$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: 400+kctVjHLWC3PgzKeYJcwIHdUkfUtYgIiFk/khsEE= Subject key identifier: 8E:1F:BE:D4:76:4B:40:7C:0B:57:41:4C:D3:82:21:35:CB:B8:E2:AB Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 0197BA7DECE2EF56010342911BD10A99EC36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 15D2 Signing time: Sun 29 Jun 2025 07:01:44 +0000 Manifest this update: Sun 29 Jun 2025 07:01:44 +0000 Manifest next update: Mon 30 Jun 2025 07:01:44 +0000 Files and hashes: 1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 2: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 3: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 4: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 5: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 6: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 7: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 8: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 9: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 10: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 11: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 12: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: Gja0cAlJmfx4/h0H6fdpPfw95V9IMxPHCZgQtbymuNw=) 13: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:7d:ec:e2:ef:56:01:03:42:91:1b:d1:0a:99:ec:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Jun 29 07:01:44 2025 GMT Not After : Jun 30 07:01:44 2025 GMT Subject: CN=8e1fbed4764b407c0b57414cd3822135cbb8e2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:1e:db:d5:07:34:07:e3:d2:23:f4:b3:1c: 5a:bc:6b:1f:11:99:ea:e1:77:9a:f3:d7:ac:30:34: 89:45:43:86:94:68:f0:51:66:a2:76:69:ea:36:e9: 59:50:b8:16:49:24:11:2f:61:de:bd:7f:72:6b:c2: 4d:7f:55:c2:e0:ec:34:25:67:ed:e6:50:94:61:f0: f0:a4:04:66:f4:70:11:75:b3:e7:69:6c:8a:ef:c2: 31:4f:91:11:01:b7:58:8e:ee:3b:8b:8a:42:9a:5d: e4:85:fb:7d:50:a9:be:b4:45:86:31:6b:ca:12:05: d0:17:58:0b:57:45:c0:e8:8a:6d:85:cd:3b:ca:c5: 01:8d:2a:64:79:0c:af:c7:e2:98:80:b6:68:c9:b0: 99:4c:63:6d:a0:8a:b9:db:10:f4:41:e7:b3:74:9e: b1:58:a4:d7:32:d2:c8:c8:18:83:18:34:b9:43:ab: 39:3a:84:77:47:b1:62:e8:22:54:cb:4c:24:4d:cf: 43:f3:cb:8b:3d:42:9b:d5:ef:cc:e8:bd:5c:13:07: c0:a9:55:dc:8c:b9:53:45:75:2a:c7:c7:0e:76:73: 54:be:71:7d:eb:2e:27:51:f6:00:05:83:81:17:0e: 2e:8e:2e:09:54:fb:47:16:2f:a5:49:a9:5a:1e:f0: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:BE:D4:76:4B:40:7C:0B:57:41:4C:D3:82:21:35:CB:B8:E2:AB X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9a:10:18:5a:00:e3:37:f4:87:91:9d:61:28:5f:ed:50:a0: d2:e1:62:10:ea:28:32:90:72:db:40:0d:73:6c:f5:48:6b:7e: bf:48:6d:82:f4:2a:87:c0:96:51:bc:c3:98:36:34:85:21:86: cb:17:57:e5:ce:cb:7a:92:80:20:20:b9:42:1b:c9:ff:87:9e: 3c:02:f9:c2:db:2d:26:06:97:8e:1e:ea:3f:4a:4c:24:13:d5: 75:81:23:74:73:99:bd:f6:4c:b9:d5:1b:f4:55:8e:e1:82:3b: ba:02:ba:d7:91:64:e0:d2:f0:c9:3b:50:2b:df:da:ab:95:04: 3f:71:ed:94:51:30:f8:88:a8:d4:6e:67:65:11:2b:87:e3:e7: 5d:ae:29:f8:8e:d8:4f:75:88:a7:f0:19:f0:bb:86:01:82:89: d5:0a:09:39:59:58:3a:2a:65:19:62:ea:55:c8:73:82:d2:03: 5d:3a:96:63:f1:16:9c:0c:84:03:fd:35:46:57:59:f3:27:44: 08:9e:07:6b:a1:e8:f7:a5:68:17:0d:f9:6b:d0:d6:4c:d1:56: 9b:5f:33:33:7d:19:8b:71:61:84:df:54:f7:97:08:79:b3:83: 4a:c9:0f:2e:80:53:9d:f1:59:e5:2b:33:ec:72:0f:d8:5f:a2: 01:36:ec:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6fezi71YBA0KRG9EKmew2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwNjI5MDcwMTQ0WhcNMjUwNjMwMDcwMTQ0WjAzMTEwLwYDVQQD Eyg4ZTFmYmVkNDc2NGI0MDdjMGI1NzQxNGNkMzgyMjEzNWNiYjhlMmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpAe29UHNAfj0iP0sxxavGsfEZnq 4Xea89esMDSJRUOGlGjwUWaidmnqNulZULgWSSQRL2HevX9ya8JNf1XC4Ow0JWft 5lCUYfDwpARm9HARdbPnaWyK78IxT5ERAbdYju47i4pCml3khft9UKm+tEWGMWvK EgXQF1gLV0XA6Ipthc07ysUBjSpkeQyvx+KYgLZoybCZTGNtoIq52xD0QeezdJ6x WKTXMtLIyBiDGDS5Q6s5OoR3R7Fi6CJUy0wkTc9D88uLPUKb1e/M6L1cEwfAqVXc jLlTRXUqx8cOdnNUvnF96y4nUfYABYOBFw4uji4JVPtHFi+lSalaHvAdeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4fvtR2S0B8C1dBTNOCITXLuOKrMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZoQGFoA 4zf0h5GdYShf7VCg0uFiEOooMpBy20ANc2z1SGt+v0htgvQqh8CWUbzDmDY0hSGG yxdX5c7LepKAICC5QhvJ/4eePAL5wtstJgaXjh7qP0pMJBPVdYEjdHOZvfZMudUb 9FWO4YI7ugK615Fk4NLwyTtQK9/aq5UEP3HtlFEw+Iio1G5nZRErh+PnXa4p+I7Y T3WIp/AZ8LuGAYKJ1QoJOVlYOiplGWLqVchzgtIDXTqWY/EWnAyEA/01RldZ8ydE CJ4Ha6Ho96VoFw35a9DWTNFWm18zM30Zi3FhhN9U95cIebODSskPLoBTnfFZ5Ssz 7HIP2F+iATbs3A== -----END CERTIFICATE-----Generated at Sun Jun 29 11:30:00 2025 by rpki-client