$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: Gszw1mBfl35PL7Ji3hOtzpogxEE5/Uvk7nv54EqQ6yY= Subject key identifier: E4:56:2D:B1:A8:54:B0:F5:06:AC:03:68:39:29:6B:25:1C:95:94:CD Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 0198D54DF5E113A703A126E7988CF856EA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1677 Signing time: Sat 23 Aug 2025 05:01:52 +0000 Manifest this update: Sat 23 Aug 2025 05:01:52 +0000 Manifest next update: Sun 24 Aug 2025 05:01:52 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: wIdAuLn2S+JKA4avrfiDWc91n6oz9dqPr/FkeZoPD3s=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4d:f5:e1:13:a7:03:a1:26:e7:98:8c:f8:56:ea:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Aug 23 05:01:52 2025 GMT Not After : Aug 24 05:01:52 2025 GMT Subject: CN=e4562db1a854b0f506ac036839296b251c9594cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:75:7a:fd:6c:20:5b:1d:f6:a8:8a:00:ae: f8:86:6b:4a:99:85:00:ce:e5:aa:8c:d6:c4:38:1b: ba:c8:80:34:eb:05:47:f9:79:ad:63:5b:11:97:f8: 18:b6:57:91:83:0c:66:89:f9:1e:27:0e:22:32:94: 16:35:63:f9:55:0d:a1:04:f1:3c:64:ee:53:d7:26: ad:02:f8:d6:62:66:81:8a:7e:d9:b9:f2:ed:cf:55: a8:08:f4:de:e1:11:ed:30:4d:b7:ae:fe:ee:0c:a1: ee:83:f9:1e:38:ce:71:5e:c1:2b:08:69:f2:5e:08: 3f:fd:fa:bb:38:c5:ec:6e:2a:f8:ae:f8:a4:57:86: 49:54:be:70:04:8d:29:e9:c3:18:d5:0a:59:c0:f4: f2:37:4f:a5:99:77:9e:88:bf:d7:da:03:a7:47:7f: 0e:92:5c:23:a1:bb:53:20:55:42:4c:a1:4c:71:b5: c1:4e:a3:db:94:bf:81:d5:85:c5:a4:03:3c:e8:82: ae:a0:91:9d:88:da:2c:d2:c6:ef:bb:55:8e:8f:70: 9d:30:3e:9e:9e:d5:90:00:07:75:f1:46:ca:16:de: 1e:24:13:37:7d:a0:19:d1:4c:75:c3:20:03:1f:ab: 75:c9:a4:30:bc:ea:c2:9d:a0:9a:90:66:6f:c4:41: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:56:2D:B1:A8:54:B0:F5:06:AC:03:68:39:29:6B:25:1C:95:94:CD X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a4:fa:73:f2:dd:54:53:d0:90:f0:47:71:ca:5a:35:aa:a2: 79:37:c1:05:77:07:5c:d9:c4:df:0a:57:88:4e:4d:d9:62:5e: 8f:db:5f:fd:be:a0:af:fa:b3:c8:1a:dc:94:be:fc:83:28:cb: 53:5a:e1:1d:28:29:55:cb:df:79:88:ff:f5:80:df:99:a9:da: 7e:72:5b:b9:76:7f:65:c6:0b:d9:dd:64:9d:e4:8a:72:cf:bd: ca:1c:f4:d3:87:a2:ad:7d:da:dc:97:0c:f2:00:3d:14:85:08: 64:9e:01:15:01:5d:44:fb:43:24:bf:83:77:63:6d:c6:aa:ca: 62:f7:7e:9d:bd:6d:ae:af:71:7b:87:d3:d9:aa:d5:a1:b7:f2: dd:ac:39:99:93:b4:df:7b:58:a1:da:96:3a:01:55:7a:fd:a2: 93:07:47:ef:96:88:f4:3f:8a:83:91:73:1e:8b:78:f6:b3:d0: 66:f0:8f:6e:83:89:a6:9a:ac:51:91:8e:b9:cb:ea:35:c0:62: ee:0f:89:17:6b:2e:9f:88:99:ef:1b:0a:06:73:d7:14:86:da: c0:2a:22:d5:75:5c:1d:17:60:ee:69:93:7f:e6:59:e8:60:d2: bf:dc:07:16:f1:16:ef:de:c4:bd:44:e4:d3:26:4d:e6:cf:de: 59:0c:fc:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTfXhE6cDoSbnmIz4Vup0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUwODIzMDUwMTUyWhcNMjUwODI0MDUwMTUyWjAzMTEwLwYDVQQD EyhlNDU2MmRiMWE4NTRiMGY1MDZhYzAzNjgzOTI5NmIyNTFjOTU5NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyx1ev1sIFsd9qiKAK74hmtKmYUA zuWqjNbEOBu6yIA06wVH+XmtY1sRl/gYtleRgwxmifkeJw4iMpQWNWP5VQ2hBPE8 ZO5T1yatAvjWYmaBin7ZufLtz1WoCPTe4RHtME23rv7uDKHug/keOM5xXsErCGny Xgg//fq7OMXsbir4rvikV4ZJVL5wBI0p6cMY1QpZwPTyN0+lmXeeiL/X2gOnR38O klwjobtTIFVCTKFMcbXBTqPblL+B1YXFpAM86IKuoJGdiNos0sbvu1WOj3CdMD6e ntWQAAd18UbKFt4eJBM3faAZ0Ux1wyADH6t1yaQwvOrCnaCakGZvxEGTMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORWLbGoVLD1BqwDaDkpayUclZTNMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKT6c/Ld VFPQkPBHccpaNaqieTfBBXcHXNnE3wpXiE5N2WJej9tf/b6gr/qzyBrclL78gyjL U1rhHSgpVcvfeYj/9YDfmanafnJbuXZ/ZcYL2d1kneSKcs+9yhz004eirX3a3JcM 8gA9FIUIZJ4BFQFdRPtDJL+Dd2NtxqrKYvd+nb1trq9xe4fT2arVobfy3aw5mZO0 33tYodqWOgFVev2ikwdH75aI9D+Kg5FzHot49rPQZvCPboOJppqsUZGOucvqNcBi 7g+JF2sun4iZ7xsKBnPXFIbawCoi1XVcHRdg7mmTf+ZZ6GDSv9wHFvEW797EvUTk 0yZN5s/eWQz89A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:19 2025 by rpki-client