$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: aiQs/AIUYpvSk0Q8/VVOcITerAxtZS1E+zy7k8/wxcc= Subject key identifier: 25:72:3D:F0:82:D6:72:C1:8C:6B:E5:EE:6D:E6:95:D6:B8:91:C7:69 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019A1504ECA26E24B4E89C1E3DBD3996F7BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 10C1 Signing time: Fri 24 Oct 2025 07:00:35 +0000 Manifest this update: Fri 24 Oct 2025 07:00:35 +0000 Manifest next update: Sat 25 Oct 2025 07:00:35 +0000 Files and hashes: 1: 70vKh_nRIlsGDeCCWIWnJDoMQow.roa (hash: 9/IlxykCR8D1ob5yM4nNThKcpH35vFsHMDpOK44EfG8=) 2: AuElns1VObrRDqT4NIwMY9EmyGk.roa (hash: 29nayPFK3cRbhQvKtMw0ZoiHbzL8FhraQfBFRLxRMzQ=) 3: E_fV2_-LSoXs8TNNVud176N90DM.roa (hash: pEduf01l+IkFgVqqHIULEF/rXEiD2nJYC04Z+8oaaWE=) 4: GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa (hash: BfdX5BDfo9Z5mEIhjqpFA0KNYyZ0ceyNKC3cFcLwZOU=) 5: KZA4jnri-aL9nYHoTsoeJH-R8gI.roa (hash: ioRykNk5tHi0fFciV5Ce58v9OpltJE9aSwwdhuLkNB8=) 6: L8uCW7ekm32Krnf3ks9jQXZfbb8.roa (hash: SiCaRGvu/k2o4TpiftW9aHSETXjCe5Up3+wi7DpgEqg=) 7: NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa (hash: YbW4L3XomgDTTG2VVXMsP5shedyMXIrMiyf4jWJ1fEY=) 8: UhVjPeN5rpuwAHSinKlE_8JwegI.roa (hash: VDbFVWwq0zh0SzqRtSX72R3GUx9GyGy9DQZPLPYdjM8=) 9: ZZmhbXaiwnlvoTzrIPKT393zeQY.roa (hash: h/DL+p5qUcE0X2Aplnohyf125A4LIxDH/WhCa+Rudu4=) 10: bb5iI1WPbNppyqoKFGHl592smj4.roa (hash: dMEHaektgDSjptnb5y/mJH+mUC58u3E+XvJ+oyJwb/c=) 11: e6N6L0TksO19CdNdYB-tsG35AfY.roa (hash: 5Eq8sf7loiQQlTHE2kyCxUeEW9AcUU8hd5bLQ2BYbvg=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 1dWK5w6l/qYnQtJmMn8OHmFO+K1hf524InDQepXQXzc=) 13: m8_r0VZgeMf9CD7ftR8A5KG9850.roa (hash: rBBdrLVM7ya1VIISU7w74srUfPPOKneCLGZB6/hqiV0=) 14: mgPqsxG5CIseh5QbhAvUdeRv4RY.roa (hash: mtcaVz1Avyle5GnOLpiDx2GLALhMrVFtby9iSjwpNdY=) 15: qhiL7bExacXUsCTM7Vb9ImRHg8c.roa (hash: S3bNWosVJfDx7XwIB4xM9qZIrywdYlw1VXpMCxOUW7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:15:04:ec:a2:6e:24:b4:e8:9c:1e:3d:bd:39:96:f7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Oct 24 07:00:35 2025 GMT Not After : Oct 25 07:00:35 2025 GMT Subject: CN=25723df082d672c18c6be5ee6de695d6b891c769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:b9:61:ae:ef:7e:d0:4b:af:ac:88:0b:76: 5c:d3:5a:d3:dc:9b:e9:98:1e:71:db:14:0c:25:e6: d2:d0:c8:73:4a:60:9d:74:3b:0a:87:6b:fc:77:f9: 0a:7a:90:77:d1:94:6c:21:0b:1f:6b:96:54:dc:e3: b9:e2:dc:2e:55:52:f7:7b:5b:e6:94:24:90:4a:e1: a0:29:7a:37:a9:9d:fb:9a:49:0f:7c:af:26:db:c3: 5a:be:d4:a7:1e:c1:ed:f6:cd:a9:a7:d8:c8:51:7e: a5:48:59:3d:95:72:98:c2:0b:71:fe:db:01:84:59: f4:6d:01:85:a6:9a:3e:69:99:8b:3f:29:c0:8b:e0: 51:e9:bd:d4:1f:76:5e:a9:82:9e:2a:2c:dd:40:f2: 48:a7:cb:50:0f:6f:f4:f7:b5:1b:eb:b9:e2:a3:4a: 7d:c2:72:f9:d0:f4:ee:70:40:93:10:42:e6:39:cd: d9:fe:9e:07:ac:ba:ed:a4:a8:0d:4d:af:2e:a2:cc: 6a:e1:7a:a6:01:c7:61:81:93:ca:83:1c:5f:32:9f: e7:3f:1b:df:26:8c:d6:3d:00:58:58:87:d3:87:4e: 03:db:98:9b:9b:25:4d:d3:ea:3b:36:c8:fb:15:a6: dc:50:38:28:17:a1:a0:24:0e:06:83:66:bc:d7:f5: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:3D:F0:82:D6:72:C1:8C:6B:E5:EE:6D:E6:95:D6:B8:91:C7:69 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:77:ea:2c:5a:81:61:42:f9:ea:df:04:63:55:a0:da:4d:01: 56:14:8d:b6:f8:74:75:d0:73:4f:96:34:ce:6d:9d:8e:b7:69: 54:93:af:86:e2:58:56:d5:e0:30:ac:3d:a2:da:fd:91:9d:01: e5:33:d6:33:1a:a1:34:ab:3c:f7:1a:7e:65:10:87:e0:40:69: 06:f4:92:9e:f4:94:10:de:e4:d5:db:8c:50:ca:bf:b5:1e:8c: 3b:27:bc:7f:df:0c:f2:00:3c:a2:ff:a6:66:6a:16:32:c1:64: 27:9a:f6:57:d7:fc:5c:30:bf:bf:50:f0:6b:06:e1:92:09:86: 2c:1d:36:f2:62:ef:9a:f7:a2:fd:41:14:81:3e:de:85:3d:f2: 4b:25:28:66:1d:e2:86:3a:aa:cc:bf:f0:43:93:ce:2b:36:17: 00:b3:13:ea:94:db:bc:6c:cb:0d:6e:98:48:25:24:da:f0:4e: b9:30:c7:b0:9c:89:c4:10:52:ed:d5:5b:54:b6:13:de:b3:a2: ed:b2:f6:57:87:54:12:dd:1c:92:ac:1d:e8:1d:73:49:b6:ed: b9:c0:b0:39:34:31:8c:e0:f8:7c:7d:ff:75:bd:81:39:c8:33: 61:be:64:74:39:67:13:fe:0d:36:e9:54:df:bd:9f:9f:6f:d5: 4a:a5:a3:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoVBOyibiS06JwePb05lve+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjUxMDI0MDcwMDM1WhcNMjUxMDI1MDcwMDM1WjAzMTEwLwYDVQQD EygyNTcyM2RmMDgyZDY3MmMxOGM2YmU1ZWU2ZGU2OTVkNmI4OTFjNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj25Ya7vftBLr6yIC3Zc01rT3Jvp mB5x2xQMJebS0MhzSmCddDsKh2v8d/kKepB30ZRsIQsfa5ZU3OO54twuVVL3e1vm lCSQSuGgKXo3qZ37mkkPfK8m28NavtSnHsHt9s2pp9jIUX6lSFk9lXKYwgtx/tsB hFn0bQGFppo+aZmLPynAi+BR6b3UH3ZeqYKeKizdQPJIp8tQD2/097Ub67nio0p9 wnL50PTucECTEELmOc3Z/p4HrLrtpKgNTa8uosxq4XqmAcdhgZPKgxxfMp/nPxvf JozWPQBYWIfTh04D25ibmyVN0+o7Nsj7FabcUDgoF6GgJA4Gg2a81/VpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVyPfCC1nLBjGvl7m3mlda4kcdpMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnfqLFqB YUL56t8EY1Wg2k0BVhSNtvh0ddBzT5Y0zm2djrdpVJOvhuJYVtXgMKw9otr9kZ0B 5TPWMxqhNKs89xp+ZRCH4EBpBvSSnvSUEN7k1duMUMq/tR6MOye8f98M8gA8ov+m ZmoWMsFkJ5r2V9f8XDC/v1DwawbhkgmGLB028mLvmvei/UEUgT7ehT3ySyUoZh3i hjqqzL/wQ5POKzYXALMT6pTbvGzLDW6YSCUk2vBOuTDHsJyJxBBS7dVbVLYT3rOi 7bL2V4dUEt0ckqwd6B1zSbbtucCwOTQxjOD4fH3/db2BOcgzYb5kdDlnE/4NNulU 372fn2/VSqWjQg== -----END CERTIFICATE-----Generated at Fri Oct 24 09:40:37 2025 by rpki-client