$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: 77kxcsdjKHsMy8ZxWINEyzHJyeXC1AbAEzHVb65XbEU= Subject key identifier: 8C:34:67:A4:AE:EC:30:FE:2B:1C:3D:A5:07:F3:A4:79:2D:98:D9:A4 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 0198D65F79A5D3E8AC6FBD1C691461F0EFB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1697 Signing time: Sat 23 Aug 2025 10:00:37 +0000 Manifest this update: Sat 23 Aug 2025 10:00:37 +0000 Manifest next update: Sun 24 Aug 2025 10:00:37 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: F5MHXDqnIzYEJiqy-lSbHqiutdE.roa (hash: Kr6UA+01g5mj3k9HL3gZp8uUuI6XmpL1gu4D3yxcHg4=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 25: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 26: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 27: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 29: bSVo2RrhzLf-kvkumfM8eA1LBb4.roa (hash: EM8XYwd0G3fvP2wAeyIFrzfPWu8wisMVd1TPeR4ae6U=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: 2e4d5iLHhmBq4xE8qsApKEmJ5WSa4kYw6c0AHyCvmmQ=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:79:a5:d3:e8:ac:6f:bd:1c:69:14:61:f0:ef:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Aug 23 10:00:37 2025 GMT Not After : Aug 24 10:00:37 2025 GMT Subject: CN=8c3467a4aeec30fe2b1c3da507f3a4792d98d9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:5a:c9:89:38:a3:28:08:be:29:b4:1e:03: 10:95:b9:2e:5e:20:e5:fd:64:a9:be:d1:92:b2:02: 12:7e:93:0f:d9:bc:04:77:94:d1:24:6c:f1:cd:4c: 51:d1:04:ab:a4:93:2a:fb:53:06:d2:83:df:30:4e: 37:1f:3e:f9:85:46:1d:46:7a:f9:af:28:7e:86:9b: f7:c5:13:43:82:10:33:0d:a2:42:cd:16:38:a3:e7: 22:dd:95:7c:ed:ba:88:63:09:21:4f:55:db:9c:c7: b9:51:17:e8:60:b4:a6:cf:d5:bf:04:ad:ad:99:31: ae:16:4f:64:6b:3d:5f:87:e0:af:d7:22:0b:e8:c9: 53:73:03:46:63:38:9f:7e:7f:78:fb:98:40:e5:d5: 59:49:21:a1:15:41:13:7a:fd:f6:eb:29:8e:9a:ff: 08:ca:d3:b4:a2:de:ef:7d:65:0a:39:70:1e:31:1b: c5:f6:74:ba:0f:fd:cd:53:81:e8:db:65:dc:6b:4d: 52:4a:12:5c:a1:dc:19:f1:8e:84:75:77:f0:ff:3f: 26:c8:54:62:85:a9:d9:d5:c1:87:e0:0e:d0:d1:e9: af:2e:82:95:3c:f0:e0:59:e7:a5:9a:65:97:75:e5: 26:96:7d:e4:1d:70:04:94:9d:0e:d4:77:6f:d0:20: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:67:A4:AE:EC:30:FE:2B:1C:3D:A5:07:F3:A4:79:2D:98:D9:A4 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:dc:f0:e4:77:ac:94:df:2f:e6:99:12:f1:bb:6a:5e:28:7d: 54:c7:d2:7d:71:05:84:1f:ca:e5:69:9f:47:10:06:7a:f0:a3: 3a:62:72:7b:03:60:d9:e6:52:76:7d:38:83:65:f2:67:83:2e: bc:7b:46:7d:c7:cc:a0:07:3c:b9:b0:ba:f3:27:d3:0a:aa:f4: 9c:46:40:f7:45:96:36:58:59:84:29:03:4e:97:d3:c2:d1:07: 56:2f:fd:7d:01:c0:4e:0a:8b:74:44:aa:83:3a:60:66:65:77: 0d:24:06:86:63:d7:da:d2:71:4a:55:01:fd:51:49:5e:ec:40: 23:b7:2f:aa:5d:a9:18:f5:b2:80:ab:bc:4d:f9:bb:24:5e:5c: a5:60:ed:31:06:cb:25:e8:b1:7e:9d:20:43:ab:27:63:4d:2c: 64:8c:00:0d:18:bf:16:00:51:8f:00:10:91:36:ce:0b:3b:a0: cf:b8:a5:c9:91:79:77:d5:d5:5a:25:4f:47:7c:8a:94:0f:57: df:b9:99:dd:0d:eb:06:3d:92:88:b6:44:7b:7e:e7:0e:8c:43: df:11:e5:fe:8a:bf:a8:90:0a:60:eb:f4:a4:49:12:af:59:d5: 72:46:ad:7c:2f:63:c4:17:a8:31:ee:ae:d5:03:32:65:29:8e: fc:fb:c0:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX3ml0+isb70caRRh8O+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwODIzMTAwMDM3WhcNMjUwODI0MTAwMDM3WjAzMTEwLwYDVQQD Eyg4YzM0NjdhNGFlZWMzMGZlMmIxYzNkYTUwN2YzYTQ3OTJkOThkOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SxayYk4oygIvim0HgMQlbkuXiDl /WSpvtGSsgISfpMP2bwEd5TRJGzxzUxR0QSrpJMq+1MG0oPfME43Hz75hUYdRnr5 ryh+hpv3xRNDghAzDaJCzRY4o+ci3ZV87bqIYwkhT1XbnMe5URfoYLSmz9W/BK2t mTGuFk9kaz1fh+Cv1yIL6MlTcwNGYziffn94+5hA5dVZSSGhFUETev326ymOmv8I ytO0ot7vfWUKOXAeMRvF9nS6D/3NU4Ho22Xca01SShJcodwZ8Y6EdXfw/z8myFRi hanZ1cGH4A7Q0emvLoKVPPDgWeelmmWXdeUmln3kHXAElJ0O1Hdv0CAlqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw0Z6Su7DD+Kxw9pQfzpHktmNmkMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdzw5Hes lN8v5pkS8btqXih9VMfSfXEFhB/K5WmfRxAGevCjOmJyewNg2eZSdn04g2XyZ4Mu vHtGfcfMoAc8ubC68yfTCqr0nEZA90WWNlhZhCkDTpfTwtEHVi/9fQHATgqLdESq gzpgZmV3DSQGhmPX2tJxSlUB/VFJXuxAI7cvql2pGPWygKu8Tfm7JF5cpWDtMQbL Jeixfp0gQ6snY00sZIwADRi/FgBRjwAQkTbOCzugz7ilyZF5d9XVWiVPR3yKlA9X 37mZ3Q3rBj2SiLZEe37nDoxD3xHl/oq/qJAKYOv0pEkSr1nVckatfC9jxBeoMe6u 1QMyZSmO/PvA1A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:36 2025 by rpki-client