$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: zRO13dGsvMsWowJm+f2vcoCgSr6blj0GCJ7b/y03cHM= Subject key identifier: 40:72:AB:F5:72:EC:C1:49:2F:F9:54:34:23:98:78:BF:18:7E:EE:A8 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 0199FCC6176EFE75252A7ABBE3E557D4ADD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1710 Signing time: Sun 19 Oct 2025 14:01:04 +0000 Manifest this update: Sun 19 Oct 2025 14:01:04 +0000 Manifest next update: Mon 20 Oct 2025 14:01:04 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: /y11DLu+cMbKRmuWoO8TZYlRL0rIQ01ozuQL8SyZiXg=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:17:6e:fe:75:25:2a:7a:bb:e3:e5:57:d4:ad:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Oct 19 14:01:04 2025 GMT Not After : Oct 20 14:01:04 2025 GMT Subject: CN=4072abf572ecc1492ff95434239878bf187eeea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:71:60:70:c5:30:ad:ca:fb:d6:c0:ce:e5: 65:23:0c:a5:ea:ab:93:2c:9e:22:ee:a3:64:cb:1e: ce:5e:c6:8d:bb:a7:88:ba:14:93:cf:26:74:4f:d5: 5b:6a:3b:8d:65:57:13:ba:30:7b:8b:96:22:b2:e6: c7:82:aa:0c:13:7f:6e:c1:28:cb:06:8c:6d:3d:f6: 09:cc:55:83:02:e8:fb:0f:99:20:9f:10:56:a8:88: 76:4e:0b:4d:87:23:4f:c2:86:70:ae:68:fb:73:14: f4:eb:c1:ad:df:bc:d8:72:34:cf:c1:eb:f6:7e:fe: 12:ca:cc:2c:02:d7:63:d2:d2:80:10:0a:c9:04:63: 0a:ca:63:6e:b1:6d:45:89:b0:18:d8:79:41:55:cb: bc:ff:18:5e:46:1f:82:99:61:80:f2:4e:13:6f:76: 85:11:af:f2:83:cb:2d:a6:35:0c:a5:39:f4:e0:3d: 1a:ad:dc:01:6d:75:fb:57:5f:5d:c9:c2:27:0d:7f: b1:72:83:00:3d:1e:45:69:16:27:f6:57:68:ea:c9: 23:4a:90:ab:89:cb:81:10:f3:f3:c1:ab:55:b8:8d: 1b:72:1a:74:88:eb:2f:f8:d7:41:ac:68:1e:5f:a2: 05:8f:6d:ea:a0:df:54:3d:c7:71:9d:19:e1:ae:f3: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:72:AB:F5:72:EC:C1:49:2F:F9:54:34:23:98:78:BF:18:7E:EE:A8 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7b:0d:3d:97:d7:d2:a0:0f:0c:e4:20:a5:31:41:c0:ed:07: 9d:44:b9:ef:37:bd:06:7a:98:4e:fb:bc:ac:0a:9c:7d:e3:5b: b9:24:51:45:fd:5d:55:b8:14:fd:f5:33:75:04:8c:0c:09:b2: a5:52:5b:84:53:6f:1c:be:7f:c9:d4:83:32:72:02:e9:de:6e: 6e:ff:bf:49:4f:5e:83:78:6d:dc:bf:97:fa:be:c5:a7:59:d8: 20:3c:82:dd:08:e8:0c:c4:36:fa:52:82:36:d4:df:3e:be:eb: e8:fe:66:fa:97:91:d8:aa:42:c5:42:47:cd:2d:e6:0a:74:3b: 10:f5:fa:07:8a:f2:22:ed:a5:32:67:85:b4:b1:7d:9a:74:81: 7c:26:cc:57:44:7d:32:51:75:09:71:e2:1c:e6:6f:a7:c9:6a: e3:c3:b0:38:b0:37:4f:fb:13:81:54:14:28:91:b3:56:f2:93: ab:62:a8:69:a0:b2:aa:9a:ef:e3:ab:6e:4f:22:77:35:0f:4f: 37:9e:31:34:fb:30:3f:c9:8e:65:e8:fa:31:ae:91:a6:30:37: ef:68:c7:a8:84:2e:cd:a1:73:e1:02:aa:9c:3f:7d:74:14:c8: 6a:67:3e:f7:be:ab:79:30:49:d9:74:1b:07:fa:ed:7b:b2:e9: 57:eb:78:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xhdu/nUlKnq74+VX1K3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUxMDE5MTQwMTA0WhcNMjUxMDIwMTQwMTA0WjAzMTEwLwYDVQQD Eyg0MDcyYWJmNTcyZWNjMTQ5MmZmOTU0MzQyMzk4NzhiZjE4N2VlZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqRxYHDFMK3K+9bAzuVlIwyl6quT LJ4i7qNkyx7OXsaNu6eIuhSTzyZ0T9VbajuNZVcTujB7i5YisubHgqoME39uwSjL BoxtPfYJzFWDAuj7D5kgnxBWqIh2TgtNhyNPwoZwrmj7cxT068Gt37zYcjTPwev2 fv4SyswsAtdj0tKAEArJBGMKymNusW1FibAY2HlBVcu8/xheRh+CmWGA8k4Tb3aF Ea/yg8stpjUMpTn04D0ardwBbXX7V19dycInDX+xcoMAPR5FaRYn9ldo6skjSpCr icuBEPPzwatVuI0bchp0iOsv+NdBrGgeX6IFj23qoN9UPcdxnRnhrvMmdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEByq/Vy7MFJL/lUNCOYeL8Yfu6oMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3sNPZfX 0qAPDOQgpTFBwO0HnUS57ze9BnqYTvu8rAqcfeNbuSRRRf1dVbgU/fUzdQSMDAmy pVJbhFNvHL5/ydSDMnIC6d5ubv+/SU9eg3ht3L+X+r7Fp1nYIDyC3QjoDMQ2+lKC NtTfPr7r6P5m+peR2KpCxUJHzS3mCnQ7EPX6B4ryIu2lMmeFtLF9mnSBfCbMV0R9 MlF1CXHiHOZvp8lq48OwOLA3T/sTgVQUKJGzVvKTq2KoaaCyqprv46tuTyJ3NQ9P N54xNPswP8mOZej6Ma6RpjA372jHqIQuzaFz4QKqnD99dBTIamc+976reTBJ2XQb B/rte7LpV+t4Hg== -----END CERTIFICATE-----Generated at Sun Oct 19 20:34:17 2025 by rpki-client