$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: KaSGSLxQPBQzy42bzH9rWjbYud1FqlqlZlJWStTJw58= Subject key identifier: A1:93:CD:3B:04:38:1C:30:2E:7C:B2:67:A3:EF:50:5D:D4:B1:C2:68 Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 019827B5295B7D9974ABB15C5CC9559B081F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 160B Signing time: Sun 20 Jul 2025 12:00:40 +0000 Manifest this update: Sun 20 Jul 2025 12:00:40 +0000 Manifest next update: Mon 21 Jul 2025 12:00:40 +0000 Files and hashes: 1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 2: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 3: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=) 4: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 5: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 6: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 7: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 8: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 9: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 10: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 11: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 12: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 13: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: Q2cxMQ8YcQROTj4LzmCcTQn3QESlPioADjXXOfGacNY=) 14: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:29:5b:7d:99:74:ab:b1:5c:5c:c9:55:9b:08:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Jul 20 12:00:40 2025 GMT Not After : Jul 21 12:00:40 2025 GMT Subject: CN=a193cd3b04381c302e7cb267a3ef505dd4b1c268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:01:49:84:a2:be:fd:7c:86:91:dd:ab:51: ec:66:a9:c4:56:4d:c3:a3:a9:69:b8:eb:bf:42:eb: 34:03:0f:b4:e5:20:26:be:7f:5e:e3:bf:b9:3b:02: 44:dd:72:76:2d:f7:31:a6:78:1e:3a:80:75:60:11: d8:b2:1d:b6:95:2a:10:7c:50:84:bc:88:f6:48:22: e4:40:8c:42:d1:5b:65:fb:b4:5b:7c:fb:ce:54:5b: dd:80:cd:32:4e:47:43:5d:e7:a2:e2:02:e8:0e:8c: 59:c7:a9:e4:b9:b4:aa:6a:ed:fc:80:e8:8f:b4:21: 51:e2:7c:e4:05:81:68:bd:67:bd:10:72:8c:92:0b: 4b:af:0b:82:4d:13:00:a8:5e:73:fe:f0:11:13:c8: a9:10:3b:54:9b:cc:22:70:5b:8b:d4:70:d7:c4:9f: f3:1e:a8:75:4a:3b:9b:7c:da:00:ad:b0:2e:68:d8: e8:1b:16:2b:8a:bb:21:4d:83:b9:36:79:59:d3:fa: c6:26:d7:88:31:74:e8:ca:41:20:3b:dc:61:57:c1: f5:a0:d4:90:b5:54:5b:12:74:be:a4:49:4e:e1:07: 23:69:6a:3b:8a:ef:30:c4:2d:ca:9d:7b:fd:c1:b4: 75:3a:bb:1d:88:86:46:77:fe:fd:ab:27:e2:0c:79: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:CD:3B:04:38:1C:30:2E:7C:B2:67:A3:EF:50:5D:D4:B1:C2:68 X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:db:35:fe:8a:29:57:16:f1:12:0a:da:6a:6b:6e:60:2f:2b: 0f:1e:b4:c0:77:4e:74:0e:d3:f7:58:43:bc:f6:70:6e:32:0d: 53:c0:a4:d7:0e:32:de:95:85:86:c3:62:45:d9:c8:39:72:ce: 74:c3:cd:33:12:4f:ac:22:d6:ed:31:65:aa:08:f5:df:57:5c: 01:fd:75:1b:bc:eb:7b:ad:38:08:ae:e5:09:26:f7:e1:62:f1: fd:56:f2:8c:83:c8:b2:59:27:1a:9a:77:8d:6b:21:0f:94:3b: 6c:44:e0:86:ac:23:79:eb:92:cb:e1:18:71:46:1c:ce:8f:e3: d4:35:7e:03:4f:6b:c3:c1:07:f0:48:0e:28:a1:24:86:af:44: a3:97:b5:fc:59:c3:de:f4:99:8d:de:68:57:a9:c8:a7:ba:e4: f2:2f:82:dd:d9:da:f1:0e:92:b2:a4:bd:8b:3a:90:19:9a:20: 78:92:90:f6:d0:45:bd:44:9e:d4:e4:3a:78:33:63:c9:0c:a9: 5e:ee:fe:27:77:52:f3:b7:0d:55:e4:23:52:6b:e6:58:c3:06: 20:b4:38:46:dc:d9:01:01:d3:0d:1e:df:b9:6b:35:66:86:b2: 1c:0e:af:44:f2:ad:fa:88:6a:12:53:96:5e:ab:12:88:cc:80: f4:f1:ed:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntSlbfZl0q7FcXMlVmwgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwNzIwMTIwMDQwWhcNMjUwNzIxMTIwMDQwWjAzMTEwLwYDVQQD EyhhMTkzY2QzYjA0MzgxYzMwMmU3Y2IyNjdhM2VmNTA1ZGQ0YjFjMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzABSYSivv18hpHdq1HsZqnEVk3D o6lpuOu/Qus0Aw+05SAmvn9e47+5OwJE3XJ2LfcxpngeOoB1YBHYsh22lSoQfFCE vIj2SCLkQIxC0Vtl+7RbfPvOVFvdgM0yTkdDXeei4gLoDoxZx6nkubSqau38gOiP tCFR4nzkBYFovWe9EHKMkgtLrwuCTRMAqF5z/vARE8ipEDtUm8wicFuL1HDXxJ/z Hqh1SjubfNoArbAuaNjoGxYrirshTYO5NnlZ0/rGJteIMXToykEgO9xhV8H1oNSQ tVRbEnS+pElO4QcjaWo7iu8wxC3KnXv9wbR1OrsdiIZGd/79qyfiDHlscQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGTzTsEOBwwLnyyZ6PvUF3UscJoMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEts1/oop VxbxEgraamtuYC8rDx60wHdOdA7T91hDvPZwbjINU8Ck1w4y3pWFhsNiRdnIOXLO dMPNMxJPrCLW7TFlqgj131dcAf11G7zre604CK7lCSb34WLx/VbyjIPIslknGpp3 jWshD5Q7bETghqwjeeuSy+EYcUYczo/j1DV+A09rw8EH8EgOKKEkhq9Eo5e1/FnD 3vSZjd5oV6nIp7rk8i+C3dna8Q6SsqS9izqQGZogeJKQ9tBFvUSe1OQ6eDNjyQyp Xu7+J3dS87cNVeQjUmvmWMMGILQ4RtzZAQHTDR7fuWs1ZoayHA6vRPKt+ohqElOW XqsSiMyA9PHtKA== -----END CERTIFICATE-----Generated at Sun Jul 20 16:24:53 2025 by rpki-client