$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: YUB7dqG8N9D+Zox6zh9LMHJFWXY/yCCHy1oi9Fh72Mo= Subject key identifier: 71:F6:59:25:BB:33:66:22:C1:4B:E7:66:81:C1:11:F9:B9:2D:C1:21 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019A0B5E04D39481188F9E03DCF18AC5D829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 1654 Signing time: Wed 22 Oct 2025 10:01:42 +0000 Manifest this update: Wed 22 Oct 2025 10:01:42 +0000 Manifest next update: Thu 23 Oct 2025 10:01:42 +0000 Files and hashes: 1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=) 2: AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa (hash: Cwl60Pf8FeqjdxXJ5cDfKK3o0IpaaLfb9WkIIUUlizI=) 3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=) 4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=) 5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=) 6: KQWIvRkUPfDI9UbToA1ZOCt6wGw.roa (hash: ReALyg40wpRA61FQrWQgXjMRadBzLsNR095IRjmcuPY=) 7: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: ALWFXlixK/FlaA55M2Qd4CcXCUfinGD9BLaKDSD3Gb4=) 8: WVXExIOsUuzD4I3TzgSlOau0QaQ.roa (hash: pTI7uh69ubYgLlvdqCFzeXWGgfLVV4/U16+Sy+TrVp4=) 9: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=) 10: eCrToYnvWc95HF4c8-Z46Ax87po.roa (hash: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=) 11: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:5e:04:d3:94:81:18:8f:9e:03:dc:f1:8a:c5:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Oct 22 10:01:42 2025 GMT Not After : Oct 23 10:01:42 2025 GMT Subject: CN=71f65925bb336622c14be76681c111f9b92dc121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:97:8b:dd:4b:68:44:20:0c:55:5d:41:2b: 66:9b:19:10:48:01:dc:86:f6:37:f0:f7:88:94:f0: ad:4c:bd:2b:1b:3c:36:6f:ed:69:ac:44:ca:fa:00: f3:99:d2:4a:71:38:f3:02:61:a5:33:bb:8e:df:f2: 9e:37:dc:89:0d:96:3f:64:80:61:1b:c7:15:ba:b4: 9a:23:2d:a4:c8:2d:a2:d8:3f:f7:3e:dd:da:3d:a2: d8:70:ae:17:ff:88:ff:c2:dd:4e:b6:72:66:77:5c: d5:ae:b9:ed:17:1a:e1:a5:fe:72:04:90:68:29:6f: 8e:7b:d6:a7:f7:91:04:40:d3:5d:c6:0f:b1:55:87: ab:15:8d:53:05:b4:b4:16:f5:18:94:33:83:f7:85: d8:db:f7:c3:f4:76:f2:1e:87:fb:0f:bf:ca:9d:59: c9:80:f1:39:3e:bc:3a:48:6e:a7:26:3d:85:1f:46: 51:95:ca:f3:10:f6:84:7c:94:dc:2f:0a:ef:b0:91: 78:4a:70:a5:ba:7d:c3:e7:a1:05:42:95:7d:65:41: 0c:35:9b:10:69:e0:ff:de:bc:a2:da:81:78:b5:f8: fa:55:15:8c:2a:93:24:f6:b7:24:99:e6:42:67:57: f9:41:8c:eb:53:de:23:fb:92:54:f8:a8:36:3f:f3: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F6:59:25:BB:33:66:22:C1:4B:E7:66:81:C1:11:F9:B9:2D:C1:21 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:4b:57:6b:1f:c1:3e:ad:a8:98:51:db:66:86:cf:c2:22: be:f9:4b:a1:b1:16:86:3e:64:a5:1a:8a:4e:5f:2a:6d:8a:eb: 88:bb:a1:38:ea:e0:45:04:46:e0:50:d6:1a:55:1f:da:a5:5e: 13:57:f2:cb:3d:48:76:d7:a5:b1:5e:85:80:57:ea:64:29:46: 4d:b0:81:be:b8:fa:2c:b7:92:cd:14:7d:7e:30:7f:73:e0:79: 7b:30:04:a9:e6:74:66:33:99:aa:d2:38:8f:33:3f:07:3e:6c: 56:fb:06:a7:5a:1b:c6:f6:14:78:5b:fd:ac:33:0c:0d:80:b5: 20:6c:1f:93:3e:cb:97:07:cb:fb:61:c7:9c:83:48:9f:2f:7d: 87:9d:61:13:a0:61:84:a6:1f:61:1e:c1:d0:f4:b4:a0:4b:60: f5:6d:ba:5a:c4:f7:af:1f:2d:3d:96:47:ab:78:c0:35:e1:d8: 08:6e:fe:07:97:1c:d0:d3:dc:a7:36:4f:3e:7b:c8:7a:9b:08: 1c:c6:2f:ad:b3:09:06:8b:76:70:0e:62:d6:bf:97:59:76:d6: a2:50:c9:9f:45:c4:42:57:96:87:ad:95:32:f2:45:ba:4d:b3: 7b:cb:a0:6d:3a:1b:46:9a:dc:92:a1:99:af:7a:3c:b8:c5:a1: 4a:ca:e3:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLXgTTlIEYj54D3PGKxdgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjUxMDIyMTAwMTQyWhcNMjUxMDIzMTAwMTQyWjAzMTEwLwYDVQQD Eyg3MWY2NTkyNWJiMzM2NjIyYzE0YmU3NjY4MWMxMTFmOWI5MmRjMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMqXi91LaEQgDFVdQStmmxkQSAHc hvY38PeIlPCtTL0rGzw2b+1prETK+gDzmdJKcTjzAmGlM7uO3/KeN9yJDZY/ZIBh G8cVurSaIy2kyC2i2D/3Pt3aPaLYcK4X/4j/wt1OtnJmd1zVrrntFxrhpf5yBJBo KW+Oe9an95EEQNNdxg+xVYerFY1TBbS0FvUYlDOD94XY2/fD9HbyHof7D7/KnVnJ gPE5Prw6SG6nJj2FH0ZRlcrzEPaEfJTcLwrvsJF4SnClun3D56EFQpV9ZUEMNZsQ aeD/3ryi2oF4tfj6VRWMKpMk9rckmeZCZ1f5QYzrU94j+5JU+Kg2P/OLNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH2WSW7M2YiwUvnZoHBEfm5LcEhMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANF5LV2sf wT6tqJhR22aGz8IivvlLobEWhj5kpRqKTl8qbYrriLuhOOrgRQRG4FDWGlUf2qVe E1fyyz1IdtelsV6FgFfqZClGTbCBvrj6LLeSzRR9fjB/c+B5ezAEqeZ0ZjOZqtI4 jzM/Bz5sVvsGp1obxvYUeFv9rDMMDYC1IGwfkz7LlwfL+2HHnINIny99h51hE6Bh hKYfYR7B0PS0oEtg9W26WsT3rx8tPZZHq3jANeHYCG7+B5cc0NPcpzZPPnvIepsI HMYvrbMJBot2cA5i1r+XWXbWolDJn0XEQleWh62VMvJFuk2ze8ugbTobRprckqGZ r3o8uMWhSsrjZQ== -----END CERTIFICATE-----Generated at Wed Oct 22 17:44:14 2025 by rpki-client