$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: m1QXCDCakY3+I2f3AZ7djOo4n30GC1eYHkAcKT0EwJA= Subject key identifier: 24:6C:95:66:03:15:23:D7:2A:60:21:1B:6F:4D:21:C0:93:3B:6F:CE Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019773E436CE9D2C0BB3AB86A0E5C620985D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 1436 Signing time: Sun 15 Jun 2025 14:00:25 +0000 Manifest this update: Sun 15 Jun 2025 14:00:25 +0000 Manifest next update: Mon 16 Jun 2025 14:00:25 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: B84STFeKoQGNNPVu7qjqse7G6tE.roa (hash: MtuuUttjdEHBfw9pQ6wLwNYRQchbll7oYwTHz6pA12k=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: ncWW-PHiyTcD5myQc3_j5MkvxYM.roa (hash: yq//c+NUg8a+fjUiszm4DltA+xgrNNfhnKp5UTxqPzs=) 12: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 13: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: 9oC679vvaInwTOWUaxyWGnj/lQO+gQOxQBgeTHlvIJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:73:e4:36:ce:9d:2c:0b:b3:ab:86:a0:e5:c6:20:98:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Jun 15 14:00:25 2025 GMT Not After : Jun 16 14:00:25 2025 GMT Subject: CN=246c9566031523d72a60211b6f4d21c0933b6fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:1d:e7:14:30:60:ea:f7:b6:e9:2d:7f:8b: 04:02:d0:40:24:c7:02:48:25:c4:4e:5a:a6:4b:72: 0e:bf:2f:76:e6:a6:c1:59:dc:23:e2:b3:7d:d7:06: c4:bb:cd:f5:d1:5f:e8:bd:0d:e6:9a:47:c1:17:51: e6:c1:a4:b7:0b:6c:81:6c:0c:f4:ff:4d:40:b4:7e: f9:91:8f:b1:69:58:90:20:78:c7:a3:52:e0:d3:1a: 9e:4e:1a:2b:74:1e:c8:9f:91:b0:f1:b4:db:3d:80: 1b:66:96:7b:64:12:c2:39:66:12:45:8b:42:a1:fd: ff:48:e4:91:9e:1d:b8:7e:fc:26:0c:da:48:09:a3: 24:07:c6:c4:b5:e8:18:ee:64:08:5e:0f:2f:84:94: f8:95:b8:00:a0:06:1a:20:b7:4a:8b:e4:15:ff:3f: ce:d2:ed:f7:c4:c3:9c:e3:4a:0b:31:d1:3b:e1:ff: 9c:95:5c:9f:5f:09:b8:a5:82:b7:ce:ec:ca:a4:3b: 08:0d:f8:c6:96:a7:e5:21:3f:e5:eb:4d:7f:9d:d8: d4:72:49:43:9b:9a:f6:1e:a3:f1:e6:6c:54:40:b5: 58:29:d5:57:3f:fc:7a:82:35:dc:c5:9e:4f:10:f5: 12:62:45:e5:ed:01:31:b8:16:5c:00:aa:82:41:be: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:95:66:03:15:23:D7:2A:60:21:1B:6F:4D:21:C0:93:3B:6F:CE X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:93:3b:03:60:ce:36:46:67:54:cc:01:60:2e:24:03:e1: 32:70:86:23:0c:d8:98:aa:82:93:de:5c:7a:b4:74:b8:e2:3a: 8c:4e:8e:b0:16:63:22:6f:12:51:19:74:27:9e:27:5f:ce:23: 19:47:c5:21:d3:ca:8c:cf:3f:28:67:0a:c9:56:7d:d6:52:8b: 2c:3f:81:a5:63:77:17:93:70:f8:d4:b6:c0:94:fa:21:38:70: ea:be:b2:a7:3f:c2:44:f8:bc:ad:0e:65:df:32:41:96:9b:08: ea:54:a3:65:9b:69:e9:1c:b1:b4:77:c2:09:9e:2d:fb:99:74: b4:02:6e:1a:91:bb:47:6b:c5:20:45:64:5f:ac:de:96:77:54: c2:54:3d:38:e4:87:0b:a4:92:cd:9a:33:1c:75:c3:26:5d:67: 26:27:d3:31:c2:80:cc:3d:7b:d7:85:01:af:f1:a3:73:1a:64: 69:70:9c:70:6e:17:66:40:ec:26:eb:66:14:c1:ba:e8:b3:c4: 49:fd:9b:ff:92:eb:e5:f5:2c:37:c3:62:55:e2:47:34:c1:c9: ce:9c:23:5e:c6:8d:f7:a7:56:94:77:7a:39:40:b1:da:45:5a: 48:19:12:a1:f9:68:24:ee:d4:38:1e:fc:22:3d:c5:ae:a4:0b: 71:72:9a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdz5DbOnSwLs6uGoOXGIJhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwNjE1MTQwMDI1WhcNMjUwNjE2MTQwMDI1WjAzMTEwLwYDVQQD EygyNDZjOTU2NjAzMTUyM2Q3MmE2MDIxMWI2ZjRkMjFjMDkzM2I2ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCUd5xQwYOr3tuktf4sEAtBAJMcC SCXETlqmS3IOvy925qbBWdwj4rN91wbEu8310V/ovQ3mmkfBF1HmwaS3C2yBbAz0 /01AtH75kY+xaViQIHjHo1Lg0xqeThordB7In5Gw8bTbPYAbZpZ7ZBLCOWYSRYtC of3/SOSRnh24fvwmDNpICaMkB8bEtegY7mQIXg8vhJT4lbgAoAYaILdKi+QV/z/O 0u33xMOc40oLMdE74f+clVyfXwm4pYK3zuzKpDsIDfjGlqflIT/l601/ndjUcklD m5r2HqPx5mxUQLVYKdVXP/x6gjXcxZ5PEPUSYkXl7QExuBZcAKqCQb5QSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRslWYDFSPXKmAhG29NIcCTO2/OMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkseTOwNg zjZGZ1TMAWAuJAPhMnCGIwzYmKqCk95cerR0uOI6jE6OsBZjIm8SURl0J54nX84j GUfFIdPKjM8/KGcKyVZ91lKLLD+BpWN3F5Nw+NS2wJT6IThw6r6ypz/CRPi8rQ5l 3zJBlpsI6lSjZZtp6RyxtHfCCZ4t+5l0tAJuGpG7R2vFIEVkX6zelndUwlQ9OOSH C6SSzZozHHXDJl1nJifTMcKAzD1714UBr/GjcxpkaXCccG4XZkDsJutmFMG66LPE Sf2b/5Lr5fUsN8NiVeJHNMHJzpwjXsaN96dWlHd6OUCx2kVaSBkSofloJO7UOB78 Ij3FrqQLcXKaVw== -----END CERTIFICATE-----Generated at Sun Jun 15 17:19:11 2025 by rpki-client