$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: LKLDfEhiQ93xLQXGYFINuSL4ZB4G9nFhPEgD3I7ThPg= Subject key identifier: 87:21:B5:B6:86:0D:94:7C:4F:DE:55:FB:58:54:61:70:CD:E2:05:ED Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 01976D3D3B403C3A52FAEDEFE19161292EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 15AA Signing time: Sat 14 Jun 2025 07:00:18 +0000 Manifest this update: Sat 14 Jun 2025 07:00:18 +0000 Manifest next update: Sun 15 Jun 2025 07:00:18 +0000 Files and hashes: 1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 2: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 3: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 4: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 5: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 6: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 7: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 8: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 9: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 10: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 11: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 12: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: 6cLAcU76Ve7sScWb7/eQIPDCelq5OLn6s9S5ogwhlo0=) 13: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:3d:3b:40:3c:3a:52:fa:ed:ef:e1:91:61:29:2e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Jun 14 07:00:18 2025 GMT Not After : Jun 15 07:00:18 2025 GMT Subject: CN=8721b5b6860d947c4fde55fb58546170cde205ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:75:2a:1d:d3:87:61:c9:26:00:99:93:e6: 92:a0:26:95:6e:fe:01:7a:e2:3d:26:d3:4a:d7:16: a0:fa:37:92:36:a6:6f:13:0f:7c:49:c3:47:b3:ff: 26:31:a5:da:cc:4d:aa:8a:e8:fe:70:40:bd:1a:20: 3f:19:ff:3a:4b:cb:8d:b1:50:7d:83:2b:96:f0:bb: 0d:3d:c0:e3:af:f4:20:f4:4e:8b:5b:e4:c1:34:b0: 3c:c6:fa:77:fe:87:36:16:cc:16:38:5f:96:f9:97: 0e:bf:7a:40:08:78:8f:07:12:31:8d:8a:63:99:c6: 4a:42:2f:2a:a4:81:1b:7e:8b:ca:e9:d5:7d:79:22: ea:ae:97:13:ab:98:e2:b0:c6:41:44:a0:43:b3:60: 73:00:5d:ef:ac:5d:ba:5a:56:e0:51:ec:5d:3e:c9: 46:f2:0b:2e:a8:57:4f:4d:3a:ec:eb:80:12:27:8a: 49:c2:ce:65:71:5e:f7:fc:1e:5c:78:07:5d:60:0f: 07:00:d9:3a:c1:c1:03:5f:f5:c0:f5:ea:ed:ce:c4: 24:b5:b6:92:91:8b:40:d9:9d:c7:c0:5d:34:47:39: 14:09:20:14:4c:45:19:05:e1:91:3e:bc:7d:94:1f: fd:ef:b0:78:05:58:97:86:de:24:4f:f0:4a:65:89: 56:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:B5:B6:86:0D:94:7C:4F:DE:55:FB:58:54:61:70:CD:E2:05:ED X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:eb:29:55:5f:71:d8:ac:36:11:83:c8:0d:1e:36:ae:b7:ca: e5:86:e6:25:2d:73:18:29:93:35:31:28:e2:a5:fc:4a:99:7b: ac:f7:d9:9a:ab:2f:88:2e:9a:24:e2:10:bf:2c:93:83:a0:83: 42:09:5b:c4:05:3a:11:b5:30:d0:c3:e4:67:ca:7e:fe:c8:4e: 80:14:90:1e:5c:b5:df:45:7d:f6:5b:41:72:e1:a1:af:44:b4: b9:fd:7e:44:18:98:6c:7f:41:e5:a6:46:40:27:9d:fc:4b:0a: 66:69:80:f8:91:ef:eb:2f:74:a6:aa:0e:b6:26:17:be:71:1f: 20:90:a4:58:4a:f7:28:a2:4e:12:b4:c6:d9:a0:a8:28:43:19: bd:8a:01:9d:2f:13:22:d6:09:da:55:8f:54:5e:50:fd:dc:35: 41:9c:1e:c9:6f:9b:1e:2a:be:9f:02:49:bc:3b:6b:ee:04:7e: 54:e4:d5:fe:0f:10:58:a9:2f:81:a4:12:85:d7:35:e0:1e:51: de:6c:37:74:95:4f:a5:2e:9d:83:79:21:f1:6f:e6:76:57:fc: 16:d6:67:de:04:7b:f2:c5:04:d9:b7:81:cd:60:d2:58:3e:27: be:26:03:17:21:b7:73:29:af:cb:16:ca:fb:f5:51:98:ef:de: e8:fc:6f:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtPTtAPDpS+u3v4ZFhKS6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwNjE0MDcwMDE4WhcNMjUwNjE1MDcwMDE4WjAzMTEwLwYDVQQD Eyg4NzIxYjViNjg2MGQ5NDdjNGZkZTU1ZmI1ODU0NjE3MGNkZTIwNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+h1Kh3Th2HJJgCZk+aSoCaVbv4B euI9JtNK1xag+jeSNqZvEw98ScNHs/8mMaXazE2qiuj+cEC9GiA/Gf86S8uNsVB9 gyuW8LsNPcDjr/Qg9E6LW+TBNLA8xvp3/oc2FswWOF+W+ZcOv3pACHiPBxIxjYpj mcZKQi8qpIEbfovK6dV9eSLqrpcTq5jisMZBRKBDs2BzAF3vrF26WlbgUexdPslG 8gsuqFdPTTrs64ASJ4pJws5lcV73/B5ceAddYA8HANk6wcEDX/XA9ertzsQktbaS kYtA2Z3HwF00RzkUCSAUTEUZBeGRPrx9lB/977B4BViXht4kT/BKZYlWXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIchtbaGDZR8T95V+1hUYXDN4gXtMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaespVV9x 2Kw2EYPIDR42rrfK5YbmJS1zGCmTNTEo4qX8Spl7rPfZmqsviC6aJOIQvyyTg6CD QglbxAU6EbUw0MPkZ8p+/shOgBSQHly130V99ltBcuGhr0S0uf1+RBiYbH9B5aZG QCed/EsKZmmA+JHv6y90pqoOtiYXvnEfIJCkWEr3KKJOErTG2aCoKEMZvYoBnS8T ItYJ2lWPVF5Q/dw1QZweyW+bHiq+nwJJvDtr7gR+VOTV/g8QWKkvgaQShdc14B5R 3mw3dJVPpS6dg3kh8W/mdlf8FtZn3gR78sUE2beBzWDSWD4nviYDFyG3cymvyxbK +/VRmO/e6PxvSg== -----END CERTIFICATE-----Generated at Sat Jun 14 12:02:47 2025 by rpki-client