$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: vHlSTyUFWGzdvBtZMvUbRZ4LapfZyz9fN1Habbh1hAU= Subject key identifier: E9:9C:04:0A:72:81:2B:7F:7F:D8:C2:6D:06:29:20:A0:81:77:DC:36 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 01993870218F757A78A5EBD64C7173C089B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 161B Signing time: Thu 11 Sep 2025 11:01:36 +0000 Manifest this update: Thu 11 Sep 2025 11:01:36 +0000 Manifest next update: Fri 12 Sep 2025 11:01:36 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: FjBLF1Mm0SOE7d2NS707FCiHFR0WwAnX5pM1ck5INn0=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 16: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) 17: zg1raSPKfpMRz7s0HIi-A3JYptA.roa (hash: kmxhHZd/GJPpQ6FeMLmxw983rJJvr08+WYaMz1jD/YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:38:70:21:8f:75:7a:78:a5:eb:d6:4c:71:73:c0:89:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Sep 11 11:01:36 2025 GMT Not After : Sep 12 11:01:36 2025 GMT Subject: CN=e99c040a72812b7f7fd8c26d062920a08177dc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:1b:44:dc:44:0a:9e:36:42:ff:34:42:39: cb:af:17:c8:25:e5:5c:9f:ff:51:c9:d3:03:75:f0: 41:b3:c6:fe:d0:6c:b5:07:ad:9f:09:11:3e:32:17: 34:b2:47:ab:1f:fe:0c:36:9b:0e:eb:d3:fc:4f:97: 6f:0f:b3:60:09:f7:21:eb:39:f9:27:4a:ff:26:89: 0d:f4:6a:66:2e:99:c4:6c:8e:5c:97:58:c2:c0:fd: 21:53:3c:96:42:d4:b2:b0:46:6a:48:3f:2d:66:65: 66:cf:f7:cd:f9:df:c7:9b:2a:f7:bd:84:66:83:5f: c6:14:c4:dc:58:22:9a:60:d1:a9:81:e7:a8:3d:0c: df:6e:17:87:a7:98:e0:f5:7a:6b:fd:fd:02:02:02: 79:7f:85:4d:60:3c:04:84:0e:dd:50:fa:4f:d4:98: 8e:98:bd:17:7d:7b:22:7e:d4:47:3b:f7:1b:5d:ad: 29:06:de:18:5d:3d:b1:30:54:b6:c7:db:58:dc:b9: cf:fe:cc:c5:e6:7d:a7:a5:3e:9f:e9:6a:81:5a:2f: 42:2b:04:b3:42:09:ae:99:bf:bd:60:fe:cc:34:86: 0a:cf:70:ed:b3:c8:1d:56:ac:67:5c:46:59:7a:f6: af:83:a7:5a:e9:88:3e:dc:3e:b9:8a:43:95:33:9c: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:04:0A:72:81:2B:7F:7F:D8:C2:6D:06:29:20:A0:81:77:DC:36 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9c:ee:90:b8:d9:48:c4:47:c6:d5:0b:50:99:7a:0d:e7:2e: 70:7c:f4:05:44:ff:be:c4:ae:a7:c0:75:c6:78:da:17:cf:0a: 47:82:d9:d2:82:57:40:35:12:6f:84:25:ee:41:7f:2d:a6:43: 73:55:02:62:57:94:85:79:90:74:04:f8:20:0e:79:b2:94:1c: 2c:71:79:e5:91:27:58:f2:b4:e8:0f:dc:b8:8c:c6:71:4e:8b: 78:55:7f:93:91:f8:f6:db:20:a3:b1:1f:eb:27:33:5f:b1:4d: cd:7f:af:40:32:78:c7:a2:c7:30:5d:8e:96:66:09:fe:1b:20: e0:3a:96:c1:d6:3b:a9:fb:ac:bf:84:4b:7e:1d:b2:44:21:f4: c8:ec:7a:df:85:ea:5b:ee:15:93:98:19:18:2d:2c:6d:48:11: 09:58:91:bf:0f:af:15:0a:0d:14:a3:88:b8:34:ee:f9:7b:2a: f8:87:24:c1:a3:ee:a1:92:0e:73:e3:5e:91:68:82:c2:59:e8: 4c:89:e3:57:8a:15:5c:bc:6d:d6:ba:2c:24:00:35:13:00:bf: 78:4c:5c:ba:90:ca:58:49:47:21:74:d5:20:fa:a5:48:41:10: bc:a3:df:94:8a:21:21:7f:af:b7:75:47:47:6a:2c:f7:5b:aa: 3b:47:e6:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk4cCGPdXp4pevWTHFzwIm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwOTExMTEwMTM2WhcNMjUwOTEyMTEwMTM2WjAzMTEwLwYDVQQD EyhlOTljMDQwYTcyODEyYjdmN2ZkOGMyNmQwNjI5MjBhMDgxNzdkYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv30bRNxECp42Qv80QjnLrxfIJeVc n/9RydMDdfBBs8b+0Gy1B62fCRE+Mhc0skerH/4MNpsO69P8T5dvD7NgCfch6zn5 J0r/JokN9GpmLpnEbI5cl1jCwP0hUzyWQtSysEZqSD8tZmVmz/fN+d/Hmyr3vYRm g1/GFMTcWCKaYNGpgeeoPQzfbheHp5jg9Xpr/f0CAgJ5f4VNYDwEhA7dUPpP1JiO mL0XfXsiftRHO/cbXa0pBt4YXT2xMFS2x9tY3LnP/szF5n2npT6f6WqBWi9CKwSz Qgmumb+9YP7MNIYKz3Dts8gdVqxnXEZZevavg6da6Yg+3D65ikOVM5xn1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmcBApygSt/f9jCbQYpIKCBd9w2MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZzukLjZ SMRHxtULUJl6DecucHz0BUT/vsSup8B1xnjaF88KR4LZ0oJXQDUSb4Ql7kF/LaZD c1UCYleUhXmQdAT4IA55spQcLHF55ZEnWPK06A/cuIzGcU6LeFV/k5H49tsgo7Ef 6yczX7FNzX+vQDJ4x6LHMF2OlmYJ/hsg4DqWwdY7qfusv4RLfh2yRCH0yOx634Xq W+4Vk5gZGC0sbUgRCViRvw+vFQoNFKOIuDTu+Xsq+IckwaPuoZIOc+NekWiCwlno TInjV4oVXLxt1rosJAA1EwC/eExcupDKWElHIXTVIPqlSEEQvKPflIohIX+vt3VH R2os91uqO0fmsw== -----END CERTIFICATE-----Generated at Thu Sep 11 13:40:47 2025 by rpki-client