$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: zT4UuzO/iFUv3NtKO6FBm9FnBf338CaCO8T9ZgHYF8M= Subject key identifier: B3:40:85:D7:C0:D2:A2:DB:19:2E:A5:77:F2:EA:8D:9D:98:CC:4F:1A Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 0199FEEB97875FB3114324AA120E22382EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 1700 Signing time: Mon 20 Oct 2025 00:01:16 +0000 Manifest this update: Mon 20 Oct 2025 00:01:16 +0000 Manifest next update: Tue 21 Oct 2025 00:01:16 +0000 Files and hashes: 1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=) 2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=) 5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 7: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 12: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 13: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 14: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: TtSqIybpfvrSRqTM68X5yt3Jc+kfAp8pPZ47fFbizPU=) 15: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:97:87:5f:b3:11:43:24:aa:12:0e:22:38:2e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Oct 20 00:01:16 2025 GMT Not After : Oct 21 00:01:16 2025 GMT Subject: CN=b34085d7c0d2a2db192ea577f2ea8d9d98cc4f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:b5:5f:64:72:2e:8c:0b:2b:75:6c:0c:b2: fe:3b:fb:4c:f4:14:c2:a1:34:13:ab:4f:7b:b8:b3: cd:ce:b7:4f:a2:77:ca:5c:9f:c1:4d:98:b3:f4:8e: 72:ec:45:0d:81:76:d7:27:06:e1:45:c0:a9:0d:a8: 6c:0c:ee:fd:96:88:be:59:f0:dc:1c:c4:9f:ba:33: 39:5c:dd:d0:e7:4f:9e:ae:5e:36:75:7d:ec:82:a0: c8:1c:61:30:5f:5b:30:d2:6f:1e:8f:5a:08:7f:46: 11:bb:43:ec:50:60:f4:1d:fa:9b:b0:76:8a:1a:36: 94:de:07:7e:18:1b:0e:57:8b:9e:c6:f7:c5:3d:e1: 10:0a:ac:02:84:1f:bc:04:d1:c7:36:3f:09:85:b2: 2e:c4:97:5f:21:a3:89:1a:6a:ef:66:87:ae:98:55: eb:b0:50:01:db:dc:c1:23:ac:b1:55:50:c1:b5:da: 2e:75:35:48:cf:38:f9:2c:25:0d:57:b2:e1:63:84: b4:15:a0:d0:7d:1b:e5:28:92:45:78:65:2e:56:ff: 8d:d1:b5:e5:9b:b1:77:52:8e:99:83:ae:99:3c:9a: 83:e8:61:b0:5b:70:cc:4d:93:c4:66:fc:7c:fd:28: d1:ad:0e:e7:3f:fb:d5:fa:15:b9:85:51:c3:00:cd: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:85:D7:C0:D2:A2:DB:19:2E:A5:77:F2:EA:8D:9D:98:CC:4F:1A X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4f:58:8a:fc:3a:67:fd:b6:7d:b7:e2:f6:0d:9f:76:2c:51: a9:b4:48:62:4d:40:7f:8d:56:46:d5:1f:60:ba:05:0e:e4:b4: d8:3c:e4:69:be:dc:9f:36:98:f7:ed:4e:38:1c:5b:f1:cd:4e: b0:f5:9a:4d:c8:e2:db:27:01:ca:f0:92:28:85:05:15:3c:77: a1:12:ed:78:e9:97:90:43:11:83:a6:7f:a6:aa:e3:ad:3b:b6: 93:66:16:60:67:a3:8d:53:0a:bb:8d:c7:46:ef:1b:0d:d5:36: dc:fa:38:f0:95:cb:82:ca:99:29:f2:96:b1:a3:e4:83:52:f7: 4a:0c:ee:69:a4:b9:b0:2a:83:f3:80:05:93:d5:53:a4:d9:87: c3:37:e3:ed:b4:62:03:f3:d1:e8:78:25:cd:5e:8c:d7:a5:af: d5:93:3b:b4:08:26:4d:8c:a2:10:f8:e8:7a:a3:17:ac:a2:4e: ff:85:39:7a:4a:6a:e4:92:d6:41:c9:b8:58:02:0a:ae:dd:10: 4b:49:7f:3d:08:3b:3e:27:22:58:a7:5a:95:d1:6b:6f:6c:f6: cf:96:72:56:a3:05:b5:95:ea:d5:15:78:38:e2:2a:30:1d:d9: 51:ec:95:f4:b6:5c:62:57:d5:93:79:a5:00:07:a9:88:62:af: 4d:c1:15:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+65eHX7MRQySqEg4iOC7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUxMDIwMDAwMTE2WhcNMjUxMDIxMDAwMTE2WjAzMTEwLwYDVQQD EyhiMzQwODVkN2MwZDJhMmRiMTkyZWE1NzdmMmVhOGQ5ZDk4Y2M0ZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWi1X2RyLowLK3VsDLL+O/tM9BTC oTQTq097uLPNzrdPonfKXJ/BTZiz9I5y7EUNgXbXJwbhRcCpDahsDO79loi+WfDc HMSfujM5XN3Q50+erl42dX3sgqDIHGEwX1sw0m8ej1oIf0YRu0PsUGD0HfqbsHaK GjaU3gd+GBsOV4uexvfFPeEQCqwChB+8BNHHNj8JhbIuxJdfIaOJGmrvZoeumFXr sFAB29zBI6yxVVDBtdoudTVIzzj5LCUNV7LhY4S0FaDQfRvlKJJFeGUuVv+N0bXl m7F3Uo6Zg66ZPJqD6GGwW3DMTZPEZvx8/SjRrQ7nP/vV+hW5hVHDAM02KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNAhdfA0qLbGS6ld/LqjZ2YzE8aMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk9Yivw6 Z/22fbfi9g2fdixRqbRIYk1Af41WRtUfYLoFDuS02Dzkab7cnzaY9+1OOBxb8c1O sPWaTcji2ycByvCSKIUFFTx3oRLteOmXkEMRg6Z/pqrjrTu2k2YWYGejjVMKu43H Ru8bDdU23Po48JXLgsqZKfKWsaPkg1L3SgzuaaS5sCqD84AFk9VTpNmHwzfj7bRi A/PR6HglzV6M16Wv1ZM7tAgmTYyiEPjoeqMXrKJO/4U5ekpq5JLWQcm4WAIKrt0Q S0l/PQg7PiciWKdaldFrb2z2z5ZyVqMFtZXq1RV4OOIqMB3ZUeyV9LZcYlfVk3ml AAepiGKvTcEV3g== -----END CERTIFICATE-----Generated at Mon Oct 20 06:31:30 2025 by rpki-client