$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft File: UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json) Hash identifier: H/eAneY1tx3sd53OTfgK7cMTB4ch4xHNyD7X1Z9Cyfk= Subject key identifier: E9:F1:E9:EA:FF:78:FA:0F:C5:13:2D:52:74:69:9C:8C:74:76:47:27 Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Certificate serial: 019835711C2BA49B3E20995A9C2B486C9359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft Manifest number: 1601 Signing time: Wed 23 Jul 2025 04:01:01 +0000 Manifest this update: Wed 23 Jul 2025 04:01:01 +0000 Manifest next update: Thu 24 Jul 2025 04:01:01 +0000 Files and hashes: 1: 1-i5TRDPku6NeUdz2bRFMsPZIHUQ.roa (hash: VQK5n0tcKEtnqAcxB7o2wJcalg9cjbbfvMYz3zPe7hA=) 2: 2wmtliVBxfozFrIlKB1-nwfdjAE.roa (hash: +lKNzr0mRWdZKlHpN+HQ/mkjY4gghuaP04gNQkK1wf4=) 3: A9a39XgLNreD6jCuPk2N9_yZJSI.roa (hash: yFrH7K4LO+J+VvdWgSDrGisbEkscTT9UDcQMArhnNvQ=) 4: Lu76Y9Smh45WB63k1kFuTdEUEho.roa (hash: OnpzEXl/HnMZNzqcmNMVvatlRcG3aHMFwrKsS9eDZQc=) 5: LxxGukBlqMxcGz3JxyW5KSOubSQ.roa (hash: yB3fzx0x5vvOt9wxFr4TL+wrywW/E7cmkSxw6jPON9U=) 6: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: NJsYCBfMPRFHHw66XqCshI/G8Ieml1hqH9EDLH/MI3k=) 7: UnAr0n2DRkiWvqAhlSoyBe9ZUbg.roa (hash: HWHw3mfXpyCVFDuJqGCuIpGYEIXEPcm/munIQVlu+yc=) 8: Y6RzVEbNuSJFZDnPKE-dNo9qBTk.roa (hash: /QlKU5isyFeroSYNudLnY2VR5IH9Gv3a1HxxhjO2OQQ=) 9: mFQb2zLIdf_n7vAW_tOigWd7bLY.roa (hash: WSFPFfxp/6VwHtu0rDoCFS5OV8ru2PXGW/D81axbqLg=) 10: mSeqrM6ax77e1mH4N20zXtId-dc.roa (hash: CxkChAE9kvtH6F03AdsKyAbq+7FWtLM6nALOJbgV1tM=) 11: nB7FRW4qf42oEvGo92xy4u9a98Y.roa (hash: GAL+Ip12LskyQZSykM+Kg95mUJvvrV+J1bYvbjZ654k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:71:1c:2b:a4:9b:3e:20:99:5a:9c:2b:48:6c:93:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Validity Not Before: Jul 23 04:01:01 2025 GMT Not After : Jul 24 04:01:01 2025 GMT Subject: CN=e9f1e9eaff78fa0fc5132d5274699c8c74764727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:95:68:aa:d9:8a:41:20:46:dc:1e:31:09: a5:81:e8:d6:98:26:f7:ae:78:e9:ae:0a:49:59:31: 6f:12:87:3f:c0:88:18:72:ef:6e:d6:45:04:67:1d: 62:b4:54:3e:71:e8:42:ec:1a:f7:21:a7:af:0b:a0: b4:14:a6:01:a0:74:70:74:d0:46:8c:a4:28:0c:ec: b0:1e:c6:b4:01:d7:f8:9d:e1:c7:1a:31:b0:22:db: 53:d7:1a:a4:b7:61:0e:84:f0:52:2a:2a:28:c5:24: f4:56:39:3f:53:6d:da:15:dd:8d:a5:d1:9c:d0:cf: 98:81:6e:5b:26:b9:13:0b:3b:ad:02:0a:78:04:81: 79:ba:d0:31:3b:f1:eb:8c:eb:45:1a:aa:2d:f5:a7: f0:ed:9a:c7:3d:59:d9:82:f0:54:5e:2c:c8:ca:34: 09:45:07:54:26:a8:92:00:b6:b4:97:b1:46:02:4e: d1:03:9e:5f:80:df:40:6e:b1:4c:66:2b:0c:85:e3: da:5c:b8:5c:ce:3b:b9:17:f9:d0:0a:a1:f5:7b:02: f1:e2:10:3d:e1:6f:2c:fa:6e:9e:d3:5f:a5:3a:af: 8b:1a:8f:36:66:83:5b:56:06:5f:ed:c5:8f:05:98: 35:65:f9:a2:41:f4:80:f7:b2:a2:3d:65:8f:d3:66: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F1:E9:EA:FF:78:FA:0F:C5:13:2D:52:74:69:9C:8C:74:76:47:27 X509v3 Authority Key Identifier: keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:0c:67:90:53:a4:6c:7e:2b:f5:82:47:9b:61:a3:6c:d9:54: 5c:37:54:98:99:7f:8e:f8:bc:10:e6:e5:23:fe:e6:7d:9b:da: 85:53:95:02:22:d5:6e:5f:3f:9e:82:28:fb:ee:e3:22:1a:89: de:85:80:be:0f:1e:b3:7d:2d:02:91:bc:d5:ae:db:af:c8:c7: 5d:79:a3:ed:48:2f:db:3f:eb:61:49:e8:77:2a:a0:cf:2c:17: e4:f6:c7:97:67:8b:ad:02:38:aa:82:e9:19:53:68:21:bc:11: 88:cb:d9:e8:90:ae:a8:e1:bc:24:e2:71:f2:9b:6e:f8:ff:ec: 0c:a7:f8:61:18:bf:18:da:75:9a:06:0e:54:2c:68:85:7f:0e: 39:23:62:89:e3:bd:ac:f2:57:cf:37:b6:98:11:97:d5:92:d6: cb:1e:c9:1a:c3:df:17:be:42:0d:17:ed:0f:98:07:5e:b1:34: 62:3d:24:a8:2f:0b:74:48:c7:22:c0:e2:76:3d:8b:37:99:b5: a5:b4:9c:81:22:02:7f:08:cb:a3:2f:a4:07:71:88:6a:ff:63: a8:02:86:8f:54:ad:9a:cf:14:82:82:6c:d9:dd:c1:fe:79:0c: 73:48:a0:3a:d0:c6:ed:a6:59:ee:bf:2d:82:e5:f3:4c:28:53: 92:75:6d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cRwrpJs+IJlanCtIbJNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5 ZWU2MjYwHhcNMjUwNzIzMDQwMTAxWhcNMjUwNzI0MDQwMTAxWjAzMTEwLwYDVQQD EyhlOWYxZTllYWZmNzhmYTBmYzUxMzJkNTI3NDY5OWM4Yzc0NzY0NzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjmVaKrZikEgRtweMQmlgejWmCb3 rnjprgpJWTFvEoc/wIgYcu9u1kUEZx1itFQ+cehC7Br3IaevC6C0FKYBoHRwdNBG jKQoDOywHsa0Adf4neHHGjGwIttT1xqkt2EOhPBSKiooxST0Vjk/U23aFd2NpdGc 0M+YgW5bJrkTCzutAgp4BIF5utAxO/HrjOtFGqot9afw7ZrHPVnZgvBUXizIyjQJ RQdUJqiSALa0l7FGAk7RA55fgN9AbrFMZisMhePaXLhczju5F/nQCqH1ewLx4hA9 4W8s+m6e01+lOq+LGo82ZoNbVgZf7cWPBZg1ZfmiQfSA97KiPWWP02ZurwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnx6er/ePoPxRMtUnRpnIx0dkcnMB8GA1UdIwQY MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt NGFiOWU4YWEzMjYyLzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAxnkFOk bH4r9YJHm2GjbNlUXDdUmJl/jvi8EOblI/7mfZvahVOVAiLVbl8/noIo++7jIhqJ 3oWAvg8es30tApG81a7br8jHXXmj7Ugv2z/rYUnodyqgzywX5PbHl2eLrQI4qoLp GVNoIbwRiMvZ6JCuqOG8JOJx8ptu+P/sDKf4YRi/GNp1mgYOVCxohX8OOSNiieO9 rPJXzze2mBGX1ZLWyx7JGsPfF75CDRftD5gHXrE0Yj0kqC8LdEjHIsDidj2LN5m1 pbScgSICfwjLoy+kB3GIav9jqAKGj1Stms8UgoJs2d3B/nkMc0igOtDG7aZZ7r8t guXzTChTknVtDw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:16:48 2025 by rpki-client