$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: M2TsvgqNW/CD3MBRhT1CTLKa3IIo5dpYTVjUQgYXHLs= Subject key identifier: 0E:FC:9A:4D:A0:D8:37:DF:8F:9F:4F:AE:98:D5:9A:BE:7D:41:1A:0D Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019A2063FCC9FE810B80DE7B50B105805BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1709 Signing time: Sun 26 Oct 2025 12:00:14 +0000 Manifest this update: Sun 26 Oct 2025 12:00:14 +0000 Manifest next update: Mon 27 Oct 2025 12:00:14 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: AUJlTI7qlFuZBqYNtseczKVZY7o.roa (hash: lrFJFDQHqIF3d1QaDadpDFGnq9WB4xACkbFUlWi2D+Q=) 4: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 5: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 6: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: Vnf33PgOuNcbFQvgrsH2OO0EDSj+CQsi8ag9SPz0BYk=) 7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 12: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 13: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:20:63:fc:c9:fe:81:0b:80:de:7b:50:b1:05:80:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Oct 26 12:00:14 2025 GMT Not After : Oct 27 12:00:14 2025 GMT Subject: CN=0efc9a4da0d837df8f9f4fae98d59abe7d411a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:f2:21:6a:68:d6:ed:ad:74:33:b8:4d:a3: e9:63:79:7a:2e:bf:7e:60:76:71:cc:27:ce:51:a9: aa:d5:61:8a:84:c0:68:e6:f0:47:9d:91:3e:d7:44: 04:98:e9:66:18:23:70:19:45:bc:d5:d7:f5:bf:20: 59:c9:9c:45:e9:78:cf:00:03:1a:ad:7b:03:6b:e4: fb:88:20:eb:60:dd:e6:54:ec:cb:08:80:8e:63:a9: 42:f1:6d:45:43:30:02:ae:ec:44:91:22:e8:41:ab: 8f:53:9b:c9:f6:59:1c:0b:ac:30:6e:f1:1e:3f:6f: 59:4f:79:5c:ae:df:da:87:90:9a:d9:c8:3a:da:99: 7d:ed:42:f9:ae:ec:82:d4:7c:9c:f9:f1:95:e5:35: 3a:93:18:13:6e:1a:fb:51:65:09:c9:49:33:9c:da: 62:e8:49:28:3c:63:00:c4:28:2d:a7:41:6a:81:54: f3:1b:f6:9c:7e:5f:62:b2:4e:26:40:3a:27:4c:be: cd:d4:5f:5a:4f:57:f5:d8:f3:9e:03:ad:6e:d9:e0: 67:75:8c:b0:f5:65:c2:98:0d:bd:a4:3b:5b:d8:82: 9b:e9:d4:0b:9f:9d:27:7a:9d:08:de:78:c8:9f:84: 23:ac:3f:6f:05:c6:cc:6b:a4:71:b5:f0:db:f3:6a: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FC:9A:4D:A0:D8:37:DF:8F:9F:4F:AE:98:D5:9A:BE:7D:41:1A:0D X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1b:29:54:6d:b8:93:6b:25:4f:19:99:b0:04:5a:de:d7:80: 07:6f:49:8a:af:a9:da:14:0e:7f:4e:92:32:00:3c:2c:81:98: ae:a5:4c:7d:12:a5:f9:78:83:c1:14:26:53:35:ba:49:f5:af: 7b:85:e2:64:9c:6d:03:41:b7:c1:5f:4f:a2:98:61:0f:74:a0: f4:2a:17:bf:07:92:43:f3:44:f9:9a:1a:be:73:8b:7f:26:43: 04:cb:83:93:e3:f8:09:24:fa:d5:92:83:88:e7:d1:3b:04:a6: 7a:7e:97:4b:45:ce:e4:c4:8d:c6:c7:5e:66:ae:ed:34:81:11: 70:66:45:f9:ba:44:74:02:ee:28:15:26:ef:f3:78:de:69:87: 21:d0:a4:70:36:08:f7:2c:7f:70:76:b6:f9:7c:de:e5:46:ad: 89:05:d5:fa:d4:23:54:9f:1b:6f:3b:77:a4:b3:e5:3a:c9:06: 5a:42:33:24:11:1c:54:b3:6c:08:31:5c:09:1f:7d:e8:c1:e9: c4:df:06:2f:7e:49:9f:25:c6:36:30:1f:29:f0:ff:b1:10:b4: 8b:fb:0f:c2:97:f2:cb:27:dc:c5:d7:a9:65:70:88:97:0e:e9: f6:16:c8:3a:21:f2:0f:6e:33:df:c7:ea:ff:a2:6e:5a:40:74: fe:ae:81:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZogY/zJ/oELgN57ULEFgFvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUxMDI2MTIwMDE0WhcNMjUxMDI3MTIwMDE0WjAzMTEwLwYDVQQD EygwZWZjOWE0ZGEwZDgzN2RmOGY5ZjRmYWU5OGQ1OWFiZTdkNDExYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/yIWpo1u2tdDO4TaPpY3l6Lr9+ YHZxzCfOUamq1WGKhMBo5vBHnZE+10QEmOlmGCNwGUW81df1vyBZyZxF6XjPAAMa rXsDa+T7iCDrYN3mVOzLCICOY6lC8W1FQzACruxEkSLoQauPU5vJ9lkcC6wwbvEe P29ZT3lcrt/ah5Ca2cg62pl97UL5ruyC1Hyc+fGV5TU6kxgTbhr7UWUJyUkznNpi 6EkoPGMAxCgtp0FqgVTzG/acfl9isk4mQDonTL7N1F9aT1f12POeA61u2eBndYyw 9WXCmA29pDtb2IKb6dQLn50nep0I3njIn4QjrD9vBcbMa6RxtfDb82p3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA78mk2g2Dffj59PrpjVmr59QRoNMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBspVG24 k2slTxmZsARa3teAB29Jiq+p2hQOf06SMgA8LIGYrqVMfRKl+XiDwRQmUzW6SfWv e4XiZJxtA0G3wV9PophhD3Sg9CoXvweSQ/NE+ZoavnOLfyZDBMuDk+P4CST61ZKD iOfROwSmen6XS0XO5MSNxsdeZq7tNIERcGZF+bpEdALuKBUm7/N43mmHIdCkcDYI 9yx/cHa2+Xze5UatiQXV+tQjVJ8bbzt3pLPlOskGWkIzJBEcVLNsCDFcCR996MHp xN8GL35JnyXGNjAfKfD/sRC0i/sPwpfyyyfcxdepZXCIlw7p9hbIOiHyD24z38fq /6JuWkB0/q6BDA== -----END CERTIFICATE-----Generated at Sun Oct 26 20:30:58 2025 by rpki-client