$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: ttO5vZ7MCd1eyWoozxaWUG1NQxgaom8xUtT0VdEWoLA= Subject key identifier: EA:52:31:DA:B4:7A:5D:1B:B5:98:F7:3F:64:42:B6:7B:C3:34:1E:60 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 01992E910758934E8039BED2E90F03907E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1531 Signing time: Tue 09 Sep 2025 13:01:20 +0000 Manifest this update: Tue 09 Sep 2025 13:01:20 +0000 Manifest next update: Wed 10 Sep 2025 13:01:20 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: gfUGfvKuiCTB+1Q94tzmBnR+DCPkGNnAw0su2HnW5mQ=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:91:07:58:93:4e:80:39:be:d2:e9:0f:03:90:7e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Sep 9 13:01:20 2025 GMT Not After : Sep 10 13:01:20 2025 GMT Subject: CN=ea5231dab47a5d1bb598f73f6442b67bc3341e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:4e:72:f0:8e:89:79:37:5a:5b:b9:27:b9: f7:d0:b9:53:87:a4:d3:6b:44:41:c6:99:c2:99:9b: dc:94:a0:3f:e3:46:0c:c6:69:66:d3:29:4f:b5:63: ac:ea:ab:66:25:73:5f:c2:6f:18:80:5e:dd:71:72: 0c:ff:af:f9:01:3d:92:98:ab:ac:ba:81:ea:4a:5b: 83:ec:43:8b:7d:60:7f:63:c0:85:a7:bc:64:6b:4b: 49:f3:b5:d9:1b:bb:33:43:83:89:bb:88:4d:63:ba: bb:60:15:02:a6:95:54:c0:eb:65:95:6d:54:04:df: 24:90:ce:e8:f7:22:d7:26:fa:46:1f:7c:d1:c3:cb: d1:e4:55:4f:0a:78:0a:b6:e9:07:f5:5c:d2:58:c7: d4:e7:78:af:3a:dc:bd:a4:45:29:ba:2a:59:7b:27: 34:0a:92:98:68:b2:5d:44:e4:19:04:df:25:1b:ea: d2:70:45:e7:9a:7f:38:8d:7a:06:fb:35:e2:e2:57: cb:50:20:9b:b1:78:13:53:44:68:ba:06:4a:1e:8b: 42:8d:2e:b6:54:9c:4e:47:eb:f0:e6:87:af:2d:c3: 2c:6c:64:67:69:d4:5e:ff:08:e0:52:c9:5c:af:c1: cb:74:08:d9:1e:a4:f1:7a:1d:99:1e:38:05:0c:d3: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:31:DA:B4:7A:5D:1B:B5:98:F7:3F:64:42:B6:7B:C3:34:1E:60 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:98:13:7d:b5:fd:71:d8:c4:af:da:3a:be:f3:fc:9d:35:3a: be:5d:0e:8f:8e:dd:ec:54:b1:ad:c2:b9:2a:5f:96:e7:b2:6d: 1a:71:79:e1:0d:d0:d9:cc:a0:16:17:e5:a6:8d:94:81:2e:0a: 76:91:dc:da:8a:01:9b:6f:b9:70:fb:f4:af:c9:e7:02:a2:df: 5d:fe:80:13:6e:a3:99:77:0b:f1:85:dc:1d:e6:b8:ce:15:f5: b4:39:54:1e:34:7e:84:da:14:85:05:36:6a:72:b1:26:98:90: 5b:54:e8:81:ef:e9:c7:85:74:ce:25:7a:f4:47:4a:89:dc:bf: e2:f7:2e:11:ae:b4:e8:36:84:e0:3a:42:a8:5f:98:54:b0:ef: 4e:db:21:f5:82:be:68:62:b7:9a:67:b9:c9:b2:79:22:31:72: a3:62:6c:c4:5a:13:43:a2:01:c2:56:93:de:f6:71:00:80:d8: f9:bf:c6:2f:47:bb:66:c2:71:e7:9f:39:4e:85:e1:6e:b8:4d: f6:bd:83:5b:10:0c:c2:d2:28:63:03:5d:bb:85:dd:78:87:c4: 39:0f:df:62:57:a0:6e:fc:49:65:e0:4b:10:89:59:ca:cc:f2: 9b:0e:36:a5:cb:6a:b8:84:07:a9:0f:a5:12:fd:4e:14:38:fd: 08:a5:92:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkukQdYk06AOb7S6Q8DkH4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwOTA5MTMwMTIwWhcNMjUwOTEwMTMwMTIwWjAzMTEwLwYDVQQD EyhlYTUyMzFkYWI0N2E1ZDFiYjU5OGY3M2Y2NDQyYjY3YmMzMzQxZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ROcvCOiXk3Wlu5J7n30LlTh6TT a0RBxpnCmZvclKA/40YMxmlm0ylPtWOs6qtmJXNfwm8YgF7dcXIM/6/5AT2SmKus uoHqSluD7EOLfWB/Y8CFp7xka0tJ87XZG7szQ4OJu4hNY7q7YBUCppVUwOtllW1U BN8kkM7o9yLXJvpGH3zRw8vR5FVPCngKtukH9VzSWMfU53ivOty9pEUpuipZeyc0 CpKYaLJdROQZBN8lG+rScEXnmn84jXoG+zXi4lfLUCCbsXgTU0RougZKHotCjS62 VJxOR+vw5oevLcMsbGRnadRe/wjgUslcr8HLdAjZHqTxeh2ZHjgFDNPEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpSMdq0el0btZj3P2RCtnvDNB5gMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpgTfbX9 cdjEr9o6vvP8nTU6vl0Oj47d7FSxrcK5Kl+W57JtGnF54Q3Q2cygFhflpo2UgS4K dpHc2ooBm2+5cPv0r8nnAqLfXf6AE26jmXcL8YXcHea4zhX1tDlUHjR+hNoUhQU2 anKxJpiQW1Toge/px4V0ziV69EdKidy/4vcuEa606DaE4DpCqF+YVLDvTtsh9YK+ aGK3mme5ybJ5IjFyo2JsxFoTQ6IBwlaT3vZxAIDY+b/GL0e7ZsJx5585ToXhbrhN 9r2DWxAMwtIoYwNdu4XdeIfEOQ/fYlegbvxJZeBLEIlZyszymw42pctquIQHqQ+l Ev1OFDj9CKWS6Q== -----END CERTIFICATE-----Generated at Tue Sep 9 17:36:19 2025 by rpki-client