$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: wv+R2TGlTaaVaeKG1q01VAcN3eApB073c7DPmQk05fw= Subject key identifier: C7:67:04:76:8D:6D:19:35:59:60:19:7E:63:F2:36:4E:81:91:B8:C3 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019938A6C7B1BE6D346882A92495AF6D14F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1691 Signing time: Thu 11 Sep 2025 12:01:18 +0000 Manifest this update: Thu 11 Sep 2025 12:01:18 +0000 Manifest next update: Fri 12 Sep 2025 12:01:18 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: AUJlTI7qlFuZBqYNtseczKVZY7o.roa (hash: lrFJFDQHqIF3d1QaDadpDFGnq9WB4xACkbFUlWi2D+Q=) 4: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 5: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 6: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: mEAc70k7N+fX8PSJE4nSdeDV/oHQeKoGMq6HW9Ec3NI=) 7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 12: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 13: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:38:a6:c7:b1:be:6d:34:68:82:a9:24:95:af:6d:14:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Sep 11 12:01:18 2025 GMT Not After : Sep 12 12:01:18 2025 GMT Subject: CN=c76704768d6d19355960197e63f2364e8191b8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:77:06:d2:d9:15:f4:21:d2:df:58:d1:33: 9a:c6:f7:2f:fa:e9:a2:5e:6e:83:ba:05:31:8b:6b: 22:bf:b2:4c:87:a3:b3:fe:89:2b:28:74:f4:c0:b0: 17:d9:c4:bf:1a:12:cb:26:56:79:34:49:ed:c8:23: ed:8b:2e:48:18:26:3f:c2:c1:f8:2c:e5:f6:81:f8: 74:fb:20:83:5b:a8:83:85:28:96:78:da:c0:94:22: 59:e2:6a:40:91:f8:9b:59:8a:4a:31:04:c1:2f:ec: 6e:82:c6:d4:c5:af:54:87:12:d1:b3:3e:74:74:b0: d2:68:16:99:30:88:40:a1:a0:b4:8a:4d:df:5b:bb: 9b:ed:2a:ce:f0:1d:90:86:1b:66:5a:4c:c3:27:a6: d1:73:6e:3b:a5:6a:ca:7c:fc:38:84:56:ba:ec:b1: 08:90:68:fb:8a:6e:8c:68:f2:44:52:3c:73:c9:3a: cf:0a:69:a9:5f:ee:de:30:60:02:80:9b:0d:ba:00: 2c:8f:5d:3c:89:86:e1:66:2a:f1:e7:17:0a:6f:46: 90:26:f7:1d:5f:88:25:2e:e6:6c:36:c3:9a:41:59: 04:16:8e:9c:e7:82:3f:41:30:2b:02:07:13:30:b2: 10:df:f0:88:84:cf:a5:79:67:00:64:45:6e:3f:47: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:67:04:76:8D:6D:19:35:59:60:19:7E:63:F2:36:4E:81:91:B8:C3 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7b:51:d8:11:ba:5a:07:b1:83:8b:8e:f9:20:b4:f3:82:dd: 8c:41:ab:87:34:b7:37:be:27:ec:a0:1c:76:9e:af:23:73:73: 39:f5:65:c5:a5:0f:7a:88:1d:88:b2:b5:62:40:ef:89:20:4c: 53:22:f0:02:28:80:ec:cf:86:40:d2:db:1c:da:f1:66:9f:b2: c6:52:45:d6:dc:21:dc:0d:5d:20:b2:d8:1e:2c:4a:63:ff:91: bd:76:b4:3f:bd:63:42:74:8c:21:0f:58:90:7a:ed:f9:e0:7a: 13:79:cf:79:db:39:7a:f0:f0:0c:37:22:d5:56:94:8e:69:fc: 11:cb:cf:9c:33:86:9a:88:65:0f:37:13:5d:8d:61:03:2f:c5: 48:74:bd:5d:bf:4d:80:0d:43:94:50:79:14:76:ef:20:f3:fa: 21:2a:fe:e0:a7:8a:b7:8e:01:c7:73:a9:1b:76:d6:ae:c1:17: 22:43:51:8d:c5:c9:bc:44:94:a5:ab:3f:be:42:d5:17:39:77: d9:7a:4c:8c:94:73:24:41:21:3d:0a:62:88:6f:34:68:a2:90: d9:ef:20:b9:be:f8:c4:86:d3:79:f6:72:31:e1:3d:a2:2b:bc: f2:a9:e9:7d:8f:f7:80:1c:84:9e:9b:ba:5d:fb:25:89:87:ce: 2c:84:1e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk4psexvm00aIKpJJWvbRT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwOTExMTIwMTE4WhcNMjUwOTEyMTIwMTE4WjAzMTEwLwYDVQQD EyhjNzY3MDQ3NjhkNmQxOTM1NTk2MDE5N2U2M2YyMzY0ZTgxOTFiOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDN3BtLZFfQh0t9Y0TOaxvcv+umi Xm6DugUxi2siv7JMh6Oz/okrKHT0wLAX2cS/GhLLJlZ5NEntyCPtiy5IGCY/wsH4 LOX2gfh0+yCDW6iDhSiWeNrAlCJZ4mpAkfibWYpKMQTBL+xugsbUxa9UhxLRsz50 dLDSaBaZMIhAoaC0ik3fW7ub7SrO8B2QhhtmWkzDJ6bRc247pWrKfPw4hFa67LEI kGj7im6MaPJEUjxzyTrPCmmpX+7eMGACgJsNugAsj108iYbhZirx5xcKb0aQJvcd X4glLuZsNsOaQVkEFo6c54I/QTArAgcTMLIQ3/CIhM+leWcAZEVuP0fn8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdnBHaNbRk1WWAZfmPyNk6BkbjDMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3tR2BG6 Wgexg4uO+SC084LdjEGrhzS3N74n7KAcdp6vI3NzOfVlxaUPeogdiLK1YkDviSBM UyLwAiiA7M+GQNLbHNrxZp+yxlJF1twh3A1dILLYHixKY/+RvXa0P71jQnSMIQ9Y kHrt+eB6E3nPeds5evDwDDci1VaUjmn8EcvPnDOGmohlDzcTXY1hAy/FSHS9Xb9N gA1DlFB5FHbvIPP6ISr+4KeKt44Bx3OpG3bWrsEXIkNRjcXJvESUpas/vkLVFzl3 2XpMjJRzJEEhPQpiiG80aKKQ2e8gub74xIbTefZyMeE9oiu88qnpfY/3gByEnpu6 XfsliYfOLIQeQw== -----END CERTIFICATE-----Generated at Thu Sep 11 15:45:23 2025 by rpki-client