$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: Ibs1UO98wr0KfiByLcoD817sRqJsr7omAgDM6rDZq+A= Subject key identifier: FE:7B:09:10:F7:1E:71:CC:5D:51:86:BE:A2:B0:29:2E:47:DB:E3:FF Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 0198D583EC0B9B1F45AF679557F7A14C2B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 1666 Signing time: Sat 23 Aug 2025 06:00:49 +0000 Manifest this update: Sat 23 Aug 2025 06:00:49 +0000 Manifest next update: Sun 24 Aug 2025 06:00:49 +0000 Files and hashes: 1: 3MnJDLOq_VBrHVvHK2f3mbUAwW0.roa (hash: 64LzPC+ZGrPKmCOqfPuSyQatIzMUWRCyv8INy9zu0ko=) 2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 3: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 4: BOsoT_8cHHlHPp4TNYXa5KBCs4k.roa (hash: 93HhNat4MIOuEgH6RhS2/x/PFQHIK5pmPn1SQJLneU0=) 5: F94Kob0udJ81aujmin5aftWlc-k.roa (hash: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=) 6: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 7: HDWOzuPTwlAHknanrzPQOxDtfLY.roa (hash: FUrGik+y3pqdGMlwd5PDuEglRaEJqMBal6SEbEqnbvU=) 8: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 9: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 10: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 11: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 12: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 13: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 14: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: rA6HORR6RYlBIDg7ZH8Ge0FJye9O4w4FKRR7nse997k=) 15: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:ec:0b:9b:1f:45:af:67:95:57:f7:a1:4c:2b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Aug 23 06:00:49 2025 GMT Not After : Aug 24 06:00:49 2025 GMT Subject: CN=fe7b0910f71e71cc5d5186bea2b0292e47dbe3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:45:20:7b:c5:db:35:4f:ec:50:a8:63:1d: e8:32:0e:27:c2:5b:4c:da:0f:36:a6:5f:3f:30:ea: 8d:18:25:ed:78:18:8b:39:c1:5e:bf:4d:a6:c6:ac: 53:1e:4d:63:94:26:fd:6f:02:15:9a:98:6f:9d:68: e3:e1:b2:25:dd:f6:cf:6f:13:74:f3:06:9e:b7:54: de:c8:d0:43:11:1a:8b:c4:b2:52:7e:f3:a7:1c:4b: cd:e4:18:4b:1a:97:04:d9:a9:c7:66:af:f0:58:14: ab:ea:6b:99:ae:59:0e:90:2f:28:ee:92:4f:82:0a: 5d:75:af:30:8a:36:75:6f:d3:e3:50:f6:34:89:02: 81:8e:34:a0:9f:13:1d:ec:42:96:6e:2d:70:cb:a9: 80:09:e7:ca:9c:62:21:2a:e3:5b:fe:da:50:00:a2: 27:eb:24:bb:1b:74:f7:fa:89:98:46:e6:ea:fc:f9: a2:8b:40:50:e8:04:5a:ee:4d:f6:31:91:4b:60:85: 43:20:56:01:27:5d:d1:ac:7a:56:1c:c3:a0:af:78: 04:d3:60:8e:86:49:7f:5a:cf:2b:9f:fe:f2:70:60: 32:27:d1:9e:ab:f1:70:aa:86:54:ea:ce:30:78:5c: cb:e7:80:a1:0b:88:a5:f1:08:87:e1:80:67:d2:0d: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:09:10:F7:1E:71:CC:5D:51:86:BE:A2:B0:29:2E:47:DB:E3:FF X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ef:0a:53:8a:be:95:d2:1b:d4:ce:0d:f1:0a:b0:c9:d3:32: 8e:c2:89:8f:6a:a5:b7:b0:32:9b:60:37:91:b1:68:13:54:1e: 85:8b:56:36:f1:35:74:41:b9:2a:ff:02:da:73:9a:a6:0b:64: f9:cd:a3:c5:5d:25:5b:b3:37:c2:fa:67:78:8c:18:0b:44:8c: 7a:ad:2d:14:77:83:c8:25:08:27:29:d0:9f:7d:db:35:b2:52: 45:05:0d:c1:28:6b:b3:af:19:20:35:de:26:ea:91:aa:18:70: 6f:1b:ea:35:2a:4f:31:60:75:2a:13:d4:f4:e7:ee:a7:28:8c: c2:02:a4:b5:cb:00:f5:22:21:e3:26:73:9b:04:19:a8:0b:8f: 45:4f:db:37:1e:01:f5:40:b9:4b:bc:f3:14:51:65:48:ee:37: 19:e0:a9:6e:5a:8b:cd:9c:62:79:d2:30:f1:f6:58:de:2d:38: 48:55:40:3e:34:4a:3c:00:15:64:fa:52:a7:55:5e:c2:57:58: 7c:03:21:e6:cc:4e:bf:4c:15:ab:61:ab:98:0f:c2:dc:8f:d9: 9f:42:47:c0:f8:4f:c8:12:74:e2:56:a3:eb:8b:37:a0:4a:b2: c8:48:3c:64:9f:e8:b3:66:5c:28:ec:b8:10:49:af:59:cf:35: 2f:a1:7b:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg+wLmx9Fr2eVV/ehTCsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwODIzMDYwMDQ5WhcNMjUwODI0MDYwMDQ5WjAzMTEwLwYDVQQD EyhmZTdiMDkxMGY3MWU3MWNjNWQ1MTg2YmVhMmIwMjkyZTQ3ZGJlM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypFFIHvF2zVP7FCoYx3oMg4nwltM 2g82pl8/MOqNGCXteBiLOcFev02mxqxTHk1jlCb9bwIVmphvnWjj4bIl3fbPbxN0 8waet1TeyNBDERqLxLJSfvOnHEvN5BhLGpcE2anHZq/wWBSr6muZrlkOkC8o7pJP ggpdda8wijZ1b9PjUPY0iQKBjjSgnxMd7EKWbi1wy6mACefKnGIhKuNb/tpQAKIn 6yS7G3T3+omYRubq/Pmii0BQ6ARa7k32MZFLYIVDIFYBJ13RrHpWHMOgr3gE02CO hkl/Ws8rn/7ycGAyJ9Geq/FwqoZU6s4weFzL54ChC4il8QiH4YBn0g2JmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP57CRD3HnHMXVGGvqKwKS5H2+P/MB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+8KU4q+ ldIb1M4N8QqwydMyjsKJj2qlt7Aym2A3kbFoE1QehYtWNvE1dEG5Kv8C2nOapgtk +c2jxV0lW7M3wvpneIwYC0SMeq0tFHeDyCUIJynQn33bNbJSRQUNwShrs68ZIDXe JuqRqhhwbxvqNSpPMWB1KhPU9OfupyiMwgKktcsA9SIh4yZzmwQZqAuPRU/bNx4B 9UC5S7zzFFFlSO43GeCpblqLzZxiedIw8fZY3i04SFVAPjRKPAAVZPpSp1VewldY fAMh5sxOv0wVq2GrmA/C3I/Zn0JHwPhPyBJ04laj64s3oEqyyEg8ZJ/os2ZcKOy4 EEmvWc81L6F78Q== -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:28 2025 by rpki-client