$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: j6+pz8I1OYruP+PyrlQJx8Jo2i76YyePugcTuMMBARw= Subject key identifier: 74:DE:F4:58:2E:E2:AF:E2:4C:D8:5D:B5:37:C1:9D:44:BE:07:92:B1 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 0199E82CE625C9880D003E4CC69EFF9B3AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 17B7 Signing time: Wed 15 Oct 2025 14:01:20 +0000 Manifest this update: Wed 15 Oct 2025 14:01:20 +0000 Manifest next update: Thu 16 Oct 2025 14:01:20 +0000 Files and hashes: 1: 1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa (hash: 6l4N9QRRCNsTigbsBNhTvCtVipnXhrnl+qFxr2bq3fo=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 5: Kruvgpwuqm6sINlu2g0UdxGTt40.roa (hash: B1Hb3yrdIOl2N6zpO7c45xw8rxyA6hHtaoJIQXik8Xg=) 6: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=) 7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: ZRE24V8KJ4rLnna0BCGdT5THmobK7jK1qOziHO4ZKKc=) 9: dZ61aXpp_DQ_DeLVDYFP6BdIHXQ.roa (hash: sBhkEWCuGRljaolRSEsc1RfhJZuAvgHQSHKRaUnk170=) 10: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Oct 2025 13:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:e8:2c:e6:25:c9:88:0d:00:3e:4c:c6:9e:ff:9b:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Oct 15 14:01:20 2025 GMT Not After : Oct 16 14:01:20 2025 GMT Subject: CN=74def4582ee2afe24cd85db537c19d44be0792b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:22:20:9d:ff:96:e9:4b:57:2f:68:b5:f3: b2:05:ef:ce:c1:02:52:0c:06:f5:18:5c:59:27:ab: 20:b2:b3:00:f5:9c:bb:1c:21:1d:62:77:f5:d9:2a: 86:1c:a2:56:72:4a:61:92:c7:e4:ab:c6:08:28:97: 04:57:ca:54:35:eb:83:0b:98:7f:fd:b0:d7:24:b9: 70:6f:fb:02:d1:55:d1:5b:86:0b:3a:fa:ba:da:3d: e8:c1:3a:58:37:cc:76:c6:52:d9:04:22:e8:fd:f3: 32:7a:b1:d4:18:8f:71:0f:b3:eb:47:bd:38:3f:73: 05:f7:8b:7f:48:80:ea:c9:ad:23:a4:ec:39:c9:e9: 02:2b:1c:42:5a:0d:43:f9:9c:3d:d2:82:68:ef:4d: 23:d7:16:57:11:e5:50:b8:60:2a:70:a4:56:7a:14: 94:3c:7f:76:17:6c:39:b0:3b:71:cb:0d:d9:8e:bd: a3:d5:e9:18:cf:20:00:c7:18:bd:ad:0b:05:e3:4d: 37:4c:e7:51:84:a7:4d:8d:35:8e:44:e4:a2:20:ce: 0c:fe:9d:40:83:ec:a3:3f:1c:8c:a6:48:72:15:fb: a2:c5:d5:de:1c:19:a3:5b:28:20:e9:aa:f2:76:15: 3f:0b:33:dc:62:6d:fb:ad:e4:0a:bd:52:26:71:a6: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DE:F4:58:2E:E2:AF:E2:4C:D8:5D:B5:37:C1:9D:44:BE:07:92:B1 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ba:6e:bb:2d:16:14:e8:26:a6:22:33:ce:19:60:91:98:0d: 1a:9b:3c:2d:4a:a7:1e:53:57:45:37:f1:57:a0:ad:08:89:8b: 9c:a1:97:4f:47:3d:24:1f:46:15:79:25:77:07:8a:b4:17:e3: d8:44:f9:8a:50:18:d9:30:00:7f:24:89:fb:d8:8f:78:93:9b: ce:de:11:8b:9c:93:74:d5:7c:1d:2c:b8:6e:5a:47:1a:a6:14: 99:bb:cc:e6:01:86:9a:03:17:1b:a1:dd:46:2f:eb:ab:c3:f6: 42:ff:da:15:e2:29:3b:e9:30:5b:cf:65:72:76:c6:4a:b6:8a: a5:43:eb:37:c1:be:04:42:20:97:86:8f:8a:a6:5f:dd:ef:c6: 23:31:b6:89:46:e5:2d:36:c7:0a:9f:ea:1b:8b:f3:71:84:40: fd:17:c7:db:7b:56:0b:6c:e9:b3:79:76:61:43:1a:7b:88:58: 92:04:c7:88:56:9c:23:ab:bb:c4:51:82:01:6a:9f:38:f6:4f: fd:a6:c0:60:14:d6:20:57:cb:11:2e:9d:27:8d:6d:79:6a:d8: 81:2f:8c:79:8f:7c:57:78:7a:2c:42:e2:23:7a:96:22:fd:0e: 2a:27:25:6c:ec:ec:ee:c9:3c:9f:ca:00:81:64:a0:89:21:b4: df:53:0f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnoLOYlyYgNAD5Mxp7/mzqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUxMDE1MTQwMTIwWhcNMjUxMDE2MTQwMTIwWjAzMTEwLwYDVQQD Eyg3NGRlZjQ1ODJlZTJhZmUyNGNkODVkYjUzN2MxOWQ0NGJlMDc5MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3QiIJ3/lulLVy9otfOyBe/OwQJS DAb1GFxZJ6sgsrMA9Zy7HCEdYnf12SqGHKJWckphksfkq8YIKJcEV8pUNeuDC5h/ /bDXJLlwb/sC0VXRW4YLOvq62j3owTpYN8x2xlLZBCLo/fMyerHUGI9xD7PrR704 P3MF94t/SIDqya0jpOw5yekCKxxCWg1D+Zw90oJo700j1xZXEeVQuGAqcKRWehSU PH92F2w5sDtxyw3Zjr2j1ekYzyAAxxi9rQsF4003TOdRhKdNjTWOROSiIM4M/p1A g+yjPxyMpkhyFfuixdXeHBmjWygg6arydhU/CzPcYm37reQKvVImcabIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTe9Fgu4q/iTNhdtTfBnUS+B5KxMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrpuuy0W FOgmpiIzzhlgkZgNGps8LUqnHlNXRTfxV6CtCImLnKGXT0c9JB9GFXkldweKtBfj 2ET5ilAY2TAAfySJ+9iPeJObzt4Ri5yTdNV8HSy4blpHGqYUmbvM5gGGmgMXG6Hd Ri/rq8P2Qv/aFeIpO+kwW89lcnbGSraKpUPrN8G+BEIgl4aPiqZf3e/GIzG2iUbl LTbHCp/qG4vzcYRA/RfH23tWC2zps3l2YUMae4hYkgTHiFacI6u7xFGCAWqfOPZP /abAYBTWIFfLES6dJ41teWrYgS+MeY98V3h6LELiI3qWIv0OKiclbOzs7sk8n8oA gWSgiSG031MP+A== -----END CERTIFICATE-----Generated at Wed Oct 15 22:20:41 2025 by rpki-client