$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: rngKGgRxu8G1psSDt3IYspCxR9cPUzM6sXbOlAMJ144= Subject key identifier: 37:9E:76:34:48:6C:67:90:FB:DD:C7:ED:C9:9B:85:0B:26:5F:69:A2 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 01974967B8D3CD8AB66679B1F6500A59D7BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 1420 Signing time: Sat 07 Jun 2025 08:00:23 +0000 Manifest this update: Sat 07 Jun 2025 08:00:23 +0000 Manifest next update: Sun 08 Jun 2025 08:00:23 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: B84STFeKoQGNNPVu7qjqse7G6tE.roa (hash: MtuuUttjdEHBfw9pQ6wLwNYRQchbll7oYwTHz6pA12k=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: ncWW-PHiyTcD5myQc3_j5MkvxYM.roa (hash: yq//c+NUg8a+fjUiszm4DltA+xgrNNfhnKp5UTxqPzs=) 12: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 13: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: Ew+Ag1rltsYL8vSWLKHbAFZZYf3uXX3RgFRmTntsUvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:67:b8:d3:cd:8a:b6:66:79:b1:f6:50:0a:59:d7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Jun 7 08:00:23 2025 GMT Not After : Jun 8 08:00:23 2025 GMT Subject: CN=379e7634486c6790fbddc7edc99b850b265f69a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:53:d0:eb:b0:ff:7d:d6:55:61:a3:14:cc: 20:86:54:d7:5c:ca:37:a7:5a:5e:76:15:7b:99:6d: 6a:3e:d5:7c:8b:1c:df:da:40:09:97:d6:94:45:aa: 9a:a4:40:c5:aa:32:6c:43:df:64:57:fa:9e:60:a0: ea:a5:7f:63:53:45:e6:4e:21:1c:2e:46:96:f9:fc: 6c:13:d1:f3:f6:da:4b:5f:69:4f:c2:88:66:7a:ae: 26:a5:ed:e5:48:85:77:7e:c3:66:82:d8:7e:55:97: 4b:85:dc:c5:1d:e1:03:c6:98:0d:c9:ab:10:fa:ce: 3b:7b:b4:76:c3:08:2f:b6:42:9b:72:c3:bf:a0:fe: 07:ae:9b:73:05:2e:b8:0b:6e:de:1a:be:4d:e2:66: fc:8d:44:ec:82:96:47:a4:7a:5b:cc:cd:03:3a:fa: dd:c7:d0:81:d6:12:8a:15:84:56:5a:e7:68:51:cb: 1b:4d:07:ad:a3:55:8e:ae:2c:20:45:d0:f9:1c:ff: 1c:84:7a:2e:09:23:68:52:3f:b5:2f:2f:38:23:32: 07:e4:76:0e:9e:32:bb:d6:69:79:fd:5b:7a:b3:5f: 62:73:34:76:5d:84:40:7a:83:55:23:dd:57:94:17: 9e:12:2c:d8:10:9e:3c:2d:0c:fe:06:bc:f4:c9:7f: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:76:34:48:6C:67:90:FB:DD:C7:ED:C9:9B:85:0B:26:5F:69:A2 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:23:d9:11:ed:22:6e:b9:c1:4b:82:6f:b5:2c:78:b2:74:51: 8b:ed:2c:88:dd:01:0e:cd:54:c8:23:83:5b:f3:34:c1:5b:7d: 00:2a:6f:43:35:8a:ae:d6:aa:ef:86:52:03:08:80:e1:73:81: 3f:49:56:96:30:fc:01:f0:b0:5c:8d:9e:81:d6:df:f4:93:3e: c4:9f:5a:ae:df:1a:ad:f1:5d:9c:1d:88:f4:14:de:aa:a8:96: 46:f0:a7:83:6e:45:dc:22:99:8f:34:81:b0:98:81:2d:64:a1: 43:82:cf:37:ef:12:84:01:40:95:4e:0a:15:79:c8:18:c2:6b: ef:f5:de:df:8f:48:30:29:b2:e3:c9:48:dd:9c:f8:7e:b2:ba: 16:02:b9:b0:38:ba:84:9c:62:ea:0b:19:ab:59:d5:86:e9:40: a9:fb:86:90:1c:dc:02:56:39:5c:6b:e8:eb:d5:3e:25:4e:38: 57:ed:c6:48:44:c8:12:d4:13:1d:46:a3:f7:d6:ed:6b:09:82: f8:4a:76:e0:1e:0d:4e:2c:63:36:4b:86:d8:33:c7:8f:fa:51: d4:8d:e0:2b:67:72:12:93:a4:3e:18:ba:8a:48:c5:fe:b3:e8: f3:7b:42:c5:01:dd:01:67:af:7a:38:78:64:ed:84:8c:3a:30: fc:39:d2:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJZ7jTzYq2Znmx9lAKWde9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwNjA3MDgwMDIzWhcNMjUwNjA4MDgwMDIzWjAzMTEwLwYDVQQD EygzNzllNzYzNDQ4NmM2NzkwZmJkZGM3ZWRjOTliODUwYjI2NWY2OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31T0Ouw/33WVWGjFMwghlTXXMo3 p1pedhV7mW1qPtV8ixzf2kAJl9aURaqapEDFqjJsQ99kV/qeYKDqpX9jU0XmTiEc LkaW+fxsE9Hz9tpLX2lPwohmeq4mpe3lSIV3fsNmgth+VZdLhdzFHeEDxpgNyasQ +s47e7R2wwgvtkKbcsO/oP4HrptzBS64C27eGr5N4mb8jUTsgpZHpHpbzM0DOvrd x9CB1hKKFYRWWudoUcsbTQeto1WOriwgRdD5HP8chHouCSNoUj+1Ly84IzIH5HYO njK71ml5/Vt6s19iczR2XYRAeoNVI91XlBeeEizYEJ48LQz+Brz0yX+YCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeedjRIbGeQ+93H7cmbhQsmX2miMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSPZEe0i brnBS4JvtSx4snRRi+0siN0BDs1UyCODW/M0wVt9ACpvQzWKrtaq74ZSAwiA4XOB P0lWljD8AfCwXI2egdbf9JM+xJ9art8arfFdnB2I9BTeqqiWRvCng25F3CKZjzSB sJiBLWShQ4LPN+8ShAFAlU4KFXnIGMJr7/Xe349IMCmy48lI3Zz4frK6FgK5sDi6 hJxi6gsZq1nVhulAqfuGkBzcAlY5XGvo69U+JU44V+3GSETIEtQTHUaj99btawmC +Ep24B4NTixjNkuG2DPHj/pR1I3gK2dyEpOkPhi6ikjF/rPo83tCxQHdAWevejh4 ZO2EjDow/DnS0Q== -----END CERTIFICATE-----Generated at Sat Jun 7 10:47:09 2025 by rpki-client