$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json) Hash identifier: 7JGsa9JCQj1du/JoZNv9AN6ypf6zT0jl9/YP6k7KVVE= Subject key identifier: F6:96:25:4E:B1:95:0A:BE:E4:04:1A:AB:7F:0C:7D:C5:A9:DD:9B:1C Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 01995BD8015EB16FB1E31887283F399BB38B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft Manifest number: 0442 Signing time: Thu 18 Sep 2025 08:01:46 +0000 Manifest this update: Thu 18 Sep 2025 08:01:46 +0000 Manifest next update: Fri 19 Sep 2025 08:01:46 +0000 Files and hashes: 1: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=) 2: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=) 3: 76jBSZXqoCLYuDx37Tg4k-XUZVs.roa (hash: MscmAcdESi3fGqr0XkNp+WZ2R9GaWQ30ttgidFzjvE8=) 4: CCbz5YANGtDBvodcNnD0zLmWJLk.roa (hash: 3q5ZnquPVbWfKx8CllUcE2G8Rg6u8HLTQTfuwANAlwQ=) 5: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=) 6: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: /X68XdhUvWuq/L6RpdCm6GPzL5k18I/aCR/X5GNsPSU=) 7: GJ7WM9XZ8aPvhFL3nonJQjZ3cyU.roa (hash: WROjdaGli8Fi41MZppDPsHHJ/iTpg3Lqh4RMCj2LsKM=) 8: HlqaX9y1cpjv0wxGrlQZeagT5Q0.roa (hash: dZjid0DCr3cVa0kusKQlx9flhXPy/L6bL7wDHQcf1TY=) 9: KY68jLeDujJbynrOgN-K9-lu_Eo.roa (hash: ile+eHNeTiPprnxFVEw1DNOI8w4SlEdrRqsqP3bCU9I=) 10: LwRzawkBnQsBjSFO0jcLL-E76Ao.roa (hash: xpJVPz/S6MxX3bbXw867xnZLOrxdUJBffzWqUhcrFW0=) 11: MJtGqW7EBoBUv03MjLuA1rZGnFk.roa (hash: JHIhHbc+O3brVI4S29z9gJ9Jp7NY0cEpDDfJ3vUoSrQ=) 12: Z8p5c-rlAPW0cZ-sWH7G-yZd9To.roa (hash: 14NxmVMH2EBfG9yj1NkfTzczT8KoDClH3gg1peZJpIk=) 13: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=) 14: jxrjdm-h63xIjMHa3FGlkmExi5Q.roa (hash: QfbjjP0vtTt/tsuWMHXRNCzoIklVIlWSgjk/oiVX/Q4=) 15: kA6CHPfPdas7hoxpTjyG1FQEu_U.roa (hash: URBA5QHXvsO4eLiy7HZHrf75n0PShSo0ZJWH9NZIu7o=) 16: rBrLXTtbaFpNMmdOZ1lQtzIs3_Y.roa (hash: BVyl3ZvtBKgJmC3ItVuKwD6mSCVRNqNBYJIW8AiZkl8=) 17: tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa (hash: GOHAj03XK7r6uHKyuAW9rpoOeyK5T9KDx1ewuKony44=) 18: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 08:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5b:d8:01:5e:b1:6f:b1:e3:18:87:28:3f:39:9b:b3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Sep 18 08:01:46 2025 GMT Not After : Sep 19 08:01:46 2025 GMT Subject: CN=f696254eb1950abee4041aab7f0c7dc5a9dd9b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e6:12:f8:51:8f:19:7f:44:4e:bb:44:b1:d5: 08:0e:ca:cf:1b:af:8a:fd:a0:0a:3b:98:b5:4f:37: 75:91:0a:8f:ba:a3:42:d3:7e:c0:aa:4b:b8:81:39: dc:f5:d1:f8:6e:29:77:14:7e:16:9c:f4:6e:1d:b5: c4:83:04:b1:2f:d8:f3:32:dc:83:b3:de:52:9d:e2: 46:e2:26:a0:fd:d2:af:ae:dd:a5:97:19:93:f9:85: d8:f4:14:d7:f8:1f:2e:13:90:30:1e:d9:14:fc:1d: 2e:d1:79:0e:d7:88:18:f8:29:e7:e1:c1:fb:5a:33: dc:2c:fb:40:cd:1f:72:52:fc:d4:05:d5:b6:e1:35: 72:06:14:3d:f4:4c:32:37:5e:f8:a5:f2:29:13:a6: 64:37:c5:fa:83:17:e7:f8:89:50:ec:72:db:8f:8a: 3f:3e:4e:d4:2c:32:6d:d9:f2:2c:2a:05:8e:72:06: 41:5b:20:b0:c6:01:ec:18:53:38:c9:b7:10:19:1a: 97:37:59:00:e6:0e:35:99:75:71:31:f6:ec:97:17: ac:72:ac:63:d1:e0:ca:3c:1e:3e:5b:05:5d:0a:f8: df:99:7b:4f:8c:0a:2d:e6:25:17:95:62:df:02:b2: 82:27:f8:ed:9c:39:18:f5:27:f3:19:55:7b:80:c4: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:25:4E:B1:95:0A:BE:E4:04:1A:AB:7F:0C:7D:C5:A9:DD:9B:1C X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0e:ff:95:ae:20:5a:33:7d:fa:45:2b:26:2b:e9:41:e7:23: 9b:1d:6a:23:59:c5:27:ce:9c:bb:75:4d:6c:ea:48:49:0a:ff: ec:97:1b:24:b1:59:06:33:24:b6:64:6f:fe:9b:2e:88:ff:98: 9f:91:fa:f1:6b:2d:7b:d2:d3:1a:d2:57:d2:e7:c7:6d:e4:f8: f0:1b:6c:27:c9:21:09:bd:22:06:a5:55:03:68:d1:f8:bb:ac: db:d1:66:f9:91:e7:2d:a3:5f:33:6b:2a:d4:1e:2e:9d:db:c9: be:1e:ae:87:64:5b:d4:a7:f2:32:0d:57:fe:35:a9:6f:a8:cf: ca:63:1d:59:41:ba:eb:f6:d1:ce:95:42:4c:57:6d:00:e1:89: 9e:64:15:94:b1:e3:7e:10:4f:f7:18:a2:00:61:9b:44:0c:ae: 66:7b:0a:17:43:88:9c:eb:d7:88:d9:9a:17:dd:a3:83:b7:43: ca:ee:22:66:70:e3:eb:42:16:d6:cd:a8:ff:ed:8a:61:df:0d: 5d:ef:56:87:e3:5e:83:f2:16:86:ac:56:a6:4e:cb:f3:94:73: ea:84:66:8a:e6:06:2a:07:40:a9:ce:4b:02:50:16:35:06:e7: f6:41:89:ec:18:c7:d4:a3:09:6b:a3:b0:bc:8a:e6:7b:a7:0c: e9:e3:b1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlb2AFesW+x4xiHKD85m7OLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUwOTE4MDgwMTQ2WhcNMjUwOTE5MDgwMTQ2WjAzMTEwLwYDVQQD EyhmNjk2MjU0ZWIxOTUwYWJlZTQwNDFhYWI3ZjBjN2RjNWE5ZGQ5YjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+YS+FGPGX9ETrtEsdUIDsrPG6+K /aAKO5i1Tzd1kQqPuqNC037Aqku4gTnc9dH4bil3FH4WnPRuHbXEgwSxL9jzMtyD s95SneJG4iag/dKvrt2llxmT+YXY9BTX+B8uE5AwHtkU/B0u0XkO14gY+Cnn4cH7 WjPcLPtAzR9yUvzUBdW24TVyBhQ99EwyN174pfIpE6ZkN8X6gxfn+IlQ7HLbj4o/ Pk7ULDJt2fIsKgWOcgZBWyCwxgHsGFM4ybcQGRqXN1kA5g41mXVxMfbslxescqxj 0eDKPB4+WwVdCvjfmXtPjAot5iUXlWLfArKCJ/jtnDkY9SfzGVV7gMSEUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaWJU6xlQq+5AQaq38MfcWp3ZscMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw7/la4g WjN9+kUrJivpQecjmx1qI1nFJ86cu3VNbOpISQr/7JcbJLFZBjMktmRv/psuiP+Y n5H68Wste9LTGtJX0ufHbeT48BtsJ8khCb0iBqVVA2jR+Lus29Fm+ZHnLaNfM2sq 1B4undvJvh6uh2Rb1KfyMg1X/jWpb6jPymMdWUG66/bRzpVCTFdtAOGJnmQVlLHj fhBP9xiiAGGbRAyuZnsKF0OInOvXiNmaF92jg7dDyu4iZnDj60IW1s2o/+2KYd8N Xe9Wh+Neg/IWhqxWpk7L85Rz6oRmiuYGKgdAqc5LAlAWNQbn9kGJ7BjH1KMJa6Ow vIrme6cM6eOxVA== -----END CERTIFICATE-----Generated at Thu Sep 18 10:58:22 2025 by rpki-client