$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: 3RzKImIw1feQkVh7maAdpe+ov4NAsTaZ0DFi0hT+CVo= Subject key identifier: 1B:C2:08:96:52:8E:92:C3:04:0C:FD:14:90:C0:76:64:6A:E6:F4:90 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019A4DE20E1BD29FD6DDC6647B962D383381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 173A Signing time: Tue 04 Nov 2025 08:00:51 +0000 Manifest this update: Tue 04 Nov 2025 08:00:51 +0000 Manifest next update: Wed 05 Nov 2025 08:00:51 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: ABgT/X+jio2kl2ul+1R1HMlMCJeBkJJt/amSDZwfDG8=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e2:0e:1b:d2:9f:d6:dd:c6:64:7b:96:2d:38:33:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Nov 4 08:00:51 2025 GMT Not After : Nov 5 08:00:51 2025 GMT Subject: CN=1bc20896528e92c3040cfd1490c076646ae6f490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:c9:f3:92:3e:1f:a3:f2:f0:ea:f2:e6:b6: 49:6c:39:31:9e:df:d9:aa:22:5f:96:ee:ba:e6:fa: d3:4e:de:7f:35:ab:19:3d:f7:4c:9e:55:4a:06:22: 80:05:4b:fe:bc:be:0b:1b:c1:0c:05:ae:10:6d:5c: c3:fd:7b:d4:81:40:2e:0a:eb:dd:ea:83:1c:85:42: 6a:1e:2e:39:c5:3c:fa:33:4a:40:b9:ed:37:0f:45: 22:f0:78:d6:ca:f1:85:1d:f1:2f:71:3d:86:57:51: af:a2:c7:6e:a8:9a:2e:cb:b2:c2:9a:65:e0:ab:6b: 13:d9:9c:06:be:25:16:6d:a7:46:75:71:54:f6:a7: 7e:37:1b:6d:b6:07:25:81:96:71:46:4f:b2:41:cd: 1c:81:9d:59:a1:cd:a5:27:49:4c:90:24:6c:10:1d: e6:5c:52:71:13:df:12:64:21:20:e4:a9:e5:89:c2: 92:f0:f5:9b:20:20:c4:b0:cb:3f:cb:55:5b:ad:43: c3:28:ba:75:27:56:03:16:3f:f1:74:5c:15:05:3e: 98:7a:cf:e4:b4:a2:e6:5e:a3:8b:f7:2f:3c:9f:9c: 67:2f:09:e5:fc:22:e7:02:d3:0a:12:18:32:98:ff: 8f:9c:82:f2:9a:c5:83:9d:23:91:af:05:7f:5b:62: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:08:96:52:8E:92:C3:04:0C:FD:14:90:C0:76:64:6A:E6:F4:90 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:da:b1:14:31:9c:d2:53:7e:c8:e7:4f:11:8c:81:95:8a:04: 31:2e:a2:e0:0e:eb:f4:4b:ca:74:8e:45:d1:01:d0:10:a3:f5: c1:c7:fa:65:72:ff:29:69:9d:ed:20:22:55:8a:5a:32:c3:11: d0:f8:54:7c:77:1b:02:4c:ad:65:20:6b:b0:23:01:07:c7:88: 05:50:25:7a:c6:07:4a:54:56:1b:5a:e9:4c:6e:db:ac:3e:88: 3d:28:ee:c8:15:a7:a3:93:ad:ca:7a:c4:b6:c4:78:91:00:72: be:ba:d4:91:a5:07:f3:58:88:52:cf:d8:8d:20:d6:a5:b0:d4: 11:8f:39:bd:bc:ae:fd:7c:cd:a4:4e:ba:52:79:39:4a:c8:ca: bf:82:94:d0:aa:c7:ec:78:6e:ea:14:58:e4:a7:a5:03:7b:cd: 97:2c:c2:04:6e:f7:06:1d:f8:d1:30:35:4e:7b:c7:a7:72:82: 85:76:3d:a0:b7:6d:64:9f:4c:b9:b8:2c:21:68:44:1e:7d:c8: ad:95:32:b1:8e:f0:d7:47:e3:c3:89:80:58:7d:61:8e:90:ae: 50:bc:ac:80:b6:fb:b7:db:c6:5d:f2:bc:04:bc:15:36:70:a6: 65:72:08:f0:e1:95:b0:b6:5a:ec:2c:81:6b:a0:31:c8:f7:51: 70:93:57:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4g4b0p/W3cZke5YtODOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMTA0MDgwMDUxWhcNMjUxMTA1MDgwMDUxWjAzMTEwLwYDVQQD EygxYmMyMDg5NjUyOGU5MmMzMDQwY2ZkMTQ5MGMwNzY2NDZhZTZmNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbHJ85I+H6Py8Ory5rZJbDkxnt/Z qiJflu665vrTTt5/NasZPfdMnlVKBiKABUv+vL4LG8EMBa4QbVzD/XvUgUAuCuvd 6oMchUJqHi45xTz6M0pAue03D0Ui8HjWyvGFHfEvcT2GV1GvosduqJouy7LCmmXg q2sT2ZwGviUWbadGdXFU9qd+NxtttgclgZZxRk+yQc0cgZ1Zoc2lJ0lMkCRsEB3m XFJxE98SZCEg5KnlicKS8PWbICDEsMs/y1VbrUPDKLp1J1YDFj/xdFwVBT6Yes/k tKLmXqOL9y88n5xnLwnl/CLnAtMKEhgymP+PnILymsWDnSORrwV/W2LJSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvCCJZSjpLDBAz9FJDAdmRq5vSQMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONqxFDGc 0lN+yOdPEYyBlYoEMS6i4A7r9EvKdI5F0QHQEKP1wcf6ZXL/KWmd7SAiVYpaMsMR 0PhUfHcbAkytZSBrsCMBB8eIBVAlesYHSlRWG1rpTG7brD6IPSjuyBWno5OtynrE tsR4kQByvrrUkaUH81iIUs/YjSDWpbDUEY85vbyu/XzNpE66Unk5SsjKv4KU0KrH 7Hhu6hRY5KelA3vNlyzCBG73Bh340TA1TnvHp3KChXY9oLdtZJ9MubgsIWhEHn3I rZUysY7w10fjw4mAWH1hjpCuULysgLb7t9vGXfK8BLwVNnCmZXII8OGVsLZa7CyB a6AxyPdRcJNXWg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:37:35 2025 by rpki-client