$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: eHP2v1qjubBA9+kS6gxzMnBK08W/FRXoftC2W918p1A= Subject key identifier: 6A:33:A0:3A:B4:3E:0E:1B:3C:4C:76:49:80:44:A7:92:FB:0B:1B:DC Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 01988B0E83E53DBC500335EC3A1975C7011E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1670 Signing time: Fri 08 Aug 2025 19:00:40 +0000 Manifest this update: Fri 08 Aug 2025 19:00:40 +0000 Manifest next update: Sat 09 Aug 2025 19:00:40 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: F5MHXDqnIzYEJiqy-lSbHqiutdE.roa (hash: Kr6UA+01g5mj3k9HL3gZp8uUuI6XmpL1gu4D3yxcHg4=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 25: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 26: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 27: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 29: bSVo2RrhzLf-kvkumfM8eA1LBb4.roa (hash: EM8XYwd0G3fvP2wAeyIFrzfPWu8wisMVd1TPeR4ae6U=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: qihIaZQy0goEiq7ct818E/4J09Kr4s+BA/arvq4z0YA=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:0e:83:e5:3d:bc:50:03:35:ec:3a:19:75:c7:01:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Aug 8 19:00:40 2025 GMT Not After : Aug 9 19:00:40 2025 GMT Subject: CN=6a33a03ab43e0e1b3c4c76498044a792fb0b1bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:4d:6b:ba:fd:dd:52:e5:c9:1f:c3:1f:44: df:95:78:a8:73:b5:e7:a3:74:8d:51:31:6f:43:49: 0d:93:cb:1e:8f:62:4e:09:e7:2f:57:61:30:10:e6: b5:d6:60:80:a4:d4:4d:9b:f3:12:16:3d:b7:2a:3d: 32:e9:cb:ef:c5:e2:c3:0d:9f:6b:ca:fa:fe:14:28: 5e:93:54:b9:7b:cc:af:48:c3:cb:4d:94:3c:bf:a5: 98:7c:08:d5:d1:fc:1b:c6:13:fa:5f:2d:f6:60:1e: d3:43:ae:2f:70:56:79:93:f6:51:76:df:55:81:2b: e5:30:ca:07:ed:62:15:ef:ee:68:27:22:9a:44:a0: 58:fc:b1:e5:f0:6a:27:1c:f5:80:f1:a1:b6:2a:7d: d5:ff:3f:fe:3f:a8:af:63:fb:dc:f8:a7:87:5f:c0: 83:20:e0:60:06:4b:59:1c:77:91:dc:19:ff:09:17: 32:e5:a2:86:4e:fc:d9:ba:46:a7:c7:54:19:c0:24: 29:47:b6:a1:6d:05:25:65:db:7c:22:06:d4:62:be: 71:29:57:1f:e0:07:b0:93:dc:12:1e:22:1f:fa:f4: da:1e:4c:8f:1b:a3:a1:e8:c1:1e:83:a0:e0:f5:60: a8:91:d0:61:f8:77:ed:69:1e:6d:2d:50:4e:84:23: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:A0:3A:B4:3E:0E:1B:3C:4C:76:49:80:44:A7:92:FB:0B:1B:DC X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8f:e8:0c:13:99:02:a7:f4:74:b3:6b:33:f1:dc:32:43:f9: 8a:60:04:40:2e:b9:72:a2:77:74:39:b8:14:d8:07:a9:41:c7: c9:07:1a:b5:71:2e:55:ca:17:25:9b:59:52:eb:b7:1f:84:3a: 82:6c:f1:d5:29:6a:05:58:c5:86:ca:18:7f:23:9a:81:ae:2c: 35:09:8e:7e:3c:1e:16:59:c1:5f:d2:59:ad:7f:92:f1:a4:6c: d9:0d:af:73:ef:01:a6:8d:01:cf:79:04:95:2a:3a:a2:f5:59: c2:69:8a:34:7b:33:75:e4:09:73:95:9d:6e:eb:50:ac:ee:6a: dc:35:8e:49:e1:dc:5c:90:8b:8d:aa:ad:51:56:66:ad:ff:ba: 3e:b4:92:32:08:fa:7b:40:c0:fa:ce:20:d8:3e:95:22:eb:b8: 78:19:06:ec:d8:97:fd:cb:e6:76:e4:52:de:d0:b7:a9:d3:7a: 13:0b:9a:9b:bf:a6:c1:5a:48:32:30:ff:b0:6b:36:47:66:3a: 52:4a:e6:c4:fb:e4:22:d7:47:1e:3c:81:19:af:3d:66:58:40: 08:fd:c2:c2:7c:b2:95:46:1b:09:ac:22:5f:95:14:e1:b6:42: 96:38:b9:45:5d:24:62:eb:f5:02:1c:b6:95:a0:51:45:9d:00: ce:a7:57:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiLDoPlPbxQAzXsOhl1xwEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwODA4MTkwMDQwWhcNMjUwODA5MTkwMDQwWjAzMTEwLwYDVQQD Eyg2YTMzYTAzYWI0M2UwZTFiM2M0Yzc2NDk4MDQ0YTc5MmZiMGIxYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08RNa7r93VLlyR/DH0TflXioc7Xn o3SNUTFvQ0kNk8sej2JOCecvV2EwEOa11mCApNRNm/MSFj23Kj0y6cvvxeLDDZ9r yvr+FChek1S5e8yvSMPLTZQ8v6WYfAjV0fwbxhP6Xy32YB7TQ64vcFZ5k/ZRdt9V gSvlMMoH7WIV7+5oJyKaRKBY/LHl8GonHPWA8aG2Kn3V/z/+P6ivY/vc+KeHX8CD IOBgBktZHHeR3Bn/CRcy5aKGTvzZukanx1QZwCQpR7ahbQUlZdt8IgbUYr5xKVcf 4Aewk9wSHiIf+vTaHkyPG6Oh6MEeg6Dg9WCokdBh+HftaR5tLVBOhCPXxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGozoDq0Pg4bPEx2SYBEp5L7CxvcMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4/oDBOZ Aqf0dLNrM/HcMkP5imAEQC65cqJ3dDm4FNgHqUHHyQcatXEuVcoXJZtZUuu3H4Q6 gmzx1SlqBVjFhsoYfyOaga4sNQmOfjweFlnBX9JZrX+S8aRs2Q2vc+8Bpo0Bz3kE lSo6ovVZwmmKNHszdeQJc5WdbutQrO5q3DWOSeHcXJCLjaqtUVZmrf+6PrSSMgj6 e0DA+s4g2D6VIuu4eBkG7NiX/cvmduRS3tC3qdN6Ewuam7+mwVpIMjD/sGs2R2Y6 UkrmxPvkItdHHjyBGa89ZlhACP3CwnyylUYbCawiX5UU4bZClji5RV0kYuv1Ahy2 laBRRZ0AzqdXqw== -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:59 2025 by rpki-client