$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: TBqSip2eN2RI2J0uLNTyF+LC+DfJ+TZmoV709O+Q/HM= Subject key identifier: FA:B2:0E:4C:D3:D3:5C:86:CE:0F:27:96:B7:6B:3F:D7:18:C9:BC:2B Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019A1C198C74F30B99F771370B90D94428F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0F70 Signing time: Sat 25 Oct 2025 16:00:27 +0000 Manifest this update: Sat 25 Oct 2025 16:00:27 +0000 Manifest next update: Sun 26 Oct 2025 16:00:27 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: iJIK0deFuYavI/1qpurchJXYxGrVtSKq29us5M2a7HE=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:19:8c:74:f3:0b:99:f7:71:37:0b:90:d9:44:28:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Oct 25 16:00:27 2025 GMT Not After : Oct 26 16:00:27 2025 GMT Subject: CN=fab20e4cd3d35c86ce0f2796b76b3fd718c9bc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:90:9c:d3:f2:82:d8:d9:e4:e2:a1:d5:71: a0:7d:99:06:3e:8e:11:37:08:c2:d6:6c:73:df:1b: 9b:9f:ce:bd:2a:8d:23:5d:15:e1:39:b6:c3:88:4b: 98:8c:93:10:9b:5f:b0:2c:5b:50:aa:47:ea:ca:d0: 94:c7:ea:b1:3e:b0:1b:c4:3f:40:98:61:b1:d3:ac: 80:1b:49:d7:c5:5b:07:50:f4:59:df:eb:1c:c1:b9: 21:5c:62:ab:88:ba:be:ff:78:af:86:10:35:f7:95: 1a:d8:ba:a2:f0:ef:df:7d:0c:ad:9c:70:a7:b8:a7: e0:51:0e:e1:ab:dd:08:79:f9:54:ea:11:07:f5:44: 0a:17:b2:bd:54:f1:7a:67:4d:7d:ff:48:24:df:04: c1:66:2a:6f:ad:46:4b:cc:f4:02:41:a5:16:7c:63: 39:a8:ae:ce:78:3b:51:78:d9:b8:58:77:71:f0:f7: 45:11:cf:8f:84:61:27:88:cc:f1:ec:d1:e4:a0:c4: a2:7c:80:c8:d1:11:6d:49:4e:3c:7e:55:56:07:d7: 2b:8e:92:60:c4:9e:59:f7:c9:8d:8d:66:f4:bf:b8: e6:54:87:ee:cd:b1:b6:89:37:ea:d2:89:f6:ef:04: ba:46:c5:91:04:3c:c4:72:ff:70:85:89:d4:45:46: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B2:0E:4C:D3:D3:5C:86:CE:0F:27:96:B7:6B:3F:D7:18:C9:BC:2B X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a8:a3:e2:35:2f:20:6d:2d:a7:2f:d8:3a:88:95:46:d9:82: 60:09:6d:9f:fd:25:67:7b:40:66:6a:b9:ae:02:80:50:fe:40: 02:49:3b:49:f1:da:89:d8:89:a5:10:7a:a5:a8:05:69:da:07: 64:15:5d:47:49:d8:74:bc:46:15:30:38:09:b0:0e:ab:23:a7: 8e:08:f4:d5:74:e5:7b:7d:32:b7:92:bf:f5:30:6e:76:d2:b6: 19:54:e8:4f:d9:7e:b0:df:98:3f:5e:9d:07:5b:44:32:61:e9: c4:d1:82:6a:0e:c5:76:22:6a:b0:a0:f3:75:72:3d:5e:5f:bb: 8e:a8:ac:f9:fc:24:e7:e0:c9:0f:9e:f7:e4:07:d3:79:8d:9d: a0:15:17:07:65:99:fe:26:33:c7:a3:31:70:d0:be:b3:b0:1a: 12:a4:54:ef:8c:54:64:cf:b1:c5:71:1d:c7:57:91:76:b0:fd: 99:d7:81:76:5c:4f:3a:5d:7c:44:1d:8e:b1:fa:d4:38:dc:80: e0:e8:87:e4:e6:06:c6:d8:86:d9:ae:ec:7b:5f:37:50:cc:35: 75:d8:ae:c1:b3:5e:49:73:29:7b:b8:1b:99:82:46:3f:f5:83: 85:1f:9f:09:7a:e6:c7:71:6e:41:aa:9d:1d:d5:a3:20:66:bd: 19:bf:2a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocGYx08wuZ93E3C5DZRCjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUxMDI1MTYwMDI3WhcNMjUxMDI2MTYwMDI3WjAzMTEwLwYDVQQD EyhmYWIyMGU0Y2QzZDM1Yzg2Y2UwZjI3OTZiNzZiM2ZkNzE4YzliYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMCQnNPygtjZ5OKh1XGgfZkGPo4R NwjC1mxz3xubn869Ko0jXRXhObbDiEuYjJMQm1+wLFtQqkfqytCUx+qxPrAbxD9A mGGx06yAG0nXxVsHUPRZ3+scwbkhXGKriLq+/3ivhhA195Ua2Lqi8O/ffQytnHCn uKfgUQ7hq90IeflU6hEH9UQKF7K9VPF6Z019/0gk3wTBZipvrUZLzPQCQaUWfGM5 qK7OeDtReNm4WHdx8PdFEc+PhGEniMzx7NHkoMSifIDI0RFtSU48flVWB9crjpJg xJ5Z98mNjWb0v7jmVIfuzbG2iTfq0on27wS6RsWRBDzEcv9whYnURUbAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqyDkzT01yGzg8nlrdrP9cYybwrMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6ij4jUv IG0tpy/YOoiVRtmCYAltn/0lZ3tAZmq5rgKAUP5AAkk7SfHaidiJpRB6pagFadoH ZBVdR0nYdLxGFTA4CbAOqyOnjgj01XTle30yt5K/9TBudtK2GVToT9l+sN+YP16d B1tEMmHpxNGCag7FdiJqsKDzdXI9Xl+7jqis+fwk5+DJD5735AfTeY2doBUXB2WZ /iYzx6MxcNC+s7AaEqRU74xUZM+xxXEdx1eRdrD9mdeBdlxPOl18RB2OsfrUONyA 4OiH5OYGxtiG2a7se183UMw1ddiuwbNeSXMpe7gbmYJGP/WDhR+fCXrmx3FuQaqd HdWjIGa9Gb8qzA== -----END CERTIFICATE-----Generated at Sun Oct 26 01:20:02 2025 by rpki-client