$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: 5LB/d7BjeBGdBMd3JuqEzlCk0iIttJ+uClniqfa5IyQ= Subject key identifier: 1D:79:86:93:7B:85:40:39:1E:21:8C:E5:64:4E:9D:FD:76:64:92:17 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019A13F217947F5F040315A043AE4618E4D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 1727 Signing time: Fri 24 Oct 2025 02:00:24 +0000 Manifest this update: Fri 24 Oct 2025 02:00:24 +0000 Manifest next update: Sat 25 Oct 2025 02:00:24 +0000 Files and hashes: 1: 7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (hash: 39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=) 2: 8zCnIgh-ZctwaWW9UWnhk5D47-Y.roa (hash: MUHP885QC53KyVAwA3OVuIpjRfltCfNEkey65yD1E0A=) 3: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (hash: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=) 4: JfBP6dS5I5N35c7vJqB7NgG5BpQ.roa (hash: mlxyZUvm8D4amiftjMjNylfXPIWgAcCSgND1WevSbxo=) 5: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: smigdaghjmz2JEada4RUuXz0G2AD0VXiyrhLF5iqtLY=) 6: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (hash: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=) 7: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (hash: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=) 8: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (hash: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=) 9: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (hash: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=) 10: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (hash: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=) 11: fs4X3zJFq3DUP70BE5KHHq5PW6A.roa (hash: bGR4PpXG1RT4m3/7nflg7BgdcGbpPQ/v8739XylkQso=) 12: qrKrZlWqP1xYMoyEfKssy_MBOPc.roa (hash: 7HCvDFegj/Om6sM+U3B+gHYXUnQzqvdjd1JcBWwGFb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:f2:17:94:7f:5f:04:03:15:a0:43:ae:46:18:e4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Oct 24 02:00:24 2025 GMT Not After : Oct 25 02:00:24 2025 GMT Subject: CN=1d7986937b8540391e218ce5644e9dfd76649217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:34:b8:50:35:58:d7:4f:b7:d2:4c:0c:90: ce:4f:c5:78:58:66:b4:fd:f8:0d:d0:a8:3e:19:38: ee:68:ae:96:49:c1:7f:1a:c3:bf:7c:89:bd:a8:98: 30:cd:a2:c2:25:ee:c8:45:cd:c1:3b:53:1f:f6:42: e5:b2:98:9a:06:22:52:68:15:85:83:e6:f5:50:d8: ff:72:53:5a:8f:5d:22:00:e4:80:be:00:35:71:e5: 00:e6:80:74:44:72:63:d3:45:f1:b7:a8:17:da:87: 4e:f9:bd:1f:7f:e4:06:d4:6a:e2:34:fe:a9:30:22: ae:51:31:75:4d:dc:f0:26:a6:5c:cb:bd:bd:ab:26: 79:c8:46:c1:eb:c1:23:1d:88:b6:cd:31:50:48:67: 29:5f:a1:b1:f1:70:5a:fd:ac:d7:50:f9:d0:2d:60: 18:d9:2e:1c:2d:a1:77:4e:92:51:fa:00:6f:42:b5: 01:62:16:98:b8:71:89:f8:69:e7:00:49:fc:6b:80: 8f:32:fc:c5:4a:e5:2f:df:c2:bb:5d:02:2d:7e:de: 42:2e:31:61:e5:cf:ca:69:aa:9c:4a:bd:4f:ea:02: 5a:13:7b:1a:89:5d:2f:dd:74:14:a4:7b:ac:c6:ca: 81:e6:60:2d:a9:be:31:51:25:3f:b7:a1:be:6b:ba: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:79:86:93:7B:85:40:39:1E:21:8C:E5:64:4E:9D:FD:76:64:92:17 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a8:2c:33:e4:16:66:fc:6c:8c:6d:59:92:56:21:84:bb:46: da:f8:dc:7f:7f:3d:5b:76:ae:e0:8c:7f:39:5f:8f:23:01:24: 8a:2b:93:db:4b:18:41:34:4f:3f:b7:d0:25:7a:1a:ca:6c:88: be:9b:ac:2b:d1:cb:9a:65:7d:9b:b4:e9:dd:2d:7a:46:d5:16: 11:c1:76:80:a4:1d:3f:25:ab:3b:c7:34:5a:f3:89:1e:50:18: dc:e5:31:a9:bf:7f:00:bb:a9:5c:58:79:75:03:fe:de:ee:2a: f3:e2:d4:0f:b9:0b:34:e0:51:2e:83:33:4e:77:d7:5e:e3:91: 1e:42:64:ed:44:e8:2e:c4:0b:7a:3e:39:a1:00:bc:18:bc:ae: 55:90:b2:29:56:ef:bd:de:89:3c:7d:71:1e:cb:7b:c4:55:90: 46:c4:97:e8:d5:80:96:fc:bc:6c:a8:43:1d:3c:de:2e:58:7c: 3e:84:08:66:d1:b1:43:05:7a:15:db:2a:48:b2:cc:a9:3a:d5: 85:e4:17:ba:14:50:54:12:ad:40:24:41:91:1d:06:1a:f1:f1: ce:8a:d7:5b:83:ed:27:d7:d0:89:bf:b9:6a:2e:16:a5:44:e3: 39:5e:95:07:40:b4:c0:22:bb:9c:69:dc:80:7a:db:8f:96:87: 5f:ff:37:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoT8heUf18EAxWgQ65GGOTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjUxMDI0MDIwMDI0WhcNMjUxMDI1MDIwMDI0WjAzMTEwLwYDVQQD EygxZDc5ODY5MzdiODU0MDM5MWUyMThjZTU2NDRlOWRmZDc2NjQ5MjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NA0uFA1WNdPt9JMDJDOT8V4WGa0 /fgN0Kg+GTjuaK6WScF/GsO/fIm9qJgwzaLCJe7IRc3BO1Mf9kLlspiaBiJSaBWF g+b1UNj/clNaj10iAOSAvgA1ceUA5oB0RHJj00Xxt6gX2odO+b0ff+QG1GriNP6p MCKuUTF1TdzwJqZcy729qyZ5yEbB68EjHYi2zTFQSGcpX6Gx8XBa/azXUPnQLWAY 2S4cLaF3TpJR+gBvQrUBYhaYuHGJ+GnnAEn8a4CPMvzFSuUv38K7XQItft5CLjFh 5c/KaaqcSr1P6gJaE3saiV0v3XQUpHusxsqB5mAtqb4xUSU/t6G+a7rtiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB15hpN7hUA5HiGM5WROnf12ZJIXMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuagsM+QW ZvxsjG1ZklYhhLtG2vjcf389W3au4Ix/OV+PIwEkiiuT20sYQTRPP7fQJXoaymyI vpusK9HLmmV9m7Tp3S16RtUWEcF2gKQdPyWrO8c0WvOJHlAY3OUxqb9/ALupXFh5 dQP+3u4q8+LUD7kLNOBRLoMzTnfXXuORHkJk7UToLsQLej45oQC8GLyuVZCyKVbv vd6JPH1xHst7xFWQRsSX6NWAlvy8bKhDHTzeLlh8PoQIZtGxQwV6FdsqSLLMqTrV heQXuhRQVBKtQCRBkR0GGvHxzorXW4PtJ9fQib+5ai4WpUTjOV6VB0C0wCK7nGnc gHrbj5aHX/83Cg== -----END CERTIFICATE-----Generated at Fri Oct 24 06:10:42 2025 by rpki-client