$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: 08+MQkZoJiWwz+XFT4TsUigrjSpzI6/XnPXjpCDmi6s= Subject key identifier: 37:4C:70:45:D4:40:74:9D:12:B2:6C:17:D9:36:ED:87:A1:D5:87:E3 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019921B0C843B79AC60E1936E3C75CF7FD8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 16BE Signing time: Sun 07 Sep 2025 01:00:57 +0000 Manifest this update: Sun 07 Sep 2025 01:00:57 +0000 Manifest next update: Mon 08 Sep 2025 01:00:57 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: F5MHXDqnIzYEJiqy-lSbHqiutdE.roa (hash: Kr6UA+01g5mj3k9HL3gZp8uUuI6XmpL1gu4D3yxcHg4=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 25: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 26: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 27: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 29: bSVo2RrhzLf-kvkumfM8eA1LBb4.roa (hash: EM8XYwd0G3fvP2wAeyIFrzfPWu8wisMVd1TPeR4ae6U=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: 2iXQJGayZE0Rj0oEcUmM818ccOhUNSEBpq9p2VSL50g=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:21:b0:c8:43:b7:9a:c6:0e:19:36:e3:c7:5c:f7:fd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Sep 7 01:00:57 2025 GMT Not After : Sep 8 01:00:57 2025 GMT Subject: CN=374c7045d440749d12b26c17d936ed87a1d587e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:e8:80:d0:73:4d:fc:52:7b:4f:23:28:20: 2f:9a:d1:24:8e:8a:63:8c:50:92:15:00:9e:e5:43: 43:b6:b5:4b:41:76:21:62:5c:c8:5f:1f:cc:72:e4: 70:a0:17:8f:b5:ab:9d:78:99:a3:c8:85:42:3b:88: d0:77:7c:09:7d:aa:56:64:a9:4d:70:3d:b4:7c:49: f3:ec:df:ca:e0:37:36:83:68:12:1b:2d:c5:9a:30: 31:e2:26:81:a5:8b:4e:f0:c5:10:69:3a:06:bf:56: d6:de:c5:ab:b8:1c:a7:72:e0:08:28:8e:54:6c:a9: 80:df:d4:68:1f:ae:21:2c:f3:80:37:4f:98:52:ca: 40:54:4c:1e:24:ce:91:83:bb:bf:0e:85:30:80:49: 0d:e3:70:24:82:a6:e6:42:67:8f:e5:47:75:4a:97: 59:58:33:82:6a:43:cf:9d:68:98:c9:11:cb:0b:96: 0c:81:59:5f:55:fe:5a:ad:13:68:75:b2:7c:3d:73: a7:d5:4f:45:6a:c9:2c:a6:db:4e:75:da:49:c6:0c: 37:46:8a:48:3c:84:33:30:45:1c:1d:33:5f:1e:05: 3e:67:a3:4c:06:d5:35:c6:cb:bd:9d:1f:8f:36:5c: 87:0e:5a:30:18:92:70:5d:aa:4b:35:48:04:53:06: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:70:45:D4:40:74:9D:12:B2:6C:17:D9:36:ED:87:A1:D5:87:E3 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:69:04:86:63:ab:fa:be:90:bb:18:ad:11:12:ff:db:d3:77: 41:ad:06:77:fc:6a:c4:3f:8c:0d:d9:9a:b5:14:24:5d:08:ca: 9a:46:7d:3a:9e:59:49:ed:45:a3:ba:94:62:bb:57:72:b9:7a: 39:37:fd:39:d6:a4:67:6b:d9:f0:ad:5e:f6:e0:4b:32:f5:72: 27:92:18:87:24:17:68:dc:98:ac:ee:70:62:46:f8:1e:7e:11: 19:b3:04:41:30:b3:25:96:b0:ad:31:8f:85:f0:c0:52:a5:ad: b9:6c:2a:f4:b0:54:f5:dc:09:5a:97:be:8e:f2:aa:ca:2d:11: 9c:ff:49:15:7b:dc:b8:da:2d:39:29:bc:7c:4e:3c:ca:7b:05: 35:c9:d6:62:2e:3e:18:63:8c:4f:0c:e7:80:69:97:f4:7b:96: a9:8d:06:c8:87:cb:4d:3c:12:0a:8e:f8:a0:6d:c6:14:4a:70: 49:0a:6e:78:4a:c1:7e:55:1f:1f:a3:98:37:25:8b:87:61:0d: 60:45:00:64:9e:6a:28:00:f5:bb:01:b4:0d:a2:89:ff:8c:e4: c6:9e:9e:ac:4c:e8:77:92:2a:f4:64:d1:d9:75:ab:f5:04:aa: 24:e8:a5:3d:4b:7a:90:97:4a:8c:33:71:cd:5c:79:38:25:ae: 99:e6:8a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkhsMhDt5rGDhk248dc9/2PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwOTA3MDEwMDU3WhcNMjUwOTA4MDEwMDU3WjAzMTEwLwYDVQQD EygzNzRjNzA0NWQ0NDA3NDlkMTJiMjZjMTdkOTM2ZWQ4N2ExZDU4N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3ogNBzTfxSe08jKCAvmtEkjopj jFCSFQCe5UNDtrVLQXYhYlzIXx/McuRwoBePtaudeJmjyIVCO4jQd3wJfapWZKlN cD20fEnz7N/K4Dc2g2gSGy3FmjAx4iaBpYtO8MUQaToGv1bW3sWruByncuAIKI5U bKmA39RoH64hLPOAN0+YUspAVEweJM6Rg7u/DoUwgEkN43AkgqbmQmeP5Ud1SpdZ WDOCakPPnWiYyRHLC5YMgVlfVf5arRNodbJ8PXOn1U9FaskspttOddpJxgw3RopI PIQzMEUcHTNfHgU+Z6NMBtU1xsu9nR+PNlyHDlowGJJwXapLNUgEUwbFHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdMcEXUQHSdErJsF9k27Yeh1YfjMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2kEhmOr +r6QuxitERL/29N3Qa0Gd/xqxD+MDdmatRQkXQjKmkZ9Op5ZSe1Fo7qUYrtXcrl6 OTf9OdakZ2vZ8K1e9uBLMvVyJ5IYhyQXaNyYrO5wYkb4Hn4RGbMEQTCzJZawrTGP hfDAUqWtuWwq9LBU9dwJWpe+jvKqyi0RnP9JFXvcuNotOSm8fE48ynsFNcnWYi4+ GGOMTwzngGmX9HuWqY0GyIfLTTwSCo74oG3GFEpwSQpueErBflUfH6OYNyWLh2EN YEUAZJ5qKAD1uwG0DaKJ/4zkxp6erEzod5Iq9GTR2XWr9QSqJOilPUt6kJdKjDNx zVx5OCWumeaKfw== -----END CERTIFICATE-----Generated at Sun Sep 7 10:08:23 2025 by rpki-client