$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: yJnzjT/xYSN9rEY7wjkNddmJqsK9EhQwJSCuwSUcGlY= Subject key identifier: B1:A6:EE:9C:8F:20:67:8F:C1:7C:92:46:4E:57:F4:8E:8B:36:C8:78 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 01983382313C5CEC8BED12AB35791A8B141F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 14AF Signing time: Tue 22 Jul 2025 19:00:26 +0000 Manifest this update: Tue 22 Jul 2025 19:00:26 +0000 Manifest next update: Wed 23 Jul 2025 19:00:26 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: dwEz9r+F8WbEldf7FUXP6L1n3yRzsnUpf8/IbUIjQSE=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:33:82:31:3c:5c:ec:8b:ed:12:ab:35:79:1a:8b:14:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jul 22 19:00:26 2025 GMT Not After : Jul 23 19:00:26 2025 GMT Subject: CN=b1a6ee9c8f20678fc17c92464e57f48e8b36c878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:ce:36:0e:a6:cd:40:0f:d1:82:e9:19:8b: 25:bc:52:cb:89:25:49:8e:f6:6e:e7:d5:f2:c9:e4: e4:ca:e9:9d:2c:9c:50:80:45:57:f8:74:fb:76:46: 3d:2a:95:85:98:49:f9:6e:f9:ef:5c:25:91:80:87: fe:5c:01:e7:e8:ad:59:d1:98:8e:37:9a:f4:95:07: 9c:06:d3:1d:33:d4:56:e2:c0:85:a2:03:59:9b:e2: 27:44:bf:67:f4:72:f0:38:93:c8:6d:0b:2a:29:ff: 99:56:27:12:05:00:5c:48:01:ed:ff:bf:e1:8f:33: 02:54:57:b4:4a:47:56:34:d1:97:54:da:a3:cf:f3: 3f:03:99:3c:21:39:93:ff:15:03:02:ab:95:d7:98: a7:e2:2a:5a:c7:da:95:33:da:f9:2d:3f:de:6c:d5: 80:70:21:ab:4d:d6:53:2d:22:9b:c6:49:96:2d:6f: dd:04:a7:30:42:03:09:17:f2:00:02:06:18:25:33: 09:64:8d:1c:13:3d:b2:55:18:42:d5:8d:c0:cf:c7: 34:17:c3:dd:45:ef:bf:3a:db:07:ee:78:32:b4:c0: e6:d5:dc:65:af:f9:72:ba:b8:b4:97:8a:be:37:32: be:5e:ea:43:2d:19:bf:75:1d:48:2c:4b:a9:70:5d: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A6:EE:9C:8F:20:67:8F:C1:7C:92:46:4E:57:F4:8E:8B:36:C8:78 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:75:e7:a2:4d:40:8a:5a:3e:7c:c1:19:08:35:89:76:5d:9f: 9c:59:65:80:87:fc:54:57:b3:b4:f6:39:b1:af:eb:ac:44:7b: 32:96:70:1e:76:04:9a:5e:66:c8:7a:2f:36:13:d0:05:89:4c: 25:c0:af:e7:90:b1:76:e2:b5:ec:dc:75:c9:cf:24:60:20:fa: 76:e2:96:86:7b:99:12:fc:66:29:f4:74:c7:91:41:f0:e6:44: 1c:24:3c:40:d0:33:97:7c:8d:e8:c3:ff:d4:fd:16:75:00:1b: 0d:09:a6:3f:88:27:ab:8f:5c:a9:bf:be:e1:1d:7b:d9:b0:ce: c8:a7:fd:43:bd:95:fd:ec:75:95:4d:4d:0c:79:4d:6d:a5:17: 23:80:12:de:7e:a1:d4:a6:51:99:7d:48:88:ae:a6:8c:c3:26: 71:bb:bf:39:d3:24:d4:fb:3a:16:0b:d8:40:77:77:ca:75:36: 01:c4:e3:3d:c2:1c:55:ef:b5:de:3f:36:1b:7f:7c:73:9a:56: 3f:ce:78:ca:02:b9:d5:ca:73:05:c4:dc:34:db:cd:4e:cd:bf: 82:9f:52:23:4a:39:ce:9b:45:b6:54:9c:e7:72:36:8a:75:d8: a3:86:fa:e3:a7:2a:0d:e6:25:79:38:54:45:89:7f:91:aa:03: 62:6b:72:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgzgjE8XOyL7RKrNXkaixQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwNzIyMTkwMDI2WhcNMjUwNzIzMTkwMDI2WjAzMTEwLwYDVQQD EyhiMWE2ZWU5YzhmMjA2NzhmYzE3YzkyNDY0ZTU3ZjQ4ZThiMzZjODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlorONg6mzUAP0YLpGYslvFLLiSVJ jvZu59XyyeTkyumdLJxQgEVX+HT7dkY9KpWFmEn5bvnvXCWRgIf+XAHn6K1Z0ZiO N5r0lQecBtMdM9RW4sCFogNZm+InRL9n9HLwOJPIbQsqKf+ZVicSBQBcSAHt/7/h jzMCVFe0SkdWNNGXVNqjz/M/A5k8ITmT/xUDAquV15in4ipax9qVM9r5LT/ebNWA cCGrTdZTLSKbxkmWLW/dBKcwQgMJF/IAAgYYJTMJZI0cEz2yVRhC1Y3Az8c0F8Pd Re+/OtsH7ngytMDm1dxlr/lyuri0l4q+NzK+XupDLRm/dR1ILEupcF1JhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGm7pyPIGePwXySRk5X9I6LNsh4MB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInXnok1A ilo+fMEZCDWJdl2fnFllgIf8VFeztPY5sa/rrER7MpZwHnYEml5myHovNhPQBYlM JcCv55CxduK17Nx1yc8kYCD6duKWhnuZEvxmKfR0x5FB8OZEHCQ8QNAzl3yN6MP/ 1P0WdQAbDQmmP4gnq49cqb++4R172bDOyKf9Q72V/ex1lU1NDHlNbaUXI4AS3n6h 1KZRmX1IiK6mjMMmcbu/OdMk1Ps6FgvYQHd3ynU2AcTjPcIcVe+13j82G398c5pW P854ygK51cpzBcTcNNvNTs2/gp9SI0o5zptFtlSc53I2inXYo4b646cqDeYleThU RYl/kaoDYmtyig== -----END CERTIFICATE-----Generated at Wed Jul 23 01:40:45 2025 by rpki-client