$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: aTIhjDKIc9j3GJkOLLL6rfEI7RH6vAe6SCkZ/r/IJuE= Subject key identifier: 83:A1:61:2D:83:0E:90:D9:68:1F:43:9C:95:2D:4C:1C:1E:7B:DB:FF Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019A4C6191B0004C3EF850E8B1996ED1E79A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0F89 Signing time: Tue 04 Nov 2025 01:00:53 +0000 Manifest this update: Tue 04 Nov 2025 01:00:53 +0000 Manifest next update: Wed 05 Nov 2025 01:00:53 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: 1pOVcVfg5kA9G8N+Y0tEYo5K65PdRIwdH+tZcZMQwKA=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:91:b0:00:4c:3e:f8:50:e8:b1:99:6e:d1:e7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Nov 4 01:00:53 2025 GMT Not After : Nov 5 01:00:53 2025 GMT Subject: CN=83a1612d830e90d9681f439c952d4c1c1e7bdbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:77:c0:62:1b:dd:2f:75:55:93:17:af:18: e0:8e:b1:4d:83:4e:9b:7f:28:5c:53:6d:24:4d:a1: 61:3f:61:86:ff:84:49:07:7b:e4:d8:df:1e:c1:8b: 78:07:2e:de:46:a2:8c:bb:20:64:b2:87:5f:a7:ab: 90:fc:26:07:43:9c:c9:08:26:3f:30:e8:d1:5a:dc: ac:b2:b5:4b:52:b7:7c:22:7a:99:a0:46:7d:a1:83: 7f:3f:ab:50:f0:a4:0b:37:e4:cc:5a:92:4d:df:67: 00:c2:27:f8:19:94:fe:e7:fe:ba:9e:0f:44:7e:8e: ea:9c:5e:00:89:57:31:fe:f7:a6:b9:a5:e4:f5:71: 4e:95:e1:b1:3f:38:13:38:85:c1:58:d6:cf:97:9e: a5:cc:b3:1f:54:7b:fc:74:e0:ac:e1:25:25:11:f3: e7:2c:bc:15:73:6a:09:27:0f:38:b5:ea:ec:88:a1: e9:0c:46:c3:b2:d7:30:a2:88:78:ba:ec:49:dc:39: 99:b9:35:63:83:e0:b6:c5:21:fa:16:6b:29:3b:f1: 07:ef:34:7d:81:88:39:96:ed:6f:fa:94:be:74:5c: 62:2f:9d:98:ad:6f:ba:23:76:48:09:d6:ca:5f:26: b3:47:a3:a6:9a:d6:06:e3:48:42:79:24:85:d1:41: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A1:61:2D:83:0E:90:D9:68:1F:43:9C:95:2D:4C:1C:1E:7B:DB:FF X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a0:03:a5:38:37:df:d7:3d:a2:52:b8:ac:c6:7b:05:03:25: 87:13:00:81:50:21:73:49:8d:f1:b5:6f:28:e0:d7:a4:7f:b8: 9a:77:21:a6:8d:2d:00:f9:e0:92:19:24:b3:45:4a:aa:73:03: 31:65:6f:85:e3:bd:62:33:2f:8e:95:96:c5:5d:f4:22:4f:05: 86:8c:ed:2a:43:47:8e:2f:5f:25:91:de:61:47:d6:61:b5:16: 78:2d:ad:d2:08:44:e9:ad:79:95:51:24:b2:15:31:02:67:f9: 8e:0f:69:5f:65:89:37:e4:e3:c5:7e:b0:e1:2a:ce:75:d1:c2: 2c:39:ff:02:c8:5c:7e:3b:85:77:97:21:8b:73:c7:99:3a:21: 90:9a:cc:dd:ca:7e:20:33:42:c3:ca:20:32:ec:34:73:13:21: 14:52:b0:3a:ac:88:07:9f:35:6b:a3:d9:d2:9a:a4:d6:6c:20: f0:80:7d:75:fb:da:1d:08:57:1e:ed:1b:70:40:60:3f:94:48: e8:87:74:28:c2:7e:20:70:8d:73:a8:c8:32:b7:c5:9f:32:bf: d1:0b:68:26:d8:a2:f9:08:86:05:ef:4c:0e:cc:ac:9e:f8:82: 0b:29:39:1c:93:a5:8d:e5:0d:b5:e9:bb:fa:47:cb:3d:0a:37: 11:17:1f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYZGwAEw++FDosZlu0eeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUxMTA0MDEwMDUzWhcNMjUxMTA1MDEwMDUzWjAzMTEwLwYDVQQD Eyg4M2ExNjEyZDgzMGU5MGQ5NjgxZjQzOWM5NTJkNGMxYzFlN2JkYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/t3wGIb3S91VZMXrxjgjrFNg06b fyhcU20kTaFhP2GG/4RJB3vk2N8ewYt4By7eRqKMuyBksodfp6uQ/CYHQ5zJCCY/ MOjRWtyssrVLUrd8InqZoEZ9oYN/P6tQ8KQLN+TMWpJN32cAwif4GZT+5/66ng9E fo7qnF4AiVcx/vemuaXk9XFOleGxPzgTOIXBWNbPl56lzLMfVHv8dOCs4SUlEfPn LLwVc2oJJw84tersiKHpDEbDstcwooh4uuxJ3DmZuTVjg+C2xSH6FmspO/EH7zR9 gYg5lu1v+pS+dFxiL52YrW+6I3ZICdbKXyazR6OmmtYG40hCeSSF0UG1nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOhYS2DDpDZaB9DnJUtTBwee9v/MB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqADpTg3 39c9olK4rMZ7BQMlhxMAgVAhc0mN8bVvKODXpH+4mnchpo0tAPngkhkks0VKqnMD MWVvheO9YjMvjpWWxV30Ik8FhoztKkNHji9fJZHeYUfWYbUWeC2t0ghE6a15lVEk shUxAmf5jg9pX2WJN+TjxX6w4SrOddHCLDn/AshcfjuFd5chi3PHmTohkJrM3cp+ IDNCw8ogMuw0cxMhFFKwOqyIB581a6PZ0pqk1mwg8IB9dfvaHQhXHu0bcEBgP5RI 6Id0KMJ+IHCNc6jIMrfFnzK/0QtoJtii+QiGBe9MDsysnviCCyk5HJOljeUNtem7 +kfLPQo3ERcfhA== -----END CERTIFICATE-----Generated at Tue Nov 4 11:17:50 2025 by rpki-client