$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: dkJ6jE4zDwusCFvcZ5hCZq8FyAsXP1GgEJoBr28/5V4= Subject key identifier: 71:EB:5A:78:F8:3C:9C:F6:27:45:BE:3B:10:79:8B:59:1F:F3:C9:F8 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 0199269FF79D0748CC8189E898A93F367D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1682 Signing time: Mon 08 Sep 2025 00:00:41 +0000 Manifest this update: Mon 08 Sep 2025 00:00:41 +0000 Manifest next update: Tue 09 Sep 2025 00:00:41 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: qrddzJUkM/4VnCYzxfjDmkhB+Ly04GuwqEhHslPFe/s=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:9f:f7:9d:07:48:cc:81:89:e8:98:a9:3f:36:7d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Sep 8 00:00:41 2025 GMT Not After : Sep 9 00:00:41 2025 GMT Subject: CN=71eb5a78f83c9cf62745be3b10798b591ff3c9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:42:1f:ac:cb:87:bf:e4:e6:84:c1:ce:d4: 30:77:85:3e:ea:74:32:f7:72:9d:55:2d:75:f2:e1: f9:72:4a:03:4a:77:8f:80:0e:4d:2a:4a:1d:89:1c: 35:36:24:0a:1e:8a:9b:27:0a:4e:25:71:d0:9f:d6: 66:8d:6e:4a:6e:ed:fd:74:83:90:40:67:ab:1e:ae: 1c:c0:70:9f:42:61:c1:a6:7c:b9:df:52:a4:13:a9: 81:3f:b4:0e:55:95:bf:d9:a1:39:c5:a0:bf:9b:87: e3:22:39:32:7a:5c:44:05:f0:0c:b0:4d:58:70:7b: 83:60:22:90:55:ea:94:6f:53:40:fd:23:2c:27:46: 54:a2:0d:61:a5:64:7b:3f:a2:a9:ac:c6:74:f8:ae: f3:a7:e4:f9:09:e3:a4:a9:46:c1:53:e3:3e:14:ef: 43:04:2e:15:02:61:62:c0:52:70:3e:53:d2:52:04: a3:4f:a8:8a:67:d6:27:db:4c:e8:4f:7c:4e:b9:00: 90:e4:7c:c8:02:f5:8d:88:5d:07:63:f9:b5:66:64: 68:bd:31:5b:8f:38:f5:29:66:d2:63:5f:c5:fb:17: 38:78:93:41:5e:a1:dd:6e:db:0d:cb:1e:69:00:88: 70:b5:db:89:49:59:e9:d1:3a:87:3d:60:cf:4e:0a: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EB:5A:78:F8:3C:9C:F6:27:45:BE:3B:10:79:8B:59:1F:F3:C9:F8 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bb:ce:f3:40:ec:f7:e4:26:08:ae:b2:90:dc:d4:48:ae:20: 9b:dc:6d:02:f0:13:b7:9a:5b:e8:c8:9e:7a:2e:6e:9e:1e:21: 9c:2a:10:28:de:37:a0:2b:a1:28:7f:74:1f:1a:fc:a9:e4:86: fe:70:2e:6b:1c:dc:b0:18:5b:cf:a5:59:fd:d3:f1:6f:00:55: 4d:e6:ff:e9:fb:14:5e:0c:35:6a:3a:81:ca:87:d9:a0:6a:81: 69:01:95:8d:71:ec:5b:d8:7c:0a:af:26:aa:ee:56:2b:c9:0a: 3c:4c:93:86:bc:41:2e:33:f6:ca:04:dd:0b:66:37:3c:db:99: 0f:19:73:4c:8a:cd:23:4e:29:d1:1b:b7:d4:37:68:0f:bd:84: e5:53:a2:bd:d2:8a:4d:c7:fc:96:a6:d7:45:90:25:7c:ae:4d: 56:b6:b1:5d:b8:b4:87:2b:57:da:b0:94:de:90:04:2d:d1:ae: e6:a6:c9:df:ad:9a:dc:d3:74:70:87:45:16:28:0d:31:5f:c0: 72:c8:e4:80:81:aa:1b:71:13:98:a2:55:50:a1:9a:4c:53:25: 83:7f:d4:5c:3d:93:6f:5b:e2:7f:10:74:13:6e:9b:4a:a0:18: 9c:f2:64:60:d4:28:1c:6e:09:8a:97:13:a3:e6:3e:1e:24:0c: fd:c8:69:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmn/edB0jMgYnomKk/Nn2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwOTA4MDAwMDQxWhcNMjUwOTA5MDAwMDQxWjAzMTEwLwYDVQQD Eyg3MWViNWE3OGY4M2M5Y2Y2Mjc0NWJlM2IxMDc5OGI1OTFmZjNjOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5CH6zLh7/k5oTBztQwd4U+6nQy 93KdVS118uH5ckoDSnePgA5NKkodiRw1NiQKHoqbJwpOJXHQn9ZmjW5Kbu39dIOQ QGerHq4cwHCfQmHBpny531KkE6mBP7QOVZW/2aE5xaC/m4fjIjkyelxEBfAMsE1Y cHuDYCKQVeqUb1NA/SMsJ0ZUog1hpWR7P6KprMZ0+K7zp+T5CeOkqUbBU+M+FO9D BC4VAmFiwFJwPlPSUgSjT6iKZ9Yn20zoT3xOuQCQ5HzIAvWNiF0HY/m1ZmRovTFb jzj1KWbSY1/F+xc4eJNBXqHdbtsNyx5pAIhwtduJSVnp0TqHPWDPTgrXOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHrWnj4PJz2J0W+OxB5i1kf88n4MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobvO80Ds 9+QmCK6ykNzUSK4gm9xtAvATt5pb6Mieei5unh4hnCoQKN43oCuhKH90Hxr8qeSG /nAuaxzcsBhbz6VZ/dPxbwBVTeb/6fsUXgw1ajqByofZoGqBaQGVjXHsW9h8Cq8m qu5WK8kKPEyThrxBLjP2ygTdC2Y3PNuZDxlzTIrNI04p0Ru31DdoD72E5VOivdKK Tcf8lqbXRZAlfK5NVraxXbi0hytX2rCU3pAELdGu5qbJ362a3NN0cIdFFigNMV/A csjkgIGqG3ETmKJVUKGaTFMlg3/UXD2Tb1vifxB0E26bSqAYnPJkYNQoHG4JipcT o+Y+HiQM/chpbA== -----END CERTIFICATE-----Generated at Mon Sep 8 03:20:20 2025 by rpki-client