$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: WhIHEsnw3DxBZ+RkkdwnA4oy9yzwBOmC3adloMI8IYI= Subject key identifier: DF:07:37:0B:B7:A3:4E:67:C9:A9:8F:E8:98:ED:D1:71:46:57:33:56 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019827105AE6062F9C4018C9EFDF8F5CC2D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 163C Signing time: Sun 20 Jul 2025 09:00:39 +0000 Manifest this update: Sun 20 Jul 2025 09:00:39 +0000 Manifest next update: Mon 21 Jul 2025 09:00:39 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: F5MHXDqnIzYEJiqy-lSbHqiutdE.roa (hash: Kr6UA+01g5mj3k9HL3gZp8uUuI6XmpL1gu4D3yxcHg4=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: T-MYFwOCQ5wihBdh9tnv_EkYKOM.roa (hash: IIF2TmwoLUledw2W8fTXX3PAqVA+XkgGRwp+zcOmb2w=) 24: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 25: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 26: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 27: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 28: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 29: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: djxcUYlLp1Ecm84m9n+3pvvWVMUU/QK8KKlp2iXPaEA=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:10:5a:e6:06:2f:9c:40:18:c9:ef:df:8f:5c:c2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jul 20 09:00:39 2025 GMT Not After : Jul 21 09:00:39 2025 GMT Subject: CN=df07370bb7a34e67c9a98fe898edd17146573356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:0d:5e:b1:d1:46:0b:6e:d8:f7:78:c9:f8: da:e1:6f:a2:40:cc:f8:3b:4c:b9:51:d7:33:72:88: 16:62:b5:85:03:0a:a1:84:34:42:67:f8:cd:de:e1: 62:01:39:09:85:62:a4:d1:8b:97:00:66:13:af:55: fd:a4:ed:61:1e:ed:c3:4b:30:63:46:66:5f:4a:d0: d8:4d:d1:a0:d7:06:fa:ca:e6:7b:ba:73:bb:79:10: f8:01:b1:0c:0e:ef:e7:8e:07:62:68:ca:4f:cb:8f: 4b:4a:cf:64:6d:8d:7e:a9:79:b9:68:3c:1a:d0:d8: 06:e2:e4:27:2c:f6:c6:25:da:f8:2f:b2:5f:02:7a: 83:67:ab:7b:11:18:c4:79:40:eb:08:6e:be:6c:fb: 32:74:ea:0f:20:e4:c6:21:84:96:94:d1:b0:67:fa: f6:70:43:6d:7c:9b:07:c4:1d:29:88:ef:f4:0d:cb: 42:4b:f9:8b:ec:7a:46:6b:73:ed:4c:70:72:a3:d0: d5:d9:4c:6e:a6:73:46:7a:01:60:08:e5:1b:e7:c0: 1c:a6:a3:7f:ca:bb:7a:e5:04:44:34:9b:7c:ea:90: 51:5a:7b:17:bf:5d:44:61:7c:5c:98:01:89:24:f8: c4:0d:5a:63:11:79:c9:47:bd:15:0b:55:66:86:dd: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:07:37:0B:B7:A3:4E:67:C9:A9:8F:E8:98:ED:D1:71:46:57:33:56 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:16:82:1c:68:d8:15:3b:53:87:80:33:ea:dc:27:5a:9e:53: cc:d2:4b:0b:e1:8c:7c:f2:02:6d:17:8c:97:f9:32:19:db:8d: 21:5f:05:43:b0:91:00:79:1e:a4:4e:f8:b8:d0:d0:1b:38:f5: ec:56:04:14:fe:6a:db:47:aa:d6:a2:51:5c:76:e4:6e:25:dc: d5:71:c4:85:eb:a6:e9:b3:2b:ec:76:3a:6b:01:23:54:a3:65: a1:11:5e:35:98:30:af:fa:59:fb:6f:25:1d:76:16:30:8f:d6: 8e:b8:41:cd:b2:f0:40:6f:4b:0a:d9:03:a7:71:e4:e0:ae:15: b3:a3:b6:ff:8c:5e:67:66:cb:ad:c2:6b:48:40:5e:01:64:36: 33:76:4a:4f:15:2d:56:a2:ab:d8:32:ce:d8:51:11:87:fa:aa: 42:15:d5:f7:f4:11:83:ab:1a:c0:82:f5:2f:b4:33:b8:a4:ee: d0:a0:e3:25:2d:02:ad:1c:01:ae:c6:85:cd:5e:05:3d:84:51: 4e:79:7c:62:1f:fb:3b:7f:ec:05:02:1b:3b:2b:8c:32:5b:f2: 99:31:d1:c3:d6:15:5f:94:8b:cf:d1:97:e3:2d:8b:a3:12:0f: c5:be:e6:37:ad:e2:07:bb:6c:ce:c5:ab:d9:cd:ca:a1:9b:89: ff:5a:da:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnEFrmBi+cQBjJ79+PXMLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwNzIwMDkwMDM5WhcNMjUwNzIxMDkwMDM5WjAzMTEwLwYDVQQD EyhkZjA3MzcwYmI3YTM0ZTY3YzlhOThmZTg5OGVkZDE3MTQ2NTczMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB0NXrHRRgtu2Pd4yfja4W+iQMz4 O0y5UdczcogWYrWFAwqhhDRCZ/jN3uFiATkJhWKk0YuXAGYTr1X9pO1hHu3DSzBj RmZfStDYTdGg1wb6yuZ7unO7eRD4AbEMDu/njgdiaMpPy49LSs9kbY1+qXm5aDwa 0NgG4uQnLPbGJdr4L7JfAnqDZ6t7ERjEeUDrCG6+bPsydOoPIOTGIYSWlNGwZ/r2 cENtfJsHxB0piO/0DctCS/mL7HpGa3PtTHByo9DV2UxupnNGegFgCOUb58AcpqN/ yrt65QRENJt86pBRWnsXv11EYXxcmAGJJPjEDVpjEXnJR70VC1Vmht0ckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8HNwu3o05nyamP6Jjt0XFGVzNWMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBaCHGjY FTtTh4Az6twnWp5TzNJLC+GMfPICbReMl/kyGduNIV8FQ7CRAHkepE74uNDQGzj1 7FYEFP5q20eq1qJRXHbkbiXc1XHEheum6bMr7HY6awEjVKNloRFeNZgwr/pZ+28l HXYWMI/WjrhBzbLwQG9LCtkDp3Hk4K4Vs6O2/4xeZ2bLrcJrSEBeAWQ2M3ZKTxUt VqKr2DLO2FERh/qqQhXV9/QRg6sawIL1L7QzuKTu0KDjJS0CrRwBrsaFzV4FPYRR Tnl8Yh/7O3/sBQIbOyuMMlvymTHRw9YVX5SLz9GX4y2LoxIPxb7mN63iB7tszsWr 2c3KoZuJ/1raGg== -----END CERTIFICATE-----Generated at Sun Jul 20 16:28:18 2025 by rpki-client