$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: C4tAOZAcOd/9f2txOjN5lBxe/bOv57JWGCqwV50s+UE= Subject key identifier: F4:FC:77:15:FD:D1:03:4B:86:77:36:84:1F:EC:13:5F:83:01:06:FF Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 01974779CE6C999A34349DB43273CD90681E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 158F Signing time: Fri 06 Jun 2025 23:00:54 +0000 Manifest this update: Fri 06 Jun 2025 23:00:54 +0000 Manifest next update: Sat 07 Jun 2025 23:00:54 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: uzafsPE2p3wAPaE1BV4ydGC1zChFjYsoeEHJ3IKeeD0=) 6: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 7: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 8: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 9: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 10: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 11: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 12: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:79:ce:6c:99:9a:34:34:9d:b4:32:73:cd:90:68:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jun 6 23:00:54 2025 GMT Not After : Jun 7 23:00:54 2025 GMT Subject: CN=f4fc7715fdd1034b867736841fec135f830106ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f8:55:63:15:d8:b3:c4:73:b8:6a:c4:d3:e4: b4:1b:b3:47:4e:b8:c2:43:11:48:24:0c:08:2b:5c: dc:39:9f:65:01:ae:c4:a2:dc:09:fd:0d:43:ea:2d: fd:32:00:5b:b6:68:73:91:20:bf:55:2b:82:41:09: 86:29:a6:af:91:86:8a:e0:6f:6e:93:0b:29:ad:91: 3f:3a:ce:3a:70:9c:2d:c0:c9:0a:ed:44:c4:8c:65: e8:35:5e:ba:64:0a:c4:58:d4:25:59:8b:a7:e0:e7: e0:a0:3f:5f:90:b3:83:39:c2:73:0d:05:b1:f3:cc: b1:ce:27:e7:16:4e:a1:24:ad:d1:99:8e:61:75:fe: bf:ef:98:d3:01:d5:11:d1:88:a0:e1:e1:75:e9:dd: b6:7e:b7:cb:b1:94:9b:db:a0:a6:25:53:20:04:30: 8a:3d:5f:c4:2d:c9:d5:c7:94:ea:0d:16:3b:ff:c8: a2:03:77:68:bb:ce:2b:69:2e:ac:c8:32:38:07:b6: ba:54:51:fc:91:4d:6b:48:b8:85:84:50:0c:79:48: 34:2e:26:32:dc:eb:52:06:9f:1c:c6:ab:50:0d:1f: 74:77:40:4b:69:de:f4:a5:57:d6:3d:25:ce:29:f3: 0c:40:cc:00:98:86:ff:ba:90:02:f3:e5:c4:d8:e6: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:77:15:FD:D1:03:4B:86:77:36:84:1F:EC:13:5F:83:01:06:FF X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:55:0c:3f:cf:2c:e3:cd:72:8a:79:07:2c:f1:8a:27:5d:10: 57:58:32:15:b9:0b:55:01:c4:0d:00:3d:9d:0f:15:ed:2c:7e: 78:33:c0:5e:9c:a4:77:71:a6:2c:fd:94:9a:ac:36:6c:6c:d3: 86:da:cc:c3:b3:32:db:a0:50:89:71:bc:32:05:07:cf:94:b8: 83:63:94:90:43:41:9a:89:f8:c1:b8:b9:8b:fd:16:ef:62:b9: a4:47:20:07:87:7c:37:1a:20:55:d4:c9:24:8a:e2:ec:a9:b9: c2:eb:47:2c:1d:a2:01:39:7d:83:3d:c4:3f:a2:bf:f8:5d:59: 0b:5e:09:0d:7e:c4:c2:15:4d:1e:27:8b:fa:6f:ce:87:62:14: 1d:87:fc:b8:b9:62:b2:b7:0d:d9:7b:cd:b0:0b:49:68:5d:9f: 4f:c5:ac:67:dc:b9:7f:43:3a:c9:8e:42:a9:bd:5c:39:c9:09: dd:9e:be:63:46:a5:57:19:ce:9a:08:2a:26:f1:9a:f2:64:b4: fa:ea:fd:ad:d9:77:e9:7a:a6:c1:4a:a8:c2:0f:c1:d5:5e:d6: 44:00:9b:c2:7e:8d:24:e6:f3:49:ec:58:74:57:0a:e7:67:67: 91:e0:26:d2:9b:43:2b:b7:56:b4:68:98:4f:3b:5f:ad:f8:f5: 1f:b3:20:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHec5smZo0NJ20MnPNkGgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNjA2MjMwMDU0WhcNMjUwNjA3MjMwMDU0WjAzMTEwLwYDVQQD EyhmNGZjNzcxNWZkZDEwMzRiODY3NzM2ODQxZmVjMTM1ZjgzMDEwNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vhVYxXYs8RzuGrE0+S0G7NHTrjC QxFIJAwIK1zcOZ9lAa7EotwJ/Q1D6i39MgBbtmhzkSC/VSuCQQmGKaavkYaK4G9u kwsprZE/Os46cJwtwMkK7UTEjGXoNV66ZArEWNQlWYun4OfgoD9fkLODOcJzDQWx 88yxzifnFk6hJK3RmY5hdf6/75jTAdUR0Yig4eF16d22frfLsZSb26CmJVMgBDCK PV/ELcnVx5TqDRY7/8iiA3dou84raS6syDI4B7a6VFH8kU1rSLiFhFAMeUg0LiYy 3OtSBp8cxqtQDR90d0BLad70pVfWPSXOKfMMQMwAmIb/upAC8+XE2OYvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT8dxX90QNLhnc2hB/sE1+DAQb/MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVUMP88s 481yinkHLPGKJ10QV1gyFbkLVQHEDQA9nQ8V7Sx+eDPAXpykd3GmLP2Umqw2bGzT htrMw7My26BQiXG8MgUHz5S4g2OUkENBmon4wbi5i/0W72K5pEcgB4d8NxogVdTJ JIri7Km5wutHLB2iATl9gz3EP6K/+F1ZC14JDX7EwhVNHieL+m/Oh2IUHYf8uLli srcN2XvNsAtJaF2fT8WsZ9y5f0M6yY5Cqb1cOckJ3Z6+Y0alVxnOmggqJvGa8mS0 +ur9rdl36XqmwUqowg/B1V7WRACbwn6NJObzSexYdFcK52dnkeAm0ptDK7dWtGiY Tztfrfj1H7Mgyw== -----END CERTIFICATE-----Generated at Sat Jun 7 06:22:09 2025 by rpki-client