:95:bf:6e:b9: 1b:4e:9f:fd:cc:7c:34:60:e6:56:c8:8e:b2:1a:28:22:17:b2: e9:ba:2c:04:a5:0a:bb:f7:ea:cb:49:8f:9b:b8:e5:12:ee:6e: f4:bd:bc:b5:64:7d:fa:17:1d:16:b5:a4:ca:d4:c9:45:a6:8e: 56:fc:4a:1f:f2:de:b6:3b:a5:c8:ca:ae:86:36:c0:d3:b7:ce: ae:20:a6:30:0c:1b:c0:1b:09:0e:0a:8f:34:d8:d6:7b:bb:57: 45:48:7c:b9:06:9f:e7:75:12:83:51:a4:07:d4:17:05:09:c5: 84:e2:28:16:76:f3:41:55:33:89:40:d6:89:75:9e:08:a0:b0: fb:80:a4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgycBqQf3tAJt5zA30uMnfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwNzIyMTQwMTA0WhcNMjUwNzIzMTQwMTA0WjAzMTEwLwYDVQQD EyhhNDJlMjMyNjY0NTRjOTk5NmRhNWI5ZThjZmFiYTc4MWZhZDY1YjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYFqVVIJ2nKiu47ThWmL516XQC7P Q2Oi/kxACt5UUyNkDsfeWh9l4uaLyL3TyZGkcoHf81Xb5+uXPFjkJSa2U1Rj1MG+ gcVQiN360dUFLGcVC6zEH0lTgHeGmzcqLAmEb3IwPhA7RdsOIhpbMxwRAWTacOHj kBpO5DujksTLW9gjWL+zygGI4zMHnWLzUYts+r0bUmhyG8Ab5rK0tQzyD1kF50Sd xXr2VrEO0xJrTNSQiNmGVFe8EFopguM2m2QAsCl5K+4eoaHafemE0LTvZWMFmgXJ E8w9RBbeDQ7sXWUBdjo6/L0BHn21clxlFwWjpYvqNNiajiCRSRsBZT4vHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQuIyZkVMmZbaW56M+rp4H61ltMMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVma+gyk y4UKcrfNzd9djexzWGmnD8zcJtmOj4971fwC6cWTqRjOg8fPI/M8bA6OLMDXA1YF 8D2p6aYI2qs3iGvpMp8RXdxK4rQgJwW1mPJku19/Jm9NAVFb862O8B+dF08WUFNp 6OAzb+mzcpJb33Mma7pwTMYahc+Vv265G06f/cx8NGDmVsiOshooIhey6bosBKUK u/fqy0mPm7jlEu5u9L28tWR9+hcdFrWkytTJRaaOVvxKH/LetjulyMquhjbA07fO riCmMAwbwBsJDgqPNNjWe7tXRUh8uQaf53USg1GkB9QXBQnFhOIoFnbzQVUziUDW iXWeCKCw+4CkWA== -----END CERTIFICATE-----Generated at Tue Jul 22 18:58:50 2025 by rpki-client