$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: I1gLCEXuwBhTdhgYQCQ3nIY5Uus05yV1X48XoDpE+Yg= Subject key identifier: A0:46:99:8F:D6:33:EC:A6:B1:DF:60:D0:09:CC:72:9B:77:E2:33:69 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 01992F35B3721D9B9965C016D4860E98F0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 168B Signing time: Tue 09 Sep 2025 16:01:12 +0000 Manifest this update: Tue 09 Sep 2025 16:01:12 +0000 Manifest next update: Wed 10 Sep 2025 16:01:12 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: ab/VIGxsrp/sFUIvRiXfY/ru27DtU/wYKG+SMtxRGBk=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:35:b3:72:1d:9b:99:65:c0:16:d4:86:0e:98:f0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Sep 9 16:01:12 2025 GMT Not After : Sep 10 16:01:12 2025 GMT Subject: CN=a046998fd633eca6b1df60d009cc729b77e23369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:71:97:80:c9:5c:78:c8:97:59:13:32:1d: 20:3d:24:46:47:d7:aa:31:e5:33:64:57:48:0e:2e: bc:fd:42:cd:ec:08:6e:7e:a0:43:a2:89:e7:11:ae: e9:fc:13:8f:4c:ac:bf:59:87:d4:0c:c0:7a:a4:04: 7e:45:f6:fb:17:14:fd:38:19:39:a6:11:85:d3:cd: 38:74:d1:68:6b:5e:61:e7:7d:dd:c4:82:44:a1:ec: 2a:53:1e:01:d3:f0:0c:9d:70:f1:d9:7a:29:f3:f2: e8:8f:f8:0f:90:ec:c6:1a:f5:1f:1b:aa:bc:ba:9e: 9e:94:ab:c3:61:56:5c:44:d0:89:21:60:56:01:69: 28:42:a7:e4:b1:4e:b7:20:56:18:88:5b:a5:92:95: 8c:7f:20:01:de:31:8b:bd:2d:e1:42:cf:44:ee:99: 3e:9e:06:b0:e0:45:81:55:f4:15:7a:6c:58:ad:83: 61:19:b3:b0:0a:e7:e8:4c:8d:e1:13:30:7e:4d:22: 90:71:4f:d9:b5:0e:e3:f9:44:cc:6b:ca:67:03:b3: 6b:5e:d7:b8:02:f1:cb:24:e5:60:ad:a9:e6:10:e5: a8:e1:b7:d9:97:ed:ee:17:f7:e4:1d:e3:29:05:80: 54:ed:15:67:c6:93:05:f0:d7:f5:fd:2f:45:4e:ee: 54:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:99:8F:D6:33:EC:A6:B1:DF:60:D0:09:CC:72:9B:77:E2:33:69 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:12:de:d1:06:a6:53:b0:21:93:74:b9:62:b7:90:a7:31: fb:48:35:8c:9b:e6:03:80:02:73:01:e4:2f:32:e7:a8:37:29: 48:16:a2:dc:29:21:2f:33:76:c7:2d:9c:78:d8:dc:2a:f5:57: ea:0d:4a:32:9c:cc:30:2b:04:6d:d3:8b:66:e3:99:99:e9:07: a9:5b:ab:be:6a:85:ff:30:3b:90:de:af:3f:7c:8e:3a:a7:04: b6:df:8e:87:a9:fc:4c:3d:39:89:49:4b:8c:c5:30:61:08:70: 06:a0:67:18:98:59:99:fa:7a:9d:6a:67:03:33:62:e0:57:28: 2b:fa:9a:f7:b5:91:43:4e:1b:79:eb:cd:21:62:98:ce:cd:44: 23:48:0c:1c:3d:4c:52:cd:7b:dd:c3:ab:a0:fd:b3:ae:30:e4: 61:e4:1c:6c:4c:15:4e:4e:18:c2:ab:80:e2:67:eb:6d:1f:74: b5:c9:e1:4c:3a:6d:b0:8d:d4:90:33:ff:d4:0e:22:9d:96:37: 7d:1f:ee:1f:f8:c7:8b:db:84:6c:ab:2c:2a:62:62:48:3d:e7: 05:28:82:71:2f:5f:0c:8b:01:a7:e1:24:81:fc:69:10:46:ee: 9e:fb:05:cb:64:8a:7c:84:cc:fd:91:07:7f:d6:3e:f3:ba:c1: 65:a0:06:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvNbNyHZuZZcAW1IYOmPDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwOTA5MTYwMTEyWhcNMjUwOTEwMTYwMTEyWjAzMTEwLwYDVQQD EyhhMDQ2OTk4ZmQ2MzNlY2E2YjFkZjYwZDAwOWNjNzI5Yjc3ZTIzMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP5xl4DJXHjIl1kTMh0gPSRGR9eq MeUzZFdIDi68/ULN7AhufqBDoonnEa7p/BOPTKy/WYfUDMB6pAR+Rfb7FxT9OBk5 phGF0804dNFoa15h533dxIJEoewqUx4B0/AMnXDx2Xop8/Loj/gPkOzGGvUfG6q8 up6elKvDYVZcRNCJIWBWAWkoQqfksU63IFYYiFulkpWMfyAB3jGLvS3hQs9E7pk+ ngaw4EWBVfQVemxYrYNhGbOwCufoTI3hEzB+TSKQcU/ZtQ7j+UTMa8pnA7NrXte4 AvHLJOVgranmEOWo4bfZl+3uF/fkHeMpBYBU7RVnxpMF8Nf1/S9FTu5UmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBGmY/WM+ymsd9g0AnMcpt34jNpMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzsS3tEG plOwIZN0uWK3kKcx+0g1jJvmA4ACcwHkLzLnqDcpSBai3CkhLzN2xy2ceNjcKvVX 6g1KMpzMMCsEbdOLZuOZmekHqVurvmqF/zA7kN6vP3yOOqcEtt+Oh6n8TD05iUlL jMUwYQhwBqBnGJhZmfp6nWpnAzNi4FcoK/qa97WRQ04beevNIWKYzs1EI0gMHD1M Us173cOroP2zrjDkYeQcbEwVTk4YwquA4mfrbR90tcnhTDptsI3UkDP/1A4inZY3 fR/uH/jHi9uEbKssKmJiSD3nBSiCcS9fDIsBp+EkgfxpEEbunvsFy2SKfITM/ZEH f9Y+87rBZaAGAA== -----END CERTIFICATE-----Generated at Tue Sep 9 22:53:04 2025 by rpki-client