$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: WsRaoPqHJdhM3Wtt+XGmvHCGhvkBrkn6CyBqp1yWtT8= Subject key identifier: 19:EE:89:FB:FA:20:1C:8E:37:A8:CA:58:A5:9E:0B:71:5B:E6:5E:29 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 0198C835B42B510C98FDDBF980F3C0A73DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 14ED Signing time: Wed 20 Aug 2025 16:00:19 +0000 Manifest this update: Wed 20 Aug 2025 16:00:19 +0000 Manifest next update: Thu 21 Aug 2025 16:00:19 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 5: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 6: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 7: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 8: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 9: krCyhkuDWdtiE8IBk6ZAqu30Qw0.roa (hash: ajTMX25iwhDAaSs7jdJKz1hQnILnvbn3Eu+OgcDLty8=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 12: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: baqK1gYHOqG8n5YL6T6hTxFZuDM500IeDp55eHrOCNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:c8:35:b4:2b:51:0c:98:fd:db:f9:80:f3:c0:a7:3d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Aug 20 16:00:19 2025 GMT Not After : Aug 21 16:00:19 2025 GMT Subject: CN=19ee89fbfa201c8e37a8ca58a59e0b715be65e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c3:2c:2f:23:80:ed:5c:de:46:a6:26:17:03: ca:88:d6:54:a0:55:90:5f:f9:3a:62:0d:43:4f:f2: 60:cd:6f:3c:e0:4c:4d:80:82:7d:57:45:aa:88:6a: 08:02:47:84:f7:b1:16:2d:88:8f:2e:16:80:bc:cd: 96:6f:91:38:21:b6:29:38:24:6e:65:c1:2f:d4:87: f4:33:d5:68:8f:cb:be:01:ed:7e:f7:9a:a4:de:0e: 17:9f:00:39:18:ab:5c:2e:53:55:40:3a:13:10:5a: df:7d:7a:22:62:92:a8:40:37:e2:66:8c:16:48:c7: 89:f4:f7:a9:9f:d9:c3:25:a6:8c:19:a7:6e:0a:cd: 38:b4:79:da:61:cb:cb:49:82:51:37:25:23:b7:e5: 48:14:68:8e:26:99:a9:4d:9c:d5:fb:4e:bf:54:f1: ef:d2:65:91:43:21:c3:3d:39:e9:f5:d1:08:c3:e8: 22:8f:fa:fa:63:a0:7e:2e:a9:e8:06:c8:ab:d1:1d: 75:24:7e:bd:23:50:cc:ea:d6:67:10:52:ce:4c:68: 76:3b:1d:77:13:18:da:d8:07:1c:cd:6a:1d:a3:f3: 52:2e:21:b1:d7:aa:e8:42:f5:61:05:f0:27:54:ad: 87:63:a6:76:9c:17:ca:fb:3d:95:c2:9e:0e:6e:2d: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EE:89:FB:FA:20:1C:8E:37:A8:CA:58:A5:9E:0B:71:5B:E6:5E:29 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:92:ba:b2:dd:28:0d:68:16:49:ab:e5:f6:d2:76:a4:b0:1e: 57:a5:7f:77:15:b1:46:71:33:a5:a4:c5:29:02:81:03:4c:d1: 6f:5c:67:6b:60:2f:63:bb:08:f2:db:b1:75:5b:b4:69:b4:76: 6f:4c:c5:3a:0d:b6:b6:09:44:69:17:06:d8:a8:b4:e3:cb:79: f0:5f:2e:a3:30:6b:bc:7d:ea:5e:e5:6d:80:45:4d:ca:8f:e4: e3:a5:e9:3d:4b:e0:33:55:13:02:05:d9:7a:8b:57:a8:07:eb: 76:29:84:31:b4:84:43:d5:18:6b:7b:18:c8:79:df:81:bf:93: 08:66:cf:8e:2b:7c:f8:cc:a1:b0:e9:eb:72:31:a6:8d:91:73: 95:fe:66:8e:db:a9:8c:d5:23:93:14:8d:29:2e:a7:dc:17:df: b9:15:5e:cc:45:82:ba:b9:19:86:54:26:8f:d3:d7:77:24:ec: c3:8d:46:58:b7:85:d0:89:ce:9a:0d:5d:f8:7c:83:a6:cc:38: 87:6a:8d:fc:bf:a9:e1:c5:d9:4e:63:a6:72:de:05:40:b9:13: 16:fa:e1:a8:ed:01:9d:20:09:c2:96:9b:99:b0:64:e1:46:c4: 0b:10:3c:8e:f8:49:d7:e8:2c:27:46:50:4c:20:3d:d6:46:cb: bb:0b:25:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjINbQrUQyY/dv5gPPApz3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwODIwMTYwMDE5WhcNMjUwODIxMTYwMDE5WjAzMTEwLwYDVQQD EygxOWVlODlmYmZhMjAxYzhlMzdhOGNhNThhNTllMGI3MTViZTY1ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sMsLyOA7VzeRqYmFwPKiNZUoFWQ X/k6Yg1DT/JgzW884ExNgIJ9V0WqiGoIAkeE97EWLYiPLhaAvM2Wb5E4IbYpOCRu ZcEv1If0M9Voj8u+Ae1+95qk3g4XnwA5GKtcLlNVQDoTEFrffXoiYpKoQDfiZowW SMeJ9Pepn9nDJaaMGaduCs04tHnaYcvLSYJRNyUjt+VIFGiOJpmpTZzV+06/VPHv 0mWRQyHDPTnp9dEIw+gij/r6Y6B+LqnoBsir0R11JH69I1DM6tZnEFLOTGh2Ox13 Exja2AcczWodo/NSLiGx16roQvVhBfAnVK2HY6Z2nBfK+z2Vwp4Obi3EoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnuifv6IByON6jKWKWeC3Fb5l4pMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpK6st0o DWgWSavl9tJ2pLAeV6V/dxWxRnEzpaTFKQKBA0zRb1xna2AvY7sI8tuxdVu0abR2 b0zFOg22tglEaRcG2Ki048t58F8uozBrvH3qXuVtgEVNyo/k46XpPUvgM1UTAgXZ eotXqAfrdimEMbSEQ9UYa3sYyHnfgb+TCGbPjit8+MyhsOnrcjGmjZFzlf5mjtup jNUjkxSNKS6n3BffuRVezEWCurkZhlQmj9PXdyTsw41GWLeF0InOmg1d+HyDpsw4 h2qN/L+p4cXZTmOmct4FQLkTFvrhqO0BnSAJwpabmbBk4UbECxA8jvhJ1+gsJ0ZQ TCA91kbLuwslZg== -----END CERTIFICATE-----Generated at Thu Aug 21 00:57:59 2025 by rpki-client