$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: 1rhXu2iTOXvAYUwkqefoGnRWObMf4QsFdYg79c5n6g4= Subject key identifier: 04:0C:21:A1:80:DA:FB:EE:14:AC:3B:C4:C2:67:47:B0:AE:10:7F:CD Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 0199515426812DF781301E2AD6E77D3FC4B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1458 Signing time: Tue 16 Sep 2025 07:01:33 +0000 Manifest this update: Tue 16 Sep 2025 07:01:33 +0000 Manifest next update: Wed 17 Sep 2025 07:01:33 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: bLyBa-YU5CTUEUfCcyjMqyKWtCo.roa (hash: +pvmNAe4DVU0G8NksRdtjc76cKcR1QvaqfbXLphvYek=) 8: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 9: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 10: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 11: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 12: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: UIPh5ucn2Cru/epQThVffzzZDSrsuBLtPQEfxY6uB0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:51:54:26:81:2d:f7:81:30:1e:2a:d6:e7:7d:3f:c4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Sep 16 07:01:33 2025 GMT Not After : Sep 17 07:01:33 2025 GMT Subject: CN=040c21a180dafbee14ac3bc4c26747b0ae107fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:d6:4d:1d:f5:4c:27:46:34:2d:0e:e9:0c: de:0f:b4:34:ac:0f:ce:66:fb:de:ea:5f:82:5e:ac: 0c:26:9c:fa:30:a7:68:2f:44:3f:7c:11:76:1c:bd: 44:d1:97:fe:ef:b4:cd:af:34:8d:31:f6:81:1b:bd: 67:1a:47:07:f1:48:9a:fb:a9:7c:17:d6:22:67:36: 3c:45:b8:bd:1b:46:6a:c0:b3:f0:7e:83:df:e6:06: 76:21:a3:fb:fc:b3:c2:76:ac:1b:3f:6c:22:b1:d3: 7b:94:4a:a3:f4:db:f4:30:a3:fa:6e:31:fd:f9:06: 87:ed:a4:f3:e1:56:50:3e:6b:3f:5c:d0:de:ec:74: 8e:4e:ce:d4:44:04:aa:ee:87:b8:09:4b:90:d2:85: d6:15:d1:b5:c3:d6:c5:ef:67:31:33:d9:b5:39:6b: 70:fe:82:46:e2:d3:3f:a3:51:55:ec:bc:2f:1c:d0: 6b:5d:b2:81:34:ee:1d:41:a8:a0:a3:fe:31:12:6a: 5a:bc:6c:fe:c0:13:3b:6c:35:5e:0e:4c:80:b3:52: 4f:a7:2d:33:42:04:95:9c:6a:fb:7c:fd:11:fd:d0: e5:8d:f2:26:21:d1:27:5d:ac:34:2c:37:54:fd:15: 3e:83:12:a3:63:e7:f3:5e:b3:2b:ab:8a:d7:ba:f1: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0C:21:A1:80:DA:FB:EE:14:AC:3B:C4:C2:67:47:B0:AE:10:7F:CD X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:94:d8:d3:0a:ec:bd:40:45:ac:5a:a0:a2:09:77:12:11:e6: 97:8a:8b:8e:21:99:18:69:87:84:34:26:f3:de:fe:ce:52:13: 52:f7:48:c7:d9:31:4a:d1:66:d0:34:22:85:c4:c9:10:a8:76: fc:57:e6:54:9a:b5:5f:10:e5:2e:46:08:45:4d:63:96:1a:2e: 4e:bf:4d:83:a1:64:7d:39:ae:de:b5:62:23:04:be:79:86:f8: 61:80:ae:14:0e:18:ca:12:1a:e1:99:79:e2:4d:cc:0b:70:a5: d4:66:e4:36:63:82:3b:b4:f2:c1:ca:2a:17:c3:c3:d4:df:b6: 5d:2a:3c:ff:83:98:6b:c4:ce:11:18:e3:16:68:8c:ab:96:49: c4:39:6e:e0:ae:ee:72:96:69:54:96:1f:f9:1b:05:4a:09:f7: fe:2d:84:d6:7a:19:9d:03:0c:b5:b0:87:89:0d:43:4e:aa:f9: b9:af:b4:8f:4e:e7:eb:3f:6a:5d:38:98:ca:8b:ac:1d:5c:33: 80:9d:f8:53:31:39:02:1b:76:70:a5:5c:1f:8c:94:9a:31:53: cb:69:85:18:3e:d6:07:44:10:87:7e:52:9c:35:44:0c:d4:8f: b1:df:09:9e:b0:53:10:5f:3f:e6:23:39:d8:34:77:6c:f4:b8: 1c:a7:88:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlRVCaBLfeBMB4q1ud9P8S0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwOTE2MDcwMTMzWhcNMjUwOTE3MDcwMTMzWjAzMTEwLwYDVQQD EygwNDBjMjFhMTgwZGFmYmVlMTRhYzNiYzRjMjY3NDdiMGFlMTA3ZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvvWTR31TCdGNC0O6QzeD7Q0rA/O Zvve6l+CXqwMJpz6MKdoL0Q/fBF2HL1E0Zf+77TNrzSNMfaBG71nGkcH8Uia+6l8 F9YiZzY8Rbi9G0ZqwLPwfoPf5gZ2IaP7/LPCdqwbP2wisdN7lEqj9Nv0MKP6bjH9 +QaH7aTz4VZQPms/XNDe7HSOTs7URASq7oe4CUuQ0oXWFdG1w9bF72cxM9m1OWtw /oJG4tM/o1FV7LwvHNBrXbKBNO4dQaigo/4xEmpavGz+wBM7bDVeDkyAs1JPpy0z QgSVnGr7fP0R/dDljfImIdEnXaw0LDdU/RU+gxKjY+fzXrMrq4rXuvHByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQMIaGA2vvuFKw7xMJnR7CuEH/NMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZTY0wrs vUBFrFqgogl3EhHml4qLjiGZGGmHhDQm897+zlITUvdIx9kxStFm0DQihcTJEKh2 /FfmVJq1XxDlLkYIRU1jlhouTr9Ng6FkfTmu3rViIwS+eYb4YYCuFA4YyhIa4Zl5 4k3MC3Cl1GbkNmOCO7TywcoqF8PD1N+2XSo8/4OYa8TOERjjFmiMq5ZJxDlu4K7u cpZpVJYf+RsFSgn3/i2E1noZnQMMtbCHiQ1DTqr5ua+0j07n6z9qXTiYyousHVwz gJ34UzE5Aht2cKVcH4yUmjFTy2mFGD7WB0QQh35SnDVEDNSPsd8JnrBTEF8/5iM5 2DR3bPS4HKeIZA== -----END CERTIFICATE-----Generated at Tue Sep 16 08:54:30 2025 by rpki-client