$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: rTf55Z7T0WtWLVGrj3V3C8EIFKKVAB5VmPpRBfTyfqs= Subject key identifier: CE:E0:FB:A5:42:D0:5A:99:6C:66:10:2F:FA:FA:55:7B:49:5A:C9:D5 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A18E30BB33CA6E2716641EBC353651A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 15A0 Signing time: Sat 25 Oct 2025 01:02:03 +0000 Manifest this update: Sat 25 Oct 2025 01:02:03 +0000 Manifest next update: Sun 26 Oct 2025 01:02:03 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: 3621kVLU1VT9Fici-tNYNAxF4xw.roa (hash: YevhNJP6n8UEvSB9W3Cp2mhJAKV1d9oeisrAeVxiMSA=) 4: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: PmWybA9-N8dc8PEujc3ISmvp274.roa (hash: RlrXWXlyD6hg5OOiK56C8Z6t9rRYFEPrd9C1t8eKLHU=) 10: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 11: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 12: pGHEbNMtjLRu8Cprmj0HiXypKR0.roa (hash: bK/eBtnsCEyHAZ1AGMsdtF+zE9uQoD6waTin5Xv5Q5M=) 13: pgNfMkpp3i69CoBAR_borZj9z3E.roa (hash: zObb1YXEsof5rty353AjV2YuXW0tkbylm0QLsUYgMRY=) 14: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 15: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: pIWk42kdFow7FA2lZjsoCo2FuNBG0JQsa67aOirb25Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:e3:0b:b3:3c:a6:e2:71:66:41:eb:c3:53:65:1a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Oct 25 01:02:03 2025 GMT Not After : Oct 26 01:02:03 2025 GMT Subject: CN=cee0fba542d05a996c66102ffafa557b495ac9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:f3:7c:af:42:cf:7f:aa:1a:9a:c0:f6:a1: d6:06:7f:e6:79:7d:4c:ee:99:17:ef:7a:cb:2a:0b: 6a:8a:05:96:4c:8a:02:fe:03:d7:4a:ce:7d:55:ef: bb:a3:bf:3b:7e:f6:ae:3d:95:86:63:ac:6e:f8:02: 78:2b:c0:13:c0:2f:16:3c:92:b1:b2:d8:0f:dc:4c: d2:99:54:a1:9c:14:88:5f:a1:8a:14:be:10:71:9b: 0b:6c:04:83:8d:14:70:e3:38:db:d0:84:9c:3c:1e: 15:c5:ed:0d:0e:c6:13:a4:fa:ab:de:90:79:d1:7c: 99:35:ac:69:fb:09:ba:05:cc:24:10:f8:55:69:a1: 31:6b:ab:d8:38:c9:a5:c1:a9:80:f2:85:c4:9c:58: eb:69:22:c5:c6:ef:c8:33:6d:ee:23:d8:1a:04:55: f5:81:8b:1f:c9:ba:08:a4:1e:a6:92:0f:cd:60:dc: 4c:61:45:6c:d5:76:f0:a9:77:4e:8e:70:ae:d2:67: b0:39:d2:bb:f5:fb:e8:25:85:05:74:bc:15:81:11: 61:70:e2:c7:eb:dc:2e:36:d6:9d:57:b7:38:7c:a0: ff:ca:27:82:b1:8b:23:93:7f:35:bc:98:12:85:11: 75:47:aa:ac:a0:1b:61:47:5c:f1:be:b8:ff:2e:6f: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E0:FB:A5:42:D0:5A:99:6C:66:10:2F:FA:FA:55:7B:49:5A:C9:D5 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:43:a0:9b:39:69:9d:e6:7f:11:24:8c:c8:90:a6:7a:7b: 6d:0d:1b:cd:fe:62:6c:ba:65:31:da:d1:51:44:ce:ec:18:53: 55:45:73:65:e5:da:5a:72:fd:52:1e:e1:af:f5:e3:65:b8:00: 8e:2a:cf:0a:05:24:fc:95:5b:96:eb:40:4b:03:1b:04:43:d4: 11:99:51:a1:83:e2:9a:68:c7:52:d4:e6:10:c5:cd:8a:44:2b: 7e:82:79:55:d0:f3:ed:9c:51:52:a2:2f:3b:62:4d:cb:fb:40: bc:01:e4:92:83:47:75:ce:f0:3f:c7:7e:94:9b:e0:6b:48:94: 32:e9:82:50:bb:8f:f0:5a:04:7d:95:80:8c:10:28:2c:89:33: b8:f3:d7:88:0d:e9:2c:68:70:a1:fd:f6:53:1c:17:dc:50:4d: 17:30:ff:4c:81:b0:34:1a:43:a4:37:29:94:c8:ff:15:86:14: fd:fb:97:f6:40:9d:0f:f1:b9:75:7e:02:1e:e6:67:99:00:fe: b2:b1:7b:63:27:58:b9:bb:50:ae:b0:74:d2:fe:ba:84:a0:bb: 60:9a:21:7b:0b:74:8d:ba:05:25:6d:77:64:3a:ab:29:e6:82: 5f:36:bd:5b:09:e1:cc:d0:0b:85:24:68:ec:fb:40:35:35:d3: 4b:6e:cb:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoY4wuzPKbicWZB68NTZRosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMDI1MDEwMjAzWhcNMjUxMDI2MDEwMjAzWjAzMTEwLwYDVQQD EyhjZWUwZmJhNTQyZDA1YTk5NmM2NjEwMmZmYWZhNTU3YjQ5NWFjOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlHzfK9Cz3+qGprA9qHWBn/meX1M 7pkX73rLKgtqigWWTIoC/gPXSs59Ve+7o787fvauPZWGY6xu+AJ4K8ATwC8WPJKx stgP3EzSmVShnBSIX6GKFL4QcZsLbASDjRRw4zjb0IScPB4Vxe0NDsYTpPqr3pB5 0XyZNaxp+wm6BcwkEPhVaaExa6vYOMmlwamA8oXEnFjraSLFxu/IM23uI9gaBFX1 gYsfyboIpB6mkg/NYNxMYUVs1XbwqXdOjnCu0mewOdK79fvoJYUFdLwVgRFhcOLH 69wuNtadV7c4fKD/yieCsYsjk381vJgShRF1R6qsoBthR1zxvrj/Lm8hewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7g+6VC0FqZbGYQL/r6VXtJWsnVMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV1DoJs5 aZ3mfxEkjMiQpnp7bQ0bzf5ibLplMdrRUUTO7BhTVUVzZeXaWnL9Uh7hr/XjZbgA jirPCgUk/JVblutASwMbBEPUEZlRoYPimmjHUtTmEMXNikQrfoJ5VdDz7ZxRUqIv O2JNy/tAvAHkkoNHdc7wP8d+lJvga0iUMumCULuP8FoEfZWAjBAoLIkzuPPXiA3p LGhwof32UxwX3FBNFzD/TIGwNBpDpDcplMj/FYYU/fuX9kCdD/G5dX4CHuZnmQD+ srF7YydYubtQrrB00v66hKC7YJohewt0jboFJW13ZDqrKeaCXza9WwnhzNALhSRo 7PtANTXTS27Lcg== -----END CERTIFICATE-----Generated at Sat Oct 25 05:07:46 2025 by rpki-client