$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: ym5hx3OThcjvCl+nGayevkQH+jv0j0f8ApojM3b87Jk= Subject key identifier: 90:1F:8F:99:70:1E:99:7D:65:F2:F0:57:A1:62:3B:86:7E:63:EC:13 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019A07B6C12A2358A83CCB8931CBA86E1C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 1054 Signing time: Tue 21 Oct 2025 17:00:08 +0000 Manifest this update: Tue 21 Oct 2025 17:00:08 +0000 Manifest next update: Wed 22 Oct 2025 17:00:08 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: uEpwjqobsv6TsRVmCnTXBAFDUKv5Q1ahy/pD02EDyVM=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:b6:c1:2a:23:58:a8:3c:cb:89:31:cb:a8:6e:1c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Oct 21 17:00:08 2025 GMT Not After : Oct 22 17:00:08 2025 GMT Subject: CN=901f8f99701e997d65f2f057a1623b867e63ec13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:5b:c2:98:e7:62:a2:c8:49:ba:85:66:31: 8a:bf:41:8b:db:1e:4e:26:4d:bd:96:33:d2:0b:68: 05:4e:97:d2:c1:de:b7:5e:e7:ec:e6:60:53:36:05: a8:b8:db:c5:39:7b:3e:5e:be:b3:80:ea:e1:a7:7a: f8:33:53:df:e0:19:cb:fb:94:81:e5:3f:14:d3:79: 2a:7a:20:0e:45:92:ab:5e:0e:7f:e8:88:69:4c:78: a9:6e:1d:8b:a3:2b:2a:49:41:ba:49:08:a7:33:07: 47:d9:bc:e8:e2:d5:d6:c2:a0:ce:70:77:56:f5:b9: f4:0f:72:3e:26:38:8c:22:64:02:e8:c7:c3:26:98: 1a:db:7f:96:9a:43:df:e6:df:27:b2:1b:75:46:21: fd:51:0d:64:a8:a6:e2:52:27:be:f2:5f:20:68:1b: 2d:2a:9a:30:32:d7:70:df:34:f3:ff:4d:cb:64:71: de:12:d3:44:d8:6a:44:f1:89:73:52:6a:1d:33:48: ec:a9:d7:9b:c1:ca:79:0c:8d:3a:33:e8:04:3d:6f: 32:50:c2:bf:fd:70:99:1d:ae:89:95:0f:06:88:f0: 9f:18:ad:42:dd:c4:ad:be:85:e6:32:64:d5:43:c1: 4d:bd:8e:46:70:89:e9:ba:e9:38:d6:5c:bf:80:bd: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1F:8F:99:70:1E:99:7D:65:F2:F0:57:A1:62:3B:86:7E:63:EC:13 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:80:ef:55:6b:d9:e5:af:54:a4:a6:75:99:d9:d2:53:4e:e6: 6a:7b:a3:38:ae:77:82:c6:8e:1e:a8:da:90:e2:3d:91:a6:ab: c7:a7:bd:95:b0:a8:ef:dc:dc:18:d0:28:a5:22:e3:a6:80:96: d2:3c:44:c2:45:a3:e6:be:39:72:4b:43:78:77:e8:d9:ea:30: 75:f3:71:10:c1:f6:09:4b:c8:37:10:d4:54:dc:bf:b7:19:d9: 12:9a:b9:16:0e:ed:0d:e3:5e:2a:e1:ed:c4:03:cc:a9:22:e0: 7f:aa:22:d6:ed:f7:2e:94:da:42:ff:68:03:7a:13:b6:f2:f8: 5e:65:42:2b:23:f2:24:c8:eb:8f:16:94:78:d7:e3:d9:c2:76: 1e:44:4d:b1:da:c8:fd:dc:14:a4:b3:84:ea:d8:fa:ab:67:05: 55:cb:45:5a:54:53:a6:79:c8:0f:16:84:52:49:ff:48:2d:96: 7a:7c:50:8b:62:14:3c:46:71:72:1a:cf:b9:03:34:8d:75:13: bc:35:6b:a5:2d:9e:36:32:48:0f:75:7e:c6:77:42:ac:65:3d: af:db:7b:b3:e6:28:2c:09:3c:35:1a:30:ac:5f:7a:7b:f1:19: 2e:ea:85:39:33:e3:28:eb:ef:81:b0:ea:a6:aa:30:55:d3:2f: 5d:82:e4:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHtsEqI1ioPMuJMcuobhxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUxMDIxMTcwMDA4WhcNMjUxMDIyMTcwMDA4WjAzMTEwLwYDVQQD Eyg5MDFmOGY5OTcwMWU5OTdkNjVmMmYwNTdhMTYyM2I4NjdlNjNlYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/NbwpjnYqLISbqFZjGKv0GL2x5O Jk29ljPSC2gFTpfSwd63Xufs5mBTNgWouNvFOXs+Xr6zgOrhp3r4M1Pf4BnL+5SB 5T8U03kqeiAORZKrXg5/6IhpTHipbh2LoysqSUG6SQinMwdH2bzo4tXWwqDOcHdW 9bn0D3I+JjiMImQC6MfDJpga23+WmkPf5t8nsht1RiH9UQ1kqKbiUie+8l8gaBst KpowMtdw3zTz/03LZHHeEtNE2GpE8YlzUmodM0jsqdebwcp5DI06M+gEPW8yUMK/ /XCZHa6JlQ8GiPCfGK1C3cStvoXmMmTVQ8FNvY5GcInpuuk41ly/gL3hlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAfj5lwHpl9ZfLwV6FiO4Z+Y+wTMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIDvVWvZ 5a9UpKZ1mdnSU07manujOK53gsaOHqjakOI9kaarx6e9lbCo79zcGNAopSLjpoCW 0jxEwkWj5r45cktDeHfo2eowdfNxEMH2CUvINxDUVNy/txnZEpq5Fg7tDeNeKuHt xAPMqSLgf6oi1u33LpTaQv9oA3oTtvL4XmVCKyPyJMjrjxaUeNfj2cJ2HkRNsdrI /dwUpLOE6tj6q2cFVctFWlRTpnnIDxaEUkn/SC2WenxQi2IUPEZxchrPuQM0jXUT vDVrpS2eNjJID3V+xndCrGU9r9t7s+YoLAk8NRowrF96e/EZLuqFOTPjKOvvgbDq pqowVdMvXYLkQg== -----END CERTIFICATE-----Generated at Tue Oct 21 22:25:34 2025 by rpki-client