$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: EuPasH1JEKmvfoXesTGFaBbUk6wPpjrJHyvdRolF5KE= Subject key identifier: 7F:B3:65:C1:08:9C:81:37:39:DF:AB:9F:FF:A3:17:64:6B:8A:96:FC Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 0198D5BBEEE8B25CD285A7F21CFFE5336067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1503 Signing time: Sat 23 Aug 2025 07:02:00 +0000 Manifest this update: Sat 23 Aug 2025 07:02:00 +0000 Manifest next update: Sun 24 Aug 2025 07:02:00 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: UDok/es9s+LZvpEHUYBKoL8brffUHNXHuYre6uFMO/M=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:ee:e8:b2:5c:d2:85:a7:f2:1c:ff:e5:33:60:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Aug 23 07:02:00 2025 GMT Not After : Aug 24 07:02:00 2025 GMT Subject: CN=7fb365c1089c813739dfab9fffa317646b8a96fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:40:8c:9d:1d:f8:a6:b4:e4:37:53:b1:7c: 37:28:c5:b1:b9:a2:ad:35:8c:a9:a0:bc:8f:70:3f: d8:60:17:92:a3:c7:2f:4a:86:88:bf:73:dd:b6:71: 8c:c4:4b:1f:77:f1:5e:9d:b8:66:cc:fc:e4:d0:14: a2:dd:89:ff:8b:66:bb:01:08:39:3e:0b:56:9b:35: 41:52:66:82:6c:da:bf:03:f5:51:23:11:e9:e7:a3: c5:50:6e:6f:27:0c:d9:bd:74:a0:f4:d5:8a:3c:2a: 5b:3f:c2:87:6c:74:94:94:18:9f:7c:39:d3:a2:99: 18:cd:0b:81:04:a8:8a:6a:88:42:e0:f2:a3:44:d3: fe:f8:26:cc:53:90:1d:15:13:56:34:e7:17:64:0c: 1d:d7:a6:c9:8d:b0:6d:04:2d:44:92:1e:70:95:1b: 63:e0:d2:af:b2:9a:ef:9c:53:fb:16:4e:bd:ba:34: d4:1a:f8:d3:4a:dc:ce:71:4e:59:f6:a8:47:cd:fe: e8:17:2d:ac:40:dc:86:24:fe:d4:cd:7d:93:57:99: 5b:45:1f:e5:c9:3d:73:52:46:a8:75:a2:be:ec:91: 2d:a8:1e:00:55:ad:da:4f:15:92:f5:44:6f:90:49: 29:60:e8:90:2e:a0:e1:9a:8e:bf:34:b6:02:80:3a: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:65:C1:08:9C:81:37:39:DF:AB:9F:FF:A3:17:64:6B:8A:96:FC X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:91:f9:16:ab:d6:b1:64:c4:ab:d1:f5:43:6c:5c:8d:f9:da: 93:47:8f:d3:27:ee:a8:f6:24:ed:8f:3f:62:9d:1e:13:be:c8: 54:d8:65:0c:62:35:13:35:f6:51:ef:d3:c9:1f:f2:6f:f4:cd: 09:fb:64:cf:93:1e:8d:5c:8f:00:68:10:60:fe:5f:93:52:c0: c6:3b:c5:f8:64:3b:62:7c:53:dc:05:82:fc:b9:1f:ad:b9:ae: ff:78:49:73:a3:56:b0:94:f7:1e:4a:92:b9:b6:7e:72:b4:76: 69:d2:10:17:4c:ae:8b:b7:a2:99:f6:00:f3:19:ea:54:a3:d9: f9:86:8c:6d:f9:a1:81:ed:d0:e9:ad:17:8f:db:5e:22:73:8f: 8e:16:f6:17:d9:58:0f:99:44:5e:ce:05:da:36:c0:a2:75:aa: 70:78:bc:73:a2:4d:8c:ae:ae:7d:01:15:a4:23:2f:93:c1:cc: 29:45:41:b6:d7:5c:67:0e:78:0b:5d:29:23:14:6d:a5:75:6d: 17:7f:ee:51:a1:db:5f:45:60:65:73:d0:5a:e4:78:be:20:95: 10:e1:11:91:ea:46:5d:0d:a4:26:82:82:d1:05:9e:14:be:6c: ba:b2:2c:70:0e:b8:a4:14:c3:5a:d7:98:6b:ef:0a:ba:ab:79: 91:37:c2:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu+7oslzShafyHP/lM2BnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD Eyg3ZmIzNjVjMTA4OWM4MTM3MzlkZmFiOWZmZmEzMTc2NDZiOGE5NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AFAjJ0d+Ka05DdTsXw3KMWxuaKt NYypoLyPcD/YYBeSo8cvSoaIv3PdtnGMxEsfd/FenbhmzPzk0BSi3Yn/i2a7AQg5 PgtWmzVBUmaCbNq/A/VRIxHp56PFUG5vJwzZvXSg9NWKPCpbP8KHbHSUlBiffDnT opkYzQuBBKiKaohC4PKjRNP++CbMU5AdFRNWNOcXZAwd16bJjbBtBC1Ekh5wlRtj 4NKvsprvnFP7Fk69ujTUGvjTStzOcU5Z9qhHzf7oFy2sQNyGJP7UzX2TV5lbRR/l yT1zUkaodaK+7JEtqB4AVa3aTxWS9URvkEkpYOiQLqDhmo6/NLYCgDqGuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+zZcEInIE3Od+rn/+jF2Rripb8MB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJH5FqvW sWTEq9H1Q2xcjfnak0eP0yfuqPYk7Y8/Yp0eE77IVNhlDGI1EzX2Ue/TyR/yb/TN Cftkz5MejVyPAGgQYP5fk1LAxjvF+GQ7YnxT3AWC/Lkfrbmu/3hJc6NWsJT3HkqS ubZ+crR2adIQF0yui7eimfYA8xnqVKPZ+YaMbfmhge3Q6a0Xj9teInOPjhb2F9lY D5lEXs4F2jbAonWqcHi8c6JNjK6ufQEVpCMvk8HMKUVBttdcZw54C10pIxRtpXVt F3/uUaHbX0VgZXPQWuR4viCVEOERkepGXQ2kJoKC0QWeFL5surIscA64pBTDWteY a+8Kuqt5kTfC5g== -----END CERTIFICATE-----Generated at Sat Aug 23 11:33:56 2025 by rpki-client