$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: xNjt7TeMZWfcqO1c+LmlBTp7noPhdiSUha2h9fjQbaU= Subject key identifier: 81:BE:67:96:3B:46:83:E3:CE:BC:31:56:25:98:B9:31:D3:A6:EC:45 Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 019A1FBF273003019A2523702A4FCE05C8D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 1711 Signing time: Sun 26 Oct 2025 09:00:12 +0000 Manifest this update: Sun 26 Oct 2025 09:00:12 +0000 Manifest next update: Mon 27 Oct 2025 09:00:12 +0000 Files and hashes: 1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=) 2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=) 5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 7: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 12: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 13: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 14: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: 7JthgMdKUOyuplG5Z2OHhfkrR8YxtlIzu3Uz8ti+N5o=) 15: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:bf:27:30:03:01:9a:25:23:70:2a:4f:ce:05:c8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Oct 26 09:00:12 2025 GMT Not After : Oct 27 09:00:12 2025 GMT Subject: CN=81be67963b4683e3cebc31562598b931d3a6ec45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:04:48:b8:19:cb:32:90:f1:d3:c5:1b:d3: 6b:f1:b5:7e:e9:55:8f:5a:38:15:04:46:ff:3a:9c: 4e:97:15:09:47:e5:73:8f:15:a8:99:07:01:4a:f2: 25:18:3c:a9:ea:e4:f2:48:5f:de:f8:41:e4:51:96: 34:2b:ab:74:c0:f3:f2:17:31:70:03:26:02:d0:c1: fb:5d:ee:dc:6c:5b:59:89:11:db:bf:05:2b:4b:3c: d2:b2:b1:95:d7:fb:05:88:62:73:f3:72:91:ba:01: f2:f1:7c:20:17:14:e4:bc:47:fa:cd:29:34:b6:d1: e8:1b:bb:68:97:5f:37:4c:fd:80:8f:76:6b:10:9f: 56:8b:74:c0:42:43:8b:75:57:ac:c8:c5:4e:a3:23: 4e:b5:6c:92:31:94:9b:f0:c0:a5:98:8f:57:73:46: f8:89:2c:66:5a:fb:fe:33:d8:f3:20:f2:94:26:7d: 9c:35:0a:11:6f:81:5f:3b:b7:ed:89:7f:d2:d0:c1: c7:fe:bd:93:ae:70:e9:62:20:52:eb:3b:7b:53:e7: 4a:85:15:b5:d3:23:14:80:bf:5a:26:b5:75:46:8e: b5:d5:ee:db:1e:99:97:5b:d6:e3:a8:8a:43:6f:75: ad:9d:ef:96:ad:da:21:6c:67:d9:41:13:21:e5:7d: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:67:96:3B:46:83:E3:CE:BC:31:56:25:98:B9:31:D3:A6:EC:45 X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:83:06:9f:82:5c:d0:27:6c:00:a2:bb:fc:48:26:d3:0e:a9: d8:a6:62:7d:12:bb:e3:37:e9:98:0e:a8:be:4d:d8:e8:c1:35: e0:07:0a:0c:6d:c5:c5:87:e9:22:12:ca:4b:47:3a:c8:a2:2f: 4e:7e:0b:ee:65:69:bb:bf:e4:32:67:97:40:fc:3d:ed:b6:c1: 6f:e1:8e:b0:55:6e:44:c5:4b:53:af:84:e3:73:ea:1a:cc:88: a3:1a:fe:ac:a0:dd:1b:00:87:93:c4:db:b0:a4:71:32:3f:52: 69:d7:6f:08:3f:5b:95:0e:58:89:99:18:67:d0:c2:1d:cd:5f: a9:3d:03:02:35:fd:f6:fa:10:9f:f6:31:84:9f:de:9f:b4:09: ed:07:1d:e2:29:d9:fd:28:2f:0b:c9:a1:fd:84:f8:0a:9d:20: 7e:ab:5e:5e:b0:4d:f4:0e:de:a1:fa:1f:d3:4d:04:76:ae:25: 59:b4:a8:27:80:88:19:1d:19:7a:05:92:47:00:f7:dd:00:64: 82:8b:a1:2a:d1:b9:a0:51:ea:e4:4d:51:ab:bd:d7:10:5d:da: 00:f3:20:98:56:89:c2:36:3a:6c:9e:f3:23:b5:a6:8c:4c:fa: 22:c9:6c:54:86:b6:6e:b4:4a:6f:bb:ec:06:39:49:f1:21:bd: 96:af:76:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofvycwAwGaJSNwKk/OBcjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUxMDI2MDkwMDEyWhcNMjUxMDI3MDkwMDEyWjAzMTEwLwYDVQQD Eyg4MWJlNjc5NjNiNDY4M2UzY2ViYzMxNTYyNTk4YjkzMWQzYTZlYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr34ESLgZyzKQ8dPFG9Nr8bV+6VWP WjgVBEb/OpxOlxUJR+VzjxWomQcBSvIlGDyp6uTySF/e+EHkUZY0K6t0wPPyFzFw AyYC0MH7Xe7cbFtZiRHbvwUrSzzSsrGV1/sFiGJz83KRugHy8XwgFxTkvEf6zSk0 ttHoG7tol183TP2Aj3ZrEJ9Wi3TAQkOLdVesyMVOoyNOtWySMZSb8MClmI9Xc0b4 iSxmWvv+M9jzIPKUJn2cNQoRb4FfO7ftiX/S0MHH/r2TrnDpYiBS6zt7U+dKhRW1 0yMUgL9aJrV1Ro611e7bHpmXW9bjqIpDb3Wtne+WrdohbGfZQRMh5X1rJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG+Z5Y7RoPjzrwxViWYuTHTpuxFMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToMGn4Jc 0CdsAKK7/Egm0w6p2KZifRK74zfpmA6ovk3Y6ME14AcKDG3FxYfpIhLKS0c6yKIv Tn4L7mVpu7/kMmeXQPw97bbBb+GOsFVuRMVLU6+E43PqGsyIoxr+rKDdGwCHk8Tb sKRxMj9SaddvCD9blQ5YiZkYZ9DCHc1fqT0DAjX99voQn/YxhJ/en7QJ7Qcd4inZ /SgvC8mh/YT4Cp0gfqteXrBN9A7eofof000Edq4lWbSoJ4CIGR0ZegWSRwD33QBk gouhKtG5oFHq5E1Rq73XEF3aAPMgmFaJwjY6bJ7zI7WmjEz6IslsVIa2brRKb7vs BjlJ8SG9lq92uA== -----END CERTIFICATE-----Generated at Sun Oct 26 11:31:15 2025 by rpki-client