$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: jQN6nx5KIvcIjPTchG0WzJKvi4OQpfvQt3F8iixQdAQ= Subject key identifier: 3C:96:FE:4F:59:2A:D1:D0:BB:D4:D6:9A:4A:1C:2A:0E:9D:3C:56:71 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019827B57A3AF891508FE0ADE0A8F4225839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 1558 Signing time: Sun 20 Jul 2025 12:01:01 +0000 Manifest this update: Sun 20 Jul 2025 12:01:01 +0000 Manifest next update: Mon 21 Jul 2025 12:01:01 +0000 Files and hashes: 1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=) 2: 9ivDIYWbbWyf9XthkrT_WNyR-KE.roa (hash: zcNuXESmQk3bhF6/iOTbudsyigZ75R4PrVSZEKJsBhA=) 3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=) 4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=) 5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=) 6: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: 0KmfbRTEgrCfMdIP4LUB+Ph/BpoBYY2STLDFvjiPmf4=) 7: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=) 8: eCrToYnvWc95HF4c8-Z46Ax87po.roa (hash: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=) 9: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (hash: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=) 10: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:7a:3a:f8:91:50:8f:e0:ad:e0:a8:f4:22:58:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Jul 20 12:01:01 2025 GMT Not After : Jul 21 12:01:01 2025 GMT Subject: CN=3c96fe4f592ad1d0bbd4d69a4a1c2a0e9d3c5671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:8d:60:d9:f7:27:3c:22:5c:a5:44:7d:18: bc:53:5a:86:8e:94:28:bd:91:b2:32:39:c8:24:87: 0b:f6:78:f6:aa:a7:53:70:37:71:db:d4:b8:1b:06: 3d:40:f5:f6:39:f7:d7:8a:1b:c9:ca:50:1d:ca:08: fa:9a:c4:f1:58:e4:4a:1e:88:42:98:aa:97:2c:15: 94:1c:4f:65:03:c0:5c:b1:1c:20:33:19:8d:7f:db: 1c:c8:1c:ce:87:87:6c:76:7c:c6:b3:c0:5a:13:7b: e6:a3:64:c8:e4:99:93:32:87:33:1c:f9:eb:6e:e7: 47:82:63:3f:d1:56:e2:e4:c2:75:5a:56:c6:24:3c: 9a:c6:b9:43:8a:84:26:1c:d7:92:30:c0:52:57:9b: ef:62:75:e7:58:d5:51:a7:b3:3f:14:25:d4:95:3e: a3:54:fd:bf:1e:fb:f0:51:5a:a8:1f:19:09:aa:33: cf:ca:11:2c:16:b4:04:d2:8f:c4:d4:ce:4c:55:79: 86:70:99:01:0d:35:34:7c:f0:79:c2:6e:c6:2e:61: 26:1a:4c:6d:b2:b9:d2:13:2a:ab:10:96:e4:11:75: ec:e2:f2:ab:6c:b9:51:31:49:28:b0:b0:30:ea:cc: 32:05:1a:5f:d6:9c:43:0c:3e:0b:fa:7e:91:a9:b8: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:FE:4F:59:2A:D1:D0:BB:D4:D6:9A:4A:1C:2A:0E:9D:3C:56:71 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:34:5d:e4:0c:55:ea:c6:3b:fa:54:c2:b7:23:82:5e:63:50: 2d:39:1a:fb:64:c5:af:7a:a0:56:b2:96:f2:b9:53:c5:9a:5b: 3d:d0:4c:47:58:c7:c0:b5:f3:e3:89:05:04:bc:72:0e:b2:05: 8b:01:65:39:a8:c2:e3:44:8b:52:5e:81:f8:48:36:a8:d3:9f: ff:bd:17:db:bb:dc:47:72:ff:5a:5a:5d:55:81:06:f0:a2:2e: dc:26:15:32:03:15:96:13:e1:59:ae:1b:fa:11:ac:ec:a7:cf: f6:ef:a0:5e:6a:a2:2c:d2:9b:01:03:3d:27:8c:22:38:42:6a: 03:aa:57:ef:8e:3b:99:d1:cc:48:c1:ec:72:1e:86:5c:bb:ea: f9:3d:b8:4a:60:1e:ff:45:c7:64:d1:b7:e6:84:96:cb:27:d2: d8:11:ad:cb:68:ee:cb:cc:26:b5:0b:c4:26:e6:e8:aa:35:e1: eb:ed:52:8f:25:5c:47:5d:ab:54:87:86:27:72:62:1e:b0:94: 37:6f:d6:44:7c:db:0b:53:28:39:82:ed:de:c7:01:2b:41:fa: e5:83:45:f9:27:e2:e4:f5:ba:08:09:6e:8a:d3:e4:a8:34:e3: 56:1a:e7:48:25:3e:8d:f4:d5:cc:8f:cf:5f:ee:e3:f3:19:aa: 13:e3:be:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntXo6+JFQj+Ct4Kj0Ilg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjUwNzIwMTIwMTAxWhcNMjUwNzIxMTIwMTAxWjAzMTEwLwYDVQQD EygzYzk2ZmU0ZjU5MmFkMWQwYmJkNGQ2OWE0YTFjMmEwZTlkM2M1NjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6CNYNn3JzwiXKVEfRi8U1qGjpQo vZGyMjnIJIcL9nj2qqdTcDdx29S4GwY9QPX2OffXihvJylAdygj6msTxWORKHohC mKqXLBWUHE9lA8BcsRwgMxmNf9scyBzOh4dsdnzGs8BaE3vmo2TI5JmTMoczHPnr budHgmM/0Vbi5MJ1WlbGJDyaxrlDioQmHNeSMMBSV5vvYnXnWNVRp7M/FCXUlT6j VP2/HvvwUVqoHxkJqjPPyhEsFrQE0o/E1M5MVXmGcJkBDTU0fPB5wm7GLmEmGkxt srnSEyqrEJbkEXXs4vKrbLlRMUkosLAw6swyBRpf1pxDDD4L+n6Rqbhj+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyW/k9ZKtHQu9TWmkocKg6dPFZxMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjRd5AxV 6sY7+lTCtyOCXmNQLTka+2TFr3qgVrKW8rlTxZpbPdBMR1jHwLXz44kFBLxyDrIF iwFlOajC40SLUl6B+Eg2qNOf/70X27vcR3L/WlpdVYEG8KIu3CYVMgMVlhPhWa4b +hGs7KfP9u+gXmqiLNKbAQM9J4wiOEJqA6pX7447mdHMSMHsch6GXLvq+T24SmAe /0XHZNG35oSWyyfS2BGty2juy8wmtQvEJuboqjXh6+1SjyVcR12rVIeGJ3JiHrCU N2/WRHzbC1MoOYLt3scBK0H65YNF+Sfi5PW6CAluitPkqDTjVhrnSCU+jfTVzI/P X+7j8xmqE+O+lQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:32 2025 by rpki-client