$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: Mk1Kk5QzCQoW9LdXG8sdO/mJuC8R0UFlWG+5lgx9Lfc= Subject key identifier: C0:E7:FB:BC:80:9A:80:47:13:C2:E7:1F:8D:68:72:B0:EF:6F:F1:7D Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 0199239F5513EB4EC5D31A654E4F261A32A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 1044 Signing time: Sun 07 Sep 2025 10:01:08 +0000 Manifest this update: Sun 07 Sep 2025 10:01:08 +0000 Manifest next update: Mon 08 Sep 2025 10:01:08 +0000 Files and hashes: 1: 70vKh_nRIlsGDeCCWIWnJDoMQow.roa (hash: 9/IlxykCR8D1ob5yM4nNThKcpH35vFsHMDpOK44EfG8=) 2: AuElns1VObrRDqT4NIwMY9EmyGk.roa (hash: 29nayPFK3cRbhQvKtMw0ZoiHbzL8FhraQfBFRLxRMzQ=) 3: E_fV2_-LSoXs8TNNVud176N90DM.roa (hash: pEduf01l+IkFgVqqHIULEF/rXEiD2nJYC04Z+8oaaWE=) 4: GV7-ktflUr2Jl9BuG4W6yIOWTC0.roa (hash: BfdX5BDfo9Z5mEIhjqpFA0KNYyZ0ceyNKC3cFcLwZOU=) 5: KZA4jnri-aL9nYHoTsoeJH-R8gI.roa (hash: ioRykNk5tHi0fFciV5Ce58v9OpltJE9aSwwdhuLkNB8=) 6: L8uCW7ekm32Krnf3ks9jQXZfbb8.roa (hash: SiCaRGvu/k2o4TpiftW9aHSETXjCe5Up3+wi7DpgEqg=) 7: NQWyj3dxX6rPs0y0BfF0ZFJuU6k.roa (hash: YbW4L3XomgDTTG2VVXMsP5shedyMXIrMiyf4jWJ1fEY=) 8: UhVjPeN5rpuwAHSinKlE_8JwegI.roa (hash: VDbFVWwq0zh0SzqRtSX72R3GUx9GyGy9DQZPLPYdjM8=) 9: ZZmhbXaiwnlvoTzrIPKT393zeQY.roa (hash: h/DL+p5qUcE0X2Aplnohyf125A4LIxDH/WhCa+Rudu4=) 10: bb5iI1WPbNppyqoKFGHl592smj4.roa (hash: dMEHaektgDSjptnb5y/mJH+mUC58u3E+XvJ+oyJwb/c=) 11: e6N6L0TksO19CdNdYB-tsG35AfY.roa (hash: 5Eq8sf7loiQQlTHE2kyCxUeEW9AcUU8hd5bLQ2BYbvg=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 6ZXjkVF9MNlxVygXZQWxZV6CUv+A231VlVRn7p2pcWc=) 13: m8_r0VZgeMf9CD7ftR8A5KG9850.roa (hash: rBBdrLVM7ya1VIISU7w74srUfPPOKneCLGZB6/hqiV0=) 14: mgPqsxG5CIseh5QbhAvUdeRv4RY.roa (hash: mtcaVz1Avyle5GnOLpiDx2GLALhMrVFtby9iSjwpNdY=) 15: qhiL7bExacXUsCTM7Vb9ImRHg8c.roa (hash: S3bNWosVJfDx7XwIB4xM9qZIrywdYlw1VXpMCxOUW7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:9f:55:13:eb:4e:c5:d3:1a:65:4e:4f:26:1a:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Sep 7 10:01:08 2025 GMT Not After : Sep 8 10:01:08 2025 GMT Subject: CN=c0e7fbbc809a804713c2e71f8d6872b0ef6ff17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:72:d0:10:97:76:1c:3f:b6:2c:c4:1a:bc: 04:41:0e:fd:bb:08:93:76:e3:c4:0e:94:c5:de:73: 1f:31:43:66:80:15:9d:7b:3d:e6:2e:e0:5e:3e:3e: 49:60:d0:2b:a2:75:3b:07:1f:91:e2:66:d8:24:79: 65:e9:a0:b2:ed:95:e7:b7:8d:83:c2:53:a7:29:54: 4e:7c:70:2d:f2:01:57:c5:0a:a2:23:44:82:e1:d1: 34:92:0d:b1:15:95:18:ae:55:e7:52:23:96:63:1f: 59:30:17:57:7c:06:48:a7:d6:cb:dd:ed:82:d1:5a: cc:47:ea:e8:30:08:35:71:b9:1b:10:fd:e6:a7:20: 15:78:17:df:41:a4:b6:78:61:b4:7e:2a:d6:e0:6d: cc:33:a8:1a:f0:1c:8f:ef:2f:67:4a:91:a5:6d:38: f0:80:e2:a0:45:b6:aa:d9:1f:df:80:89:23:9f:5d: 3f:b2:9a:04:bb:85:c1:27:51:38:7c:52:23:bc:36: cf:e2:f3:5e:6d:b5:1b:53:43:a2:a5:d1:13:20:e3: 4d:97:34:42:1e:ec:70:53:14:67:f8:d1:12:be:29: fa:78:bb:14:7d:6f:97:a1:2b:f6:0b:0f:38:34:19: 39:33:50:ab:b6:f2:c5:40:d7:82:d4:16:03:9f:c9: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:FB:BC:80:9A:80:47:13:C2:E7:1F:8D:68:72:B0:EF:6F:F1:7D X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:78:2f:6a:e3:b5:7e:f3:71:b7:7a:ce:91:78:41:0c:25:e9: 6b:9d:ea:e9:c8:0e:61:e1:ff:1f:61:d2:77:ab:37:39:35:9a: 85:84:9e:94:1e:65:e5:f7:14:85:bf:9a:c4:bc:ee:28:39:ae: d1:97:f9:9a:d6:fd:20:f5:c6:10:ab:37:35:7a:54:c8:73:dc: 20:cc:47:97:9d:de:c0:74:8a:90:9d:1d:67:d4:88:9b:6b:35: 46:4a:15:b1:86:79:13:11:3c:c5:34:9b:83:7e:fc:e6:ad:50: 3e:a8:3f:46:c4:29:d8:8c:4b:d8:d4:3f:67:9c:e4:d1:8f:17: 91:e2:6c:67:74:84:50:43:96:47:0c:1d:8a:48:0b:59:18:f4: e7:6d:f7:35:96:c3:c1:b8:30:6c:fa:d1:4c:3c:fa:ee:be:f4: 3c:a5:16:47:1f:17:3a:33:e3:98:00:e7:a3:ce:98:57:b0:23: ab:ce:82:03:8b:31:ac:c6:e2:d2:66:87:6e:20:aa:ad:32:8c: f5:7c:f3:f4:55:68:5f:f9:67:36:0d:6e:63:e9:5a:07:0d:a1: be:a8:63:c0:16:6d:d5:f7:71:44:3f:17:bd:96:27:05:ae:26: 76:07:85:56:25:39:ce:e2:66:ae:58:ce:e9:18:17:5f:c3:7a: 6b:11:c4:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjn1UT607F0xplTk8mGjKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjUwOTA3MTAwMTA4WhcNMjUwOTA4MTAwMTA4WjAzMTEwLwYDVQQD EyhjMGU3ZmJiYzgwOWE4MDQ3MTNjMmU3MWY4ZDY4NzJiMGVmNmZmMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0By0BCXdhw/tizEGrwEQQ79uwiT duPEDpTF3nMfMUNmgBWdez3mLuBePj5JYNAronU7Bx+R4mbYJHll6aCy7ZXnt42D wlOnKVROfHAt8gFXxQqiI0SC4dE0kg2xFZUYrlXnUiOWYx9ZMBdXfAZIp9bL3e2C 0VrMR+roMAg1cbkbEP3mpyAVeBffQaS2eGG0firW4G3MM6ga8ByP7y9nSpGlbTjw gOKgRbaq2R/fgIkjn10/spoEu4XBJ1E4fFIjvDbP4vNebbUbU0OipdETIONNlzRC HuxwUxRn+NESvin6eLsUfW+XoSv2Cw84NBk5M1CrtvLFQNeC1BYDn8kdOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDn+7yAmoBHE8LnH41ocrDvb/F9MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXgvauO1 fvNxt3rOkXhBDCXpa53q6cgOYeH/H2HSd6s3OTWahYSelB5l5fcUhb+axLzuKDmu 0Zf5mtb9IPXGEKs3NXpUyHPcIMxHl53ewHSKkJ0dZ9SIm2s1RkoVsYZ5ExE8xTSb g3785q1QPqg/RsQp2IxL2NQ/Z5zk0Y8XkeJsZ3SEUEOWRwwdikgLWRj05233NZbD wbgwbPrRTDz67r70PKUWRx8XOjPjmADno86YV7Ajq86CA4sxrMbi0maHbiCqrTKM 9Xzz9FVoX/lnNg1uY+laBw2hvqhjwBZt1fdxRD8XvZYnBa4mdgeFViU5zuJmrljO 6RgXX8N6axHEfw== -----END CERTIFICATE-----Generated at Sun Sep 7 11:25:37 2025 by rpki-client