$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: LWlmwWeqVejXSm7T7MV/QRgDOveoanwSFupoQ6oV51U= Subject key identifier: B8:3E:60:98:5F:DF:90:07:3D:9C:E6:5A:CE:85:E2:5B:41:F0:AA:86 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 01991E0AA930B306B7892A081712604321C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0FDB Signing time: Sat 06 Sep 2025 08:00:38 +0000 Manifest this update: Sat 06 Sep 2025 08:00:38 +0000 Manifest next update: Sun 07 Sep 2025 08:00:38 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: 0oVND/8ZsXtkZfhtOPRCps8Jbk+M7r+5pO6acHbTVhI=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:0a:a9:30:b3:06:b7:89:2a:08:17:12:60:43:21:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Sep 6 08:00:38 2025 GMT Not After : Sep 7 08:00:38 2025 GMT Subject: CN=b83e60985fdf90073d9ce65ace85e25b41f0aa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:d5:f7:a7:48:15:ad:3d:43:41:1d:86:9b: de:1b:e3:3e:ef:49:ba:95:85:b9:57:66:6a:7f:58: 0e:00:73:d6:a1:a3:bc:14:59:f8:31:93:c1:c9:41: 91:f5:c0:8f:80:41:67:47:d8:2f:32:98:1e:ba:34: 4e:fe:23:59:8e:c0:08:c5:cd:a3:38:ee:de:6f:e2: 1b:24:84:2b:92:cd:f0:a3:85:18:72:fa:54:d3:09: 65:c4:9c:c2:2f:e7:b3:ae:d0:b9:cb:37:bb:90:bf: 65:6d:bc:29:ae:eb:f7:42:f7:fc:d3:29:bb:f3:9a: 7d:f3:10:40:2f:f0:30:98:1c:78:44:99:ef:57:6d: 69:dc:77:90:eb:ab:c2:1c:6a:ca:84:6d:cf:38:8f: 23:10:67:96:1d:1f:5b:3e:24:53:fe:c4:53:cd:f7: 8e:ef:26:64:1b:9f:e6:06:6b:04:c0:dd:0e:9f:05: 14:64:6d:e3:1c:15:fd:a2:71:4d:42:83:c4:e4:57: ad:04:78:b3:98:31:88:ae:6d:a2:e0:da:62:81:ea: 2d:40:24:a9:f7:d6:4e:0d:7d:d7:76:81:39:aa:8c: ce:c9:ae:5f:d4:62:1c:7d:0b:89:50:6c:05:bd:16: 67:05:cb:73:2b:44:88:cc:b9:26:26:84:ab:f4:02: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:60:98:5F:DF:90:07:3D:9C:E6:5A:CE:85:E2:5B:41:F0:AA:86 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a2:e0:86:fd:8d:c6:4d:b8:b9:6a:55:14:da:d8:ab:f9:a9: e5:3b:7a:dd:dd:ba:d2:d4:99:1b:fc:ee:5b:55:51:18:d5:45: fe:07:7a:0e:a4:ea:48:b5:a4:05:bd:24:de:5e:cf:ac:a4:d1: 29:b3:06:e8:0d:f8:41:9f:97:89:e6:97:13:49:b7:9e:99:e8: c9:6d:43:05:e3:37:f5:2e:fb:b5:38:3c:ba:db:51:81:12:14: 80:d8:7c:27:8e:55:93:92:6e:be:73:4e:e8:24:2c:d7:33:17: c4:01:2b:36:6d:96:3f:fc:45:00:c6:e3:ff:9a:19:46:bf:51: 15:6d:e3:6e:b9:80:f1:21:0a:e8:e5:29:e1:27:59:a1:2a:1d: 77:81:ea:1b:a2:52:35:fc:39:28:30:d4:b3:23:c7:4c:66:87: 76:92:48:0e:22:29:76:4e:f4:4a:0d:8a:e3:6e:32:18:de:3e: 84:f7:fb:a7:87:7e:ad:c3:50:d0:20:2a:af:40:c1:52:8a:3b: ab:34:01:39:7c:e1:80:d5:61:59:c3:ca:d3:46:5c:17:69:a2: 34:6c:52:29:ac:f0:85:be:b9:f0:5d:2c:73:e2:23:b9:96:b8: e0:73:58:df:8b:e5:da:f3:df:2d:d9:f3:8c:9a:5d:1d:5d:c1: d4:a8:62:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeCqkwswa3iSoIFxJgQyHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwOTA2MDgwMDM4WhcNMjUwOTA3MDgwMDM4WjAzMTEwLwYDVQQD EyhiODNlNjA5ODVmZGY5MDA3M2Q5Y2U2NWFjZTg1ZTI1YjQxZjBhYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU/V96dIFa09Q0EdhpveG+M+70m6 lYW5V2Zqf1gOAHPWoaO8FFn4MZPByUGR9cCPgEFnR9gvMpgeujRO/iNZjsAIxc2j OO7eb+IbJIQrks3wo4UYcvpU0wllxJzCL+ezrtC5yze7kL9lbbwpruv3Qvf80ym7 85p98xBAL/AwmBx4RJnvV21p3HeQ66vCHGrKhG3POI8jEGeWHR9bPiRT/sRTzfeO 7yZkG5/mBmsEwN0OnwUUZG3jHBX9onFNQoPE5FetBHizmDGIrm2i4NpigeotQCSp 99ZODX3XdoE5qozOya5f1GIcfQuJUGwFvRZnBctzK0SIzLkmJoSr9AIsEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg+YJhf35AHPZzmWs6F4ltB8KqGMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6Lghv2N xk24uWpVFNrYq/mp5Tt63d260tSZG/zuW1VRGNVF/gd6DqTqSLWkBb0k3l7PrKTR KbMG6A34QZ+XieaXE0m3npnoyW1DBeM39S77tTg8uttRgRIUgNh8J45Vk5JuvnNO 6CQs1zMXxAErNm2WP/xFAMbj/5oZRr9RFW3jbrmA8SEK6OUp4SdZoSodd4HqG6JS Nfw5KDDUsyPHTGaHdpJIDiIpdk70Sg2K424yGN4+hPf7p4d+rcNQ0CAqr0DBUoo7 qzQBOXzhgNVhWcPK00ZcF2miNGxSKazwhb658F0sc+IjuZa44HNY34vl2vPfLdnz jJpdHV3B1KhiTA== -----END CERTIFICATE-----Generated at Sat Sep 6 09:56:42 2025 by rpki-client