$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: z4Ii2OoJ09fjdj4K48lsKgscz8cF2xoKv/xn4cd/Qj8= Subject key identifier: 3E:7B:49:AE:09:45:BF:22:5F:F3:45:7C:B5:76:2C:93:20:6C:D6:E0 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 0199559DC1E70E4711574BC55904F6A65656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 1538 Signing time: Wed 17 Sep 2025 03:00:25 +0000 Manifest this update: Wed 17 Sep 2025 03:00:25 +0000 Manifest next update: Thu 18 Sep 2025 03:00:25 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 5: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 6: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 7: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 8: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 9: gsXwWJXn4nszR0ry0WOAXCMle_c.roa (hash: rOLHDYUDMzDuZCX9Fzj6v1SRSRSz4vHrq8T3oqOy4bI=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: pgNfMkpp3i69CoBAR_borZj9z3E.roa (hash: zObb1YXEsof5rty353AjV2YuXW0tkbylm0QLsUYgMRY=) 12: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 13: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: EmDEJfCzO/c4m5t9iM/P2vK1LemwSZQ44yvGoVb/03U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:55:9d:c1:e7:0e:47:11:57:4b:c5:59:04:f6:a6:56:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Sep 17 03:00:25 2025 GMT Not After : Sep 18 03:00:25 2025 GMT Subject: CN=3e7b49ae0945bf225ff3457cb5762c93206cd6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:94:19:54:b4:7d:3b:99:bb:ff:62:cf:28: 98:66:cc:5e:08:99:5e:a5:7b:91:35:1a:31:1d:02: 57:23:fc:d4:3e:c0:e2:7c:35:fa:9b:10:2e:6c:b0: 44:3c:be:b9:b7:50:f5:97:92:00:9c:3a:1e:1b:2d: 04:8b:e0:4f:a0:32:a9:f8:e0:4b:00:5c:76:f1:34: 26:08:c3:34:83:f5:c9:99:17:f3:62:18:32:0a:ac: dc:6b:39:00:35:f6:12:ce:82:06:cd:f6:25:a7:df: e2:ad:97:15:b3:e5:e8:7f:b7:23:61:71:af:a5:8f: 49:09:b2:c5:00:95:11:41:a6:50:e2:33:2f:8d:1b: 26:ad:76:b7:e9:04:b2:58:da:af:9b:48:37:e5:e3: f5:d0:22:f4:f3:a7:be:31:d9:63:79:ed:c8:d5:df: 2c:0d:eb:63:fc:32:e1:19:f1:26:57:e3:bf:3a:da: 17:4b:fc:31:9e:e4:fa:11:ad:9a:af:60:fe:b0:8b: 07:a6:1a:c3:ff:e1:3b:bc:ab:2e:5b:6e:c1:71:74: 88:48:70:dc:07:c4:9e:48:fc:cd:36:4e:21:d5:33: c5:23:d9:7e:ad:58:7f:ca:ca:80:a3:6d:e8:0b:43: b0:92:ba:a9:dd:ea:4e:f4:fc:8e:db:37:ac:a8:c3: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7B:49:AE:09:45:BF:22:5F:F3:45:7C:B5:76:2C:93:20:6C:D6:E0 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:10:43:f4:77:15:96:aa:9d:19:b2:39:e9:ac:db:0c:e8:79: c5:bb:af:a2:9c:42:54:8d:ca:b2:e6:99:c0:37:65:c2:0b:9f: 57:95:a6:cb:37:21:13:69:87:dc:ee:da:d1:f7:4d:9c:de:b2: 05:71:ca:09:85:b9:7f:72:20:1f:b2:ce:2f:b9:58:af:f7:fd: f2:7d:4f:14:2b:61:fb:b8:b8:2d:ad:5a:a0:d9:48:7b:60:98: 68:ad:8c:ec:d6:40:15:ee:1a:55:d5:4f:7f:f3:ce:67:c5:1b: 9b:4d:98:a7:28:19:51:5a:08:df:ff:16:77:a4:ff:44:e0:36: 4d:51:26:4b:dc:89:80:b7:d1:e0:e9:11:50:33:e9:a0:93:4c: 4d:de:5a:5d:7e:86:ed:41:3c:91:53:24:bf:1d:4a:3a:eb:dd: 12:b3:c9:27:9e:05:1c:61:33:77:2f:ea:44:d3:11:62:66:fc: 3d:0e:a8:07:d8:b8:33:13:c5:a8:6b:d7:7d:d6:e9:f6:28:0f: 48:18:bb:f8:bf:39:be:ca:73:4f:95:8c:d7:96:c2:6a:16:07: e7:67:43:e3:8e:8a:e2:71:1f:1f:27:36:7e:98:31:fc:a5:6e: e8:ca:95:64:b0:59:86:ac:fa:94:f4:2a:96:c5:60:f4:e1:aa: 06:83:bb:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlVncHnDkcRV0vFWQT2plZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwOTE3MDMwMDI1WhcNMjUwOTE4MDMwMDI1WjAzMTEwLwYDVQQD EygzZTdiNDlhZTA5NDViZjIyNWZmMzQ1N2NiNTc2MmM5MzIwNmNkNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuuUGVS0fTuZu/9izyiYZsxeCJle pXuRNRoxHQJXI/zUPsDifDX6mxAubLBEPL65t1D1l5IAnDoeGy0Ei+BPoDKp+OBL AFx28TQmCMM0g/XJmRfzYhgyCqzcazkANfYSzoIGzfYlp9/irZcVs+Xof7cjYXGv pY9JCbLFAJURQaZQ4jMvjRsmrXa36QSyWNqvm0g35eP10CL086e+Mdljee3I1d8s Detj/DLhGfEmV+O/OtoXS/wxnuT6Ea2ar2D+sIsHphrD/+E7vKsuW27BcXSISHDc B8SeSPzNNk4h1TPFI9l+rVh/ysqAo23oC0Owkrqp3epO9PyO2zesqMMmVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD57Sa4JRb8iX/NFfLV2LJMgbNbgMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhBD9HcV lqqdGbI56azbDOh5xbuvopxCVI3KsuaZwDdlwgufV5WmyzchE2mH3O7a0fdNnN6y BXHKCYW5f3IgH7LOL7lYr/f98n1PFCth+7i4La1aoNlIe2CYaK2M7NZAFe4aVdVP f/POZ8Ubm02YpygZUVoI3/8Wd6T/ROA2TVEmS9yJgLfR4OkRUDPpoJNMTd5aXX6G 7UE8kVMkvx1KOuvdErPJJ54FHGEzdy/qRNMRYmb8PQ6oB9i4MxPFqGvXfdbp9igP SBi7+L85vspzT5WM15bCahYH52dD446K4nEfHyc2fpgx/KVu6MqVZLBZhqz6lPQq lsVg9OGqBoO7OQ== -----END CERTIFICATE-----Generated at Wed Sep 17 07:42:14 2025 by rpki-client