$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: mulY2mMjyA5y2ggBH+8UgkONk1mkafliO8VxDodVqa0= Subject key identifier: 61:D0:E1:DB:7E:2B:D9:01:A3:37:8F:7B:C4:8D:21:4E:72:FB:F6:4E Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 0197B7B350F29A194894D12D61258E2BA7A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1601 Signing time: Sat 28 Jun 2025 18:01:11 +0000 Manifest this update: Sat 28 Jun 2025 18:01:11 +0000 Manifest next update: Sun 29 Jun 2025 18:01:11 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: Bp8m7Qu0dcZVw9rc_BWu1FRPqX8.roa (hash: N6O6yfHKnNMYKQB1lCPXlougroNicCEmKSBiW+DSdW0=) 11: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 12: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 13: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 14: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: T-MYFwOCQ5wihBdh9tnv_EkYKOM.roa (hash: IIF2TmwoLUledw2W8fTXX3PAqVA+XkgGRwp+zcOmb2w=) 24: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 25: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 26: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 27: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 28: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 29: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: feUQ3I8F3PjW8euDwxmJ/P/QwSqXXURzPEdWXaWQKsY=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:50:f2:9a:19:48:94:d1:2d:61:25:8e:2b:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jun 28 18:01:11 2025 GMT Not After : Jun 29 18:01:11 2025 GMT Subject: CN=61d0e1db7e2bd901a3378f7bc48d214e72fbf64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:10:d2:eb:ab:e0:d6:f4:fa:46:ab:dd:f5: d8:1f:53:6a:10:36:10:84:c1:83:f9:ed:a4:d5:a0: 04:86:47:c7:ac:80:47:db:5d:86:36:0a:39:3d:c1: 5b:eb:9f:48:14:8d:76:fd:55:5b:1a:7a:eb:2b:f0: 2a:1b:d6:5a:d7:85:76:b1:0c:1c:ed:eb:75:06:f9: 18:c2:87:58:c9:53:02:80:e2:eb:9d:68:3b:66:7a: 64:92:77:d7:28:73:64:b1:d9:7f:4c:1f:38:3a:96: dd:f6:70:64:65:71:b9:0d:02:f8:36:97:f6:83:1d: 4f:90:77:00:e0:52:59:6a:df:40:9a:8f:53:47:60: 77:50:93:1a:b6:b4:ac:b8:0b:fe:34:15:98:ad:b9: 56:04:b2:af:5c:53:e0:f7:24:be:4c:26:fa:0e:45: 73:6b:ee:dc:dc:de:47:d6:fc:46:81:3e:dc:07:c7: a6:de:eb:07:ac:3a:5d:b5:5e:6c:03:f0:ad:cb:d8: 9a:aa:49:19:7d:8c:75:6d:8f:d8:09:a3:7d:a9:e5: e1:35:38:24:9b:38:a1:dc:a6:9a:bc:a5:12:65:a4: 4a:67:04:4e:ba:fc:45:03:89:54:d8:65:13:69:7c: 9f:07:1d:de:2c:82:3f:4b:a2:f4:e7:c5:57:80:99: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D0:E1:DB:7E:2B:D9:01:A3:37:8F:7B:C4:8D:21:4E:72:FB:F6:4E X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:81:a8:11:8d:88:0a:2e:92:dc:de:43:7c:6b:51:b0:b1:81: 33:20:5b:65:48:63:6b:45:f6:79:1c:5a:06:14:1c:2e:10:e1: 36:77:84:1f:93:3c:68:16:e6:c8:90:53:be:f2:20:50:4d:b7: 62:ba:60:b4:c5:d3:fc:df:98:b9:84:95:7b:53:da:27:a8:aa: a4:0b:79:71:b7:e5:9a:76:70:7d:8b:ae:27:59:bc:8e:b9:ea: bb:34:63:09:19:e1:37:f5:96:30:c8:a2:bd:fb:fc:89:80:a6: 56:9d:a6:9b:d6:7a:e2:4d:a8:81:9f:4b:c1:e2:f7:88:ab:fd: a9:d3:12:f2:d9:d4:8c:03:a7:ec:f0:00:34:9b:59:04:03:d4: 99:2d:0a:8c:0e:62:22:c3:88:eb:da:e4:6b:d3:6d:37:70:93: 73:3f:e6:14:0a:02:2b:e3:25:fd:61:27:4d:17:19:11:26:93: c6:3e:0a:50:98:4c:cb:e1:5d:a4:a5:4a:87:37:bf:2b:ac:ba: 55:35:06:84:e3:75:90:ff:4f:0e:ec:17:5d:de:75:39:28:27: 42:da:95:dc:76:7e:bd:d4:6b:bb:c1:6b:61:64:57:5b:bb:5a: 9c:80:1d:07:f6:35:04:40:51:2b:6f:e7:23:6d:9e:b1:32:d1: 70:5b:dc:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s1DymhlIlNEtYSWOK6egMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwNjI4MTgwMTExWhcNMjUwNjI5MTgwMTExWjAzMTEwLwYDVQQD Eyg2MWQwZTFkYjdlMmJkOTAxYTMzNzhmN2JjNDhkMjE0ZTcyZmJmNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjcQ0uur4Nb0+kar3fXYH1NqEDYQ hMGD+e2k1aAEhkfHrIBH212GNgo5PcFb659IFI12/VVbGnrrK/AqG9Za14V2sQwc 7et1BvkYwodYyVMCgOLrnWg7ZnpkknfXKHNksdl/TB84Opbd9nBkZXG5DQL4Npf2 gx1PkHcA4FJZat9Amo9TR2B3UJMatrSsuAv+NBWYrblWBLKvXFPg9yS+TCb6DkVz a+7c3N5H1vxGgT7cB8em3usHrDpdtV5sA/Cty9iaqkkZfYx1bY/YCaN9qeXhNTgk mzih3KaavKUSZaRKZwROuvxFA4lU2GUTaXyfBx3eLII/S6L058VXgJl2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHQ4dt+K9kBozePe8SNIU5y+/ZOMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoGoEY2I Ci6S3N5DfGtRsLGBMyBbZUhja0X2eRxaBhQcLhDhNneEH5M8aBbmyJBTvvIgUE23 YrpgtMXT/N+YuYSVe1PaJ6iqpAt5cbflmnZwfYuuJ1m8jrnquzRjCRnhN/WWMMii vfv8iYCmVp2mm9Z64k2ogZ9LweL3iKv9qdMS8tnUjAOn7PAANJtZBAPUmS0KjA5i IsOI69rka9NtN3CTcz/mFAoCK+Ml/WEnTRcZESaTxj4KUJhMy+FdpKVKhze/K6y6 VTUGhON1kP9PDuwXXd51OSgnQtqV3HZ+vdRru8FrYWRXW7tanIAdB/Y1BEBRK2/n I22esTLRcFvcTQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:27:43 2025 by rpki-client