$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: OdfFki19RUM5iaEQNyvoKsKmRI8fTS0evxgd4IiZWmo= Subject key identifier: E8:5B:94:CC:CC:F5:6B:08:56:6C:CC:86:CA:B9:5A:B1:91:52:EE:67 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 0198D583815B020657AD3AF90DBC3AA7E013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1658 Signing time: Sat 23 Aug 2025 06:00:21 +0000 Manifest this update: Sat 23 Aug 2025 06:00:21 +0000 Manifest next update: Sun 24 Aug 2025 06:00:21 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: 0ja6hBkULEbUhE2/kTwTsl1I+85dMtEE1D4BSnhXSdg=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:81:5b:02:06:57:ad:3a:f9:0d:bc:3a:a7:e0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Aug 23 06:00:21 2025 GMT Not After : Aug 24 06:00:21 2025 GMT Subject: CN=e85b94ccccf56b08566ccc86cab95ab19152ee67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c2:05:13:37:26:4b:dd:66:34:ab:cb:b1:c5: 95:34:0d:9d:a0:c6:a2:48:1f:97:42:a3:28:0f:00: 66:d9:da:ea:84:fe:a3:9c:59:9f:62:84:d5:29:c4: 80:a0:6b:92:fe:d4:26:ba:01:15:d6:0a:ad:07:e4: 89:8a:ab:68:89:24:74:67:09:ee:fd:2e:26:ca:b8: 10:e5:db:5d:6f:5d:07:81:b6:49:ba:7a:37:fa:05: ef:bf:4f:ac:87:49:22:20:a1:94:d2:55:c5:0a:f1: f7:5e:e6:73:bf:1b:b9:ff:6e:44:91:a1:06:06:2c: 29:6c:2a:26:c3:24:c3:af:63:5b:a6:ca:c9:77:d2: 66:0c:c3:47:09:fd:f2:dc:92:ef:b0:94:37:1a:8f: 8e:dd:3f:0d:82:45:f7:b5:34:b1:e0:d0:da:9e:de: f1:ba:ec:8c:b3:33:2a:bb:49:1f:3f:4a:94:ce:99: 27:a8:16:8e:cc:c3:5e:27:3e:23:3c:a5:2e:9f:90: 25:f3:df:a4:8f:0a:a9:8c:71:8b:de:83:96:43:52: a5:a4:e5:7c:72:66:60:2c:dc:50:c2:d8:2c:cf:9f: 95:4a:52:6b:80:24:5d:22:ea:4f:92:0e:2e:98:2b: cd:e0:3b:3b:f0:1a:20:34:b1:b3:ae:47:2f:f3:30: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:94:CC:CC:F5:6B:08:56:6C:CC:86:CA:B9:5A:B1:91:52:EE:67 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:11:e0:9b:66:67:dd:84:dc:02:ec:e2:fb:b3:e5:c1:b1:a4: 3b:9b:82:4f:c3:ef:9e:7d:12:2a:ed:c2:2f:a3:53:9f:ae:bc: 3d:ca:18:13:b2:d8:59:7e:64:dc:9f:76:b5:29:a8:49:43:ee: 25:ca:b7:80:0f:30:76:11:06:b4:26:e9:57:52:26:9e:4d:9a: d5:48:48:f8:cc:31:36:98:89:be:c5:75:8b:85:27:e0:7f:c2: 37:03:10:9b:d6:63:f1:1d:fc:55:30:86:5b:29:15:cf:ec:ac: a4:bd:72:fa:d5:3a:6a:c8:b6:f6:12:6c:00:86:5b:c4:13:99: 6b:2b:40:19:83:cd:e0:51:de:a8:3b:43:bf:84:63:db:0c:ca: d6:4b:a2:eb:ef:5c:58:5f:55:83:4b:d6:36:c7:09:96:07:ac: d3:f9:cc:8c:a6:2e:b4:1c:75:e2:90:d9:08:7b:37:50:46:f7: c7:03:6b:f9:f6:9a:a0:8c:c1:20:97:c0:b3:53:37:28:5a:7f: 46:3e:49:dd:01:51:20:1e:0c:7f:ac:1b:81:37:c5:be:84:f8: ad:47:9a:0a:08:45:4e:03:37:55:88:77:d4:f6:8b:a2:a6:87: ef:0c:70:91:ac:f2:f0:51:05:1b:de:b4:ea:39:ea:a5:2d:5a: c7:63:90:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg4FbAgZXrTr5Dbw6p+ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwODIzMDYwMDIxWhcNMjUwODI0MDYwMDIxWjAzMTEwLwYDVQQD EyhlODViOTRjY2NjZjU2YjA4NTY2Y2NjODZjYWI5NWFiMTkxNTJlZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MIFEzcmS91mNKvLscWVNA2doMai SB+XQqMoDwBm2drqhP6jnFmfYoTVKcSAoGuS/tQmugEV1gqtB+SJiqtoiSR0Zwnu /S4myrgQ5dtdb10HgbZJuno3+gXvv0+sh0kiIKGU0lXFCvH3XuZzvxu5/25EkaEG BiwpbComwyTDr2NbpsrJd9JmDMNHCf3y3JLvsJQ3Go+O3T8NgkX3tTSx4NDant7x uuyMszMqu0kfP0qUzpknqBaOzMNeJz4jPKUun5Al89+kjwqpjHGL3oOWQ1KlpOV8 cmZgLNxQwtgsz5+VSlJrgCRdIupPkg4umCvN4Ds78BogNLGzrkcv8zBQfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhblMzM9WsIVmzMhsq5WrGRUu5nMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxHgm2Zn 3YTcAuzi+7PlwbGkO5uCT8Pvnn0SKu3CL6NTn668PcoYE7LYWX5k3J92tSmoSUPu Jcq3gA8wdhEGtCbpV1Imnk2a1UhI+MwxNpiJvsV1i4Un4H/CNwMQm9Zj8R38VTCG WykVz+yspL1y+tU6asi29hJsAIZbxBOZaytAGYPN4FHeqDtDv4Rj2wzK1kui6+9c WF9Vg0vWNscJlges0/nMjKYutBx14pDZCHs3UEb3xwNr+faaoIzBIJfAs1M3KFp/ Rj5J3QFRIB4Mf6wbgTfFvoT4rUeaCghFTgM3VYh31PaLoqaH7wxwkazy8FEFG960 6jnqpS1ax2OQGQ== -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:45 2025 by rpki-client