$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: DPM1lgsm7qwmaP8k0wjFqJFW/9NVoWu6XNyKhU2ss0U= Subject key identifier: 71:85:10:6B:8B:31:3D:76:9F:16:16:AA:9D:3B:56:1F:20:88:83:C5 Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 019A4E189581D8C4F027C5C9913FEFB9E464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 1729 Signing time: Tue 04 Nov 2025 09:00:25 +0000 Manifest this update: Tue 04 Nov 2025 09:00:25 +0000 Manifest next update: Wed 05 Nov 2025 09:00:25 +0000 Files and hashes: 1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=) 2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=) 5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 7: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 12: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 13: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 14: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: T+J7b/pdQ8LQuZYqKd5tZhh1LyPOUtKewAmq8AnIM/s=) 15: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:95:81:d8:c4:f0:27:c5:c9:91:3f:ef:b9:e4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Nov 4 09:00:25 2025 GMT Not After : Nov 5 09:00:25 2025 GMT Subject: CN=7185106b8b313d769f1616aa9d3b561f208883c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:31:ba:b7:84:be:a2:44:1b:31:a5:39:92: 95:73:6c:85:0c:4d:a2:88:33:43:01:a5:33:f6:b8: 53:fe:2f:54:5f:28:d0:64:6b:a5:84:38:31:cc:96: 82:49:cd:20:ac:12:20:bb:88:9e:39:3d:9e:d6:d9: 4e:73:67:4c:20:e6:3e:69:59:e6:e9:8c:d7:b8:f2: 18:cc:23:d5:3c:87:65:5c:34:ff:82:f0:6d:ff:c0: a3:33:8a:1e:e5:ce:79:56:46:8c:d5:c4:1c:0a:73: fd:33:b0:9c:94:81:fc:a0:74:39:b1:de:da:64:f0: 4e:5b:57:62:31:fb:fe:2c:e9:56:9d:cd:b0:39:3d: 4e:57:97:e5:31:cb:16:af:c8:df:8f:75:ff:cd:8c: 0b:c4:de:90:14:e3:54:37:1d:d6:fa:07:51:0a:f3: 00:a7:2a:56:e2:e0:5d:3b:fb:07:7b:f7:61:74:ab: 48:75:34:74:fa:50:34:74:3e:1a:52:20:dd:46:3b: 4e:95:4d:a8:16:f9:e4:bf:72:34:f6:8f:21:51:7c: 6e:b2:fc:c3:f8:3c:6e:2a:9b:57:b2:96:24:71:14: a5:e2:25:d9:fa:6d:e8:e7:95:a6:49:0d:56:98:b6: ba:f2:26:d3:b9:83:ba:42:a2:ea:8a:5b:33:8c:8b: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:85:10:6B:8B:31:3D:76:9F:16:16:AA:9D:3B:56:1F:20:88:83:C5 X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:82:5e:5d:43:e7:97:94:de:00:a4:8b:0b:cf:5d:d0:ad:4e: dd:6e:2f:e8:5c:24:f1:a8:31:0d:4e:82:81:a2:5b:e6:2d:a3: 18:99:a7:7f:8f:98:62:26:de:ac:fd:a0:9c:a2:bc:f6:5c:0f: 7d:c6:9b:53:66:da:24:03:e8:e6:8a:9b:6e:28:a3:d6:c9:79: d6:14:8f:0e:1e:7c:6e:17:4c:80:ab:58:51:e4:02:2a:7f:90: a4:a1:76:c5:9b:1b:97:41:aa:93:b4:d2:75:47:9f:4f:84:e9: ce:fd:9e:91:65:79:4b:fc:e2:c8:37:94:61:11:d2:bd:63:cd: bb:10:57:ad:97:ba:7c:c1:f2:09:85:c4:d6:67:92:a0:35:da: 71:62:9d:63:b1:4c:0a:90:27:ee:d4:3b:c8:7f:7b:d8:0d:da: 16:66:d5:cb:63:a5:e2:28:1e:46:5e:d3:e8:c6:83:22:66:d7: 30:6d:07:b0:3c:82:71:0a:fd:3a:00:9f:74:2a:26:56:36:38: 6f:e3:aa:a4:33:81:60:c2:7e:df:f1:3d:06:5e:2a:e3:3f:5e: 63:32:68:01:09:f0:da:4a:d0:40:6a:ce:b9:83:e8:fe:ab:82: 21:fb:61:32:16:0c:4f:aa:42:14:01:fa:7b:fc:aa:38:7c:1f: 44:fc:3a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGJWB2MTwJ8XJkT/vueRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUxMTA0MDkwMDI1WhcNMjUxMTA1MDkwMDI1WjAzMTEwLwYDVQQD Eyg3MTg1MTA2YjhiMzEzZDc2OWYxNjE2YWE5ZDNiNTYxZjIwODg4M2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysIxureEvqJEGzGlOZKVc2yFDE2i iDNDAaUz9rhT/i9UXyjQZGulhDgxzJaCSc0grBIgu4ieOT2e1tlOc2dMIOY+aVnm 6YzXuPIYzCPVPIdlXDT/gvBt/8CjM4oe5c55VkaM1cQcCnP9M7CclIH8oHQ5sd7a ZPBOW1diMfv+LOlWnc2wOT1OV5flMcsWr8jfj3X/zYwLxN6QFONUNx3W+gdRCvMA pypW4uBdO/sHe/dhdKtIdTR0+lA0dD4aUiDdRjtOlU2oFvnkv3I09o8hUXxusvzD +DxuKptXspYkcRSl4iXZ+m3o55WmSQ1WmLa68ibTuYO6QqLqilszjItT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGFEGuLMT12nxYWqp07Vh8giIPFMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYJeXUPn l5TeAKSLC89d0K1O3W4v6Fwk8agxDU6CgaJb5i2jGJmnf4+YYiberP2gnKK89lwP fcabU2baJAPo5oqbbiij1sl51hSPDh58bhdMgKtYUeQCKn+QpKF2xZsbl0Gqk7TS dUefT4Tpzv2ekWV5S/ziyDeUYRHSvWPNuxBXrZe6fMHyCYXE1meSoDXacWKdY7FM CpAn7tQ7yH972A3aFmbVy2Ol4igeRl7T6MaDImbXMG0HsDyCcQr9OgCfdComVjY4 b+OqpDOBYMJ+3/E9Bl4q4z9eYzJoAQnw2krQQGrOuYPo/quCIfthMhYMT6pCFAH6 e/yqOHwfRPw6UA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:56:13 2025 by rpki-client