$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: qpMV6xmBzhHQXL1arWE0ZzOJj1e4c1FQnSid9gH3J9k= Subject key identifier: 72:B1:AC:46:60:9B:9C:73:32:7D:19:64:3E:36:6E:F9:C4:F5:42:91 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 0199228C7DF2E06CE9B2A6D494325CF1AF50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1223 Signing time: Sun 07 Sep 2025 05:00:56 +0000 Manifest this update: Sun 07 Sep 2025 05:00:56 +0000 Manifest next update: Mon 08 Sep 2025 05:00:56 +0000 Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=) 2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=) 3: 1o33mTVp-sLzAkicxLikSA75wg4.roa (hash: ed6GlmsVsZfCNGu9N0GdJBDRnv8UTZkZYrtU19ndjKI=) 4: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=) 5: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=) 6: CI51H2fHvf9O5PRdQks01a3u510.roa (hash: WxRq8BNJredn3oBSIG06V75hKGowCex4s9btYuU89jo=) 7: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=) 8: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=) 9: YqK1nXW8w2q_X2z3lSICRsWfjFw.roa (hash: l725tDRDqMSX597l+gr9+lU8fQNlGlVTOUy4mlZEjNw=) 10: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=) 11: eDLnlibMvqHABUnf0cTnTXfzjsQ.roa (hash: 23lsZWpFbgTvvmDoDor5ePX92IS7k3nIwuBhFjzfmm4=) 12: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: MD1f7jHEzsmQdon/HnECOOWO5gPsN3QtGzrOvIZT7Wk=) 13: yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa (hash: Cx12upzLFR9R49twlwP6YThfGCdOHNc6BXhnNgg550Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:8c:7d:f2:e0:6c:e9:b2:a6:d4:94:32:5c:f1:af:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Sep 7 05:00:56 2025 GMT Not After : Sep 8 05:00:56 2025 GMT Subject: CN=72b1ac46609b9c73327d19643e366ef9c4f54291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:f3:c8:54:04:db:93:fc:84:de:23:c3:98: 8c:9a:d6:9f:b5:bf:4f:13:4c:54:2e:7b:80:87:84: f9:db:77:34:e4:6a:63:27:85:1f:56:2f:80:8e:ec: 1c:74:de:51:54:d2:ba:6b:2f:44:0a:c2:06:c4:6d: 0c:ca:e4:18:87:5e:5c:48:63:af:fa:cc:1c:e2:d1: 19:6f:25:bf:35:ec:45:3f:42:a6:46:01:cf:e7:f0: 07:98:07:08:ca:6d:77:4f:3f:47:ce:ac:9e:71:0f: ed:5d:0d:f9:72:1c:89:97:4d:00:04:a0:03:e8:98: 80:32:d3:9c:a1:80:c8:34:49:83:98:ab:96:0c:09: bc:dc:29:bc:d3:58:88:e0:47:3a:1b:93:6d:f8:4f: 55:41:2f:2e:b1:a8:dd:85:9d:62:05:b1:0b:77:79: 06:0c:cd:5d:4d:e8:dc:86:cc:49:3a:45:69:f5:ed: d0:d5:4e:7c:15:39:f6:85:bd:f6:bc:d6:f0:6b:93: fa:ba:33:d4:7e:63:9c:0e:21:71:e9:5a:df:10:bd: 97:7b:5e:45:43:90:6c:84:ad:75:95:8e:62:31:e0: 7a:ab:ea:6b:b7:a1:8a:dd:ce:08:0f:48:ff:6e:44: dc:58:4f:cf:db:d7:97:0e:77:4e:cd:2a:0c:1b:a3: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:AC:46:60:9B:9C:73:32:7D:19:64:3E:36:6E:F9:C4:F5:42:91 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:37:c7:62:bd:41:c6:10:6b:1a:84:ab:44:ac:5a:09:ac:42: 02:1c:d3:f2:81:2a:72:4b:af:b3:37:b0:9c:f9:9f:80:ce:a8: b2:04:cb:02:42:b5:3a:cd:1f:15:75:ef:34:3c:10:e9:ff:cb: 2e:d7:be:10:0b:01:86:8d:0b:c4:20:bc:a1:e5:e2:f7:43:91: 2e:85:d3:05:82:9b:cf:0d:f9:b0:9e:9c:5a:02:67:c6:b8:de: f2:af:b0:52:6d:46:bf:76:ae:df:00:eb:6d:d8:86:97:c7:b3: c6:95:8a:c1:1b:e4:0a:11:04:e4:0f:21:2c:4c:7c:25:33:03: 50:be:18:87:55:a5:1f:81:35:f9:dc:66:08:07:81:9b:08:e5: 46:9a:5c:6b:0a:a3:e8:c3:93:10:bf:49:7f:c9:1d:0d:e6:aa: 03:64:90:e3:7e:cc:df:c3:b8:ec:40:31:ab:04:f9:95:42:cb: 1a:b0:f6:d5:2d:78:c1:8e:65:5e:e6:94:3a:dd:c1:74:19:ce: ab:c6:b7:f0:5c:c0:21:14:50:a7:7a:ff:d4:1a:e2:f4:7a:dc: 47:ea:36:c1:b0:b1:97:15:81:ec:cf:10:61:7e:c7:57:e2:fb: 33:cf:d2:7e:a4:3a:4f:09:c9:e3:cc:45:47:cf:c4:11:8c:9d: f8:ea:ce:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkijH3y4GzpsqbUlDJc8a9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUwOTA3MDUwMDU2WhcNMjUwOTA4MDUwMDU2WjAzMTEwLwYDVQQD Eyg3MmIxYWM0NjYwOWI5YzczMzI3ZDE5NjQzZTM2NmVmOWM0ZjU0MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtofzyFQE25P8hN4jw5iMmtaftb9P E0xULnuAh4T523c05GpjJ4UfVi+AjuwcdN5RVNK6ay9ECsIGxG0MyuQYh15cSGOv +swc4tEZbyW/NexFP0KmRgHP5/AHmAcIym13Tz9HzqyecQ/tXQ35chyJl00ABKAD 6JiAMtOcoYDINEmDmKuWDAm83Cm801iI4Ec6G5Nt+E9VQS8usajdhZ1iBbELd3kG DM1dTejchsxJOkVp9e3Q1U58FTn2hb32vNbwa5P6ujPUfmOcDiFx6VrfEL2Xe15F Q5BshK11lY5iMeB6q+prt6GK3c4ID0j/bkTcWE/P29eXDndOzSoMG6OUuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKxrEZgm5xzMn0ZZD42bvnE9UKRMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzfHYr1B xhBrGoSrRKxaCaxCAhzT8oEqckuvszewnPmfgM6osgTLAkK1Os0fFXXvNDwQ6f/L Lte+EAsBho0LxCC8oeXi90ORLoXTBYKbzw35sJ6cWgJnxrje8q+wUm1Gv3au3wDr bdiGl8ezxpWKwRvkChEE5A8hLEx8JTMDUL4Yh1WlH4E1+dxmCAeBmwjlRppcawqj 6MOTEL9Jf8kdDeaqA2SQ437M38O47EAxqwT5lULLGrD21S14wY5lXuaUOt3BdBnO q8a38FzAIRRQp3r/1Bri9HrcR+o2wbCxlxWB7M8QYX7HV+L7M8/SfqQ6TwnJ48xF R8/EEYyd+OrO2Q== -----END CERTIFICATE-----Generated at Sun Sep 7 11:21:29 2025 by rpki-client