$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: c1RbgMqNSI2iTpt06ijZpJjETpdWlaIH/rmHfbXUYQE= Subject key identifier: D4:AC:00:13:50:59:27:CA:B8:FB:9A:51:2C:B5:B2:C6:CA:B9:11:DD Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 019A64349E41B4F00A4B261C159A5575E19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 15C7 Signing time: Sat 08 Nov 2025 16:02:41 +0000 Manifest this update: Sat 08 Nov 2025 16:02:41 +0000 Manifest next update: Sun 09 Nov 2025 16:02:41 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: 3621kVLU1VT9Fici-tNYNAxF4xw.roa (hash: YevhNJP6n8UEvSB9W3Cp2mhJAKV1d9oeisrAeVxiMSA=) 4: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: PmWybA9-N8dc8PEujc3ISmvp274.roa (hash: RlrXWXlyD6hg5OOiK56C8Z6t9rRYFEPrd9C1t8eKLHU=) 10: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 11: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 12: pGHEbNMtjLRu8Cprmj0HiXypKR0.roa (hash: bK/eBtnsCEyHAZ1AGMsdtF+zE9uQoD6waTin5Xv5Q5M=) 13: pgNfMkpp3i69CoBAR_borZj9z3E.roa (hash: zObb1YXEsof5rty353AjV2YuXW0tkbylm0QLsUYgMRY=) 14: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 15: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: 1vwc44toVpuBRoF615MxkZSDDtzvJWyxPnxAFhHnLow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 09 Nov 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:64:34:9e:41:b4:f0:0a:4b:26:1c:15:9a:55:75:e1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Nov 8 16:02:41 2025 GMT Not After : Nov 9 16:02:41 2025 GMT Subject: CN=d4ac0013505927cab8fb9a512cb5b2c6cab911dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:2e:48:40:3e:24:15:13:05:06:2c:49:91: 92:55:18:15:4a:c8:9d:df:34:5d:7d:01:9d:ea:a7: 8d:8c:f8:37:f7:55:60:c7:7e:7c:7a:ec:c0:81:7c: 44:8e:c8:5b:9b:1a:39:d0:48:56:20:28:75:4c:07: 8b:67:c6:70:e2:f0:fe:b0:92:3d:72:a3:f4:61:f7: da:53:f7:d5:d8:d0:64:45:34:82:ad:b9:36:d0:ef: 49:a3:18:8a:25:f3:e3:82:45:a7:1b:4e:d8:fb:a3: 6d:c3:a8:02:bb:47:49:d9:59:08:ad:23:de:5d:4e: 8f:aa:cc:40:3e:e6:d0:de:23:bd:f7:5e:56:0d:70: 46:0e:4f:b2:8b:bf:c4:44:5f:a4:07:fa:fa:fc:f2: f9:15:52:5c:8e:95:b9:c9:02:52:9e:4f:45:bc:5a: 2b:82:9c:65:cd:b4:6f:ce:69:95:42:07:33:5c:fc: 4b:e9:b0:93:c3:2e:f8:b7:b4:be:41:a2:49:f2:1a: 22:a3:44:a5:e9:64:52:61:0f:5b:d3:ff:3f:3a:ff: 07:a1:0d:6e:61:57:9f:01:2d:db:63:c6:88:5e:1a: 4b:bf:ee:fc:1f:fa:25:b8:dc:08:02:52:70:9f:90: e2:2d:61:c8:23:45:d9:2b:57:e3:4c:d7:fe:a6:58: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AC:00:13:50:59:27:CA:B8:FB:9A:51:2C:B5:B2:C6:CA:B9:11:DD X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d1:d4:51:4f:84:64:6b:18:97:aa:69:6f:1d:80:45:48:9f: 1d:f1:1a:75:4f:9f:7d:b5:b6:09:e2:c2:90:68:52:0a:ba:92: 7c:89:5e:e4:9a:a8:3b:da:9e:3c:0e:2f:76:db:1f:a0:c9:38: 3f:b4:5c:21:7c:84:05:a0:a5:3f:88:34:35:46:f8:83:18:47: 7c:50:60:e3:9e:88:dd:1f:23:d5:4c:3b:25:ec:0a:cd:ed:0e: fb:81:48:56:c8:1e:4c:36:b2:4a:64:02:6f:00:18:55:21:6b: 04:ab:72:50:30:c0:c9:ee:4f:32:fb:c5:b4:74:40:db:0f:39: cb:79:da:1f:fd:76:10:83:f8:e4:04:e5:d7:bc:19:7c:c4:f8: a8:8e:57:62:8e:8b:03:f8:84:73:86:49:e3:20:73:9c:2c:3f: 9f:12:2c:58:b4:dc:b6:3c:d3:a5:64:cf:61:dc:be:5f:13:4e: f4:54:77:58:13:ff:56:1a:68:e2:d6:2e:58:9f:77:c5:11:c0: b0:7e:d3:7e:6c:60:37:0d:87:46:c5:9d:5e:b5:d3:2c:75:5f: 03:21:b3:8a:c0:98:4f:3e:02:9d:1a:d3:d2:8a:3e:b2:a8:ed: 61:ac:19:45:72:8f:64:3d:3d:a7:0b:3e:b1:97:3f:23:b0:a8: 72:78:0a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpkNJ5BtPAKSyYcFZpVdeGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMTA4MTYwMjQxWhcNMjUxMTA5MTYwMjQxWjAzMTEwLwYDVQQD EyhkNGFjMDAxMzUwNTkyN2NhYjhmYjlhNTEyY2I1YjJjNmNhYjkxMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeguSEA+JBUTBQYsSZGSVRgVSsid 3zRdfQGd6qeNjPg391Vgx358euzAgXxEjshbmxo50EhWICh1TAeLZ8Zw4vD+sJI9 cqP0YffaU/fV2NBkRTSCrbk20O9JoxiKJfPjgkWnG07Y+6Ntw6gCu0dJ2VkIrSPe XU6PqsxAPubQ3iO9915WDXBGDk+yi7/ERF+kB/r6/PL5FVJcjpW5yQJSnk9FvFor gpxlzbRvzmmVQgczXPxL6bCTwy74t7S+QaJJ8hoio0Sl6WRSYQ9b0/8/Ov8HoQ1u YVefAS3bY8aIXhpLv+78H/oluNwIAlJwn5DiLWHII0XZK1fjTNf+plhBdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSsABNQWSfKuPuaUSy1ssbKuRHdMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9HUUU+E ZGsYl6ppbx2ARUifHfEadU+ffbW2CeLCkGhSCrqSfIle5JqoO9qePA4vdtsfoMk4 P7RcIXyEBaClP4g0NUb4gxhHfFBg456I3R8j1Uw7JewKze0O+4FIVsgeTDaySmQC bwAYVSFrBKtyUDDAye5PMvvFtHRA2w85y3naH/12EIP45ATl17wZfMT4qI5XYo6L A/iEc4ZJ4yBznCw/nxIsWLTctjzTpWTPYdy+XxNO9FR3WBP/Vhpo4tYuWJ93xRHA sH7TfmxgNw2HRsWdXrXTLHVfAyGzisCYTz4CnRrT0oo+sqjtYawZRXKPZD09pws+ sZc/I7CocngKLA== -----END CERTIFICATE-----Generated at Sat Nov 8 21:40:10 2025 by rpki-client