$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: qCrpU34o+/B4E4GA3BmlgPYspFvyzJCF3n3sPNVVQRc= Subject key identifier: 32:D7:80:F2:32:88:55:3E:C6:12:DA:88:28:10:03:66:00:04:9E:61 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 01987CE50A0F5E42C833DA409D35033F6C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 14C6 Signing time: Wed 06 Aug 2025 01:00:41 +0000 Manifest this update: Wed 06 Aug 2025 01:00:41 +0000 Manifest next update: Thu 07 Aug 2025 01:00:41 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 5: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 6: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 7: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 8: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 9: krCyhkuDWdtiE8IBk6ZAqu30Qw0.roa (hash: ajTMX25iwhDAaSs7jdJKz1hQnILnvbn3Eu+OgcDLty8=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 12: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: 0kvnl+Rrx2RpPvIVNwLz5JvmRNeARDNIWsD3Ue+NOf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:0a:0f:5e:42:c8:33:da:40:9d:35:03:3f:6c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Aug 6 01:00:41 2025 GMT Not After : Aug 7 01:00:41 2025 GMT Subject: CN=32d780f23288553ec612da882810036600049e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:16:e0:b0:07:fc:2c:00:db:50:e9:17:47: de:81:2c:16:b6:1c:4a:47:ae:e5:41:54:64:1e:f0: 70:70:34:ec:46:a3:07:30:a7:54:bc:be:1a:3a:d1: 46:13:6e:93:1b:a1:ab:fd:81:0f:be:0c:cf:b3:b0: fb:ed:53:8d:9a:93:10:6c:ad:d8:72:9b:96:b8:89: 52:b4:e3:1e:21:65:98:99:a6:9e:5b:10:98:6f:ec: 7c:d3:db:3e:b9:44:35:e1:d7:d2:a3:9d:fc:a4:2c: 20:6e:59:5f:7b:fe:29:6b:8d:c1:89:e3:02:94:b4: f3:ec:39:38:9b:e6:f4:ed:99:c7:fc:cf:1e:db:91: 31:23:97:00:e5:c9:83:03:20:ce:c3:1a:db:c8:76: 6f:cf:03:c2:2e:b9:92:04:e2:d4:c7:98:e1:ff:47: 4f:b5:89:ec:39:29:06:db:81:2c:c5:46:bf:98:98: 61:2d:36:e3:5a:f6:7b:8f:30:1e:ca:42:66:ea:47: 27:01:ff:f5:0a:5d:aa:29:73:8e:b6:a9:74:bb:e9: 0b:ca:66:8f:58:6c:54:9f:a4:90:ec:a2:34:cb:f7: 5d:ef:5a:22:52:3e:05:50:85:fd:32:0d:e1:f4:31: d0:40:ff:7a:40:6a:06:ea:f9:37:a5:74:81:07:47: 75:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:80:F2:32:88:55:3E:C6:12:DA:88:28:10:03:66:00:04:9E:61 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cb:68:68:89:da:68:b0:dd:76:9e:a8:e5:31:d1:b0:aa:e3: 1c:c6:ae:22:85:6d:dc:de:90:b1:ab:8c:cd:38:17:f0:b3:48: c0:7a:14:f6:a4:4b:2f:88:0e:08:73:6f:7d:2d:bf:1f:01:08: a8:75:00:95:c1:cd:ca:2d:c7:6f:be:ef:c3:05:c1:8e:d0:7f: 42:d7:c4:d7:f8:01:63:e5:29:4b:44:ca:66:ca:40:2b:8f:83: fe:86:48:a5:b5:6a:ad:25:94:ea:c8:b1:41:7e:e8:ef:ce:d4: b6:e9:8c:4a:36:ca:b4:99:ab:4e:ba:8c:e7:78:b4:3f:25:c5: 4c:6f:37:a3:06:74:94:ae:c2:6b:d6:16:c1:66:cd:3d:f7:a7: 0a:d3:ba:1e:3b:78:e4:a8:5a:11:e3:d2:5e:f4:68:89:19:3a: 68:90:e6:b6:fb:e2:c9:71:9d:23:80:34:08:e3:52:66:10:ef: b4:cc:ec:ed:b8:58:85:2e:82:73:3d:c5:00:08:b1:ab:48:75: 7a:d1:42:7c:ca:9d:d4:20:82:31:d6:82:7e:f7:c2:47:e9:e0: a8:2a:4d:67:60:f6:14:67:35:d3:83:93:96:78:f5:11:1b:dc: e6:7e:c7:4f:b6:77:74:3e:71:86:8d:bb:7d:9a:52:4f:c8:da: 57:24:bf:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85QoPXkLIM9pAnTUDP2wfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwODA2MDEwMDQxWhcNMjUwODA3MDEwMDQxWjAzMTEwLwYDVQQD EygzMmQ3ODBmMjMyODg1NTNlYzYxMmRhODgyODEwMDM2NjAwMDQ5ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zgW4LAH/CwA21DpF0fegSwWthxK R67lQVRkHvBwcDTsRqMHMKdUvL4aOtFGE26TG6Gr/YEPvgzPs7D77VONmpMQbK3Y cpuWuIlStOMeIWWYmaaeWxCYb+x809s+uUQ14dfSo538pCwgbllfe/4pa43BieMC lLTz7Dk4m+b07ZnH/M8e25ExI5cA5cmDAyDOwxrbyHZvzwPCLrmSBOLUx5jh/0dP tYnsOSkG24EsxUa/mJhhLTbjWvZ7jzAeykJm6kcnAf/1Cl2qKXOOtql0u+kLymaP WGxUn6SQ7KI0y/dd71oiUj4FUIX9Mg3h9DHQQP96QGoG6vk3pXSBB0d1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLXgPIyiFU+xhLaiCgQA2YABJ5hMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8toaIna aLDddp6o5THRsKrjHMauIoVt3N6QsauMzTgX8LNIwHoU9qRLL4gOCHNvfS2/HwEI qHUAlcHNyi3Hb77vwwXBjtB/QtfE1/gBY+UpS0TKZspAK4+D/oZIpbVqrSWU6six QX7o787UtumMSjbKtJmrTrqM53i0PyXFTG83owZ0lK7Ca9YWwWbNPfenCtO6Hjt4 5KhaEePSXvRoiRk6aJDmtvviyXGdI4A0CONSZhDvtMzs7bhYhS6Ccz3FAAixq0h1 etFCfMqd1CCCMdaCfvfCR+ngqCpNZ2D2FGc104OTlnj1ERvc5n7HT7Z3dD5xho27 fZpST8jaVyS/Zg== -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:03 2025 by rpki-client