$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft File: uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json) Hash identifier: n4ZzzQOu48tfE8YWA58GmKzaD8y1hI8eoDwaaKcWYJ8= Subject key identifier: 88:54:64:B3:5D:4F:D7:B6:7B:49:B3:67:E7:9D:B2:6D:C0:6D:1A:90 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 0197B821013DE533E9FCA351D4F8D9A53CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft Manifest number: 030D Signing time: Sat 28 Jun 2025 20:01:00 +0000 Manifest this update: Sat 28 Jun 2025 20:01:00 +0000 Manifest next update: Sun 29 Jun 2025 20:01:00 +0000 Files and hashes: 1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=) 2: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=) 3: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=) 4: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=) 5: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=) 6: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=) 7: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=) 8: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=) 9: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=) 10: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=) 11: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=) 12: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=) 13: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=) 14: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=) 15: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=) 16: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=) 17: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=) 18: iyGn9-N4_Y-74wtv84vIggbUgGE.roa (hash: 0+sbmwNGxEETCuI+TbmtpOScQW3Ga70I+RwZkGrwt4I=) 19: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=) 20: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=) 21: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: +PwagBB+N+FPQnJNsN3DofU8QdbIrIivWlpwJs2zmiU=) 22: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=) 23: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:21:01:3d:e5:33:e9:fc:a3:51:d4:f8:d9:a5:3c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jun 28 20:01:00 2025 GMT Not After : Jun 29 20:01:00 2025 GMT Subject: CN=885464b35d4fd7b67b49b367e79db26dc06d1a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:b0:41:6c:04:83:43:ff:13:6a:68:24:43: ee:49:57:7a:f9:70:56:f7:84:2b:ee:17:e2:40:d1: 29:89:d4:45:c0:47:8b:b6:9a:20:78:4d:51:f8:5b: 79:33:76:af:5d:bd:f2:01:0b:c8:06:3b:ef:5c:dd: fc:e7:d4:fc:fb:23:dd:85:ea:fe:b2:64:f0:ed:cd: 01:d7:0c:46:13:50:7a:34:d0:90:17:09:14:5f:4d: d4:ae:50:a1:29:b9:e1:1e:ba:4d:ed:ad:5a:ff:3b: 42:ec:75:fb:ba:aa:0b:6e:93:31:7a:6d:3e:ad:c1: 63:6a:d4:ec:cf:fd:79:60:ac:cc:c5:e8:36:b0:98: dc:77:3c:bf:70:a7:af:fb:9b:9b:ad:e9:5b:36:18: 0d:60:a9:c6:1e:13:8b:ca:a2:dd:50:26:e9:0b:f6: 20:98:4e:55:db:93:c2:2e:7d:21:02:0a:5a:86:1b: d0:f6:54:9d:1f:80:f2:f2:5d:3e:ec:73:c5:48:60: 9d:16:5d:53:4f:04:ea:c2:13:37:1c:c5:bd:82:07: ec:c4:68:3c:2b:6f:c2:e5:c5:94:74:48:e2:fd:98: 62:ca:cc:b5:c9:96:d1:82:d6:7c:11:ea:66:3b:cd: 6f:71:5f:f6:7b:42:72:00:56:d7:3c:ee:a1:13:6f: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:64:B3:5D:4F:D7:B6:7B:49:B3:67:E7:9D:B2:6D:C0:6D:1A:90 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2b:a3:32:cb:19:b6:26:db:e3:8f:da:18:f3:24:84:88:a6: 74:23:0d:d7:30:db:f0:53:e0:f5:3b:fd:97:9c:2c:ff:b9:f8: 07:0d:9d:c0:4f:21:c3:5d:72:47:23:d7:b8:1d:f0:9f:89:99: c0:c4:97:51:bd:70:ea:5a:b1:e4:b5:e0:0f:c8:1f:f5:25:dc: 50:e8:13:cc:71:c6:bc:c7:d7:ec:bb:44:41:4f:81:6e:7b:7c: f6:d7:f8:b8:58:17:3c:45:44:63:9d:9e:84:72:53:64:fd:ba: ad:37:fe:a3:15:3e:b6:17:d3:d4:1f:66:23:d9:36:8c:b3:71: 6a:9c:33:8f:13:98:e7:f7:9b:c9:67:85:b7:47:0e:b4:1d:6f: df:87:dc:ce:65:4c:78:d0:3b:9a:77:d5:c8:0f:1e:d4:35:15: ae:7f:46:6b:77:02:1b:51:cd:b9:71:ba:38:ba:84:67:28:55: 6e:ae:d1:5e:45:0f:f0:a4:0f:9b:46:c6:0c:16:2e:12:9b:73: 6e:c7:aa:25:a4:20:14:f2:33:02:81:2f:14:be:f5:06:43:a5: 62:75:2b:cf:f9:97:40:1b:a4:2b:41:ad:9f:8c:d7:b0:46:92: 9e:03:d9:7d:66:2d:d8:16:94:cb:bc:3a:da:c0:e2:3c:3d:8b: 32:43:bf:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IQE95TPp/KNR1PjZpTz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjUwNjI4MjAwMTAwWhcNMjUwNjI5MjAwMTAwWjAzMTEwLwYDVQQD Eyg4ODU0NjRiMzVkNGZkN2I2N2I0OWIzNjdlNzlkYjI2ZGMwNmQxYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWWwQWwEg0P/E2poJEPuSVd6+XBW 94Qr7hfiQNEpidRFwEeLtpogeE1R+Ft5M3avXb3yAQvIBjvvXN3859T8+yPdher+ smTw7c0B1wxGE1B6NNCQFwkUX03UrlChKbnhHrpN7a1a/ztC7HX7uqoLbpMxem0+ rcFjatTsz/15YKzMxeg2sJjcdzy/cKev+5ubrelbNhgNYKnGHhOLyqLdUCbpC/Yg mE5V25PCLn0hAgpahhvQ9lSdH4Dy8l0+7HPFSGCdFl1TTwTqwhM3HMW9ggfsxGg8 K2/C5cWUdEji/Zhiysy1yZbRgtZ8EepmO81vcV/2e0JyAFbXPO6hE28NFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhUZLNdT9e2e0mzZ+edsm3AbRqQMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCujMssZ tibb44/aGPMkhIimdCMN1zDb8FPg9Tv9l5ws/7n4Bw2dwE8hw11yRyPXuB3wn4mZ wMSXUb1w6lqx5LXgD8gf9SXcUOgTzHHGvMfX7LtEQU+Bbnt89tf4uFgXPEVEY52e hHJTZP26rTf+oxU+thfT1B9mI9k2jLNxapwzjxOY5/ebyWeFt0cOtB1v34fczmVM eNA7mnfVyA8e1DUVrn9Ga3cCG1HNuXG6OLqEZyhVbq7RXkUP8KQPm0bGDBYuEptz bseqJaQgFPIzAoEvFL71BkOlYnUrz/mXQBukK0Gtn4zXsEaSngPZfWYt2BaUy7w6 2sDiPD2LMkO/0w== -----END CERTIFICATE-----Generated at Sat Jun 28 23:02:48 2025 by rpki-client