$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft File: uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json) Hash identifier: mQV2q1Ga4cHvuTFe88TedE02hbrcRhtLoSfi0T0aPaI= Subject key identifier: 10:B3:00:B2:BB:CB:46:98:C8:A9:F3:B4:49:2A:F8:3B:2D:14:63:7C Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 0198D5F1D5AFE290C9C7697C7016CA00D819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft Manifest number: 03A1 Signing time: Sat 23 Aug 2025 08:00:52 +0000 Manifest this update: Sat 23 Aug 2025 08:00:52 +0000 Manifest next update: Sun 24 Aug 2025 08:00:52 +0000 Files and hashes: 1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=) 2: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=) 3: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=) 4: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=) 5: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=) 6: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=) 7: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=) 8: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=) 9: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=) 10: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=) 11: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=) 12: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=) 13: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=) 14: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=) 15: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=) 16: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=) 17: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=) 18: iyGn9-N4_Y-74wtv84vIggbUgGE.roa (hash: 0+sbmwNGxEETCuI+TbmtpOScQW3Ga70I+RwZkGrwt4I=) 19: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=) 20: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=) 21: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: dVQmsgXuPRIZaqcra5VWQmEen5hourmru/KI1ax6djg=) 22: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=) 23: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:d5:af:e2:90:c9:c7:69:7c:70:16:ca:00:d8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Aug 23 08:00:52 2025 GMT Not After : Aug 24 08:00:52 2025 GMT Subject: CN=10b300b2bbcb4698c8a9f3b4492af83b2d14637c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:8e:92:22:f4:ba:6e:7c:12:40:e1:e1:df: 5b:c1:f2:bc:de:78:af:00:6c:09:27:14:23:40:5a: 7d:8c:0b:32:37:74:f6:e2:53:f0:5a:b7:3e:ff:14: 69:43:4d:14:fb:67:f4:fb:87:f4:25:00:42:10:d5: c8:72:34:96:e8:22:5e:5c:c1:d4:40:9a:2c:58:b8: e5:1c:e9:51:4d:ce:9d:4f:76:4e:05:dc:d2:e7:8f: d6:56:50:dc:14:f8:c2:5b:ba:29:08:a9:c5:86:75: 40:9a:02:18:d5:73:05:cb:4a:9e:6d:db:08:35:d8: e3:66:1f:6e:dd:e2:70:1f:bb:97:de:f0:be:15:64: 7c:91:07:3e:39:af:e2:7d:b7:f9:52:61:1b:71:9f: 14:f2:0c:1c:85:22:13:92:73:5c:29:3a:d0:4b:70: 21:71:81:ea:b6:75:24:e0:a9:68:87:a4:24:ec:5d: ca:80:dd:b0:4d:fa:5a:23:28:c6:1f:38:da:40:14: b1:2a:71:53:56:d8:50:16:5e:0e:f0:36:52:a4:32: d0:17:b2:19:e2:95:22:dd:dc:e7:e6:ce:67:45:8b: 72:d6:14:4e:97:2f:d2:11:57:c1:9a:45:89:63:1c: ce:bd:11:c1:37:4f:9c:87:37:f2:49:e7:09:6d:0e: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B3:00:B2:BB:CB:46:98:C8:A9:F3:B4:49:2A:F8:3B:2D:14:63:7C X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b6:67:f1:f9:49:8c:3d:76:85:ef:d7:3b:bb:3e:6f:81:87: c7:27:76:79:cd:00:7b:24:80:db:e5:1b:29:2d:28:a9:f7:a0: 92:21:f7:ae:01:0d:2f:19:88:34:d1:5a:2f:a8:9c:41:84:50: d7:aa:b9:2c:1f:e3:95:c4:4e:f4:2a:22:85:00:78:dc:d7:79: d6:9e:4e:05:a5:41:66:8c:51:3f:6d:13:29:ac:28:c4:14:7c: a3:f0:eb:e8:a3:bb:0e:c0:fa:4c:b7:34:03:33:5a:3f:b3:37: ee:47:03:9a:fd:0a:89:7f:c5:9f:f9:5c:19:41:c1:fe:31:dc: ff:7c:46:7e:cd:ea:46:01:4f:8d:68:19:c4:a7:1e:6d:89:d7: 70:8d:14:0b:6d:ac:00:dc:c0:b7:a5:ef:db:df:f4:d0:4f:69: 07:7d:87:1e:ed:7c:8d:50:75:03:50:fc:c0:84:71:a2:b4:55: be:25:f1:c9:ea:d8:5e:a9:54:45:4a:78:92:3f:93:9f:7d:c4: 9c:9e:a9:52:c1:04:da:2b:83:60:17:f8:f9:f4:e1:0a:da:f7: e8:13:5d:30:f3:ec:71:77:12:56:1d:dd:b7:96:2d:39:c7:08: 33:b2:e9:28:da:85:b2:e1:3d:aa:ae:7b:32:b1:69:db:09:52: 7c:93:34:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8dWv4pDJx2l8cBbKANgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjUwODIzMDgwMDUyWhcNMjUwODI0MDgwMDUyWjAzMTEwLwYDVQQD EygxMGIzMDBiMmJiY2I0Njk4YzhhOWYzYjQ0OTJhZjgzYjJkMTQ2MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykKOkiL0um58EkDh4d9bwfK83niv AGwJJxQjQFp9jAsyN3T24lPwWrc+/xRpQ00U+2f0+4f0JQBCENXIcjSW6CJeXMHU QJosWLjlHOlRTc6dT3ZOBdzS54/WVlDcFPjCW7opCKnFhnVAmgIY1XMFy0qebdsI NdjjZh9u3eJwH7uX3vC+FWR8kQc+Oa/ifbf5UmEbcZ8U8gwchSITknNcKTrQS3Ah cYHqtnUk4Kloh6Qk7F3KgN2wTfpaIyjGHzjaQBSxKnFTVthQFl4O8DZSpDLQF7IZ 4pUi3dzn5s5nRYty1hROly/SEVfBmkWJYxzOvRHBN0+chzfySecJbQ5LmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCzALK7y0aYyKnztEkq+DstFGN8MB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrZn8flJ jD12he/XO7s+b4GHxyd2ec0AeySA2+UbKS0oqfegkiH3rgENLxmINNFaL6icQYRQ 16q5LB/jlcRO9CoihQB43Nd51p5OBaVBZoxRP20TKawoxBR8o/Dr6KO7DsD6TLc0 AzNaP7M37kcDmv0KiX/Fn/lcGUHB/jHc/3xGfs3qRgFPjWgZxKcebYnXcI0UC22s ANzAt6Xv29/00E9pB32HHu18jVB1A1D8wIRxorRVviXxyerYXqlURUp4kj+Tn33E nJ6pUsEE2iuDYBf4+fThCtr36BNdMPPscXcSVh3dt5YtOccIM7LpKNqFsuE9qq57 MrFp2wlSfJM0xg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:53 2025 by rpki-client