$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: 78+Z7Aedvg6UePtPMOa9KGcx6fgonCZDu0SdbRWIEqI= Subject key identifier: 4D:03:C7:8A:9B:B8:06:4A:9B:77:AF:F6:7D:20:EF:2D:0A:79:F4:D7 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 0198819E1596B1C7BB32ACB947F0283865CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 13EC Signing time: Wed 06 Aug 2025 23:01:17 +0000 Manifest this update: Wed 06 Aug 2025 23:01:17 +0000 Manifest next update: Thu 07 Aug 2025 23:01:17 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 8: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 9: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 10: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: DctMQbosc1009Wc+sLgYGelgujYbqZBpSAQyE6vUSIQ=) 12: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:9e:15:96:b1:c7:bb:32:ac:b9:47:f0:28:38:65:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Aug 6 23:01:17 2025 GMT Not After : Aug 7 23:01:17 2025 GMT Subject: CN=4d03c78a9bb8064a9b77aff67d20ef2d0a79f4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:ef:7b:9b:4b:37:b6:8d:f1:98:f5:75:96: dc:68:4a:c2:a1:0d:17:bf:a4:a2:cb:d1:71:fe:87: f4:99:f9:fb:26:7c:38:90:c4:fe:0f:20:2a:fd:5b: fb:73:a5:4f:61:05:59:01:b2:48:97:4e:f9:46:93: d8:83:0e:2c:75:12:19:62:d2:ec:c0:f4:47:14:6c: b3:13:bf:20:22:80:23:6f:02:08:09:6e:91:c4:ff: 90:4d:57:51:bc:7f:cd:ee:90:ad:9a:7c:fc:40:a4: c0:ca:41:50:3f:0a:3a:11:65:f0:3d:02:13:7b:0a: e2:19:ef:d5:dd:ec:4b:30:ad:ad:42:31:8d:b4:30: 08:e2:53:7a:06:b3:32:7e:bb:d9:39:dc:2a:9f:39: d3:3f:c8:68:f0:d1:67:c9:c0:56:26:24:b5:a3:73: e0:09:7f:70:72:45:65:30:6c:77:bb:ee:7f:ca:e3: 68:30:ae:00:ef:8a:4d:ce:40:83:24:09:55:db:35: ee:95:05:f2:ef:88:ff:ba:3b:35:40:a0:71:c9:dd: 4a:4c:4a:b8:18:14:c7:ca:b2:bb:e5:23:e0:69:a2: 0f:0c:09:d2:fd:00:7e:4d:84:3b:cc:39:01:58:cf: 5c:72:ec:18:7b:82:84:ab:08:75:9d:28:16:df:f0: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:03:C7:8A:9B:B8:06:4A:9B:77:AF:F6:7D:20:EF:2D:0A:79:F4:D7 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b0:2c:07:af:f2:8f:15:ba:9f:4b:6c:e0:09:7a:75:df:0d: 5e:1d:0d:17:b3:c3:46:6a:ff:47:7f:c5:5b:84:1d:c1:45:3b: 2e:22:f5:2a:c9:16:2c:0b:31:1c:f7:95:08:78:35:49:af:6b: 78:95:df:9f:ab:e4:71:74:43:3a:a5:30:87:31:3f:3c:f0:ff: c3:e5:8a:b6:52:ef:95:15:78:c9:c1:c7:f8:c3:b7:51:06:e8: 58:20:35:bf:d6:a7:99:11:ec:7c:bc:1b:08:38:ad:8d:62:99: 26:4b:29:07:83:92:42:d1:97:0c:17:90:4e:31:36:8a:bc:18: 07:93:cb:05:cf:46:f3:e2:db:98:81:11:99:de:2f:f9:4a:20: ef:11:d8:90:63:6e:e3:c2:ca:39:a2:50:78:bf:33:c3:6d:18: 66:ac:53:c6:42:df:9b:c6:9b:53:a6:7c:c7:52:10:8f:d0:24: 45:4b:ef:62:54:48:bd:8c:52:25:75:7f:2c:17:fe:5a:5c:13: 2a:fe:93:76:e4:32:6c:e4:db:1d:f2:5e:01:34:aa:13:7a:81: 53:17:cf:f8:e0:4b:a6:67:94:4e:e0:8d:0e:77:f0:de:e1:55: 97:9f:dc:1f:52:2a:3a:cc:ec:28:08:33:45:94:5e:83:c9:d1: 80:93:65:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiBnhWWsce7Mqy5R/AoOGXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwODA2MjMwMTE3WhcNMjUwODA3MjMwMTE3WjAzMTEwLwYDVQQD Eyg0ZDAzYzc4YTliYjgwNjRhOWI3N2FmZjY3ZDIwZWYyZDBhNzlmNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SXve5tLN7aN8Zj1dZbcaErCoQ0X v6Siy9Fx/of0mfn7Jnw4kMT+DyAq/Vv7c6VPYQVZAbJIl075RpPYgw4sdRIZYtLs wPRHFGyzE78gIoAjbwIICW6RxP+QTVdRvH/N7pCtmnz8QKTAykFQPwo6EWXwPQIT ewriGe/V3exLMK2tQjGNtDAI4lN6BrMyfrvZOdwqnznTP8ho8NFnycBWJiS1o3Pg CX9wckVlMGx3u+5/yuNoMK4A74pNzkCDJAlV2zXulQXy74j/ujs1QKBxyd1KTEq4 GBTHyrK75SPgaaIPDAnS/QB+TYQ7zDkBWM9ccuwYe4KEqwh1nSgW3/DFSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0Dx4qbuAZKm3ev9n0g7y0KefTXMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLAsB6/y jxW6n0ts4Al6dd8NXh0NF7PDRmr/R3/FW4QdwUU7LiL1KskWLAsxHPeVCHg1Sa9r eJXfn6vkcXRDOqUwhzE/PPD/w+WKtlLvlRV4ycHH+MO3UQboWCA1v9anmRHsfLwb CDitjWKZJkspB4OSQtGXDBeQTjE2irwYB5PLBc9G8+LbmIERmd4v+Uog7xHYkGNu 48LKOaJQeL8zw20YZqxTxkLfm8abU6Z8x1IQj9AkRUvvYlRIvYxSJXV/LBf+WlwT Kv6TduQybOTbHfJeATSqE3qBUxfP+OBLpmeUTuCNDnfw3uFVl5/cH1IqOszsKAgz RZReg8nRgJNloQ== -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:22 2025 by rpki-client