$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: rW/XLgwg9VMeXk2HZY88g1lR0fI3Bu2QrPhggutAlps= Subject key identifier: 44:67:5F:87:D1:99:E6:96:7E:7C:88:7D:BD:A9:40:D7:DA:CA:EE:4A Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019A1C196B99EE9BEDE6026F1EA72384F5F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 15AC Signing time: Sat 25 Oct 2025 16:00:19 +0000 Manifest this update: Sat 25 Oct 2025 16:00:19 +0000 Manifest next update: Sun 26 Oct 2025 16:00:19 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: f7N9Uv6yNbint9mh358koatJbpwOOUo2rtZRT+cjnPQ=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:19:6b:99:ee:9b:ed:e6:02:6f:1e:a7:23:84:f5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Oct 25 16:00:19 2025 GMT Not After : Oct 26 16:00:19 2025 GMT Subject: CN=44675f87d199e6967e7c887dbda940d7dacaee4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:6c:65:50:f2:05:89:58:71:66:2d:67:80: eb:b6:e1:51:e1:0a:28:37:d5:de:17:c2:e1:3f:b9: b1:c7:3b:03:f6:a0:e0:e7:c0:46:47:31:31:2f:2f: 1f:6f:b7:b9:48:57:e4:76:82:d3:20:76:c7:57:b9: 13:f4:45:16:d1:75:30:ce:f5:af:ea:48:ce:4d:98: cc:f3:ff:52:07:5f:3d:ee:dc:54:f8:f6:28:95:a7: 89:00:ee:2a:23:6e:5d:9a:d9:86:c3:88:06:a8:92: 2f:9e:fb:62:b1:6b:18:b2:e7:c8:af:1f:ef:25:08: dc:ee:32:41:5d:bf:2c:89:33:2e:f2:65:af:bd:86: f3:c8:4c:83:e4:37:57:38:d3:ba:46:4a:9c:d9:00: 29:0b:80:af:13:13:29:21:64:c0:93:f9:da:11:a9: 1f:1a:da:86:2b:57:87:fb:fe:2a:c7:bd:6b:91:1a: 33:79:eb:cd:1a:28:99:cc:6a:bb:6c:f7:8c:5a:1a: c4:f0:92:d9:e5:ef:e0:41:45:22:88:2b:72:ed:eb: f6:4e:52:d8:2f:5c:3f:04:ea:3c:5d:e4:da:ae:76: 4e:0c:de:a4:48:7b:ef:84:2f:22:c1:05:1c:5c:81: fe:cc:ae:13:7e:2d:99:a3:cb:89:a4:49:b8:a2:4a: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:5F:87:D1:99:E6:96:7E:7C:88:7D:BD:A9:40:D7:DA:CA:EE:4A X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fb:45:bc:dd:6c:83:43:c2:b2:4f:41:65:d0:c6:1e:96:54: 8d:9c:ae:ce:25:d8:a8:83:62:ab:37:9d:26:18:68:f6:8c:cd: 3a:a3:12:2d:34:6b:ab:9d:d5:97:b5:30:1b:75:15:38:ee:d1: aa:68:7e:bf:e8:26:c5:a8:06:c0:74:10:62:67:1d:ef:09:0a: c2:65:6b:86:2b:7c:10:ed:d5:cb:82:e0:b2:eb:4f:5e:29:df: 2b:49:16:8b:f2:07:c8:5b:fa:3d:f5:48:ea:ba:e5:e9:0d:85: 3c:89:76:68:33:0e:88:df:5c:6e:6b:ae:2b:e0:78:c9:ed:47: b9:92:20:ab:00:72:2a:b0:36:42:b6:bb:87:2b:1a:b8:f7:41: 5d:6d:d4:a9:dd:1d:45:f6:3b:17:d2:80:4a:a8:e2:7e:df:84: 92:b3:de:c7:d3:9d:b3:e8:17:cb:09:b5:5a:f0:c3:8d:51:41: 6c:e6:19:e1:20:89:98:ed:a3:f0:c1:60:99:d1:5a:2d:88:a9: 57:d6:55:6d:33:e0:60:ab:16:51:f3:60:bd:0a:7c:f1:3f:87: 62:1d:0b:35:7a:83:49:50:8b:70:9a:fa:d8:bc:4d:ab:c4:fa: 74:30:ed:43:1a:8a:6f:9d:13:ad:04:80:ff:10:2e:bf:7e:c7: e9:d7:92:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocGWuZ7pvt5gJvHqcjhPX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUxMDI1MTYwMDE5WhcNMjUxMDI2MTYwMDE5WjAzMTEwLwYDVQQD Eyg0NDY3NWY4N2QxOTllNjk2N2U3Yzg4N2RiZGE5NDBkN2RhY2FlZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrhsZVDyBYlYcWYtZ4DrtuFR4Qoo N9XeF8LhP7mxxzsD9qDg58BGRzExLy8fb7e5SFfkdoLTIHbHV7kT9EUW0XUwzvWv 6kjOTZjM8/9SB1897txU+PYolaeJAO4qI25dmtmGw4gGqJIvnvtisWsYsufIrx/v JQjc7jJBXb8siTMu8mWvvYbzyEyD5DdXONO6Rkqc2QApC4CvExMpIWTAk/naEakf GtqGK1eH+/4qx71rkRozeevNGiiZzGq7bPeMWhrE8JLZ5e/gQUUiiCty7ev2TlLY L1w/BOo8XeTarnZODN6kSHvvhC8iwQUcXIH+zK4Tfi2Zo8uJpEm4okobtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERnX4fRmeaWfnyIfb2pQNfayu5KMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAftFvN1s g0PCsk9BZdDGHpZUjZyuziXYqINiqzedJhho9ozNOqMSLTRrq53Vl7UwG3UVOO7R qmh+v+gmxagGwHQQYmcd7wkKwmVrhit8EO3Vy4LgsutPXinfK0kWi/IHyFv6PfVI 6rrl6Q2FPIl2aDMOiN9cbmuuK+B4ye1HuZIgqwByKrA2Qra7hysauPdBXW3Uqd0d RfY7F9KASqjift+EkrPex9Ods+gXywm1WvDDjVFBbOYZ4SCJmO2j8MFgmdFaLYip V9ZVbTPgYKsWUfNgvQp88T+HYh0LNXqDSVCLcJr62LxNq8T6dDDtQxqKb50TrQSA /xAuv37H6deS1A== -----END CERTIFICATE-----Generated at Sat Oct 25 18:27:48 2025 by rpki-client