$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: eWUtzA01grTjE0+HnJ959R7iZd5QTeno5SKVso6S3R8= Subject key identifier: 42:1E:0B:44:A8:8C:19:1A:4F:FB:8C:FF:46:54:C9:33:95:CE:85:9F Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 01A08A5538EA0881E61278D43B07AAD6D905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 058C Signing time: Thu 10 Sep 2026 08:00:35 +0000 Manifest this update: Thu 10 Sep 2026 08:00:35 +0000 Manifest next update: Fri 11 Sep 2026 08:00:35 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 6: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=) 7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 11: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 12: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 13: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: 1zN5eErzh+Z+VGsrYbELuZPjmQzljT/XqZZ2WPMtBzM=) 15: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:55:38:ea:08:81:e6:12:78:d4:3b:07:aa:d6:d9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Sep 10 08:00:35 2026 GMT Not After : Sep 11 08:00:35 2026 GMT Subject: CN=421e0b44a88c191a4ffb8cff4654c93395ce859f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:f5:52:4c:b1:df:09:56:7e:72:d7:73:b5: 50:66:ca:28:60:c6:7a:ec:c6:5b:e1:fd:dc:54:9a: 2f:24:92:0e:0f:27:a2:c2:55:d2:f9:d8:7b:c5:fe: 88:f0:c3:f3:0b:3c:9a:1b:82:10:f3:41:ec:06:89: c7:82:04:68:c4:3c:b6:7f:76:f2:1f:0d:d6:4c:97: 3c:44:a0:91:15:89:16:fa:5b:d6:6d:b0:31:d2:e9: 2c:b1:af:80:eb:d3:9b:5c:1b:67:04:88:df:0c:2e: 3c:1b:bf:e7:88:96:94:39:f6:4c:62:12:b7:90:8a: c8:74:5a:16:ea:64:48:c7:92:08:59:2b:1b:01:73: 50:b5:16:27:f5:63:52:bc:3c:4e:6a:b8:ad:b3:3c: f9:a1:72:f9:0e:f8:38:49:39:52:e8:0d:32:18:6e: b7:33:fc:f6:34:28:94:96:64:c1:a8:3c:e1:5e:1a: 50:53:d9:64:4e:16:ca:7a:bb:c7:7b:87:50:43:0e: 64:75:0a:2d:98:fa:f6:f0:75:97:9c:3b:ab:7f:b0: b9:9c:df:b2:cb:24:e7:83:b6:32:81:4d:6b:24:93: c2:04:59:bb:0f:11:de:a3:93:9d:56:08:c5:a2:db: bb:9d:8b:b8:b3:07:62:cf:2b:54:c5:c7:aa:46:69: 0a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:0B:44:A8:8C:19:1A:4F:FB:8C:FF:46:54:C9:33:95:CE:85:9F X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:29:c4:c0:47:01:2e:69:15:2d:1c:20:4d:66:82:ec:61:33: 1e:15:e3:5f:f4:84:c8:31:a6:fb:6e:d0:9c:2c:c3:10:92:0c: a3:57:1c:c2:a9:e7:93:e2:c9:3c:f1:e3:25:e3:49:19:a3:52: 8d:07:b3:76:4b:ff:58:89:93:c0:0b:3e:d6:a1:34:ab:ae:69: f0:7e:98:c1:ec:f8:e1:f4:39:f4:63:30:c8:18:78:a0:c4:ec: d4:08:a4:ec:12:20:2e:e8:5b:88:49:01:a1:e8:6d:30:6f:a0: b0:32:91:e9:0c:5c:6f:d4:e8:9b:15:92:8f:51:24:aa:7e:7e: 52:49:4b:60:94:44:57:7a:5b:0a:33:88:70:99:e5:07:8f:46: 4b:34:7a:fc:a8:f7:3f:f2:c7:96:6c:99:54:2e:cb:64:b9:ec: 89:5b:2e:29:b7:41:a6:c2:b3:df:6c:50:c0:85:43:ab:bf:47: 0f:db:ca:ba:c1:61:0a:3f:9c:04:17:7f:2f:18:a7:c9:6c:71: 5d:0a:5e:78:09:46:9d:b8:6b:94:da:e6:1d:93:4f:cb:c3:14: f9:7b:e1:ee:bb:34:3d:fa:b8:53:17:d1:a7:de:d7:55:bd:99: d2:5b:c2:7f:d2:12:cd:68:69:04:b3:88:f4:28:bc:3b:2f:19: 1e:82:f7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKVTjqCIHmEnjUOweq1tkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwOTEwMDgwMDM1WhcNMjYwOTExMDgwMDM1WjAzMTEwLwYDVQQD Eyg0MjFlMGI0NGE4OGMxOTFhNGZmYjhjZmY0NjU0YzkzMzk1Y2U4NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscP1Ukyx3wlWfnLXc7VQZsooYMZ6 7MZb4f3cVJovJJIODyeiwlXS+dh7xf6I8MPzCzyaG4IQ80HsBonHggRoxDy2f3by Hw3WTJc8RKCRFYkW+lvWbbAx0ukssa+A69ObXBtnBIjfDC48G7/niJaUOfZMYhK3 kIrIdFoW6mRIx5IIWSsbAXNQtRYn9WNSvDxOaritszz5oXL5Dvg4STlS6A0yGG63 M/z2NCiUlmTBqDzhXhpQU9lkThbKervHe4dQQw5kdQotmPr28HWXnDurf7C5nN+y yyTng7YygU1rJJPCBFm7DxHeo5OdVgjFotu7nYu4swdizytUxceqRmkK4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIeC0SojBkaT/uM/0ZUyTOVzoWfMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSnEwEcB LmkVLRwgTWaC7GEzHhXjX/SEyDGm+27QnCzDEJIMo1ccwqnnk+LJPPHjJeNJGaNS jQezdkv/WImTwAs+1qE0q65p8H6Ywez44fQ59GMwyBh4oMTs1Aik7BIgLuhbiEkB oehtMG+gsDKR6Qxcb9TomxWSj1Ekqn5+UklLYJREV3pbCjOIcJnlB49GSzR6/Kj3 P/LHlmyZVC7LZLnsiVsuKbdBpsKz32xQwIVDq79HD9vKusFhCj+cBBd/LxinyWxx XQpeeAlGnbhrlNrmHZNPy8MU+Xvh7rs0Pfq4UxfRp97XVb2Z0lvCf9ISzWhpBLOI 9Ci8Oy8ZHoL3mA== -----END CERTIFICATE-----Generated at Thu Sep 10 16:05:31 2026 by rpki-client