$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: z1QzgeN/FBNHycBpTNbJTW4TF0EnE6T5TOWy6auiSGM= Subject key identifier: 61:4E:C5:1D:7E:1C:C1:25:7B:07:EB:71:FC:68:C3:86:CF:C5:B7:22 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 0198D5BC2F7B6ED4111E4B02EF72BD9F463F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0EC7 Signing time: Sat 23 Aug 2025 07:02:16 +0000 Manifest this update: Sat 23 Aug 2025 07:02:16 +0000 Manifest next update: Sun 24 Aug 2025 07:02:16 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: 8r2W2tEBpPKBljgpulELULC9E0i/eahgYiq6ie9TgKw=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:2f:7b:6e:d4:11:1e:4b:02:ef:72:bd:9f:46:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Aug 23 07:02:16 2025 GMT Not After : Aug 24 07:02:16 2025 GMT Subject: CN=614ec51d7e1cc1257b07eb71fc68c386cfc5b722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:8e:db:f1:cc:21:37:b6:4b:7e:34:c7:77: 72:b7:44:81:96:8e:ac:54:5c:16:b8:c6:86:86:3d: 94:15:0f:61:f4:49:7d:2c:e4:d3:23:b7:86:d3:01: ed:fb:64:ae:7b:87:ff:8e:11:68:81:ee:e6:ab:bb: d3:92:c9:3c:a4:e9:1e:59:2f:1b:0e:a4:d8:f9:4c: 69:96:6d:07:18:ce:48:a3:82:83:9a:7f:ad:e6:04: c9:d7:79:27:a8:af:53:2d:86:46:9e:21:07:47:61: 2a:be:8d:1d:1f:58:4a:d7:13:9f:93:7b:9b:6b:5f: 2f:4a:cf:28:b3:ff:8a:40:8b:06:c2:e7:05:5f:a4: 67:17:2d:78:c9:46:8f:2d:ce:53:be:3e:58:a8:1d: a5:06:5b:f2:b9:98:6a:1e:5a:d3:0a:19:ba:3c:56: c2:11:36:c6:aa:41:4e:c6:76:37:0f:15:2f:3d:96: 60:67:72:44:63:8a:1d:9e:96:bf:3c:88:48:6b:92: d8:df:fa:61:37:e9:d0:94:a9:a9:a3:d6:5f:71:80: cf:bb:1a:ad:dd:d2:4c:45:fc:e5:c0:16:36:b7:9a: 72:ed:b2:4e:54:1c:af:12:68:77:74:ab:11:6d:11: ce:85:2f:74:17:b1:41:0b:bf:97:f5:a8:8d:3c:1e: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4E:C5:1D:7E:1C:C1:25:7B:07:EB:71:FC:68:C3:86:CF:C5:B7:22 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:95:91:d0:cb:6d:cf:c9:72:c1:a9:37:a3:51:45:b9:a9: 3b:a5:c5:7c:69:02:92:f0:41:e4:a1:86:b1:1e:c0:7a:20:57: dc:c6:c3:c5:5c:aa:ea:93:f1:46:d6:7e:8a:59:bb:d3:2a:32: 48:e0:8f:82:82:c4:42:c3:6e:f0:3c:07:f1:ea:a6:8c:13:fd: 56:96:be:c5:f3:71:d5:b6:77:eb:7f:ea:85:9c:28:81:78:d4: af:6b:2d:de:5b:b7:aa:22:40:7c:4d:e1:ac:a8:14:c3:2b:6d: 51:a0:db:4b:ee:e0:db:00:2f:7d:c0:cf:0e:1c:f6:67:46:82: 41:71:e0:65:53:29:a1:4c:78:e3:e0:85:83:be:ba:4f:c1:16: 74:ef:9b:2b:96:4f:b5:32:77:eb:c1:17:5e:70:a2:99:7c:f0: 76:7b:30:29:3a:d0:98:28:b6:ac:65:79:67:3d:32:01:8d:61: 8d:23:97:56:46:77:89:ce:2f:ec:8b:e3:c0:0f:2c:99:1d:8b: 90:0c:68:9a:fb:54:f8:f6:b1:b1:95:df:d5:70:a4:f7:c7:a9: ac:a0:6a:86:3d:96:d7:f0:d1:42:a8:c7:0c:7b:bb:4d:01:f7: 3d:79:de:bd:0d:1a:11:ba:5c:c3:73:ca:0b:f6:ec:ed:9f:8a: 9e:bd:fa:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvC97btQRHksC73K9n0Y/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUwODIzMDcwMjE2WhcNMjUwODI0MDcwMjE2WjAzMTEwLwYDVQQD Eyg2MTRlYzUxZDdlMWNjMTI1N2IwN2ViNzFmYzY4YzM4NmNmYzViNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1OO2/HMITe2S340x3dyt0SBlo6s VFwWuMaGhj2UFQ9h9El9LOTTI7eG0wHt+2Sue4f/jhFoge7mq7vTksk8pOkeWS8b DqTY+Uxplm0HGM5Io4KDmn+t5gTJ13knqK9TLYZGniEHR2Eqvo0dH1hK1xOfk3ub a18vSs8os/+KQIsGwucFX6RnFy14yUaPLc5Tvj5YqB2lBlvyuZhqHlrTChm6PFbC ETbGqkFOxnY3DxUvPZZgZ3JEY4odnpa/PIhIa5LY3/phN+nQlKmpo9ZfcYDPuxqt 3dJMRfzlwBY2t5py7bJOVByvEmh3dKsRbRHOhS90F7FBC7+X9aiNPB5fYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFOxR1+HMElewfrcfxow4bPxbciMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXKVkdDL bc/JcsGpN6NRRbmpO6XFfGkCkvBB5KGGsR7AeiBX3MbDxVyq6pPxRtZ+ilm70yoy SOCPgoLEQsNu8DwH8eqmjBP9Vpa+xfNx1bZ363/qhZwogXjUr2st3lu3qiJAfE3h rKgUwyttUaDbS+7g2wAvfcDPDhz2Z0aCQXHgZVMpoUx44+CFg766T8EWdO+bK5ZP tTJ368EXXnCimXzwdnswKTrQmCi2rGV5Zz0yAY1hjSOXVkZ3ic4v7IvjwA8smR2L kAxomvtU+PaxsZXf1XCk98eprKBqhj2W1/DRQqjHDHu7TQH3PXnevQ0aEbpcw3PK C/bs7Z+Knr36UQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:50 2025 by rpki-client