$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: Kief9GkCLRgXdp9OERKdKL+JiWGCLQrbTb/JnXc71lQ= Subject key identifier: 97:7B:1F:42:50:FB:AD:DD:AF:5C:87:F9:B0:94:EF:E2:4F:5B:1A:1B Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 01984475BA00E14E58A9E1A299876879D436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 162C Signing time: Sat 26 Jul 2025 02:00:22 +0000 Manifest this update: Sat 26 Jul 2025 02:00:22 +0000 Manifest next update: Sun 27 Jul 2025 02:00:22 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: bfhL+qfX2vD5NXhe/Hp1ZwhpbcgAIJa19KRYeSklXoA=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:75:ba:00:e1:4e:58:a9:e1:a2:99:87:68:79:d4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jul 26 02:00:22 2025 GMT Not After : Jul 27 02:00:22 2025 GMT Subject: CN=977b1f4250fbadddaf5c87f9b094efe24f5b1a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:98:1f:09:75:aa:b3:09:01:8a:8c:09:e8: fd:6e:d0:e8:78:5a:d1:5f:ac:e5:8a:55:c9:1d:14: 8f:7a:a2:cc:9f:97:a2:87:03:68:94:24:5a:a1:2a: c6:aa:f2:b4:93:a4:2d:b6:9d:3d:96:90:4b:e7:f2: 7d:a0:bd:9c:aa:75:35:52:16:7c:cb:41:91:d4:b2: 37:60:91:ec:52:f8:a0:22:88:8a:ed:c0:32:f2:b1: d3:67:50:f6:d5:96:3f:ba:4c:f8:80:d7:fe:e5:bf: 8c:08:05:3c:4a:37:ff:fb:cb:82:5d:4d:b5:5e:73: 86:f2:78:5b:ea:d1:47:28:dc:9b:6c:8a:b9:c9:dc: 4c:45:5a:f3:a9:ba:a2:3b:77:14:cd:d8:8d:b2:a7: 40:31:9a:6c:ee:a9:af:77:5d:86:0c:09:68:68:ce: 58:cc:e9:30:0a:d2:9e:13:c1:40:f8:8c:81:08:80: d4:74:6d:5f:e5:39:ee:9b:78:22:0f:9e:ef:f2:36: 90:0b:a3:f3:c6:30:87:c9:a6:5e:f8:8e:5f:b7:bc: 0c:7f:fb:4f:06:d6:40:9b:ea:01:f9:73:ef:55:20: 2a:4a:49:23:8f:21:42:26:e2:a0:56:79:d9:88:71: 66:a2:b3:64:72:a9:fa:71:98:db:d8:95:f9:7b:95: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:1F:42:50:FB:AD:DD:AF:5C:87:F9:B0:94:EF:E2:4F:5B:1A:1B X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:69:dc:8c:c4:ca:c2:b3:92:e7:2b:2f:ad:a6:cf:cd:ed:2e: 22:ed:92:dd:3f:26:c7:c1:c2:bf:99:df:b6:95:fd:6e:3f:45: c7:ca:67:d9:cf:63:24:75:5e:50:b2:07:71:fa:19:30:49:79: 42:10:bb:58:d2:b8:83:ed:34:81:31:b8:3f:c9:ba:2d:a3:5f: c1:1e:ff:3f:37:7d:ab:18:cc:46:17:d9:95:b5:01:ad:ea:8f: d4:5c:81:f6:81:57:3d:d6:6f:36:7c:3d:dd:7d:04:3a:3b:16: 1a:0f:87:31:ab:c3:30:51:28:7a:76:a2:77:6c:5b:f8:eb:a5: 9f:67:bc:c3:66:35:d7:60:c3:01:a3:03:48:dd:84:85:0e:6e: 39:ca:e9:2e:f0:4a:24:62:23:51:16:4d:67:a7:8b:1c:2a:05: 77:16:5b:1e:87:a7:71:8c:a2:37:74:09:44:7f:2e:85:64:68: 48:24:44:d0:e7:b3:58:a6:90:20:0e:41:d0:bf:a3:4e:e5:05: 9d:95:de:ae:82:ea:9c:65:b4:af:ba:39:f4:d9:43:b9:18:15: 0e:e8:b1:c6:4a:a4:6f:eb:01:48:51:45:03:96:07:aa:2f:c9: 4e:f6:74:d6:12:99:9c:e1:d9:c1:53:d2:b4:ac:50:0b:55:e8: be:82:e0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhEdboA4U5YqeGimYdoedQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUwNzI2MDIwMDIyWhcNMjUwNzI3MDIwMDIyWjAzMTEwLwYDVQQD Eyg5NzdiMWY0MjUwZmJhZGRkYWY1Yzg3ZjliMDk0ZWZlMjRmNWIxYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPOYHwl1qrMJAYqMCej9btDoeFrR X6zlilXJHRSPeqLMn5eihwNolCRaoSrGqvK0k6Qttp09lpBL5/J9oL2cqnU1UhZ8 y0GR1LI3YJHsUvigIoiK7cAy8rHTZ1D21ZY/ukz4gNf+5b+MCAU8Sjf/+8uCXU21 XnOG8nhb6tFHKNybbIq5ydxMRVrzqbqiO3cUzdiNsqdAMZps7qmvd12GDAloaM5Y zOkwCtKeE8FA+IyBCIDUdG1f5Tnum3giD57v8jaQC6PzxjCHyaZe+I5ft7wMf/tP BtZAm+oB+XPvVSAqSkkjjyFCJuKgVnnZiHFmorNkcqn6cZjb2JX5e5UnDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd7H0JQ+63dr1yH+bCU7+JPWxobMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWncjMTK wrOS5ysvrabPze0uIu2S3T8mx8HCv5nftpX9bj9Fx8pn2c9jJHVeULIHcfoZMEl5 QhC7WNK4g+00gTG4P8m6LaNfwR7/Pzd9qxjMRhfZlbUBreqP1FyB9oFXPdZvNnw9 3X0EOjsWGg+HMavDMFEoenaid2xb+Ouln2e8w2Y112DDAaMDSN2EhQ5uOcrpLvBK JGIjURZNZ6eLHCoFdxZbHoencYyiN3QJRH8uhWRoSCRE0OezWKaQIA5B0L+jTuUF nZXeroLqnGW0r7o59NlDuRgVDuixxkqkb+sBSFFFA5YHqi/JTvZ01hKZnOHZwVPS tKxQC1XovoLgxA== -----END CERTIFICATE-----Generated at Sat Jul 26 07:20:18 2025 by rpki-client