$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: a3UbiuXjqQrWf10JXl6vICB4pL/zd33L1xce9VCdaiY= Subject key identifier: A3:AB:92:2F:E4:90:E4:80:64:81:D1:22:14:50:C6:C1:82:96:7D:80 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019826A4014A3635229AE5482AD4CC41396F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0769 Signing time: Sun 20 Jul 2025 07:02:19 +0000 Manifest this update: Sun 20 Jul 2025 07:02:19 +0000 Manifest next update: Mon 21 Jul 2025 07:02:19 +0000 Files and hashes: 1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: bj/V08yLaorHc38A+M8tEDvueybq8nvq+hYF4bcADFs=) 6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:a4:01:4a:36:35:22:9a:e5:48:2a:d4:cc:41:39:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jul 20 07:02:19 2025 GMT Not After : Jul 21 07:02:19 2025 GMT Subject: CN=a3ab922fe490e4806481d1221450c6c182967d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:af:94:1f:0d:19:dd:f7:1c:02:41:e8:2a: 6b:99:f5:da:2e:b9:21:a5:53:f0:3c:04:e8:35:91: f3:55:fd:d0:ed:26:3c:c1:04:11:e0:a1:f3:62:24: 5d:4a:14:d2:77:de:b8:1a:70:c9:53:26:82:b3:2e: 54:40:df:c7:7e:35:e0:7b:f7:eb:4f:25:ad:6d:56: eb:aa:1b:cc:6b:a1:b0:b7:fc:31:5c:22:ac:4b:45: 7a:98:a8:4a:41:64:6e:00:76:25:87:bf:f5:52:35: 0d:e2:ad:ef:55:8a:f4:80:a2:15:c7:aa:38:2b:c0: bb:e6:aa:5c:41:20:84:bf:c9:b6:2c:ff:ee:88:47: 7f:f0:b7:f6:db:d5:20:1b:14:23:38:28:c7:c3:c5: fd:b7:98:4d:64:e9:b7:b3:6f:79:c5:52:3b:1e:32: 8a:bd:24:1e:1f:74:f8:17:55:9b:80:13:0c:03:3a: 07:e6:8f:f9:95:b4:de:2c:2a:44:c4:ff:2a:43:f6: 24:e2:f8:7f:f1:78:14:dd:01:e1:e7:f8:b4:68:ca: c6:e9:21:cb:df:6c:2a:8d:2b:5f:36:c2:e6:60:b6: a9:f2:e9:cc:be:23:5f:e4:64:1c:bb:3d:95:d8:eb: 7b:64:39:e3:b7:99:1a:67:d7:dd:6d:09:7c:27:4d: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:92:2F:E4:90:E4:80:64:81:D1:22:14:50:C6:C1:82:96:7D:80 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:25:3d:73:3c:86:1f:94:bc:80:14:c4:fa:7e:d2:1e:e8:0d: 61:89:ba:aa:90:ca:72:54:db:ae:d3:51:ea:b2:ac:d6:e0:e3: 21:fd:b2:33:ba:90:9d:cb:05:dc:f5:dc:c2:06:84:ff:a0:da: 52:a8:43:ab:ab:ca:5e:19:9b:5c:df:8a:12:97:c2:2f:59:cd: fd:f6:77:85:02:c0:c6:eb:b3:60:2c:1a:15:97:3c:63:a4:18: 6b:01:2b:5d:ed:0a:4f:43:84:f3:68:d2:15:82:0a:eb:e9:83: a3:d2:1c:11:26:77:b9:a1:81:7e:a6:7c:95:f6:da:a9:c8:12: f8:be:df:57:26:8f:d2:ef:d8:90:8f:37:6e:4f:22:0c:59:d0: 87:67:46:83:58:53:b2:7c:ef:27:13:08:e6:f9:74:b2:37:b2: e1:56:0b:81:af:ab:28:24:97:67:00:1a:c7:59:46:49:0f:b3: 06:8f:5a:6d:24:11:a3:2b:5d:88:b8:9a:00:d4:6b:31:84:d4: b3:ad:4a:ac:6f:67:70:d1:be:88:e6:d5:fa:6d:06:75:c5:d8: 44:f1:1d:6f:3e:85:df:e6:3b:d4:cf:57:01:ad:c6:be:74:82: b1:08:c8:3a:b4:cb:21:c2:a4:7a:a0:e1:b4:83:6d:8b:77:d2: 44:e8:37:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgmpAFKNjUimuVIKtTMQTlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwNzIwMDcwMjE5WhcNMjUwNzIxMDcwMjE5WjAzMTEwLwYDVQQD EyhhM2FiOTIyZmU0OTBlNDgwNjQ4MWQxMjIxNDUwYzZjMTgyOTY3ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBCvlB8NGd33HAJB6CprmfXaLrkh pVPwPAToNZHzVf3Q7SY8wQQR4KHzYiRdShTSd964GnDJUyaCsy5UQN/HfjXge/fr TyWtbVbrqhvMa6Gwt/wxXCKsS0V6mKhKQWRuAHYlh7/1UjUN4q3vVYr0gKIVx6o4 K8C75qpcQSCEv8m2LP/uiEd/8Lf229UgGxQjOCjHw8X9t5hNZOm3s295xVI7HjKK vSQeH3T4F1WbgBMMAzoH5o/5lbTeLCpExP8qQ/Yk4vh/8XgU3QHh5/i0aMrG6SHL 32wqjStfNsLmYLap8unMviNf5GQcuz2V2Ot7ZDnjt5kaZ9fdbQl8J00UAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOrki/kkOSAZIHRIhRQxsGCln2AMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2iU9czyG H5S8gBTE+n7SHugNYYm6qpDKclTbrtNR6rKs1uDjIf2yM7qQncsF3PXcwgaE/6Da UqhDq6vKXhmbXN+KEpfCL1nN/fZ3hQLAxuuzYCwaFZc8Y6QYawErXe0KT0OE82jS FYIK6+mDo9IcESZ3uaGBfqZ8lfbaqcgS+L7fVyaP0u/YkI83bk8iDFnQh2dGg1hT snzvJxMI5vl0sjey4VYLga+rKCSXZwAax1lGSQ+zBo9abSQRoytdiLiaANRrMYTU s61KrG9ncNG+iObV+m0GdcXYRPEdbz6F3+Y71M9XAa3GvnSCsQjIOrTLIcKkeqDh tINti3fSROg31A== -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:32 2025 by rpki-client