$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: 6h0xlVV6mew07tiZGQdPeKiLcgxhbk+wUnvRHjhfsL0= Subject key identifier: D5:87:76:CC:9E:29:DA:61:9D:DA:C2:D8:CC:0B:28:E7:57:5A:54:8B Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 01992367C5E5DC12FE51E2C5BF728FCECED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 0180 Signing time: Sun 07 Sep 2025 09:00:27 +0000 Manifest this update: Sun 07 Sep 2025 09:00:27 +0000 Manifest next update: Mon 08 Sep 2025 09:00:27 +0000 Files and hashes: 1: 3BdeI36IkUxOlCqSmaZfu8I0p4g.roa (hash: 5N4fYvWW73MoWuT7eG7LCKSc0LhblTQNkeac5h0QDT0=) 2: NRaQo2jIQHJmAjiGhyJQMAA7WEc.roa (hash: 0SnrGVOF2i1D6j6ZzSnt0Wg4Lvrl2BITuiIqatxVhqk=) 3: Pv48cERpHgZrkEd-pA2cx5n0Dx4.roa (hash: ielywtJAKkxMoIx1w7LZ3LEuLxtsUUXOXr+8Yf+miBs=) 4: PzNxqQdkgSpGYxNc-jAx_r3OQ5w.roa (hash: TE0cVIygdHu8nD6ddQO4pl85tRSyEis9fR0YP4iCrQg=) 5: WSR-O9b0gsJsQFSKXSTL8eJBMpA.roa (hash: a3d83I3OM26Rcumlwo5C8tjA1sldnSwvJlMfN0DSpuw=) 6: dNdlikygHYW9_VCSMxVInvo5wAE.roa (hash: oANbFDFE9Ng6o6gqO/EcOwZNCNKxlzdWPW9zD7faSZw=) 7: pz5iKSS3DjXvuOKM5710xrPbd3k.roa (hash: BAQauhMx2S4URlRz7DXain/wmvSRTTI+4gS0hRToEQ8=) 8: qYtaBV1QHFqIX4Zzb9pAgcJ7FlM.roa (hash: lX56tQdRTgCel8q/Xo9AvRt49Mx4NjdnE/8coAHzSjc=) 9: uLPJYTLAJibqmvpLRCseXDZJAzs.roa (hash: 9mlYN3W1kSgnxpAWizPg+AQaofwG+1gp6a+x8zV245c=) 10: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: IElYMfTDgU8GbhnTqHEYlTvXBohmHyCP1WeeOdKG/Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:67:c5:e5:dc:12:fe:51:e2:c5:bf:72:8f:ce:ce:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Sep 7 09:00:27 2025 GMT Not After : Sep 8 09:00:27 2025 GMT Subject: CN=d58776cc9e29da619ddac2d8cc0b28e7575a548b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:c1:69:69:79:57:d4:bd:4e:ab:fd:94:e4: f9:91:f2:06:1e:86:3c:6b:98:9b:eb:63:c4:6d:20: 03:42:92:6a:44:2d:d5:62:9b:04:ff:dc:ed:a5:58: 01:5b:20:50:17:1a:9d:d1:bd:30:ba:2a:8f:3f:6f: fd:73:62:27:e7:da:ec:0d:be:89:35:c0:e8:f8:e2: a6:8a:0e:96:af:a7:f3:bd:b1:40:ba:59:1f:18:fd: d7:08:a2:14:85:f4:26:48:e6:f1:1d:d5:66:6d:8b: fc:f2:52:93:ae:c3:12:e4:4e:fd:ad:e3:aa:5c:cf: a0:1c:dc:b1:43:7f:d5:e8:8c:f2:01:fa:c4:eb:2d: 30:cf:b0:3f:8b:f3:ad:a9:03:f7:b7:87:45:8a:90: 72:08:ae:7b:54:75:27:c9:ea:f2:83:06:61:7f:3a: b4:55:94:1f:06:c3:24:05:34:2c:b2:4b:20:4e:03: a0:fc:c9:6f:74:a3:2a:5a:9e:fd:81:2a:09:f8:c6: 58:7f:95:fd:61:a0:4d:1f:f9:5e:f1:ed:d6:e0:b9: d3:bc:39:34:de:f4:f1:e1:00:b2:df:c9:85:a9:5a: fd:86:9e:3c:06:30:aa:ea:df:e3:4e:19:04:62:05: 59:87:7e:45:c9:b7:5b:a9:9d:fb:2f:2a:a3:44:25: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:76:CC:9E:29:DA:61:9D:DA:C2:D8:CC:0B:28:E7:57:5A:54:8B X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b0:59:94:93:ac:64:f2:c0:8f:23:27:91:e9:7e:1a:8c:01: 8f:10:39:c4:f0:b8:88:33:44:44:99:08:4c:3e:d2:91:6b:de: ac:54:b2:59:69:a6:f7:c5:73:3b:fb:03:f6:78:09:9c:38:64: ff:8f:67:55:ac:87:5d:17:76:b8:b0:19:22:11:83:26:35:ad: ee:83:7e:5a:a1:52:46:0c:ec:48:91:d2:e2:92:e5:9f:b3:e5: 15:2c:b2:91:d3:15:0c:af:c6:cb:e5:b1:f9:76:f5:73:61:a2: b2:65:ce:d6:83:ff:36:9b:48:bd:40:d7:ab:95:74:24:ea:ea: 05:ad:22:00:e5:ac:9d:d8:92:94:62:56:6d:bb:a2:14:76:95: 3d:bb:a8:d6:d6:8e:c3:30:3a:50:5d:80:af:22:53:44:38:b0: 96:a1:c0:69:04:3a:9d:83:10:08:e9:9c:a9:a2:5c:1c:17:9b: 6b:0a:91:b3:92:83:b4:f5:eb:f4:08:71:c1:ae:08:70:2f:68: 99:78:09:5e:ba:56:cb:83:b5:44:38:ba:af:9a:b8:6c:b7:27: 91:49:4a:b5:28:b3:2d:b0:6d:3d:4d:ce:6a:62:4b:15:9b:88: bc:5a:f1:2f:b7:9b:74:5c:e0:19:74:d9:85:b0:03:25:f5:d9: c9:10:47:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjZ8Xl3BL+UeLFv3KPzs7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjUwOTA3MDkwMDI3WhcNMjUwOTA4MDkwMDI3WjAzMTEwLwYDVQQD EyhkNTg3NzZjYzllMjlkYTYxOWRkYWMyZDhjYzBiMjhlNzU3NWE1NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDTBaWl5V9S9Tqv9lOT5kfIGHoY8 a5ib62PEbSADQpJqRC3VYpsE/9ztpVgBWyBQFxqd0b0wuiqPP2/9c2In59rsDb6J NcDo+OKmig6Wr6fzvbFAulkfGP3XCKIUhfQmSObxHdVmbYv88lKTrsMS5E79reOq XM+gHNyxQ3/V6IzyAfrE6y0wz7A/i/OtqQP3t4dFipByCK57VHUnyerygwZhfzq0 VZQfBsMkBTQssksgTgOg/MlvdKMqWp79gSoJ+MZYf5X9YaBNH/le8e3W4LnTvDk0 3vTx4QCy38mFqVr9hp48BjCq6t/jThkEYgVZh35FybdbqZ37LyqjRCXUswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWHdsyeKdphndrC2MwLKOdXWlSLMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7BZlJOs ZPLAjyMnkel+GowBjxA5xPC4iDNERJkITD7SkWverFSyWWmm98VzO/sD9ngJnDhk /49nVayHXRd2uLAZIhGDJjWt7oN+WqFSRgzsSJHS4pLln7PlFSyykdMVDK/Gy+Wx +Xb1c2GismXO1oP/NptIvUDXq5V0JOrqBa0iAOWsndiSlGJWbbuiFHaVPbuo1taO wzA6UF2AryJTRDiwlqHAaQQ6nYMQCOmcqaJcHBebawqRs5KDtPXr9Ahxwa4IcC9o mXgJXrpWy4O1RDi6r5q4bLcnkUlKtSizLbBtPU3OamJLFZuIvFrxL7ebdFzgGXTZ hbADJfXZyRBHkw== -----END CERTIFICATE-----Generated at Sun Sep 7 12:32:54 2025 by rpki-client