$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: 4gbzfvJ6RxlPp3wRpwFFnI3DrfNoVl2bdWhb5Kho3Xo= Subject key identifier: 2F:36:95:E3:21:BB:E3:F1:B7:11:00:90:4D:8E:95:90:B8:FC:D6:53 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 0197DA765607C267DA4FDE4C3FCA5A75E5B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 1471 Signing time: Sat 05 Jul 2025 12:01:17 +0000 Manifest this update: Sat 05 Jul 2025 12:01:17 +0000 Manifest next update: Sun 06 Jul 2025 12:01:17 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 5: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 6: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 7: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 8: aUzUhN8Q7RthalhUZZDbjpEa0AA.roa (hash: LGTvdIkj608VOUyeY9HRXg9nHFFGAUXFR3Udu7RvcE0=) 9: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 12: u-ZfXBL7J0qikFzkHb6Ug8nnyLA.roa (hash: d9T9WTvbVY7qpPPZwJTBZg5EbNeR+hsaClgLb5vTqC8=) 13: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: PW9AVb89TFBKyujjCIIrwv7HF3lMu5MrBn7l2rHSJIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:da:76:56:07:c2:67:da:4f:de:4c:3f:ca:5a:75:e5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Jul 5 12:01:17 2025 GMT Not After : Jul 6 12:01:17 2025 GMT Subject: CN=2f3695e321bbe3f1b71100904d8e9590b8fcd653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:23:68:61:0e:09:3e:8f:d8:09:fe:2f:1a: 9a:50:a4:8c:0c:27:da:36:b3:03:d6:19:66:9b:9f: c1:01:52:7c:1a:12:25:74:74:ee:55:23:69:3d:7f: 2a:0d:ec:16:af:e1:9e:01:3f:ca:02:28:1c:e5:32: a7:52:07:80:b8:7b:66:2b:9c:6d:10:80:5f:e5:d6: 33:61:47:af:93:d0:66:cd:a6:ab:94:01:21:5d:7e: b1:2b:62:e0:f5:ca:ef:f2:b5:71:f3:7e:22:51:ec: 37:4f:1f:76:23:a7:75:0b:85:ec:97:aa:b1:9d:43: 18:0c:2e:8f:f9:93:34:ff:70:81:05:ac:da:a8:86: dd:dd:1b:2f:98:38:5c:fd:b2:3a:60:e8:79:b8:a6: fc:50:a1:53:6e:75:18:30:52:dc:ef:6a:61:e5:3a: 37:0f:b2:1d:36:32:ba:77:55:5c:ce:10:b2:09:24: a6:9d:b3:13:e8:19:be:3a:f9:b0:f4:a8:75:15:0d: 25:6c:e9:52:11:36:51:18:96:c5:65:44:d0:c3:b0: fb:f3:3c:ac:39:45:30:27:a0:a9:69:a0:9a:1e:03: 61:2d:9e:38:a3:00:be:d4:68:3c:07:35:30:06:1f: 04:c6:73:ff:22:3f:09:72:4f:24:c7:76:a6:61:76: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:95:E3:21:BB:E3:F1:B7:11:00:90:4D:8E:95:90:B8:FC:D6:53 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0d:a4:9e:45:48:50:4f:12:87:63:9d:7d:f0:da:a3:61:32: 14:78:65:53:42:c7:38:50:76:be:27:db:84:3f:19:f3:c8:53: aa:7b:71:c5:96:d5:1f:15:89:f9:4a:44:3e:bf:09:77:b6:e8: 8e:0c:ba:de:89:21:ab:3f:33:6a:02:51:e7:a8:f8:2d:2e:26: 3f:a9:77:e4:54:57:59:53:2c:58:cd:8e:bd:02:79:13:e6:a6: 19:a8:3f:36:65:3b:e6:ff:6d:d0:0a:d1:02:f5:b3:99:b0:dd: 67:89:29:4e:69:2e:19:a6:79:2d:e4:2e:84:9d:8f:fd:dc:0a: 10:8c:a2:4b:14:4e:2f:32:64:04:09:0e:9d:8d:a9:81:b2:c4: 98:f5:12:b2:67:10:44:db:0d:31:07:31:04:43:2e:06:5e:14: 3f:02:12:cc:73:a4:06:a9:30:4c:38:bb:44:44:d1:9e:6c:7f: 64:8a:1c:25:c9:cb:97:1f:a3:24:3a:ca:8d:0d:03:ec:df:93: e2:73:79:cc:c1:9b:c5:02:27:8b:a6:5c:5b:77:2b:bd:32:a6: 95:2e:8e:26:b9:fb:af:4d:44:be:7c:ca:14:76:36:7b:a0:d0: 5c:5e:2c:21:38:b2:10:cb:a5:34:e3:49:97:0e:a8:91:b9:7f: 6b:51:45:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfadlYHwmfaT95MP8padeWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwNzA1MTIwMTE3WhcNMjUwNzA2MTIwMTE3WjAzMTEwLwYDVQQD EygyZjM2OTVlMzIxYmJlM2YxYjcxMTAwOTA0ZDhlOTU5MGI4ZmNkNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQjaGEOCT6P2An+LxqaUKSMDCfa NrMD1hlmm5/BAVJ8GhIldHTuVSNpPX8qDewWr+GeAT/KAigc5TKnUgeAuHtmK5xt EIBf5dYzYUevk9BmzaarlAEhXX6xK2Lg9crv8rVx834iUew3Tx92I6d1C4Xsl6qx nUMYDC6P+ZM0/3CBBazaqIbd3RsvmDhc/bI6YOh5uKb8UKFTbnUYMFLc72ph5To3 D7IdNjK6d1VczhCyCSSmnbMT6Bm+Ovmw9Kh1FQ0lbOlSETZRGJbFZUTQw7D78zys OUUwJ6CpaaCaHgNhLZ44owC+1Gg8BzUwBh8ExnP/Ij8Jck8kx3amYXbW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC82leMhu+PxtxEAkE2OlZC4/NZTMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ2knkVI UE8Sh2OdffDao2EyFHhlU0LHOFB2vifbhD8Z88hTqntxxZbVHxWJ+UpEPr8Jd7bo jgy63okhqz8zagJR56j4LS4mP6l35FRXWVMsWM2OvQJ5E+amGag/NmU75v9t0ArR AvWzmbDdZ4kpTmkuGaZ5LeQuhJ2P/dwKEIyiSxROLzJkBAkOnY2pgbLEmPUSsmcQ RNsNMQcxBEMuBl4UPwISzHOkBqkwTDi7RETRnmx/ZIocJcnLlx+jJDrKjQ0D7N+T 4nN5zMGbxQIni6ZcW3crvTKmlS6OJrn7r01EvnzKFHY2e6DQXF4sITiyEMulNONJ lw6okbl/a1FFng== -----END CERTIFICATE-----Generated at Sat Jul 5 18:11:42 2025 by rpki-client