$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: uuiz1R5/P0rJSk91yV77blLHAg8UnXLkFumt4l4GVKQ= Subject key identifier: 0B:8B:CC:46:7A:A5:B7:CE:74:1E:5B:0A:D1:E5:82:65:40:0F:F1:00 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A4EF529C69D5C08D199F4DFFA6D134457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 15BC Signing time: Tue 04 Nov 2025 13:01:21 +0000 Manifest this update: Tue 04 Nov 2025 13:01:21 +0000 Manifest next update: Wed 05 Nov 2025 13:01:21 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: 3621kVLU1VT9Fici-tNYNAxF4xw.roa (hash: YevhNJP6n8UEvSB9W3Cp2mhJAKV1d9oeisrAeVxiMSA=) 4: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: PmWybA9-N8dc8PEujc3ISmvp274.roa (hash: RlrXWXlyD6hg5OOiK56C8Z6t9rRYFEPrd9C1t8eKLHU=) 10: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 11: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 12: pGHEbNMtjLRu8Cprmj0HiXypKR0.roa (hash: bK/eBtnsCEyHAZ1AGMsdtF+zE9uQoD6waTin5Xv5Q5M=) 13: pgNfMkpp3i69CoBAR_borZj9z3E.roa (hash: zObb1YXEsof5rty353AjV2YuXW0tkbylm0QLsUYgMRY=) 14: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 15: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: hqgVldFDerZUCCZnuc++XxUc05FDyWiOUHy0wPnfdXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:29:c6:9d:5c:08:d1:99:f4:df:fa:6d:13:44:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 4 13:01:21 2025 GMT Not After : Nov 5 13:01:21 2025 GMT Subject: CN=0b8bcc467aa5b7ce741e5b0ad1e58265400ff100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:0d:1c:f0:65:a1:66:11:30:48:7a:b9:dd: 7b:6e:7c:59:fa:0f:ff:9c:7d:45:71:ae:c4:5e:0f: 67:eb:66:60:dd:ba:af:3f:13:76:a1:2e:1b:50:8d: 98:5e:7d:df:41:9d:04:a0:15:a6:c5:bf:db:00:03: eb:a8:08:2e:39:7d:ca:9d:da:86:0f:1c:92:ea:90: d7:c8:5d:39:33:77:61:69:43:01:33:01:80:d2:74: 22:c5:09:eb:ef:a0:32:12:c9:8a:e3:67:8a:97:40: 22:33:57:5b:6b:ee:12:da:33:a7:63:d6:61:69:43: e3:c6:49:2c:7c:99:ee:f5:a5:1a:65:e1:c7:fc:ab: 63:c8:07:cb:c6:b2:15:13:74:21:81:ab:2c:4b:84: 5b:d2:b7:1c:67:5c:30:22:f1:6f:3c:96:76:f9:69: 1b:d3:92:8e:5e:8e:47:56:78:5b:a8:d3:c7:d4:db: c2:6b:8f:2e:27:46:05:f9:c2:aa:30:cd:2d:24:5a: 89:17:03:80:3e:dc:7c:5b:c3:7b:c2:b4:77:15:7f: 4c:0e:cb:8c:d9:f7:41:d9:5e:2f:a5:c3:d2:f8:80: c8:cb:82:ac:b8:3b:97:0f:bb:ad:1a:75:16:f4:08: b7:d0:d8:f6:d4:9d:3b:54:c8:ea:49:58:34:14:0a: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:CC:46:7A:A5:B7:CE:74:1E:5B:0A:D1:E5:82:65:40:0F:F1:00 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d0:3f:28:c5:08:d9:d3:d1:8e:d7:02:22:4d:4a:55:f0:95: 18:5c:e2:3a:55:d6:b9:f0:97:7f:5e:90:f5:09:b1:82:d0:6c: 58:3a:e6:fb:46:ef:09:7a:54:9e:7f:49:ea:5e:83:7c:df:a1: 87:b2:05:ea:5e:db:da:b1:2a:e6:4e:45:79:15:db:cc:ef:fa: 50:f5:14:53:6d:4a:1a:8f:c2:bb:31:a4:bc:81:26:59:12:13: 83:22:10:b4:8d:8d:da:2b:a5:d4:b8:74:d5:db:67:10:3b:72: 55:5c:cc:f6:21:9f:c0:51:6a:48:fc:e4:10:6a:59:d4:fe:30: f4:df:6a:76:ca:fe:fe:86:77:55:bc:21:91:fe:a3:9c:0f:8b: b6:76:91:a7:c9:26:85:6f:ce:97:a4:79:27:94:78:c0:eb:39: eb:bc:90:8b:61:b7:69:96:98:8c:56:18:8a:1f:10:f3:8c:1f: dd:00:1c:9b:c3:d8:ed:80:72:42:49:08:dd:df:ea:bf:c5:2b: 5d:62:25:d7:48:64:8e:31:4d:00:8c:df:9e:18:ed:e6:0f:82: ea:cf:a2:5d:c0:18:b7:b5:ea:9e:6b:18:6e:4a:b8:6d:a8:c4: 47:9c:94:d8:2c:78:76:4e:de:8d:51:26:60:3d:da:11:6d:64: f1:a5:3f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9SnGnVwI0Zn03/ptE0RXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTA0MTMwMTIxWhcNMjUxMTA1MTMwMTIxWjAzMTEwLwYDVQQD EygwYjhiY2M0NjdhYTViN2NlNzQxZTViMGFkMWU1ODI2NTQwMGZmMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDUNHPBloWYRMEh6ud17bnxZ+g// nH1Fca7EXg9n62Zg3bqvPxN2oS4bUI2YXn3fQZ0EoBWmxb/bAAPrqAguOX3KndqG DxyS6pDXyF05M3dhaUMBMwGA0nQixQnr76AyEsmK42eKl0AiM1dba+4S2jOnY9Zh aUPjxkksfJnu9aUaZeHH/KtjyAfLxrIVE3QhgassS4Rb0rccZ1wwIvFvPJZ2+Wkb 05KOXo5HVnhbqNPH1NvCa48uJ0YF+cKqMM0tJFqJFwOAPtx8W8N7wrR3FX9MDsuM 2fdB2V4vpcPS+IDIy4KsuDuXD7utGnUW9Ai30Nj21J07VMjqSVg0FArMmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuLzEZ6pbfOdB5bCtHlgmVAD/EAMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtA/KMUI 2dPRjtcCIk1KVfCVGFziOlXWufCXf16Q9QmxgtBsWDrm+0bvCXpUnn9J6l6DfN+h h7IF6l7b2rEq5k5FeRXbzO/6UPUUU21KGo/CuzGkvIEmWRITgyIQtI2N2iul1Lh0 1dtnEDtyVVzM9iGfwFFqSPzkEGpZ1P4w9N9qdsr+/oZ3Vbwhkf6jnA+LtnaRp8km hW/Ol6R5J5R4wOs567yQi2G3aZaYjFYYih8Q84wf3QAcm8PY7YByQkkI3d/qv8Ur XWIl10hkjjFNAIzfnhjt5g+C6s+iXcAYt7XqnmsYbkq4bajER5yU2Cx4dk7ejVEm YD3aEW1k8aU/rw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:17:43 2025 by rpki-client