$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: SRRv4cZbDJ2SnL8hH/8DPdPUW8jHA7c06quYAg2PV4I= Subject key identifier: 58:6D:A9:DE:15:26:95:F3:A9:5B:6A:44:DE:04:F7:45:32:CF:9A:CA Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019A0BCAE5235EDFF68D9FD1BA0EEEE53438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 0214 Signing time: Wed 22 Oct 2025 12:00:37 +0000 Manifest this update: Wed 22 Oct 2025 12:00:37 +0000 Manifest next update: Thu 23 Oct 2025 12:00:37 +0000 Files and hashes: 1: 1cg-3g0Asieg2TWgGUi9Y895K4c.roa (hash: O3gWsrzJY8YUGE1T9qZmAqra639XkrSHFO3BGJAYbMQ=) 2: 3BdeI36IkUxOlCqSmaZfu8I0p4g.roa (hash: 5N4fYvWW73MoWuT7eG7LCKSc0LhblTQNkeac5h0QDT0=) 3: 6jbWoT5aybGRoPppA4uKhHpi51M.roa (hash: gFs+gENc2btBVx1dWOs1qACWff52MJLlO91fJMzppAE=) 4: GB6mKyeT7IQ3NBN03P0IFu3CVw4.roa (hash: T6k8VJ451vn3VlwZK1Z+3bPdrZ4MX2kwcGAC1IMdNwo=) 5: NohcJ4WZIaeXcX-OVJUzPxqH120.roa (hash: yVdxleiK6WjS5Znh4H6vQaLKbZ4eDhHDboRdcNpplGE=) 6: PzNxqQdkgSpGYxNc-jAx_r3OQ5w.roa (hash: TE0cVIygdHu8nD6ddQO4pl85tRSyEis9fR0YP4iCrQg=) 7: VNz7hqvsR-ukZZdtpVM76UMDGBM.roa (hash: jwbsYUXQD8OEknZhDbXeDAo0cGFYmN+VJd34+E+HgvE=) 8: WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa (hash: a3d83I3OM26Rcumlwo5C8tjA1sldnSwvJlMfN0DSpuw=) 9: Yicj8_op75ymbzoaaR_CYcZe0VQ.roa (hash: 2+ymQL5q8ADUC0OeBfxhWEbeXNErcML6p19Ax/kmRSk=) 10: ceRe27r4TaVzZe1TelFg0Kd7u0Y.roa (hash: B7bH7cuDjJTKEb3qydpXimO3oByn3OasTj45zytGAyc=) 11: dNdlikygHYW9_VCSMxVInvo5wAE.roa (hash: oANbFDFE9Ng6o6gqO/EcOwZNCNKxlzdWPW9zD7faSZw=) 12: pz5iKSS3DjXvuOKM5710xrPbd3k.roa (hash: BAQauhMx2S4URlRz7DXain/wmvSRTTI+4gS0hRToEQ8=) 13: q0Y7JuIH4oBjzl-fsRapgvsG8Fc.roa (hash: W7hcV7HS+nhfysioyQX7FqA5FGniSSXnMSbU5jN9dVU=) 14: qYtaBV1QHFqIX4Zzb9pAgcJ7FlM.roa (hash: lX56tQdRTgCel8q/Xo9AvRt49Mx4NjdnE/8coAHzSjc=) 15: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: fk4U02lf4xVrK8eI7Q0DZ/sjdsvZB4QtpZxyqfFERtE=) 16: uuXGHACgPAOAMcaTIjUcW6tDG6w.roa (hash: LcZdKmuPwkJ4XMoJjMZOUBdEi2nrG8UlIAfUEGfEhWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:ca:e5:23:5e:df:f6:8d:9f:d1:ba:0e:ee:e5:34:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Oct 22 12:00:37 2025 GMT Not After : Oct 23 12:00:37 2025 GMT Subject: CN=586da9de152695f3a95b6a44de04f74532cf9aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:07:d2:13:c9:af:52:bc:6d:da:10:5e:b5: 54:54:92:35:23:44:39:92:e5:4f:0f:fd:aa:b8:53: f0:da:ba:ae:27:e5:ca:b7:36:13:3e:8b:1a:66:6a: 8a:16:64:02:cb:fc:58:88:dc:c5:e7:d8:55:f7:b7: c8:bb:68:a5:91:bb:ac:08:22:35:e8:32:24:d2:ad: 6e:7c:42:f8:48:6b:a0:86:14:d9:0b:0d:64:8b:84: fa:02:84:04:01:57:52:a4:6d:9b:9f:cb:d3:1c:18: 67:54:eb:9b:6d:90:24:fb:97:25:d2:04:6c:3f:6f: 7e:fb:d5:ac:b8:2c:54:8c:1f:ce:df:0d:cb:cc:2b: af:6b:ea:33:b1:f9:d4:b5:44:b3:da:e4:09:97:74: 8d:85:ce:f1:af:db:78:73:24:b6:03:65:8c:d4:3e: fd:66:0e:06:14:0f:73:4d:f4:ab:c3:df:4c:82:e0: b6:0d:2c:b1:7e:c4:86:63:90:ed:43:1a:f6:37:8a: 3a:cf:81:5c:08:06:60:fa:0d:1c:d8:97:95:f3:77: c8:19:20:b2:fd:c7:50:33:6f:06:ae:bf:13:99:e8: 69:6f:3c:00:fd:ab:16:02:47:7f:07:ad:dd:ad:d1: 97:83:e2:fa:24:55:db:60:46:cf:09:51:ef:ec:3a: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:A9:DE:15:26:95:F3:A9:5B:6A:44:DE:04:F7:45:32:CF:9A:CA X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b8:fa:4a:88:6a:15:ce:6c:a8:2c:00:b2:9c:56:cd:30:82: a4:41:7b:b2:51:c6:cd:e1:36:f4:c3:47:21:0d:cd:c6:08:66: dc:ab:a0:8b:b9:cb:0a:7d:fe:fe:94:80:11:51:3c:65:68:71: 98:1b:c2:89:3c:46:ed:62:36:72:d1:e8:1f:cd:d6:e3:c8:1d: 95:d4:f5:13:7a:7b:ff:33:8b:f8:6a:d1:b8:6f:12:f2:9f:63: a2:af:01:c9:eb:dd:82:c0:e3:4d:58:10:21:16:5f:ff:82:32: 32:96:4a:08:bd:84:79:70:9c:66:03:18:9e:b8:4f:6d:73:80: bd:4c:eb:ac:30:61:03:6a:ce:1a:f0:9e:e4:09:6d:ed:2b:a7: 57:c4:34:8f:15:20:e6:9f:2c:c5:32:bd:ef:9e:f9:ae:ad:4d: 8e:44:4d:b2:00:73:35:c0:07:94:bb:69:b4:b1:19:90:b9:bd: 88:98:b9:60:20:38:ca:dc:5c:eb:f4:5f:1a:e5:5f:22:2c:06: eb:b6:62:07:e4:26:8b:2c:fe:81:57:b0:c0:ca:ea:cc:ad:13: 2f:93:29:37:4a:1b:5d:35:14:18:eb:72:8f:81:a8:75:74:74: 60:37:ed:0b:ae:c5:49:81:75:b5:a8:03:ba:01:da:8a:0d:3d: 59:1e:b8:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLyuUjXt/2jZ/Rug7u5TQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjUxMDIyMTIwMDM3WhcNMjUxMDIzMTIwMDM3WjAzMTEwLwYDVQQD Eyg1ODZkYTlkZTE1MjY5NWYzYTk1YjZhNDRkZTA0Zjc0NTMyY2Y5YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKoH0hPJr1K8bdoQXrVUVJI1I0Q5 kuVPD/2quFPw2rquJ+XKtzYTPosaZmqKFmQCy/xYiNzF59hV97fIu2ilkbusCCI1 6DIk0q1ufEL4SGughhTZCw1ki4T6AoQEAVdSpG2bn8vTHBhnVOubbZAk+5cl0gRs P29++9WsuCxUjB/O3w3LzCuva+ozsfnUtUSz2uQJl3SNhc7xr9t4cyS2A2WM1D79 Zg4GFA9zTfSrw99MguC2DSyxfsSGY5DtQxr2N4o6z4FcCAZg+g0c2JeV83fIGSCy /cdQM28Grr8TmehpbzwA/asWAkd/B63drdGXg+L6JFXbYEbPCVHv7DqD6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhtqd4VJpXzqVtqRN4E90Uyz5rKMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLj6Sohq Fc5sqCwAspxWzTCCpEF7slHGzeE29MNHIQ3Nxghm3Kugi7nLCn3+/pSAEVE8ZWhx mBvCiTxG7WI2ctHoH83W48gdldT1E3p7/zOL+GrRuG8S8p9joq8ByevdgsDjTVgQ IRZf/4IyMpZKCL2EeXCcZgMYnrhPbXOAvUzrrDBhA2rOGvCe5Alt7SunV8Q0jxUg 5p8sxTK97575rq1NjkRNsgBzNcAHlLtptLEZkLm9iJi5YCA4ytxc6/RfGuVfIiwG 67ZiB+Qmiyz+gVewwMrqzK0TL5MpN0obXTUUGOtyj4GodXR0YDftC67FSYF1tagD ugHaig09WR64Ww== -----END CERTIFICATE-----Generated at Wed Oct 22 20:28:34 2025 by rpki-client