$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: ABXo97zYaZzRKDpKhaEZWDZr3z5bENlmgjcNV/aveoM= Subject key identifier: 52:AF:12:4B:9F:24:E7:F9:93:67:13:6C:1B:6B:3E:93:7B:73:88:D4 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019A522C6929849A48E6E5396CACB3707DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 15C8 Signing time: Wed 05 Nov 2025 04:00:33 +0000 Manifest this update: Wed 05 Nov 2025 04:00:33 +0000 Manifest next update: Thu 06 Nov 2025 04:00:33 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: pg93yxA71NfpNB0yGA5SAckZoHtpUYuuT7ZUVJy4l0M=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:2c:69:29:84:9a:48:e6:e5:39:6c:ac:b3:70:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Nov 5 04:00:33 2025 GMT Not After : Nov 6 04:00:33 2025 GMT Subject: CN=52af124b9f24e7f99367136c1b6b3e937b7388d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:ac:db:30:00:f1:0f:fc:93:72:a0:7f:42: 4a:46:b7:03:f7:22:7b:95:b5:02:b7:29:f0:10:ac: a9:8b:4a:7d:a5:c0:8a:18:bd:75:32:78:38:3e:34: 68:1c:53:d8:67:69:48:60:c1:d7:1f:de:f1:3e:23: d6:0f:42:22:0b:ec:30:28:43:52:50:4f:a2:e7:d1: 0f:c1:f2:09:63:3e:ae:c8:7b:af:6f:e4:d7:09:ff: 4a:05:47:37:8c:9e:20:da:7b:85:ce:02:04:74:61: 48:56:3e:02:09:47:7c:c7:83:92:6e:bf:67:52:0d: 9b:52:30:45:40:7f:80:c4:d9:f4:73:ca:4c:02:bf: 09:75:55:0c:7c:a6:c5:a2:7a:aa:15:4a:86:e7:d7: 28:2d:e1:fe:88:f3:8c:5d:67:9c:62:fe:eb:9f:e2: 2b:a8:ed:a6:d4:a7:cf:9f:7a:a1:76:64:12:b0:b0: d7:d7:2c:96:21:da:9a:a9:74:53:ac:41:19:3b:39: b6:2b:a6:d1:00:b5:6e:b5:d9:71:ea:e9:6c:23:62: 61:0c:f7:a9:71:3e:42:95:f8:62:cc:2a:52:3c:e6: 6d:b5:d2:03:26:8f:04:03:9a:21:b4:06:26:3d:d6: 9d:69:eb:a2:73:45:72:cf:96:45:1c:80:28:3f:aa: d8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AF:12:4B:9F:24:E7:F9:93:67:13:6C:1B:6B:3E:93:7B:73:88:D4 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:46:82:73:25:70:57:a3:4a:b6:e7:ba:39:d0:4b:f6:00:d2: 29:cc:33:92:80:a6:3b:0b:7e:a9:8a:5b:c2:bb:ee:8d:33:59: 4d:ac:43:a4:58:c3:69:0a:fd:73:69:a7:46:9f:e6:cd:19:d5: b5:f6:b9:f2:b3:a6:a2:04:9e:a5:18:93:73:9c:95:77:e7:f6: 6b:12:5a:71:1d:2d:1f:36:8d:e7:f2:65:55:97:84:cb:be:21: 4b:6c:67:51:3a:f6:f7:93:9c:7b:36:bd:d1:59:c2:33:02:1a: 8c:7d:70:69:ef:dc:9d:af:ad:68:0f:c1:cb:1d:93:07:41:5f: 7d:cf:84:ea:2b:5f:db:89:25:b5:38:d6:33:a8:f6:f0:e9:8d: 02:37:57:cd:88:d8:14:87:67:16:20:df:34:b4:f6:32:09:6d: 61:92:db:76:55:c4:34:2d:2a:4a:95:50:af:f5:35:bb:d1:8d: a3:a1:04:76:f4:8a:10:97:12:20:59:74:17:42:4d:a9:d0:9b: 5f:d0:d2:8d:37:ab:47:e2:aa:7b:85:45:7f:26:56:43:07:66: 97:2f:24:d5:85:ea:1a:d9:e5:fd:69:d1:e2:81:bd:02:45:99: 6a:8a:2c:5f:a9:9d:a1:06:a1:6e:42:86:02:0e:3d:1e:df:77: 8b:c6:3f:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSLGkphJpI5uU5bKyzcH39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUxMTA1MDQwMDMzWhcNMjUxMTA2MDQwMDMzWjAzMTEwLwYDVQQD Eyg1MmFmMTI0YjlmMjRlN2Y5OTM2NzEzNmMxYjZiM2U5MzdiNzM4OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2as2zAA8Q/8k3Kgf0JKRrcD9yJ7 lbUCtynwEKypi0p9pcCKGL11Mng4PjRoHFPYZ2lIYMHXH97xPiPWD0IiC+wwKENS UE+i59EPwfIJYz6uyHuvb+TXCf9KBUc3jJ4g2nuFzgIEdGFIVj4CCUd8x4OSbr9n Ug2bUjBFQH+AxNn0c8pMAr8JdVUMfKbFonqqFUqG59coLeH+iPOMXWecYv7rn+Ir qO2m1KfPn3qhdmQSsLDX1yyWIdqaqXRTrEEZOzm2K6bRALVutdlx6ulsI2JhDPep cT5ClfhizCpSPOZttdIDJo8EA5ohtAYmPdadaeuic0Vyz5ZFHIAoP6rYjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKvEkufJOf5k2cTbBtrPpN7c4jUMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEaCcyVw V6NKtue6OdBL9gDSKcwzkoCmOwt+qYpbwrvujTNZTaxDpFjDaQr9c2mnRp/mzRnV tfa58rOmogSepRiTc5yVd+f2axJacR0tHzaN5/JlVZeEy74hS2xnUTr295Oceza9 0VnCMwIajH1wae/cna+taA/Byx2TB0Fffc+E6itf24kltTjWM6j28OmNAjdXzYjY FIdnFiDfNLT2MgltYZLbdlXENC0qSpVQr/U1u9GNo6EEdvSKEJcSIFl0F0JNqdCb X9DSjTerR+Kqe4VFfyZWQwdmly8k1YXqGtnl/WnR4oG9AkWZaoosX6mdoQahbkKG Ag49Ht93i8Y/Kw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:54:47 2025 by rpki-client