$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: Na1cUITjsBxc5ycu5PQ+sLVRkVqld8M6B9A9OfVccv8= Subject key identifier: 1D:1E:38:02:0E:45:78:A4:39:71:25:39:DA:1E:CE:FB:FC:88:C1:54 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019745F9538047FDBD1AF2AB2E7EE5A8A640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0DF8 Signing time: Fri 06 Jun 2025 16:00:57 +0000 Manifest this update: Fri 06 Jun 2025 16:00:57 +0000 Manifest next update: Sat 07 Jun 2025 16:00:57 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: LV+POwtOU9iF667Jlz+6ssbYRMIkfAKs2RwZ1R7HkVA=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:f9:53:80:47:fd:bd:1a:f2:ab:2e:7e:e5:a8:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jun 6 16:00:57 2025 GMT Not After : Jun 7 16:00:57 2025 GMT Subject: CN=1d1e38020e4578a439712539da1ecefbfc88c154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:af:10:c5:ea:f0:6b:9d:17:e3:c0:a7:cf: c1:08:a9:af:99:59:b6:26:8f:ed:8b:98:0b:24:23: 66:fa:07:62:b4:55:a2:f1:a9:cf:53:7d:61:10:aa: 12:72:78:25:17:ce:a1:7f:a3:60:93:b4:64:ca:35: 29:74:94:32:f5:4b:fc:d8:83:c0:4a:c4:33:f9:22: be:d7:7f:1c:9f:85:11:09:3c:00:97:92:3a:1c:63: df:f6:f4:8f:d2:81:17:c8:0d:79:68:1c:a2:9e:87: 78:8a:e6:26:d1:e1:0c:24:f4:fa:56:af:02:7e:f9: 4e:0b:d3:d3:4e:3d:d9:05:d2:cf:25:76:e3:26:7c: df:70:9f:05:d1:5f:d6:15:5d:52:58:11:08:5a:a2: dd:d6:a3:f5:16:40:3f:27:9a:67:9c:6f:34:39:18: c0:78:4b:c2:65:e1:5f:f9:a2:42:a3:70:7d:ad:6e: ac:51:62:a4:cd:49:ad:cf:9d:2f:54:4e:c0:e1:bb: 4c:dc:a2:66:5b:2d:c1:50:88:f9:3a:ef:ed:40:f8: 68:41:05:7a:ed:27:b1:e0:78:1a:c3:91:82:02:4f: 5b:7b:a3:82:4f:cc:17:3c:0c:6d:38:00:80:08:33: 66:53:1e:dd:18:84:1d:25:5b:ab:24:ca:83:af:77: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:38:02:0E:45:78:A4:39:71:25:39:DA:1E:CE:FB:FC:88:C1:54 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:05:d4:64:26:83:34:59:03:27:71:1f:71:07:24:93:70:a3: fa:24:05:1a:4d:c7:6c:4f:47:75:43:6c:f4:1a:b6:71:0f:f3: 64:d2:28:c7:4a:3c:52:04:8c:1b:1d:5d:be:ea:f3:1c:d4:d8: 31:81:09:5f:79:ac:26:5d:0f:9b:a7:f4:e5:7b:4b:ec:84:1f: 91:5e:65:4d:7e:2c:e9:08:f9:00:0f:55:f3:ca:8b:25:f1:64: 4a:b2:71:19:6c:c2:d6:67:f7:22:c3:ca:14:d3:e6:0a:42:7f: 32:1f:a7:4b:43:f0:c7:2c:d4:9d:bb:96:75:3e:cd:f3:bf:0f: 24:5c:73:14:d5:63:96:e5:ad:8f:50:a7:e3:de:dd:c4:d3:fb: f1:e1:62:08:ae:a2:ab:ba:90:54:05:35:ff:61:13:5b:e1:86: 43:2f:5c:d4:66:ed:98:e8:8e:c9:7f:80:47:0d:80:a1:1f:80: db:5e:2c:56:e9:f4:f6:42:05:32:d3:81:f5:3a:2c:e1:52:1d: c2:3b:47:d0:7c:00:76:98:b1:1d:5b:fc:da:76:79:ed:e8:91: 60:ba:47:34:70:fb:bd:b3:86:8d:00:3a:f8:3d:f4:db:4d:a4: f4:c8:dd:12:ea:5d:7d:17:b7:70:15:6d:51:11:b5:f9:ad:be: 30:5c:b2:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdF+VOAR/29GvKrLn7lqKZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUwNjA2MTYwMDU3WhcNMjUwNjA3MTYwMDU3WjAzMTEwLwYDVQQD EygxZDFlMzgwMjBlNDU3OGE0Mzk3MTI1MzlkYTFlY2VmYmZjODhjMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz+vEMXq8GudF+PAp8/BCKmvmVm2 Jo/ti5gLJCNm+gditFWi8anPU31hEKoScnglF86hf6Ngk7RkyjUpdJQy9Uv82IPA SsQz+SK+138cn4URCTwAl5I6HGPf9vSP0oEXyA15aByinod4iuYm0eEMJPT6Vq8C fvlOC9PTTj3ZBdLPJXbjJnzfcJ8F0V/WFV1SWBEIWqLd1qP1FkA/J5pnnG80ORjA eEvCZeFf+aJCo3B9rW6sUWKkzUmtz50vVE7A4btM3KJmWy3BUIj5Ou/tQPhoQQV6 7Sex4Hgaw5GCAk9be6OCT8wXPAxtOACACDNmUx7dGIQdJVurJMqDr3fmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0eOAIORXikOXElOdoezvv8iMFUMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4gXUZCaD NFkDJ3EfcQckk3Cj+iQFGk3HbE9HdUNs9Bq2cQ/zZNIox0o8UgSMGx1dvurzHNTY MYEJX3msJl0Pm6f05XtL7IQfkV5lTX4s6Qj5AA9V88qLJfFkSrJxGWzC1mf3IsPK FNPmCkJ/Mh+nS0PwxyzUnbuWdT7N878PJFxzFNVjluWtj1Cn497dxNP78eFiCK6i q7qQVAU1/2ETW+GGQy9c1GbtmOiOyX+ARw2AoR+A214sVun09kIFMtOB9Tos4VId wjtH0HwAdpixHVv82nZ57eiRYLpHNHD7vbOGjQA6+D30202k9MjdEupdfRe3cBVt URG1+a2+MFyyuw== -----END CERTIFICATE-----Generated at Sat Jun 7 01:17:49 2025 by rpki-client