$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: NlIUik66RySM286WNAP/UF7AEkeW5Tq77nsQ+QbVzVM= Subject key identifier: E7:87:01:59:98:C0:A4:A5:9F:BA:8F:94:FE:38:EA:47:B0:DF:2E:0E Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 01983CF2F6E60A511AB6188F69CE28F8B7F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1609 Signing time: Thu 24 Jul 2025 15:00:12 +0000 Manifest this update: Thu 24 Jul 2025 15:00:12 +0000 Manifest next update: Fri 25 Jul 2025 15:00:12 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: YC4yuIl5L3pc8ELrFhbevC95TFCTSkWOKiCp9jL1wkI=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3c:f2:f6:e6:0a:51:1a:b6:18:8f:69:ce:28:f8:b7:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jul 24 15:00:12 2025 GMT Not After : Jul 25 15:00:12 2025 GMT Subject: CN=e787015998c0a4a59fba8f94fe38ea47b0df2e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:c9:cc:78:90:25:a4:03:0d:cd:d7:9a:b5: 3f:c7:e0:78:c4:6b:3f:c8:b8:40:6f:11:c3:41:de: e2:dc:f4:c3:51:ff:1d:52:53:8c:8a:91:2a:35:b3: 2d:a4:d8:7a:33:86:61:f6:14:e0:9b:1d:32:c5:2f: 58:c7:6a:e6:23:77:1a:57:1d:b3:d8:3d:b5:23:e3: 8a:dc:7b:ad:0c:18:68:fb:2d:ac:39:4e:2c:5b:ae: 49:b9:08:2d:6e:16:39:de:9a:c3:b5:e5:be:3d:51: 65:26:1e:58:3b:45:c8:c3:b6:fd:26:15:02:c1:90: ea:29:95:2a:ff:a3:14:4e:22:09:a7:a2:d9:a1:d2: 8b:07:15:ed:6d:82:d0:f1:0b:a7:83:4c:e8:d7:80: 8e:3e:20:ef:d5:f1:99:5f:9b:81:a1:3a:0d:27:df: c7:57:9f:5a:5a:b7:62:90:61:fb:07:07:e9:02:9e: 05:6b:b5:13:61:94:a4:26:a6:fe:06:3f:12:fa:63: ef:89:d2:48:74:5e:2f:11:b1:4c:c7:03:74:21:39: 01:c3:7b:f0:21:84:a2:aa:a7:8b:35:ab:f1:ce:4d: b4:2e:52:97:9c:22:6e:c7:e0:29:df:da:88:63:c5: 44:74:cb:66:c3:4f:f5:2e:c4:ad:16:f4:73:2a:ad: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:87:01:59:98:C0:A4:A5:9F:BA:8F:94:FE:38:EA:47:B0:DF:2E:0E X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e2:65:0f:ed:6e:89:30:c6:53:81:58:5f:73:97:ab:b8:7d: 6b:7d:74:b1:25:77:07:0d:0e:97:ab:84:66:78:98:70:26:07: 19:b9:89:5d:45:75:c2:20:56:38:38:54:46:8d:44:c4:b5:fb: 8b:9f:94:14:07:f7:a4:3e:44:93:4b:17:cd:37:ee:7e:f2:fe: 25:fb:9a:da:98:c5:86:c4:d9:59:de:df:33:3f:5f:1c:65:d7: 7d:8b:5d:02:f7:2f:37:65:c9:7b:b2:94:8c:9a:34:f2:7f:7e: 08:5e:e5:ea:5b:b5:a3:31:90:91:57:1e:d2:b8:31:be:ee:86: c2:3f:a0:a3:5a:20:fd:2b:27:f4:f1:ac:85:a6:dc:91:dd:23: 40:be:b5:11:f5:97:2b:f0:04:a8:c0:72:02:73:ad:7a:ba:3b: aa:83:ee:2e:b4:15:56:95:e7:a6:80:5a:c9:35:e0:0f:68:57: 9f:a9:53:9d:17:2b:c5:2c:07:e9:c5:32:a4:ef:52:b7:79:76: 08:ac:8d:94:f0:ec:53:58:52:a4:8a:3a:b6:b8:33:6a:59:a2: 6c:fe:ae:b3:7d:48:63:14:f6:09:96:5d:6d:47:ab:83:99:3e: bc:44:e2:e0:ec:05:3c:c8:6b:d5:86:ca:e5:53:cf:bc:92:72: 78:78:f5:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg88vbmClEathiPac4o+Lf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwNzI0MTUwMDEyWhcNMjUwNzI1MTUwMDEyWjAzMTEwLwYDVQQD EyhlNzg3MDE1OTk4YzBhNGE1OWZiYThmOTRmZTM4ZWE0N2IwZGYyZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jTJzHiQJaQDDc3XmrU/x+B4xGs/ yLhAbxHDQd7i3PTDUf8dUlOMipEqNbMtpNh6M4Zh9hTgmx0yxS9Yx2rmI3caVx2z 2D21I+OK3HutDBho+y2sOU4sW65JuQgtbhY53prDteW+PVFlJh5YO0XIw7b9JhUC wZDqKZUq/6MUTiIJp6LZodKLBxXtbYLQ8Qung0zo14COPiDv1fGZX5uBoToNJ9/H V59aWrdikGH7BwfpAp4Fa7UTYZSkJqb+Bj8S+mPvidJIdF4vEbFMxwN0ITkBw3vw IYSiqqeLNavxzk20LlKXnCJux+Ap39qIY8VEdMtmw0/1LsStFvRzKq0BzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeHAVmYwKSln7qPlP446kew3y4OMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeJlD+1u iTDGU4FYX3OXq7h9a310sSV3Bw0Ol6uEZniYcCYHGbmJXUV1wiBWODhURo1ExLX7 i5+UFAf3pD5Ek0sXzTfufvL+Jfua2pjFhsTZWd7fMz9fHGXXfYtdAvcvN2XJe7KU jJo08n9+CF7l6lu1ozGQkVce0rgxvu6Gwj+go1og/Ssn9PGshabckd0jQL61EfWX K/AEqMByAnOtero7qoPuLrQVVpXnpoBayTXgD2hXn6lTnRcrxSwH6cUypO9St3l2 CKyNlPDsU1hSpIo6trgzalmibP6us31IYxT2CZZdbUerg5k+vETi4OwFPMhr1YbK 5VPPvJJyeHj1Kg== -----END CERTIFICATE-----Generated at Fri Jul 25 00:37:09 2025 by rpki-client