$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: DRejaHfzwL6bGK4JADB1xLOvV6QAld9j1LedKh2UGnc= Subject key identifier: 8C:BA:8E:6C:4C:6B:F6:16:37:35:5F:C6:22:A9:D7:45:D5:E5:DB:93 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 0197B9D8AC6F22662D5E96E7EE8C37B6BBA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0E34 Signing time: Sun 29 Jun 2025 04:01:14 +0000 Manifest this update: Sun 29 Jun 2025 04:01:14 +0000 Manifest next update: Mon 30 Jun 2025 04:01:14 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: LWMI9cWee1YV1KsX3n2Z9650QV2Rl2FyQDq0787F6cM=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:d8:ac:6f:22:66:2d:5e:96:e7:ee:8c:37:b6:bb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jun 29 04:01:14 2025 GMT Not After : Jun 30 04:01:14 2025 GMT Subject: CN=8cba8e6c4c6bf61637355fc622a9d745d5e5db93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:0b:2c:7e:11:56:e6:a1:ac:c7:0e:08:56: 12:4f:b5:de:ba:c9:d5:67:74:db:78:10:13:34:ef: 33:8e:37:6b:30:6d:62:d8:22:9b:7e:e6:46:61:9a: 4f:80:c7:7c:13:8c:0f:9f:0e:15:d6:95:69:47:62: 2d:56:16:42:c5:26:06:bf:e7:6e:51:aa:6d:30:f3: 74:eb:39:eb:64:fe:cf:f9:96:21:f2:11:ab:4e:c7: 0a:9d:82:cc:65:f0:99:62:98:7a:2d:08:51:ba:39: a0:cf:78:02:e2:c5:71:82:eb:fe:84:07:6f:ec:4a: 91:6f:28:cd:1b:a8:ff:d0:40:da:ea:03:c7:4a:f2: 98:3f:db:16:58:ee:24:f5:b1:45:ca:35:2d:7b:7e: e5:fd:10:07:ab:49:90:bf:3a:d4:79:6c:39:d3:99: 59:6d:f3:48:58:50:f1:20:ab:30:40:77:36:93:b7: aa:54:19:64:62:02:ed:f0:ed:68:40:61:4f:35:80: 57:b9:e5:c6:15:90:a0:5a:f8:a4:02:ff:be:e7:e9: 08:0e:bf:80:f8:96:6f:cb:1e:47:16:56:de:21:86: 91:28:f7:8a:24:f4:33:b2:35:4c:6d:cb:9d:2a:1f: 42:ea:e8:ca:e1:62:af:34:cb:f8:20:2b:ac:d2:be: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BA:8E:6C:4C:6B:F6:16:37:35:5F:C6:22:A9:D7:45:D5:E5:DB:93 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:17:2c:4e:05:3b:8c:ac:48:f0:e6:92:4d:7d:5c:32:c1:3f: 0d:ff:bc:18:96:c2:36:f6:4d:d7:3d:b5:d3:d2:e8:77:6b:cf: 95:30:ea:2a:99:cd:b9:d0:fa:70:8d:aa:e3:41:40:06:b8:b9: 28:a2:73:c4:ca:42:6b:74:3e:b2:e4:22:25:8d:61:7c:87:f7: a3:76:ef:02:f6:90:f5:89:80:3a:94:06:14:d3:95:0d:cf:0e: 8f:8e:7c:a3:f1:2a:36:68:fa:70:d4:80:d9:06:54:05:a2:32: 5b:21:8a:b6:c9:39:64:5c:9d:74:81:a2:f6:9f:02:f9:a1:d7: 06:0f:8c:72:48:66:81:4b:cd:40:88:fd:60:7c:30:f2:26:e5: 9b:a7:f3:c3:f8:c4:22:27:f1:d0:4b:e5:83:07:03:0b:ce:87: 8f:d7:a7:5d:c9:02:d1:f5:2c:f8:ff:b9:31:e8:57:c3:25:1f: 40:aa:ff:1e:69:0b:a2:cb:d3:32:29:09:cf:a7:bf:a5:c0:2e: 15:42:8a:a7:3e:fd:39:5e:f4:be:63:5d:da:22:de:d6:cc:a8: 44:e4:93:31:b0:be:f4:b1:91:ee:85:0e:33:6c:f6:75:d0:98: be:61:f8:9d:00:05:c3:32:1e:d2:de:30:6c:a4:c8:bd:39:1e: d8:8d:fc:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe52KxvImYtXpbn7ow3trukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUwNjI5MDQwMTE0WhcNMjUwNjMwMDQwMTE0WjAzMTEwLwYDVQQD Eyg4Y2JhOGU2YzRjNmJmNjE2MzczNTVmYzYyMmE5ZDc0NWQ1ZTVkYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkcLLH4RVuahrMcOCFYST7XeusnV Z3TbeBATNO8zjjdrMG1i2CKbfuZGYZpPgMd8E4wPnw4V1pVpR2ItVhZCxSYGv+du UaptMPN06znrZP7P+ZYh8hGrTscKnYLMZfCZYph6LQhRujmgz3gC4sVxguv+hAdv 7EqRbyjNG6j/0EDa6gPHSvKYP9sWWO4k9bFFyjUte37l/RAHq0mQvzrUeWw505lZ bfNIWFDxIKswQHc2k7eqVBlkYgLt8O1oQGFPNYBXueXGFZCgWvikAv++5+kIDr+A +JZvyx5HFlbeIYaRKPeKJPQzsjVMbcudKh9C6ujK4WKvNMv4ICus0r7w8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy6jmxMa/YWNzVfxiKp10XV5duTMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBcsTgU7 jKxI8OaSTX1cMsE/Df+8GJbCNvZN1z2109Lod2vPlTDqKpnNudD6cI2q40FABri5 KKJzxMpCa3Q+suQiJY1hfIf3o3bvAvaQ9YmAOpQGFNOVDc8Oj458o/EqNmj6cNSA 2QZUBaIyWyGKtsk5ZFyddIGi9p8C+aHXBg+MckhmgUvNQIj9YHww8iblm6fzw/jE Iifx0EvlgwcDC86Hj9enXckC0fUs+P+5MehXwyUfQKr/HmkLosvTMikJz6e/pcAu FUKKpz79OV70vmNd2iLe1syoROSTMbC+9LGR7oUOM2z2ddCYvmH4nQAFwzIe0t4w bKTIvTke2I38aw== -----END CERTIFICATE-----Generated at Sun Jun 29 08:53:03 2025 by rpki-client