$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: zORi+MegcWOWEqp/dqT7uPonuwqhmlXq73QFuTVLwLM= Subject key identifier: FB:AE:CC:D4:88:54:DD:1F:FE:15:47:C3:DC:E0:A7:68:AF:44:FB:1A Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01973918F2FAB5D45FB3479EE3187999704B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 06EE Signing time: Wed 04 Jun 2025 04:00:25 +0000 Manifest this update: Wed 04 Jun 2025 04:00:25 +0000 Manifest next update: Thu 05 Jun 2025 04:00:25 +0000 Files and hashes: 1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: xaGuclEvh65ydNgr3usOeKxmoy8Bv1adyBQsTJE61SI=) 6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:18:f2:fa:b5:d4:5f:b3:47:9e:e3:18:79:99:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jun 4 04:00:25 2025 GMT Not After : Jun 5 04:00:25 2025 GMT Subject: CN=fbaeccd48854dd1ffe1547c3dce0a768af44fb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:23:98:4b:ef:a1:58:0a:92:54:3b:91:f1: e6:38:bf:cd:6d:4a:4e:0e:99:bd:72:f7:3f:39:1a: f8:ec:ab:39:c9:2e:62:53:6b:7f:81:f3:a6:36:a6: 04:bc:fc:d1:62:d9:d0:94:03:0b:73:b5:6d:fe:c3: 65:4a:72:e5:f1:02:ef:65:09:b0:db:71:3e:7e:55: 2e:fb:cc:47:8e:01:99:4b:81:61:9d:3f:90:24:6e: 9c:65:f2:04:a0:bd:af:9c:32:00:fc:4c:f0:4c:51: d8:c4:fa:6b:05:5c:15:2f:fc:4b:a1:c8:cf:60:9a: 22:3c:dd:fa:23:75:29:86:d9:3b:bb:d7:79:bf:f6: 02:39:77:d7:cb:28:18:a8:04:f8:88:98:ef:cd:1d: 1b:d9:5f:48:c2:2a:58:cd:b0:f8:82:8d:5a:a5:a1: af:09:24:4a:a5:ee:26:28:9f:23:55:0a:b1:9e:d7: 8e:8a:de:c8:19:0e:66:81:69:35:f8:80:8e:90:16: 19:bf:38:1a:a1:3b:1d:90:88:8e:4e:9c:de:0a:d2: a8:1b:38:24:70:da:19:1c:06:82:13:a3:6c:c6:fc: e8:e7:ea:f9:64:b9:b9:1a:02:75:30:43:b2:37:31: 9d:2a:4a:8f:a8:96:a8:e3:c4:97:8e:75:be:ca:90: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:CC:D4:88:54:DD:1F:FE:15:47:C3:DC:E0:A7:68:AF:44:FB:1A X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:47:fa:cf:25:84:84:7c:40:dc:60:2e:97:4d:5f:84:aa:f5: 06:0a:b4:b1:fb:79:25:c7:3e:8e:cd:c4:a6:0a:92:ed:15:b5: 9a:04:38:3c:06:ca:5e:f6:b4:39:c3:ec:53:9c:8c:bc:15:cf: b5:09:20:ae:f0:83:5f:74:eb:09:84:8a:3e:5a:91:65:09:7a: ed:b6:0a:9c:57:67:22:55:50:db:fd:1b:00:99:db:9f:70:90: cd:5b:16:70:10:71:8d:2c:ef:5d:1e:ef:de:c9:72:8f:7d:08: 0a:77:d6:50:d5:ce:6c:b8:ec:25:2a:ca:fd:44:0c:e4:72:09: 87:ac:f4:da:df:91:6d:80:a5:2c:fb:07:2b:23:99:0a:91:b3: f9:b4:86:fb:c1:35:e2:7d:f5:b4:36:7f:6d:80:90:c0:dd:27: a6:0a:0d:2a:5b:7e:52:2c:99:68:82:38:0d:7a:1f:74:d7:25: 3d:07:ce:88:38:6c:1e:40:b5:5a:f4:8f:6b:52:59:b5:33:cb: 07:32:0c:28:59:1b:d2:27:df:f0:51:dc:c1:f1:37:99:59:00: 38:83:4f:af:db:b3:3b:21:eb:b4:e3:2d:aa:24:e2:6b:90:25: 31:78:94:b8:e1:1c:32:4d:df:53:00:78:6e:62:0f:70:af:28: 28:cf:ea:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc5GPL6tdRfs0ee4xh5mXBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwNjA0MDQwMDI1WhcNMjUwNjA1MDQwMDI1WjAzMTEwLwYDVQQD EyhmYmFlY2NkNDg4NTRkZDFmZmUxNTQ3YzNkY2UwYTc2OGFmNDRmYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BIjmEvvoVgKklQ7kfHmOL/NbUpO Dpm9cvc/ORr47Ks5yS5iU2t/gfOmNqYEvPzRYtnQlAMLc7Vt/sNlSnLl8QLvZQmw 23E+flUu+8xHjgGZS4FhnT+QJG6cZfIEoL2vnDIA/EzwTFHYxPprBVwVL/xLocjP YJoiPN36I3Uphtk7u9d5v/YCOXfXyygYqAT4iJjvzR0b2V9IwipYzbD4go1apaGv CSRKpe4mKJ8jVQqxnteOit7IGQ5mgWk1+ICOkBYZvzgaoTsdkIiOTpzeCtKoGzgk cNoZHAaCE6Nsxvzo5+r5ZLm5GgJ1MEOyNzGdKkqPqJao48SXjnW+ypAliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuuzNSIVN0f/hVHw9zgp2ivRPsaMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUf6zyWE hHxA3GAul01fhKr1Bgq0sft5Jcc+js3EpgqS7RW1mgQ4PAbKXva0OcPsU5yMvBXP tQkgrvCDX3TrCYSKPlqRZQl67bYKnFdnIlVQ2/0bAJnbn3CQzVsWcBBxjSzvXR7v 3slyj30ICnfWUNXObLjsJSrK/UQM5HIJh6z02t+RbYClLPsHKyOZCpGz+bSG+8E1 4n31tDZ/bYCQwN0npgoNKlt+UiyZaII4DXofdNclPQfOiDhsHkC1WvSPa1JZtTPL BzIMKFkb0iff8FHcwfE3mVkAOINPr9uzOyHrtOMtqiTia5AlMXiUuOEcMk3fUwB4 bmIPcK8oKM/qEg== -----END CERTIFICATE-----Generated at Wed Jun 4 11:28:21 2025 by rpki-client