$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: 6WVzyA6P+orBb0rs+LV90A6ag/h9Q7o36GaQfRxFhe4= Subject key identifier: 4C:F7:EA:46:E6:8B:E0:46:C1:51:A8:DA:74:01:6B:8B:6E:23:16:CA Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 01978AA3A3F26E1F2686E4C6E511AACC360F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 1675 Signing time: Fri 20 Jun 2025 00:01:09 +0000 Manifest this update: Fri 20 Jun 2025 00:01:09 +0000 Manifest next update: Sat 21 Jun 2025 00:01:09 +0000 Files and hashes: 1: 2D8GskUOctsT18ewUQERiVKSyqY.roa (hash: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: CJvoWnaR2bDBM3uwknntcn2bVMA.roa (hash: Fb5QqnBE+SmiT0K9fxFnS2c5V8bamOheKNBY72WLunI=) 5: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 6: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=) 7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: ypS9HybIuj2lAKFf7cMl0ignbR8x9mlTt1foBv6CVYU=) 9: cxtIOH2HTPQcljUlQ6T5b93OmjU.roa (hash: tH/NOyxHGmX11Frc+sHrlIOBqxLQMBd4oHjCtOuJpSU=) 10: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Jun 2025 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:8a:a3:a3:f2:6e:1f:26:86:e4:c6:e5:11:aa:cc:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jun 20 00:01:09 2025 GMT Not After : Jun 21 00:01:09 2025 GMT Subject: CN=4cf7ea46e68be046c151a8da74016b8b6e2316ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:d0:a9:97:c6:98:89:f8:85:c4:79:54:75: 4a:9c:f5:64:55:bd:01:2e:c2:6e:d8:dd:a8:a0:b7: 76:b6:54:2c:95:1b:69:71:95:46:99:ee:0d:e9:5e: 54:47:1a:bc:ab:c9:0d:dc:f0:ed:00:1f:15:3b:41: aa:08:9c:b5:c2:24:3c:19:7c:9c:d0:37:24:52:7c: da:09:6a:5d:01:bb:85:02:dd:53:c3:59:e7:7a:1c: 18:01:25:c5:53:4b:17:a8:b0:e0:ff:c7:df:12:9a: a2:3f:6e:92:2f:fa:55:ab:4f:a9:fe:61:b3:0e:38: e4:e5:8c:9e:73:ee:3b:30:0e:f6:df:ea:43:e8:f7: 3b:df:0d:a5:8d:e4:aa:93:cb:10:d7:62:3b:0c:26: 67:90:43:f0:0b:d8:b2:e9:52:78:80:db:41:2f:a3: 2d:03:e1:e0:1e:e9:4e:e6:ec:2a:72:8a:5d:3a:06: e4:4e:65:bf:d1:db:e6:86:6a:28:05:5f:76:7d:6a: 10:73:8b:4c:de:a5:db:9c:c2:1b:67:06:42:1b:c5: 67:f9:19:52:32:93:78:81:19:79:a2:57:6f:ee:c8: 97:58:03:ab:96:ca:75:bd:f7:99:53:f9:a1:69:fb: 66:8a:28:bf:c8:6f:bc:b1:86:f2:aa:fe:28:a3:25: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F7:EA:46:E6:8B:E0:46:C1:51:A8:DA:74:01:6B:8B:6E:23:16:CA X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:87:aa:d6:b0:c6:c9:6b:ad:80:bc:d1:27:71:4a:b5:6b:23: a6:38:8f:e6:71:a6:61:9f:98:b7:b5:77:98:c4:1d:2c:3d:fb: 46:93:3f:10:72:51:a4:a5:18:0c:f3:42:97:e3:a4:48:1b:ab: 0d:69:32:b8:61:39:02:a3:a4:f8:2c:4a:5a:25:59:41:ee:7e: 8e:d2:d0:14:99:fb:08:ed:b0:c5:39:08:fb:f7:07:e2:a8:d4: 75:d8:68:e5:d7:ae:18:d3:ce:f9:bf:88:8b:36:0c:72:f0:64: 6e:7c:6a:8f:3b:c3:28:2b:3f:cd:6e:a7:84:63:9b:77:e2:2e: 25:06:5b:92:55:b0:aa:d5:81:1b:ce:65:e8:2f:f3:10:cd:64: 5b:3a:25:d7:6c:25:64:5e:3a:09:59:da:39:1e:4a:86:a7:94: 0d:fd:00:e4:44:3d:e7:3a:ca:c5:90:92:31:01:ec:45:66:d9: f9:3f:36:df:98:4b:07:ed:45:c9:45:70:f9:de:d2:94:5d:77: 6d:d3:f2:fe:31:0b:db:a1:22:e4:49:74:f0:55:88:4f:9b:b3: 46:bd:2a:a1:bc:dd:f8:d8:d6:78:6e:67:09:7d:07:73:5e:cf: 7b:1c:57:0a:c6:b5:fd:bf:f7:b7:0c:88:0b:71:e9:fd:10:90: 0a:61:e8:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeKo6Pybh8mhuTG5RGqzDYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUwNjIwMDAwMTA5WhcNMjUwNjIxMDAwMTA5WjAzMTEwLwYDVQQD Eyg0Y2Y3ZWE0NmU2OGJlMDQ2YzE1MWE4ZGE3NDAxNmI4YjZlMjMxNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps/QqZfGmIn4hcR5VHVKnPVkVb0B LsJu2N2ooLd2tlQslRtpcZVGme4N6V5URxq8q8kN3PDtAB8VO0GqCJy1wiQ8GXyc 0DckUnzaCWpdAbuFAt1Tw1nnehwYASXFU0sXqLDg/8ffEpqiP26SL/pVq0+p/mGz Djjk5Yyec+47MA723+pD6Pc73w2ljeSqk8sQ12I7DCZnkEPwC9iy6VJ4gNtBL6Mt A+HgHulO5uwqcopdOgbkTmW/0dvmhmooBV92fWoQc4tM3qXbnMIbZwZCG8Vn+RlS MpN4gRl5oldv7siXWAOrlsp1vfeZU/mhaftmiii/yG+8sYbyqv4ooyXVSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz36kbmi+BGwVGo2nQBa4tuIxbKMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYeq1rDG yWutgLzRJ3FKtWsjpjiP5nGmYZ+Yt7V3mMQdLD37RpM/EHJRpKUYDPNCl+OkSBur DWkyuGE5AqOk+CxKWiVZQe5+jtLQFJn7CO2wxTkI+/cH4qjUddho5deuGNPO+b+I izYMcvBkbnxqjzvDKCs/zW6nhGObd+IuJQZbklWwqtWBG85l6C/zEM1kWzol12wl ZF46CVnaOR5KhqeUDf0A5EQ95zrKxZCSMQHsRWbZ+T8235hLB+1FyUVw+d7SlF13 bdPy/jEL26Ei5El08FWIT5uzRr0qobzd+NjWeG5nCX0Hc17PexxXCsa1/b/3twyI C3Hp/RCQCmHoZw== -----END CERTIFICATE-----Generated at Fri Jun 20 08:56:47 2025 by rpki-client