$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: /uakvCGNh2VPkowoEoQE5s8kSzRnHT5tNg2S1Nkjk0c= Subject key identifier: DC:8A:08:44:0D:C9:C9:18:90:48:F8:13:68:62:AE:23:93:5D:50:80 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 0199FE10349975A4EE8BC445F99AA68B0316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1731 Signing time: Sun 19 Oct 2025 20:01:38 +0000 Manifest this update: Sun 19 Oct 2025 20:01:38 +0000 Manifest next update: Mon 20 Oct 2025 20:01:38 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 8nc4NhvOMvpeI7x8HxaniFHDjBc.roa (hash: W0V1Q9lbexj58dphki1c4Du/LSeRBEEqibb5v1Fs0mM=) 8: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 9: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 10: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 11: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 12: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 13: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 14: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (hash: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=) 24: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 25: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 26: WT-GZLslFpz7tQemEuS3upR8DIQ.roa (hash: z52DbyoPRqp5Jhc+beypTnWSTAHlbvNvC0/Czw77X6s=) 27: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 28: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 29: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: sQAsM16sUgnSnYOX8+LNz5uWk/aX1dRgtBTBraxtWPI=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:10:34:99:75:a4:ee:8b:c4:45:f9:9a:a6:8b:03:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Oct 19 20:01:38 2025 GMT Not After : Oct 20 20:01:38 2025 GMT Subject: CN=dc8a08440dc9c9189048f8136862ae23935d5080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:c1:58:c8:e7:4a:63:ab:1d:08:3d:a9:92: f5:26:ec:8f:4a:49:93:1b:69:6f:e9:d4:8e:4b:2f: f0:ab:b7:e3:01:cb:a1:1f:d4:3d:06:fd:24:ce:8b: 13:d1:04:36:49:b3:f0:37:04:21:70:36:ca:5f:51: 28:dc:92:5e:47:8d:ad:b1:f3:76:d8:0b:bc:8c:a2: bb:f6:51:ba:01:43:40:ec:87:fe:71:4c:74:6d:1e: d9:0c:43:52:82:64:27:ea:b8:4f:1f:5a:4c:09:2f: 14:22:f8:3f:d0:ef:e1:8b:a6:56:a6:38:46:ef:90: 0c:b7:e3:2c:cb:0f:cf:1a:a8:bd:da:87:e5:83:eb: e5:4a:9c:0e:ff:20:3c:79:8e:31:4d:9b:92:83:78: fd:c8:94:bd:a9:66:6a:ec:80:e9:c8:1c:59:88:e5: 74:76:99:e7:5c:36:0b:e0:61:4c:aa:0e:18:c4:b6: 31:39:c5:a5:b8:f5:83:ee:1e:e2:01:5d:8c:bb:ff: cf:76:69:5c:66:88:57:5e:05:1a:a6:fc:32:be:e7: 01:4e:0a:97:a2:f5:9f:27:02:e8:e9:71:f4:6e:7b: f8:fc:46:63:a8:6f:05:3c:37:fa:84:b8:10:ab:be: 81:3d:dc:ac:13:18:53:ae:5a:31:df:a9:25:d2:76: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8A:08:44:0D:C9:C9:18:90:48:F8:13:68:62:AE:23:93:5D:50:80 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:29:03:3e:ed:a0:f5:0d:0a:fd:33:fd:5f:e4:31:6c:15:b9: 4d:93:20:d7:ba:2d:45:6b:bd:bc:11:e4:1e:b6:b9:34:e4:27: 5b:2b:24:c4:e2:a9:1e:bf:11:01:b5:57:b5:af:93:01:fa:6d: 38:1b:e0:a6:69:3a:25:4e:e7:76:60:c7:7e:98:ed:33:48:bb: a4:ad:9e:d4:ed:8b:c4:f0:c7:c7:45:99:58:ec:1a:19:0e:5e: 2a:3c:30:81:2f:07:db:0a:94:13:33:0f:b9:6c:bf:3b:dc:b0: bc:bf:20:f1:49:88:d7:aa:54:c0:3e:3d:bd:d8:a5:1a:a1:45: 97:86:ee:a5:53:3d:50:93:61:ce:b5:b2:d5:60:aa:85:69:a2: a5:7b:11:44:9a:8a:c1:86:b1:30:5b:17:2e:5e:67:79:cf:d3: b6:a3:51:9b:f0:44:a0:72:d1:be:d2:3c:1d:75:3a:02:1f:ff: a7:06:52:89:c1:dc:0a:26:15:19:d9:15:80:73:71:4c:82:62: 5d:86:58:c8:0c:cd:9e:e0:38:4e:a3:db:5c:31:ea:3c:b4:f7: 53:2d:53:a4:93:e7:db:35:68:56:fb:a4:5d:d3:e3:4b:50:23: 1c:2c:cb:75:22:27:82:6f:9b:f2:16:b7:f3:1e:96:3b:10:18: b3:99:c4:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+EDSZdaTui8RF+ZqmiwMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUxMDE5MjAwMTM4WhcNMjUxMDIwMjAwMTM4WjAzMTEwLwYDVQQD EyhkYzhhMDg0NDBkYzljOTE4OTA0OGY4MTM2ODYyYWUyMzkzNWQ1MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GfBWMjnSmOrHQg9qZL1JuyPSkmT G2lv6dSOSy/wq7fjAcuhH9Q9Bv0kzosT0QQ2SbPwNwQhcDbKX1Eo3JJeR42tsfN2 2Au8jKK79lG6AUNA7If+cUx0bR7ZDENSgmQn6rhPH1pMCS8UIvg/0O/hi6ZWpjhG 75AMt+Msyw/PGqi92oflg+vlSpwO/yA8eY4xTZuSg3j9yJS9qWZq7IDpyBxZiOV0 dpnnXDYL4GFMqg4YxLYxOcWluPWD7h7iAV2Mu//PdmlcZohXXgUapvwyvucBTgqX ovWfJwLo6XH0bnv4/EZjqG8FPDf6hLgQq76BPdysExhTrlox36kl0na0zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyKCEQNyckYkEj4E2hiriOTXVCAMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSkDPu2g 9Q0K/TP9X+QxbBW5TZMg17otRWu9vBHkHra5NOQnWyskxOKpHr8RAbVXta+TAfpt OBvgpmk6JU7ndmDHfpjtM0i7pK2e1O2LxPDHx0WZWOwaGQ5eKjwwgS8H2wqUEzMP uWy/O9ywvL8g8UmI16pUwD49vdilGqFFl4bupVM9UJNhzrWy1WCqhWmipXsRRJqK wYaxMFsXLl5nec/TtqNRm/BEoHLRvtI8HXU6Ah//pwZSicHcCiYVGdkVgHNxTIJi XYZYyAzNnuA4TqPbXDHqPLT3Uy1TpJPn2zVoVvukXdPjS1AjHCzLdSIngm+b8ha3 8x6WOxAYs5nELw== -----END CERTIFICATE-----Generated at Mon Oct 20 00:01:37 2025 by rpki-client