$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: yuzL/ZxAqjaZDqyzIKuqegyrmY9KXVGKUUuYquOnRz4= Subject key identifier: 6E:70:94:33:3A:49:BE:39:3A:9E:91:DC:AA:03:6B:98:DB:61:1F:0E Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019A559B93850EBAE50E3438495DFD8FD795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 0791 Signing time: Wed 05 Nov 2025 20:00:50 +0000 Manifest this update: Wed 05 Nov 2025 20:00:50 +0000 Manifest next update: Thu 06 Nov 2025 20:00:50 +0000 Files and hashes: 1: 1wmzqwE2ku8n0Mm8ErGyhHCrJOk.roa (hash: c652pSMHzVee2CwYp/svFjVJzZcqt1kjmMsHG7p6sR4=) 2: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 3: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (hash: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=) 4: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 5: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 6: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: kJaWPTKenT71VXyO7st2+irvSb3+Z9/9+wfqMWgsNw4=) 7: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 8: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 9: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 10: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 11: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 12: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 13: p8XI18_G0w6VQzp-cFuSc-YU7KU.roa (hash: 5L36hI/Ib9EXnAz7w+VyYhvbv64/xZKpeIB+xqORWK4=) 14: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 15: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:55:9b:93:85:0e:ba:e5:0e:34:38:49:5d:fd:8f:d7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Nov 5 20:00:50 2025 GMT Not After : Nov 6 20:00:50 2025 GMT Subject: CN=6e7094333a49be393a9e91dcaa036b98db611f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:cc:8a:6f:ad:ad:49:78:56:a1:e2:48:d2: 86:62:41:33:cd:ab:59:f3:a1:d3:42:26:4d:bb:a8: ca:7d:d1:77:42:28:ea:00:66:9b:47:f7:45:5d:2b: ea:2c:75:4e:69:6a:7c:49:30:fe:23:cc:40:f8:27: 43:21:24:e6:b0:dd:31:34:51:53:dc:db:b3:04:35: a2:17:a9:1d:e1:79:44:f5:9a:af:bf:52:5b:d9:e7: 14:b2:f9:59:65:ed:d1:3d:3c:cc:bc:9d:84:8a:95: b2:3e:95:44:ca:c0:d5:02:ac:e9:04:29:88:e7:f3: c6:0b:0b:82:f5:36:23:4f:f9:6f:79:9c:b2:c2:8a: ba:8a:be:da:a0:2e:51:9f:5d:ed:a8:0a:59:f5:b0: 09:95:d1:b6:ed:ed:20:20:86:a4:d7:e2:2d:0a:6b: 43:19:a1:0b:77:ae:2b:37:0e:fc:62:b0:cd:5c:a8: 46:be:5b:a8:3e:de:e8:1c:6b:51:b1:f1:ff:be:57: a2:dc:39:41:c4:52:6b:91:90:65:e0:06:3d:fa:a0: 8f:24:22:d6:93:73:1d:53:17:0e:d6:c9:68:24:32: 51:5e:de:c4:d0:c2:52:df:5e:d9:3c:40:ae:cf:72: 73:e0:4b:31:70:f0:84:c2:6c:95:80:9b:db:3c:fb: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:70:94:33:3A:49:BE:39:3A:9E:91:DC:AA:03:6B:98:DB:61:1F:0E X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a7:e5:c6:07:77:cf:9d:fe:cb:2e:1a:4d:fa:2d:d9:c3:e9: 9d:75:41:2c:cf:da:d5:c3:6b:94:08:80:e8:fb:f0:c6:d4:4d: 59:74:22:de:83:50:96:03:ca:0d:c7:8f:d2:76:a9:5a:79:4d: 97:77:d9:3b:28:e5:71:3d:b8:64:3a:79:6f:b0:12:ea:cf:ff: 24:16:36:dc:58:d9:32:c4:45:0d:da:52:28:ed:6b:42:67:da: 5a:83:c7:6b:62:23:bf:55:25:d7:55:20:f4:c6:a4:6d:d8:3f: bc:10:99:84:cd:fe:68:31:21:79:e6:7c:31:b8:60:92:18:ad: c1:54:bd:a4:62:53:b1:eb:2e:44:92:37:84:95:d7:b0:98:64: 08:07:60:ce:36:6a:bc:80:56:cf:bd:2b:f0:b3:e9:71:c1:8b: c3:70:f9:9f:5f:b3:ac:a8:f8:32:78:c9:b6:40:87:bb:e9:77: 31:f0:53:67:53:25:8c:19:10:e3:27:1d:d5:88:da:2e:e4:4f: 66:e6:62:0b:9a:83:ef:08:5a:10:96:cf:e9:d6:3a:4c:d5:d5: 72:ec:ee:48:3f:38:fa:b6:ab:c6:f2:60:40:e4:92:31:4d:f0: fa:cf:32:45:8a:80:d6:67:05:e6:2f:6f:73:da:46:56:ad:54: 00:a6:a9:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpVm5OFDrrlDjQ4SV39j9eVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMTA1MjAwMDUwWhcNMjUxMTA2MjAwMDUwWjAzMTEwLwYDVQQD Eyg2ZTcwOTQzMzNhNDliZTM5M2E5ZTkxZGNhYTAzNmI5OGRiNjExZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUjMim+trUl4VqHiSNKGYkEzzatZ 86HTQiZNu6jKfdF3QijqAGabR/dFXSvqLHVOaWp8STD+I8xA+CdDISTmsN0xNFFT 3NuzBDWiF6kd4XlE9Zqvv1Jb2ecUsvlZZe3RPTzMvJ2EipWyPpVEysDVAqzpBCmI 5/PGCwuC9TYjT/lveZyywoq6ir7aoC5Rn13tqApZ9bAJldG27e0gIIak1+ItCmtD GaELd64rNw78YrDNXKhGvluoPt7oHGtRsfH/vlei3DlBxFJrkZBl4AY9+qCPJCLW k3MdUxcO1sloJDJRXt7E0MJS317ZPECuz3Jz4EsxcPCEwmyVgJvbPPvvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5wlDM6Sb45Op6R3KoDa5jbYR8OMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqflxgd3 z53+yy4aTfot2cPpnXVBLM/a1cNrlAiA6PvwxtRNWXQi3oNQlgPKDceP0napWnlN l3fZOyjlcT24ZDp5b7AS6s//JBY23FjZMsRFDdpSKO1rQmfaWoPHa2Ijv1Ul11Ug 9Makbdg/vBCZhM3+aDEheeZ8MbhgkhitwVS9pGJTsesuRJI3hJXXsJhkCAdgzjZq vIBWz70r8LPpccGLw3D5n1+zrKj4MnjJtkCHu+l3MfBTZ1MljBkQ4ycd1YjaLuRP ZuZiC5qD7whaEJbP6dY6TNXVcuzuSD84+rarxvJgQOSSMU3w+s8yRYqA1mcF5i9v c9pGVq1UAKapvg== -----END CERTIFICATE-----Generated at Thu Nov 6 03:44:27 2025 by rpki-client