$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: +od+QkCI3I31KygWcacuKG1/OBEEkw968s9KS/X2y9c= Subject key identifier: 1C:2C:9C:4E:BA:70:00:AA:0D:FA:B3:83:52:D8:E7:27:EF:68:86:18 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019961A26B84789D6669D282417446CEB4CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0710 Signing time: Fri 19 Sep 2025 11:00:58 +0000 Manifest this update: Fri 19 Sep 2025 11:00:58 +0000 Manifest next update: Sat 20 Sep 2025 11:00:58 +0000 Files and hashes: 1: 1wmzqwE2ku8n0Mm8ErGyhHCrJOk.roa (hash: c652pSMHzVee2CwYp/svFjVJzZcqt1kjmMsHG7p6sR4=) 2: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 3: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 4: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 5: DHpzmZTvBAxT-43rfcQUmYozPLE.roa (hash: i/1DwqMjkRxMvpb2yMahb4K0v+eBiFoV+4UTK3EmkHM=) 6: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 7: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: LfYr4YQ4fYUvsQjy8+gYheuqQQNoBSXMNy2jKpdre/I=) 8: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 9: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 10: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 11: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 12: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 13: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 14: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 15: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:61:a2:6b:84:78:9d:66:69:d2:82:41:74:46:ce:b4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Sep 19 11:00:58 2025 GMT Not After : Sep 20 11:00:58 2025 GMT Subject: CN=1c2c9c4eba7000aa0dfab38352d8e727ef688618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:c4:37:1f:97:3a:13:06:36:b1:aa:0e:76: 46:1b:54:3f:dd:9b:4d:9d:ec:a9:80:aa:7d:6b:37: 5a:1a:d1:f8:c3:6c:5b:3d:04:0f:9e:f7:67:f4:1a: 17:13:15:b1:fe:d4:9e:f5:43:c8:ae:4f:3f:85:97: 64:8f:db:c1:2d:65:96:17:33:3c:a3:83:fa:cd:fa: 1f:ac:29:0d:51:fd:8d:8b:1a:c8:59:95:5b:5f:85: cd:75:17:11:f9:d3:ca:1a:5e:4b:c9:12:c0:1d:45: ae:ec:79:ff:01:0c:ae:66:3e:90:55:68:e8:6d:81: 19:29:dc:7e:f2:9e:d1:d6:80:93:db:4e:4b:98:1e: 1a:e9:84:0f:26:72:8e:0e:11:98:c5:92:52:72:65: a2:9e:d5:de:96:56:f3:8a:03:5d:5a:0e:f2:e3:88: ba:45:fe:34:73:e2:6c:6a:b2:ca:67:38:46:b2:d4: ab:db:4d:51:0b:cb:83:d7:51:1d:87:bd:7e:00:ac: b1:dd:e8:b2:df:a4:78:57:e2:eb:a7:88:eb:37:48: 62:aa:00:78:88:f4:93:db:0c:8a:b6:fe:9e:6a:d7: a8:84:31:2c:64:52:f8:ab:c6:fc:40:95:67:fc:c2: f3:31:ab:09:80:f1:6f:f1:c2:16:50:6d:e5:25:a2: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2C:9C:4E:BA:70:00:AA:0D:FA:B3:83:52:D8:E7:27:EF:68:86:18 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f2:24:ce:e3:4f:40:17:24:e4:bf:36:95:b8:70:9b:07:72: 8e:1d:d9:31:ae:9e:09:af:56:02:94:41:af:7b:2b:0b:ff:63: 84:a5:6d:2f:af:ba:b4:a5:a7:9b:d8:37:08:3f:14:68:7a:bd: 7d:65:95:97:90:8b:68:98:51:20:ba:1c:e8:a5:85:09:7d:ab: 64:25:6a:06:d7:31:ee:1b:32:41:d4:71:7c:c8:42:13:c5:a5: 8d:2b:a0:0d:4b:bf:00:1a:ad:33:3e:1d:74:74:c6:54:dd:0d: 8e:1b:64:cf:df:6a:e9:58:b4:73:d9:a3:42:28:86:f3:c8:39: bc:7b:1c:11:35:d4:40:88:65:21:43:3b:a0:0a:40:d8:67:30: 6d:bb:6e:14:ee:81:39:b7:70:4b:0f:a5:6f:d2:e5:98:8f:74: f4:80:f6:d2:35:fb:12:3b:9b:01:f9:cc:89:dd:25:8e:f2:c7: 67:d7:1e:2a:10:6f:1a:fd:f7:b0:3a:ec:3b:59:9e:a1:e0:0e: d3:63:e5:b8:47:96:ba:5e:5e:b5:8c:19:32:bd:7d:0f:31:cf: ea:48:bb:4c:78:e4:c2:fb:27:ae:3c:57:1a:e1:54:a5:e1:d0: 6b:0a:36:b6:98:c1:d0:f9:1e:2e:17:01:96:29:97:b9:34:c9: 52:2c:57:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlhomuEeJ1madKCQXRGzrTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUwOTE5MTEwMDU4WhcNMjUwOTIwMTEwMDU4WjAzMTEwLwYDVQQD EygxYzJjOWM0ZWJhNzAwMGFhMGRmYWIzODM1MmQ4ZTcyN2VmNjg4NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+nENx+XOhMGNrGqDnZGG1Q/3ZtN neypgKp9azdaGtH4w2xbPQQPnvdn9BoXExWx/tSe9UPIrk8/hZdkj9vBLWWWFzM8 o4P6zfofrCkNUf2NixrIWZVbX4XNdRcR+dPKGl5LyRLAHUWu7Hn/AQyuZj6QVWjo bYEZKdx+8p7R1oCT205LmB4a6YQPJnKODhGYxZJScmWintXellbzigNdWg7y44i6 Rf40c+JsarLKZzhGstSr201RC8uD11Edh71+AKyx3eiy36R4V+Lrp4jrN0hiqgB4 iPST2wyKtv6eateohDEsZFL4q8b8QJVn/MLzMasJgPFv8cIWUG3lJaJF2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwsnE66cACqDfqzg1LY5yfvaIYYMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPIkzuNP QBck5L82lbhwmwdyjh3ZMa6eCa9WApRBr3srC/9jhKVtL6+6tKWnm9g3CD8UaHq9 fWWVl5CLaJhRILoc6KWFCX2rZCVqBtcx7hsyQdRxfMhCE8WljSugDUu/ABqtMz4d dHTGVN0Njhtkz99q6Vi0c9mjQiiG88g5vHscETXUQIhlIUM7oApA2GcwbbtuFO6B ObdwSw+lb9LlmI909ID20jX7EjubAfnMid0ljvLHZ9ceKhBvGv33sDrsO1meoeAO 02PluEeWul5etYwZMr19DzHP6ki7THjkwvsnrjxXGuFUpeHQawo2tpjB0PkeLhcB limXuTTJUixXYg== -----END CERTIFICATE-----Generated at Fri Sep 19 12:47:19 2025 by rpki-client