$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft File: fiCwNOLEl7GIRIje8QaXJwR2UCk.mft (raw, json) Hash identifier: YO4B+yDNgY+5PtN4AN+4BHHPP1zL46Vdz/tv/LNHqFI= Subject key identifier: 04:8D:88:D1:8A:B8:0A:98:2D:43:8D:26:C4:F2:FC:DA:8A:E3:16:22 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019918E43E7A7056F436DCCBFDEA3419A7D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft Manifest number: 0802 Signing time: Fri 05 Sep 2025 08:00:35 +0000 Manifest this update: Fri 05 Sep 2025 08:00:35 +0000 Manifest next update: Sat 06 Sep 2025 08:00:35 +0000 Files and hashes: 1: 1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa (hash: ta8CMfbMk29Fhndl6ZZIYNJy1DPsZd7Ckx7RxOALCt0=) 2: 4BgSPKv6u7Nvejd0u9LkHaV6_JY.roa (hash: bwSQuPs4B3f2sRZ41JXYWa4n5L7eymXGexKeSzaf/Z0=) 3: 9BTeG96mTmm61kLVVLDk8ZHO6Sg.roa (hash: lT5ZY4XPaUzn3twrU0g36b30ZpJbBwPFITUioq3NsOs=) 4: EZ6GvQ5OJx9hJ9bye3YVuWnx4SA.roa (hash: DLhGIqBbrMSXsmwMEMMTuhsVW574+yfjuG4Z26XUuqg=) 5: H8rXW80yzjDwYfO1_MwWk5OH3jU.roa (hash: zhGby14CHFbYwyq/g0pFACCjs2O75GSjpQWLRvdMLlc=) 6: MX-RxL21AwQXVelzA4IrJb3dj-4.roa (hash: dxUOm/3bYpTRNviiYZNfM07knnqfGC+IudqU1B6rLJM=) 7: NPUEpZ4h19WtFvLgpubAEAvedaY.roa (hash: 3sPH63d3TcoprXu5QSKKo21b+DlJWtRetrDy8WvW554=) 8: PaJ1NV9XG903UofLMhbqDFeoGRI.roa (hash: cV1+9IwWjMr3CVVFN5PwdUeZyMxTTrMoErA9Ufghrjc=) 9: QoiwAQScg-dc95rPf84B4Wox308.roa (hash: hUermyWOUkw0vBALgvfn4enLT/yI9Ja11y+e6Svk8t0=) 10: U9KdXmhyHuPRB4I24nyIZuy9hRA.roa (hash: sYu5pSPe7UpfkonZAKhKhsjpVtyLZPnhGwSbbl2Qc+0=) 11: _c7ADB2yCG7ygmEJVKO5UMjX1Mg.roa (hash: wQQa9Mnur4vqn575tKy3l6q/9fmjlstZd96o2yaRPEI=) 12: e6ZG1PGYjUHyi4CUDkZ2N9ASRQo.roa (hash: jnhCXJBws3bktWWp2eJKi7mQgOmukoDVq7RoHExPILE=) 13: fiCwNOLEl7GIRIje8QaXJwR2UCk.crl (hash: /cQvVjKaBeO+BfWejsiAIxsZWVgo9ZFwSm3zv9/9+ew=) 14: lvS6vh9BhXk-DDoC3lHO0j30XVs.roa (hash: NE22Cbu2Lr6NtvVCV3Mb0Mbcy2GjF6nALD39UXv5vqw=) 15: rDdl4wb7d9_eC22yvGjUcZm-ZF0.roa (hash: IxVCz/Sbbi4L+BIjve8uTsWyEfGjkV7LQaO0qi7hXQI=) 16: rnzHpD5XxeUp5YJtUlihh6CBwoo.roa (hash: 76ChEFu4A0AXVEzfi32VqxSvHiEcnNNAHSiw0bPPWgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:18:e4:3e:7a:70:56:f4:36:dc:cb:fd:ea:34:19:a7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Sep 5 08:00:35 2025 GMT Not After : Sep 6 08:00:35 2025 GMT Subject: CN=048d88d18ab80a982d438d26c4f2fcda8ae31622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:52:88:b5:8b:49:2c:10:a4:c4:1a:a8:e9: cd:84:e3:28:84:96:1c:63:c5:e7:75:23:2b:c3:ea: b5:ce:6f:e7:c0:8b:e6:5d:05:c9:5a:f6:1e:f7:33: 0b:d7:a2:bd:c7:f5:77:9d:60:15:b7:cb:fb:94:bc: ab:b0:eb:3b:fd:da:57:b2:ac:ef:ed:bf:15:23:e6: fe:cb:37:2e:07:79:22:32:61:5b:0c:88:e5:78:31: d7:e3:74:dc:37:ff:bb:d8:63:27:f4:65:fa:26:50: 2f:77:db:8b:d3:b2:9b:4a:a8:12:14:36:5e:c3:17: a9:67:48:c6:39:6c:41:a5:b5:ed:90:86:c4:55:0a: df:ab:d7:ee:db:f6:c0:61:3c:48:9b:53:9e:3e:bd: d2:28:e2:d4:06:4e:e6:f4:fd:98:b3:b7:85:ac:1d: 85:43:1c:e6:86:77:c3:68:f8:67:ab:c2:77:86:ee: 6e:32:38:6c:44:20:84:fe:ac:78:7a:2d:ce:af:21: 18:d0:97:86:43:b1:e4:f3:59:44:79:39:f5:6a:31: 41:5f:a8:ae:39:88:7d:58:ff:03:f2:73:47:b9:89: 73:7d:2f:5c:1d:97:e1:5c:a5:d7:dd:6d:b4:01:7a: 32:75:c4:f6:7e:38:b6:4e:84:37:9b:f4:26:c7:d4: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8D:88:D1:8A:B8:0A:98:2D:43:8D:26:C4:F2:FC:DA:8A:E3:16:22 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:95:2e:bf:e4:ff:a3:00:a0:b7:82:7d:56:f1:27:91:33:d9: 9f:03:6a:bf:be:68:e0:73:55:33:cb:c4:51:6e:69:27:b5:81: cc:31:d9:f2:6f:2c:09:ae:3a:64:89:e5:d2:63:87:b9:18:f9: 08:cb:0c:0f:a7:e8:14:e6:ba:5b:62:8e:fe:31:3e:5e:c1:23: e9:8b:bb:00:e5:b5:76:d2:8b:17:f9:c2:0d:3c:56:44:81:45: 4e:f9:18:65:03:72:73:93:17:72:18:41:64:a8:fc:dc:f3:b5: c0:6c:d7:56:c5:e2:88:99:48:73:18:5d:b3:1a:8f:15:b6:c7: 79:af:b5:7d:f5:99:79:dc:c5:6e:cd:7d:90:65:36:19:91:84: 24:4d:82:ff:a5:a9:77:27:db:89:78:98:58:9e:bf:33:e5:24: 1f:5b:28:7b:67:51:6f:fc:4e:0a:41:77:72:11:2d:5a:f6:49: b9:ed:55:26:7b:a5:27:84:5a:c9:1f:8e:58:e5:1c:40:7c:b2: 89:1c:27:b1:f7:93:34:dc:9b:6a:1e:f9:34:07:78:c7:af:bf: 42:d6:f2:61:0a:fe:1e:c3:b6:52:b9:60:5e:c1:1d:b7:78:c5: cd:20:dc:2c:26:17:16:cb:82:d4:d9:cf:95:cf:33:76:a5:4e: 66:8d:b0:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkY5D56cFb0NtzL/eo0GafSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUwOTA1MDgwMDM1WhcNMjUwOTA2MDgwMDM1WjAzMTEwLwYDVQQD EygwNDhkODhkMThhYjgwYTk4MmQ0MzhkMjZjNGYyZmNkYThhZTMxNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunRSiLWLSSwQpMQaqOnNhOMohJYc Y8XndSMrw+q1zm/nwIvmXQXJWvYe9zML16K9x/V3nWAVt8v7lLyrsOs7/dpXsqzv 7b8VI+b+yzcuB3kiMmFbDIjleDHX43TcN/+72GMn9GX6JlAvd9uL07KbSqgSFDZe wxepZ0jGOWxBpbXtkIbEVQrfq9fu2/bAYTxIm1OePr3SKOLUBk7m9P2Ys7eFrB2F QxzmhnfDaPhnq8J3hu5uMjhsRCCE/qx4ei3OryEY0JeGQ7Hk81lEeTn1ajFBX6iu OYh9WP8D8nNHuYlzfS9cHZfhXKXX3W20AXoydcT2fji2ToQ3m/Qmx9SY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASNiNGKuAqYLUONJsTy/NqK4xYiMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5Uuv+T/ owCgt4J9VvEnkTPZnwNqv75o4HNVM8vEUW5pJ7WBzDHZ8m8sCa46ZInl0mOHuRj5 CMsMD6foFOa6W2KO/jE+XsEj6Yu7AOW1dtKLF/nCDTxWRIFFTvkYZQNyc5MXchhB ZKj83PO1wGzXVsXiiJlIcxhdsxqPFbbHea+1ffWZedzFbs19kGU2GZGEJE2C/6Wp dyfbiXiYWJ6/M+UkH1soe2dRb/xOCkF3chEtWvZJue1VJnulJ4RayR+OWOUcQHyy iRwnsfeTNNybah75NAd4x6+/QtbyYQr+HsO2UrlgXsEdt3jFzSDcLCYXFsuC1NnP lc8zdqVOZo2wWg== -----END CERTIFICATE-----Generated at Fri Sep 5 10:05:53 2025 by rpki-client