$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: u2uAH9F6mEDvQ+42qEdH7Cv9DmvHdS4QfAKOmtJKFtg= Subject key identifier: 5F:59:EE:39:A1:0C:9A:8F:E7:EE:5D:51:54:A5:DB:7D:7D:45:8C:77 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 01987C091ED9F6A8F8F1652E52B280017F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 11CA Signing time: Tue 05 Aug 2025 21:00:29 +0000 Manifest this update: Tue 05 Aug 2025 21:00:29 +0000 Manifest next update: Wed 06 Aug 2025 21:00:29 +0000 Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=) 2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=) 3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=) 4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=) 5: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (hash: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=) 6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=) 7: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=) 8: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=) 9: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=) 10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: 3Z+rOeluz0VOLLYK14V7zj4yW2fmhCaUTOnoH+XFoPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:09:1e:d9:f6:a8:f8:f1:65:2e:52:b2:80:01:7f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Aug 5 21:00:29 2025 GMT Not After : Aug 6 21:00:29 2025 GMT Subject: CN=5f59ee39a10c9a8fe7ee5d5154a5db7d7d458c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:cd:04:97:01:cb:95:2e:03:d9:66:38:2c: e8:9d:6f:ee:8c:34:4c:1a:d6:65:d9:ad:69:b4:f1: 91:3e:e9:98:c4:50:31:04:c0:76:ff:b5:64:bf:b3: 85:78:64:a4:29:f6:e2:e7:f6:29:2a:59:06:c5:45: 71:2e:a2:fd:f3:4b:e6:ad:93:d8:4e:3b:d4:0f:7d: 09:80:db:7e:9c:31:be:88:b1:91:0f:27:ad:4e:a8: 24:de:52:ed:f0:35:dd:53:c0:1a:bb:f5:dd:88:c7: 25:d9:a2:bb:f6:19:20:ef:d8:63:ce:74:0e:47:77: 9a:1a:b3:53:ac:95:32:d4:9e:f9:a3:8b:9c:75:92: fe:f3:0b:fe:14:26:e5:ac:f1:9f:b6:f4:1b:43:8f: d6:e1:57:4b:5a:ab:5e:c8:12:ef:61:06:cf:1d:32: 5d:76:8d:bd:46:85:13:76:77:69:c7:5a:d2:23:37: b6:73:b5:2a:92:e5:68:a5:a6:1a:11:b8:14:88:76: 7c:21:cc:69:f5:26:5f:30:70:c3:e8:61:08:ef:a0: e1:05:db:d8:f0:7c:69:55:14:6a:d3:df:58:4e:84: 96:e7:16:52:42:0c:ae:c8:99:dc:53:a5:9b:96:78: f7:24:ab:8c:2d:40:9e:f3:2f:14:7e:91:bd:fc:ff: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:59:EE:39:A1:0C:9A:8F:E7:EE:5D:51:54:A5:DB:7D:7D:45:8C:77 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2d:50:01:06:d4:6a:b5:b3:b5:63:76:ed:ac:5f:34:35:43: 32:3b:01:cd:9d:0c:8f:15:87:72:51:b8:b5:b6:ed:aa:e6:8d: aa:9e:0b:bc:05:f9:08:1f:e3:ba:99:8d:7e:a5:5b:0c:eb:31: 4c:15:76:f8:e8:b0:22:ac:c8:28:75:20:00:87:66:0d:d9:cc: f2:07:53:0c:54:37:a3:0d:1c:b4:81:e1:33:77:00:d0:ee:69: ae:8f:e4:75:81:7e:b5:4d:18:c3:fa:cb:a3:ae:cd:75:76:9f: 19:6b:7d:46:f2:25:db:47:6b:ef:03:1d:46:79:32:5c:7d:5f: 88:d1:f7:6b:2b:54:90:17:c2:21:62:1e:b9:95:1f:7e:80:1b: d5:6d:0d:a2:fd:2f:94:9d:88:fa:6e:c7:c7:0f:51:45:e3:08: b2:38:c5:fc:73:a1:a5:c0:4e:83:a0:2d:f2:db:18:0a:b0:68: 38:2b:35:33:7d:3e:e4:61:00:62:26:c6:01:fb:d2:8f:9f:ca: 0c:a0:0f:79:6d:7a:85:53:4c:4d:60:a9:3a:1e:17:36:33:4b: 7e:b0:00:b7:07:19:c9:c6:96:31:cb:a5:6a:2a:7f:0b:54:f9: 7d:75:94:c5:b3:de:d0:81:69:9f:2b:df:29:8d:0b:47:58:82: 76:12:71:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8CR7Z9qj48WUuUrKAAX9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUwODA1MjEwMDI5WhcNMjUwODA2MjEwMDI5WjAzMTEwLwYDVQQD Eyg1ZjU5ZWUzOWExMGM5YThmZTdlZTVkNTE1NGE1ZGI3ZDdkNDU4Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuzNBJcBy5UuA9lmOCzonW/ujDRM GtZl2a1ptPGRPumYxFAxBMB2/7Vkv7OFeGSkKfbi5/YpKlkGxUVxLqL980vmrZPY TjvUD30JgNt+nDG+iLGRDyetTqgk3lLt8DXdU8Aau/XdiMcl2aK79hkg79hjznQO R3eaGrNTrJUy1J75o4ucdZL+8wv+FCblrPGftvQbQ4/W4VdLWqteyBLvYQbPHTJd do29RoUTdndpx1rSIze2c7UqkuVopaYaEbgUiHZ8Icxp9SZfMHDD6GEI76DhBdvY 8HxpVRRq099YToSW5xZSQgyuyJncU6Wblnj3JKuMLUCe8y8UfpG9/P/EJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9Z7jmhDJqP5+5dUVSl2319RYx3MB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAki1QAQbU arWztWN27axfNDVDMjsBzZ0MjxWHclG4tbbtquaNqp4LvAX5CB/jupmNfqVbDOsx TBV2+OiwIqzIKHUgAIdmDdnM8gdTDFQ3ow0ctIHhM3cA0O5pro/kdYF+tU0Yw/rL o67NdXafGWt9RvIl20dr7wMdRnkyXH1fiNH3aytUkBfCIWIeuZUffoAb1W0Nov0v lJ2I+m7Hxw9RReMIsjjF/HOhpcBOg6At8tsYCrBoOCs1M30+5GEAYibGAfvSj5/K DKAPeW16hVNMTWCpOh4XNjNLfrAAtwcZycaWMculaip/C1T5fXWUxbPe0IFpnyvf KY0LR1iCdhJx/A== -----END CERTIFICATE-----Generated at Wed Aug 6 05:24:37 2025 by rpki-client