$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: TG1kLnkKhn+BUwVDuxesWZr5tkA8f9UTMbbpX0bShdQ= Subject key identifier: 9E:92:EE:FF:18:3B:50:B0:9D:56:59:B2:C8:95:FF:E2:E6:34:E1:54 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 01974A7B2A73AB0CF7056B8BE5ACEBF7E195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1590 Signing time: Sat 07 Jun 2025 13:01:15 +0000 Manifest this update: Sat 07 Jun 2025 13:01:15 +0000 Manifest next update: Sun 08 Jun 2025 13:01:15 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: 6eD8KDrvqTpsu2u+muFHSihEEM+5RM5w3KeAQ9ygJkY=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:7b:2a:73:ab:0c:f7:05:6b:8b:e5:ac:eb:f7:e1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jun 7 13:01:15 2025 GMT Not After : Jun 8 13:01:15 2025 GMT Subject: CN=9e92eeff183b50b09d5659b2c895ffe2e634e154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:00:72:14:e5:cf:f9:d6:35:be:42:51:06:8a: b3:e9:ff:93:62:6c:87:c8:fe:a4:96:65:79:dd:16: 17:86:73:ff:0f:6b:53:af:16:2d:fe:0a:97:22:dc: 7a:7b:1f:c6:7c:fb:65:c2:16:d1:9c:88:94:92:05: 0d:68:60:29:20:79:2b:9a:e7:70:50:e3:77:0e:9b: 7c:e0:6a:a0:f4:2f:d3:92:bf:0a:fb:1a:df:95:c8: 4c:42:c4:2a:7d:ac:b0:94:e8:58:f8:4e:2d:bb:1e: 06:3a:b0:b3:f6:15:c0:a1:80:7a:dd:fa:0b:54:d0: 50:b6:6a:a1:6a:23:0c:8e:3b:a5:3c:50:74:bf:d9: 65:de:f8:16:89:97:e3:de:d2:d9:ae:27:52:c5:53: 3a:47:27:b2:5b:0d:3e:1f:fc:b1:78:96:41:bd:b8: 10:6f:20:b0:5c:6a:65:bf:8e:73:39:98:eb:72:ed: 7a:ad:d1:97:de:c8:fe:42:cf:96:64:23:dc:c2:4d: be:f6:9b:16:dc:68:75:c6:51:f8:ff:d6:3f:2b:4b: c5:6a:c7:e2:05:5f:b6:1f:66:0d:b3:ac:ed:01:08: 42:3b:5a:d1:d0:51:07:a2:60:d8:9b:ff:6c:a8:3a: 44:ea:c8:6f:0d:b2:1d:56:61:1a:59:15:b7:ad:f7: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:92:EE:FF:18:3B:50:B0:9D:56:59:B2:C8:95:FF:E2:E6:34:E1:54 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5b:4c:fd:23:02:d3:25:e9:e6:d5:d2:69:dd:18:db:28:28: 7f:ae:15:b8:e8:2c:16:55:d9:d3:fc:6b:56:c9:bc:24:3c:59: 7f:49:33:94:76:75:f0:b9:69:00:36:30:1a:05:6c:c6:8e:e7: 12:52:03:6c:d7:24:8c:01:0d:f5:e1:68:66:13:85:35:c3:e6: 2b:9e:51:7b:83:d0:a9:1e:48:f0:84:3c:7e:72:0a:c4:73:ab: a7:5c:3f:5c:00:ce:ec:4b:b3:33:1d:c6:3d:33:d8:98:9e:64: 2b:68:1e:04:23:73:29:d7:69:ff:6a:74:8b:6b:a9:4d:f7:59: a4:bb:ff:f3:6f:7d:29:40:e7:dd:5a:3b:2f:53:22:1a:2c:40: f0:67:4a:36:83:45:a2:5c:0b:a6:0e:1f:97:4a:b3:e6:73:66: ca:83:11:74:4e:66:c2:34:09:08:00:c9:08:e8:e0:12:7b:62: 1c:a5:c1:ee:e1:c3:e8:f1:f3:22:93:fb:13:ce:d6:97:e4:89: 9a:8f:bf:41:dc:90:65:1d:7b:0d:62:7e:73:76:5d:56:e2:fe: 40:7e:b2:0a:a9:79:b5:9c:93:1f:30:90:bb:be:06:28:4d:06: dd:55:61:13:26:19:18:47:52:65:9c:9d:bb:73:d0:15:f7:e8: 37:76:ce:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKeypzqwz3BWuL5azr9+GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwNjA3MTMwMTE1WhcNMjUwNjA4MTMwMTE1WjAzMTEwLwYDVQQD Eyg5ZTkyZWVmZjE4M2I1MGIwOWQ1NjU5YjJjODk1ZmZlMmU2MzRlMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wByFOXP+dY1vkJRBoqz6f+TYmyH yP6klmV53RYXhnP/D2tTrxYt/gqXItx6ex/GfPtlwhbRnIiUkgUNaGApIHkrmudw UON3Dpt84Gqg9C/Tkr8K+xrflchMQsQqfaywlOhY+E4tux4GOrCz9hXAoYB63foL VNBQtmqhaiMMjjulPFB0v9ll3vgWiZfj3tLZridSxVM6RyeyWw0+H/yxeJZBvbgQ byCwXGplv45zOZjrcu16rdGX3sj+Qs+WZCPcwk2+9psW3Gh1xlH4/9Y/K0vFasfi BV+2H2YNs6ztAQhCO1rR0FEHomDYm/9sqDpE6shvDbIdVmEaWRW3rffMOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6S7v8YO1CwnVZZssiV/+LmNOFUMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFtM/SMC 0yXp5tXSad0Y2ygof64VuOgsFlXZ0/xrVsm8JDxZf0kzlHZ18LlpADYwGgVsxo7n ElIDbNckjAEN9eFoZhOFNcPmK55Re4PQqR5I8IQ8fnIKxHOrp1w/XADO7EuzMx3G PTPYmJ5kK2geBCNzKddp/2p0i2upTfdZpLv/8299KUDn3Vo7L1MiGixA8GdKNoNF olwLpg4fl0qz5nNmyoMRdE5mwjQJCADJCOjgEntiHKXB7uHD6PHzIpP7E87Wl+SJ mo+/QdyQZR17DWJ+c3ZdVuL+QH6yCql5tZyTHzCQu74GKE0G3VVhEyYZGEdSZZyd u3PQFffoN3bOtQ== -----END CERTIFICATE-----Generated at Sat Jun 7 20:23:16 2025 by rpki-client