$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: L2IJETpLK78lOYvcZ2m1ezOR33Jrjrw7YJDX0XD7/EA= Subject key identifier: 3B:22:D7:81:3B:63:E0:16:16:7E:B3:3D:68:14:77:30:43:20:37:07 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019A1CBF64F5231D1D58FB0E4139E7869C23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1706 Signing time: Sat 25 Oct 2025 19:01:36 +0000 Manifest this update: Sat 25 Oct 2025 19:01:36 +0000 Manifest next update: Sun 26 Oct 2025 19:01:36 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: h1wj4IZGCLKgo52HEMT9GmvfRyaqhXvmxaQkIOQTm5E=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:bf:64:f5:23:1d:1d:58:fb:0e:41:39:e7:86:9c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Oct 25 19:01:36 2025 GMT Not After : Oct 26 19:01:36 2025 GMT Subject: CN=3b22d7813b63e016167eb33d6814773043203707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:e7:4d:24:9b:a3:e9:74:dd:72:af:0d:0c: 0e:58:fe:f3:20:3a:83:a9:a8:98:0f:17:8a:55:0e: a8:eb:b7:35:a5:9a:92:21:7a:a9:d4:ce:7d:db:82: 5e:09:86:19:69:77:30:89:d0:77:8e:c6:1f:08:16: 08:37:a5:16:34:82:16:8d:43:7d:91:61:9f:7d:07: a9:9e:5a:cb:d2:0a:6c:8d:58:a4:58:ab:a0:10:7c: 74:45:86:74:ba:58:e0:db:a0:a4:a4:d6:4f:6a:9f: de:a9:12:9a:50:ad:09:7e:a9:9d:41:41:ac:3a:1e: 61:cb:4e:7f:f4:b1:68:b8:ac:a4:72:00:07:db:87: 3b:cf:bd:90:f1:e7:79:b5:38:82:6a:b8:7a:3d:cd: cc:bb:7d:94:36:0a:6b:a1:60:ab:6a:39:a5:89:91: 0c:5f:9a:43:0d:8c:7d:03:7b:eb:59:4a:c1:36:80: f7:8c:44:5b:ef:a1:f9:04:34:bd:05:2f:72:b3:38: 7f:60:77:7b:40:16:66:7c:10:96:0f:51:38:38:b5: 61:09:69:8c:00:c2:f3:04:c2:f5:90:4c:8b:8b:88: 2e:65:af:a0:4b:ba:31:3e:7d:80:eb:93:02:fd:b3: b0:f6:7f:2c:11:69:56:1a:08:da:02:83:b1:38:ba: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:22:D7:81:3B:63:E0:16:16:7E:B3:3D:68:14:77:30:43:20:37:07 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:61:c5:77:4d:84:72:90:e7:a9:d3:c7:c7:f0:7c:d1:aa:7e: 98:26:92:90:d9:92:79:78:59:9f:80:8d:f0:97:bd:8d:4f:2d: 91:11:88:e6:c9:a0:d9:23:19:7c:58:04:48:fe:2a:a9:87:49: 91:c6:e0:50:d5:be:a0:45:74:37:e5:fd:e4:09:c1:e7:93:b6: 5d:98:a8:11:3e:78:5f:64:ed:21:e8:0a:8e:b4:0c:79:20:33: 51:ba:d2:6a:ae:da:b7:29:ea:27:09:b9:98:a8:3b:f8:51:7d: b7:20:f2:41:ad:9e:a8:bf:ef:81:2f:ec:a6:62:da:4d:24:a8: 1c:7b:cb:f9:b9:bc:5c:5a:1d:d5:79:6d:e5:8a:4c:1c:b9:e4: 41:fe:52:24:e2:a1:36:ea:28:62:b5:42:a4:94:fc:4d:05:8b: 4d:3e:80:64:8e:50:d4:34:f2:b2:f5:21:6c:fa:6e:89:e7:40: 0c:bb:8f:9a:2f:29:c1:22:10:9a:04:25:80:3d:4b:75:26:ad: e6:99:30:b9:c7:41:55:3d:67:21:b4:77:69:ab:1e:b0:bb:7a: 93:6e:bc:0d:c6:17:b6:4c:95:49:3b:95:2d:1c:94:64:7b:d5: 5d:bd:a9:c3:f9:39:db:43:9b:fb:48:0c:12:ba:03:c1:38:a0: 58:31:e7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocv2T1Ix0dWPsOQTnnhpwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUxMDI1MTkwMTM2WhcNMjUxMDI2MTkwMTM2WjAzMTEwLwYDVQQD EygzYjIyZDc4MTNiNjNlMDE2MTY3ZWIzM2Q2ODE0NzczMDQzMjAzNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZXnTSSbo+l03XKvDQwOWP7zIDqD qaiYDxeKVQ6o67c1pZqSIXqp1M5924JeCYYZaXcwidB3jsYfCBYIN6UWNIIWjUN9 kWGffQepnlrL0gpsjVikWKugEHx0RYZ0uljg26CkpNZPap/eqRKaUK0JfqmdQUGs Oh5hy05/9LFouKykcgAH24c7z72Q8ed5tTiCarh6Pc3Mu32UNgproWCrajmliZEM X5pDDYx9A3vrWUrBNoD3jERb76H5BDS9BS9yszh/YHd7QBZmfBCWD1E4OLVhCWmM AMLzBML1kEyLi4guZa+gS7oxPn2A65MC/bOw9n8sEWlWGgjaAoOxOLrP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsi14E7Y+AWFn6zPWgUdzBDIDcHMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2HFd02E cpDnqdPHx/B80ap+mCaSkNmSeXhZn4CN8Je9jU8tkRGI5smg2SMZfFgESP4qqYdJ kcbgUNW+oEV0N+X95AnB55O2XZioET54X2TtIegKjrQMeSAzUbrSaq7atynqJwm5 mKg7+FF9tyDyQa2eqL/vgS/spmLaTSSoHHvL+bm8XFod1Xlt5YpMHLnkQf5SJOKh NuooYrVCpJT8TQWLTT6AZI5Q1DTysvUhbPpuiedADLuPmi8pwSIQmgQlgD1LdSat 5pkwucdBVT1nIbR3aasesLt6k268DcYXtkyVSTuVLRyUZHvVXb2pw/k520Ob+0gM EroDwTigWDHnww== -----END CERTIFICATE-----Generated at Sun Oct 26 03:01:44 2025 by rpki-client