$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: zCTyQejpHuptd0spXUulxSesYO5QCZ+00Na+ouUleKA= Subject key identifier: FB:29:6A:37:7E:38:B9:BD:F1:06:5C:58:A8:BD:3F:1E:EE:B3:80:FB Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019874F4B694042DEE05D56E2351E3DC3334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1626 Signing time: Mon 04 Aug 2025 12:00:51 +0000 Manifest this update: Mon 04 Aug 2025 12:00:51 +0000 Manifest next update: Tue 05 Aug 2025 12:00:51 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: ZdCmDhcdCWuq/fHkmN4ue+5lwD+jtJ2g7UiYWbDqih0=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f4:b6:94:04:2d:ee:05:d5:6e:23:51:e3:dc:33:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Aug 4 12:00:51 2025 GMT Not After : Aug 5 12:00:51 2025 GMT Subject: CN=fb296a377e38b9bdf1065c58a8bd3f1eeeb380fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:16:23:8f:42:8e:b6:69:84:ef:5b:5d:39: 6a:17:40:d0:33:d2:fb:a1:d8:d4:3c:b3:63:1c:36: 59:1b:87:fd:e0:42:0d:6d:79:df:1a:39:4b:d9:cd: f4:47:c7:43:4e:71:53:ef:a9:01:1d:e1:7f:92:df: 47:55:96:12:27:a3:9d:b5:0c:e5:31:0e:12:61:91: ba:3c:da:ec:75:48:c4:3a:e8:86:c0:6c:34:7c:cf: da:e5:82:2c:fd:d9:d4:dd:f1:2f:fd:61:20:6a:32: d2:87:52:92:34:88:cc:69:07:8a:99:27:14:ec:c8: d6:21:67:69:38:44:5c:fe:72:81:0b:5b:7f:a1:e4: 77:6e:fa:fb:dc:e3:0d:4b:d7:21:99:a7:c6:b6:93: b7:10:86:4c:cb:0d:c4:e3:1a:82:34:1c:33:ee:0b: 64:be:b9:07:94:04:d8:fc:12:08:08:ad:f5:1f:9d: 9b:3b:13:83:78:70:7d:17:79:a5:ca:b8:da:79:cb: 7f:3d:10:1a:3f:93:c3:41:e7:f5:2a:85:df:9a:0d: 86:30:42:3c:f1:bb:5c:5f:33:63:4e:44:df:15:6f: a7:e7:95:53:43:b0:ce:a7:68:9e:12:03:87:41:b9: 96:c5:04:c8:c4:8b:3e:2e:0c:92:42:69:c1:e5:b9: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:29:6A:37:7E:38:B9:BD:F1:06:5C:58:A8:BD:3F:1E:EE:B3:80:FB X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e7:06:d8:e0:c3:a2:20:02:4e:93:88:cc:ec:ff:23:e0:ca: 0c:eb:5a:a9:38:13:52:4f:ae:23:c4:d8:8e:0c:1d:4a:5b:ab: f8:73:ab:94:2c:7e:85:ac:de:28:85:54:db:81:53:95:2f:c9: 38:ff:a7:1f:d1:fd:a5:d7:05:e2:0a:fa:6e:7d:61:1d:63:3a: 4c:13:83:15:a7:72:54:78:94:d8:c8:b1:a2:c4:29:b5:ec:24: 72:af:20:a7:19:f8:ba:57:a4:7b:01:93:88:44:29:28:3d:0a: 2d:05:6a:a8:12:81:ab:41:26:f4:29:6f:64:ef:bf:a8:a6:61: c8:3f:5a:f7:1f:8a:cc:bd:d4:e4:65:f1:29:d4:90:ad:e8:bf: 94:d6:4b:2b:f4:e4:43:bf:71:79:bb:c8:cf:e0:c5:b1:c1:3f: 41:6d:e5:0b:50:78:93:7f:fb:15:10:58:20:39:7e:2b:af:84: 3b:86:94:29:28:b8:2e:29:90:3f:dc:2b:fa:9b:ae:b9:8d:f5: 33:10:75:66:0f:5d:ef:aa:9d:f1:fc:07:8d:7b:ab:e4:54:a5: fc:89:b3:2d:92:4d:f7:97:ca:bc:71:62:a8:a8:52:56:8e:ee: 2e:16:a9:ff:07:5c:37:4b:2f:98:bb:35:1c:cf:1c:e9:0c:71: 98:be:89:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09LaUBC3uBdVuI1Hj3DM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwODA0MTIwMDUxWhcNMjUwODA1MTIwMDUxWjAzMTEwLwYDVQQD EyhmYjI5NmEzNzdlMzhiOWJkZjEwNjVjNThhOGJkM2YxZWVlYjM4MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3EWI49CjrZphO9bXTlqF0DQM9L7 odjUPLNjHDZZG4f94EINbXnfGjlL2c30R8dDTnFT76kBHeF/kt9HVZYSJ6OdtQzl MQ4SYZG6PNrsdUjEOuiGwGw0fM/a5YIs/dnU3fEv/WEgajLSh1KSNIjMaQeKmScU 7MjWIWdpOERc/nKBC1t/oeR3bvr73OMNS9chmafGtpO3EIZMyw3E4xqCNBwz7gtk vrkHlATY/BIICK31H52bOxODeHB9F3mlyrjaect/PRAaP5PDQef1KoXfmg2GMEI8 8btcXzNjTkTfFW+n55VTQ7DOp2ieEgOHQbmWxQTIxIs+LgySQmnB5bma1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPspajd+OLm98QZcWKi9Px7us4D7MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOcG2ODD oiACTpOIzOz/I+DKDOtaqTgTUk+uI8TYjgwdSlur+HOrlCx+hazeKIVU24FTlS/J OP+nH9H9pdcF4gr6bn1hHWM6TBODFadyVHiU2MixosQptewkcq8gpxn4ulekewGT iEQpKD0KLQVqqBKBq0Em9ClvZO+/qKZhyD9a9x+KzL3U5GXxKdSQrei/lNZLK/Tk Q79xebvIz+DFscE/QW3lC1B4k3/7FRBYIDl+K6+EO4aUKSi4LimQP9wr+puuuY31 MxB1Zg9d76qd8fwHjXur5FSl/ImzLZJN95fKvHFiqKhSVo7uLhap/wdcN0svmLs1 HM8c6QxxmL6JEA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:24:03 2025 by rpki-client