$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: gaYOAyibOpVrOZOlQuv5ELJNlAwjCzateq98hRGBp6s= Subject key identifier: C4:08:C8:75:80:42:EC:78:4E:2E:AC:A8:A9:4D:E3:E6:4E:0E:16:FB Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 0197B7EA3EE9B4A337A85F033AE8D8E9F0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 146F Signing time: Sat 28 Jun 2025 19:01:11 +0000 Manifest this update: Sat 28 Jun 2025 19:01:11 +0000 Manifest next update: Sun 29 Jun 2025 19:01:11 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: mJmDM2vVUAG4gFxjW3BaRMMVFw/IV5FHS6qAI7xeS5U=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:3e:e9:b4:a3:37:a8:5f:03:3a:e8:d8:e9:f0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jun 28 19:01:11 2025 GMT Not After : Jun 29 19:01:11 2025 GMT Subject: CN=c408c8758042ec784e2eaca8a94de3e64e0e16fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:28:0e:fe:71:92:d7:62:ba:69:a4:9c:1f: bb:ba:0c:bf:2c:bb:64:ef:3b:3f:cd:ff:3c:9f:f8: 02:1d:48:2c:ef:cb:06:bc:8a:db:a0:19:45:ff:6a: dc:b3:a2:e7:2d:87:d6:e4:87:70:96:7e:d3:51:af: f6:57:c5:c1:84:7a:4c:a4:85:77:e7:ee:ad:61:8a: f4:df:9e:9a:c1:7a:ea:ce:7b:b3:90:27:ef:e2:88: 9f:84:ef:b8:fb:67:8a:04:ac:c2:ce:f0:5e:73:07: 4d:90:5d:30:0e:4d:45:b5:03:6c:45:95:f2:ae:1c: c2:c9:3b:d1:ff:f4:c3:c8:c5:1e:50:1c:d0:7d:4f: 63:d8:3f:99:19:85:e5:95:dd:f9:fd:82:0b:bf:cc: b1:7d:61:71:34:e7:49:2b:be:6d:ac:be:df:d6:ed: 89:6b:71:50:b9:5b:d8:5f:50:04:32:9c:88:d4:e5: bd:aa:62:a0:2e:9d:a5:e0:13:6b:04:5f:b3:6c:f4: fa:94:ff:e9:b6:9b:62:f3:ed:04:f5:39:e3:35:c1: ba:40:1e:fe:f1:f3:d4:67:c9:de:03:06:b4:7a:a2: e9:e9:dc:06:51:c0:eb:a3:e4:2e:66:cd:42:1e:de: 96:01:7a:ed:00:37:ef:5f:b9:13:67:35:12:c1:9e: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:C8:75:80:42:EC:78:4E:2E:AC:A8:A9:4D:E3:E6:4E:0E:16:FB X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:01:2a:9a:fb:2e:7e:2e:dc:de:3f:6f:dc:86:0a:72:63:13: 87:43:cf:64:9a:89:71:76:7f:c0:d2:2e:90:4d:47:4b:5d:97: 0f:37:67:7d:86:91:17:10:b7:26:ba:7e:89:17:90:7b:c7:3d: 52:c2:ac:4f:e3:30:de:16:46:8b:12:51:d6:d5:af:e8:ab:1e: 6b:0e:bd:cc:05:68:c6:7d:31:c1:7a:8b:2f:1e:6f:18:1c:83: 38:e4:97:42:01:de:b2:fe:dd:56:60:13:13:50:65:62:fe:7b: f4:c0:35:b6:b8:63:1e:e5:19:ff:06:7a:ac:8d:f0:bb:18:a9: 6b:e9:71:2e:15:8c:2b:58:1c:b0:2a:b1:9a:a9:48:b5:9f:be: e2:e7:34:0a:a6:57:c9:92:2e:ab:c1:e8:f3:85:74:17:a2:33: c4:79:47:3d:05:fe:7c:a7:bb:51:96:1d:6d:c6:2d:2f:d1:d3: c7:2c:32:b0:18:f0:9d:fb:fa:a5:95:5e:24:09:67:b5:f9:63: f3:70:8e:e7:d1:17:16:86:d5:59:35:16:43:ad:91:58:77:77: 69:5b:44:49:b5:db:c2:e3:36:c7:9d:28:dc:9b:04:09:50:aa: e3:51:a2:50:17:67:51:7d:93:68:1b:53:b9:8d:a6:56:3b:1d: f5:e1:53:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36j7ptKM3qF8DOujY6fC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwNjI4MTkwMTExWhcNMjUwNjI5MTkwMTExWjAzMTEwLwYDVQQD EyhjNDA4Yzg3NTgwNDJlYzc4NGUyZWFjYThhOTRkZTNlNjRlMGUxNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F8oDv5xktdiummknB+7ugy/LLtk 7zs/zf88n/gCHUgs78sGvIrboBlF/2rcs6LnLYfW5Idwln7TUa/2V8XBhHpMpIV3 5+6tYYr0356awXrqznuzkCfv4oifhO+4+2eKBKzCzvBecwdNkF0wDk1FtQNsRZXy rhzCyTvR//TDyMUeUBzQfU9j2D+ZGYXlld35/YILv8yxfWFxNOdJK75trL7f1u2J a3FQuVvYX1AEMpyI1OW9qmKgLp2l4BNrBF+zbPT6lP/ptpti8+0E9TnjNcG6QB7+ 8fPUZ8neAwa0eqLp6dwGUcDro+QuZs1CHt6WAXrtADfvX7kTZzUSwZ5fWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQIyHWAQux4Ti6sqKlN4+ZODhb7MB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgEqmvsu fi7c3j9v3IYKcmMTh0PPZJqJcXZ/wNIukE1HS12XDzdnfYaRFxC3Jrp+iReQe8c9 UsKsT+Mw3hZGixJR1tWv6Kseaw69zAVoxn0xwXqLLx5vGByDOOSXQgHesv7dVmAT E1BlYv579MA1trhjHuUZ/wZ6rI3wuxipa+lxLhWMK1gcsCqxmqlItZ++4uc0CqZX yZIuq8Ho84V0F6IzxHlHPQX+fKe7UZYdbcYtL9HTxywysBjwnfv6pZVeJAlntflj 83CO59EXFobVWTUWQ62RWHd3aVtESbXbwuM2x50o3JsECVCq41GiUBdnUX2TaBtT uY2mVjsd9eFTYQ== -----END CERTIFICATE-----Generated at Sun Jun 29 02:10:40 2025 by rpki-client