$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: x6YT+dxFVnJmu+lW27oTny/uG0t+btYtHIfZvNFXYak= Subject key identifier: 55:8D:B9:C0:9E:30:D4:5B:A3:5B:47:C7:A2:6F:4F:A7:C6:FA:AE:03 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019921E80A292B771071F934032831E7FFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 07EC Signing time: Sun 07 Sep 2025 02:01:18 +0000 Manifest this update: Sun 07 Sep 2025 02:01:18 +0000 Manifest next update: Mon 08 Sep 2025 02:01:18 +0000 Files and hashes: 1: 1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa (hash: pZugq23EDIU544OpCuM7hDUd1+y/txfCOV3C5E6h3Bk=) 2: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 3: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 4: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 5: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 6: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: F3rlgy34RSsCKEgXVmytnb03e8h0A/tB2XOUp7OEWJE=) 7: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:21:e8:0a:29:2b:77:10:71:f9:34:03:28:31:e7:ff:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Sep 7 02:01:18 2025 GMT Not After : Sep 8 02:01:18 2025 GMT Subject: CN=558db9c09e30d45ba35b47c7a26f4fa7c6faae03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:d5:07:a9:6f:ab:19:94:53:5b:28:9e:5c: 3f:5a:12:37:54:3c:ef:87:78:2b:e0:93:e6:ef:7b: a7:99:7a:82:d2:8a:17:cd:f6:19:30:d6:c6:69:95: 45:f5:a9:45:b1:69:5f:e2:cf:95:80:09:1e:5e:65: 41:31:27:38:f6:6e:ce:59:3a:28:fa:2f:d0:9f:be: 12:ec:f7:64:fa:26:7a:53:ea:e7:7f:32:20:eb:82: 42:d1:4c:1b:d4:ca:ab:50:cf:1f:c6:fd:78:94:19: c4:30:f8:34:7c:60:57:e6:b3:20:6f:66:d9:99:4d: 5c:3c:a9:71:e9:cf:21:d4:73:64:86:51:af:89:7b: db:1e:c2:0b:69:59:58:e3:65:ab:7d:67:60:6a:52: c7:37:3e:c9:32:9b:7c:6c:24:9e:67:13:b4:34:2f: dc:ca:fe:99:1a:9e:d1:5d:6b:6a:d5:0f:19:52:55: 27:a1:ff:66:52:e4:3f:53:23:00:2b:ca:16:aa:b3: b2:cb:d4:bf:9e:ee:b7:f2:6e:a2:97:12:1a:bb:7d: 1c:dc:8e:25:7d:6f:de:ab:e8:63:8d:7d:e9:a1:0c: 9e:24:c5:79:ad:46:b5:5c:47:57:dc:4b:b1:c6:c1: 2b:4e:ff:be:34:d6:96:cc:fa:f5:12:47:07:4a:c8: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:B9:C0:9E:30:D4:5B:A3:5B:47:C7:A2:6F:4F:A7:C6:FA:AE:03 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e8:e2:f2:2d:de:f3:56:1d:7e:cd:75:30:40:d9:99:e6:e9: 34:3c:bf:dc:f9:51:9d:78:11:a4:c7:f0:de:44:9e:35:fa:94: c1:98:60:4d:48:b6:95:4d:94:e9:e4:95:31:49:3d:75:07:77: 5a:40:48:22:ca:fc:84:5c:de:7a:b4:79:10:70:3d:b8:1d:7e: af:76:6b:2e:60:7c:69:69:05:71:3d:ca:0d:df:77:06:ba:b3: 4b:e2:91:e6:27:72:fb:44:4c:3b:21:75:94:10:dc:a4:4a:b1: 8d:73:d0:0b:96:1d:43:79:47:f6:79:88:de:78:26:9b:1b:b1: 70:98:08:38:7a:8f:56:e1:ef:d6:62:3d:66:e4:9d:1b:a3:21: 64:31:0f:62:54:29:33:2d:83:40:e2:75:c4:09:99:8b:a9:8a: 48:2c:e2:67:85:f8:f0:59:fa:31:ae:b1:c3:34:8b:c9:d8:68: 1b:6f:29:03:8b:7b:3c:d8:e6:64:f2:25:85:78:0b:09:4b:a3: de:30:8e:0a:7f:1a:6d:9d:e7:c4:cb:fe:43:0f:22:69:4b:52: be:cc:7b:8b:e9:3b:ea:69:f8:49:e9:d2:72:75:7a:bd:2b:b0: 8b:d7:05:62:3c:96:13:0e:2f:0c:54:72:e6:c2:db:f4:27:6d: df:7c:f4:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkh6AopK3cQcfk0Aygx5/+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwOTA3MDIwMTE4WhcNMjUwOTA4MDIwMTE4WjAzMTEwLwYDVQQD Eyg1NThkYjljMDllMzBkNDViYTM1YjQ3YzdhMjZmNGZhN2M2ZmFhZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9zVB6lvqxmUU1sonlw/WhI3VDzv h3gr4JPm73unmXqC0ooXzfYZMNbGaZVF9alFsWlf4s+VgAkeXmVBMSc49m7OWToo +i/Qn74S7Pdk+iZ6U+rnfzIg64JC0Uwb1MqrUM8fxv14lBnEMPg0fGBX5rMgb2bZ mU1cPKlx6c8h1HNkhlGviXvbHsILaVlY42WrfWdgalLHNz7JMpt8bCSeZxO0NC/c yv6ZGp7RXWtq1Q8ZUlUnof9mUuQ/UyMAK8oWqrOyy9S/nu638m6ilxIau30c3I4l fW/eq+hjjX3poQyeJMV5rUa1XEdX3EuxxsErTv++NNaWzPr1EkcHSsjtGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWNucCeMNRbo1tHx6JvT6fG+q4DMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+ji8i3e 81Ydfs11MEDZmebpNDy/3PlRnXgRpMfw3kSeNfqUwZhgTUi2lU2U6eSVMUk9dQd3 WkBIIsr8hFzeerR5EHA9uB1+r3ZrLmB8aWkFcT3KDd93BrqzS+KR5idy+0RMOyF1 lBDcpEqxjXPQC5YdQ3lH9nmI3ngmmxuxcJgIOHqPVuHv1mI9ZuSdG6MhZDEPYlQp My2DQOJ1xAmZi6mKSCziZ4X48Fn6Ma6xwzSLydhoG28pA4t7PNjmZPIlhXgLCUuj 3jCOCn8abZ3nxMv+Qw8iaUtSvsx7i+k76mn4SenScnV6vSuwi9cFYjyWEw4vDFRy 5sLb9Cdt33z0xg== -----END CERTIFICATE-----Generated at Sun Sep 7 11:20:51 2025 by rpki-client