$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: /W4oYfNFXtXOWH6xA3aRpQuHm/FPbVd7RQIBlL/e0ls= Subject key identifier: D3:03:EF:1C:E6:E2:2B:7D:07:E6:DC:28:8C:AB:B8:8F:03:F3:16:F5 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 0197CE3BADB4746F31C50B57470E65F9E208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 1698 Signing time: Thu 03 Jul 2025 03:01:46 +0000 Manifest this update: Thu 03 Jul 2025 03:01:46 +0000 Manifest next update: Fri 04 Jul 2025 03:01:46 +0000 Files and hashes: 1: 2D8GskUOctsT18ewUQERiVKSyqY.roa (hash: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: CJvoWnaR2bDBM3uwknntcn2bVMA.roa (hash: Fb5QqnBE+SmiT0K9fxFnS2c5V8bamOheKNBY72WLunI=) 5: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 6: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=) 7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: W6Ztx4fmBuS4OzLnx36NUQm+GfboCwA+NyBs+CErbvw=) 9: cxtIOH2HTPQcljUlQ6T5b93OmjU.roa (hash: tH/NOyxHGmX11Frc+sHrlIOBqxLQMBd4oHjCtOuJpSU=) 10: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 03:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ce:3b:ad:b4:74:6f:31:c5:0b:57:47:0e:65:f9:e2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jul 3 03:01:46 2025 GMT Not After : Jul 4 03:01:46 2025 GMT Subject: CN=d303ef1ce6e22b7d07e6dc288cabb88f03f316f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:95:71:e2:0d:cf:3d:2c:92:76:35:86:fc: 4e:32:76:de:2b:46:c4:bb:cb:d2:09:b2:04:2e:12: 9e:62:30:42:98:25:38:f1:27:01:b9:8f:a7:b4:12: 63:24:89:2b:6e:16:18:31:bb:ae:a8:0f:e2:b5:39: f9:7e:97:f3:de:bb:7a:d7:6d:82:00:ec:af:7b:f6: df:9f:5c:72:1a:3d:de:1b:3b:d0:eb:d8:bb:88:d7: 5f:1d:f3:c2:86:b6:7c:1e:fc:89:4c:d5:9b:9a:61: 3c:de:41:38:f5:3b:dd:9f:6f:e7:a3:42:69:dd:50: 18:7a:5a:fb:39:39:f9:4b:7b:76:e1:ba:b3:86:c1: 2b:fe:10:b6:3c:20:02:15:7c:fc:58:10:39:1b:12: 30:37:df:1d:db:47:d7:ab:63:68:6a:c3:70:dd:29: 35:09:2a:76:6f:e2:c0:c9:8a:0a:3e:be:aa:23:1c: 5b:4c:02:ef:9e:22:c4:16:64:51:bf:34:a4:ea:de: 17:cd:d6:59:0f:36:65:22:2f:4f:60:84:5b:69:b7: 71:f6:61:77:8a:85:b9:e0:21:74:32:50:28:97:b8: 5c:4b:cb:15:95:40:43:e3:c7:bb:36:1b:40:94:43: 9a:c6:a2:1d:7f:ca:09:e6:54:b9:be:0d:10:d2:f6: d4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:EF:1C:E6:E2:2B:7D:07:E6:DC:28:8C:AB:B8:8F:03:F3:16:F5 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a0:d8:6d:5d:61:8b:af:03:8c:15:3d:e2:7e:09:68:9b:8f: 61:1f:c1:c9:54:f8:bc:92:f0:de:96:42:c0:e4:1d:b5:14:f7: e5:40:ab:d9:90:52:61:1e:88:60:31:e9:b0:0b:77:dc:57:92: ee:ab:62:27:ad:01:ca:2c:77:d8:8c:3a:2e:df:ea:c4:ff:86: ff:c6:5a:34:b4:07:b0:33:4d:a2:4d:8c:75:d1:5d:f8:25:ef: 0e:03:da:a9:fd:5c:42:f8:8a:8d:e4:7a:54:3f:a9:7c:27:4d: 36:aa:6a:66:49:8c:50:5d:1f:87:27:57:fc:4c:6b:f3:90:72: 0e:69:48:39:29:cd:ac:d4:de:18:c3:82:e5:35:6e:90:20:2f: 26:dd:62:d0:69:1e:bf:8b:fb:7f:0e:14:63:1a:08:35:58:45: e2:5b:77:3c:5d:4b:88:01:c2:d0:59:7b:fc:d3:e9:df:dd:47: 5d:fb:da:9b:92:c6:2e:92:fc:2c:f1:9a:08:26:86:89:3d:0a: 30:35:8e:dc:a2:1e:33:6f:62:d4:ca:a3:73:fc:8a:31:bb:df: 80:95:a5:e7:e3:93:2e:b0:9e:ec:a1:4e:3a:47:1e:d3:e0:57: d9:c8:89:71:2e:c1:ab:6e:07:24:af:37:07:48:96:80:b1:db: a7:3d:6a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfOO620dG8xxQtXRw5l+eIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUwNzAzMDMwMTQ2WhcNMjUwNzA0MDMwMTQ2WjAzMTEwLwYDVQQD EyhkMzAzZWYxY2U2ZTIyYjdkMDdlNmRjMjg4Y2FiYjg4ZjAzZjMxNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnqVceINzz0sknY1hvxOMnbeK0bE u8vSCbIELhKeYjBCmCU48ScBuY+ntBJjJIkrbhYYMbuuqA/itTn5fpfz3rt6122C AOyve/bfn1xyGj3eGzvQ69i7iNdfHfPChrZ8HvyJTNWbmmE83kE49Tvdn2/no0Jp 3VAYelr7OTn5S3t24bqzhsEr/hC2PCACFXz8WBA5GxIwN98d20fXq2NoasNw3Sk1 CSp2b+LAyYoKPr6qIxxbTALvniLEFmRRvzSk6t4XzdZZDzZlIi9PYIRbabdx9mF3 ioW54CF0MlAol7hcS8sVlUBD48e7NhtAlEOaxqIdf8oJ5lS5vg0Q0vbUBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMD7xzm4it9B+bcKIyruI8D8xb1MB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKDYbV1h i68DjBU94n4JaJuPYR/ByVT4vJLw3pZCwOQdtRT35UCr2ZBSYR6IYDHpsAt33FeS 7qtiJ60Byix32Iw6Lt/qxP+G/8ZaNLQHsDNNok2MddFd+CXvDgPaqf1cQviKjeR6 VD+pfCdNNqpqZkmMUF0fhydX/Exr85ByDmlIOSnNrNTeGMOC5TVukCAvJt1i0Gke v4v7fw4UYxoINVhF4lt3PF1LiAHC0Fl7/NPp391HXfvam5LGLpL8LPGaCCaGiT0K MDWO3KIeM29i1Mqjc/yKMbvfgJWl5+OTLrCe7KFOOkce0+BX2ciJcS7Bq24HJK83 B0iWgLHbpz1qxw== -----END CERTIFICATE-----Generated at Thu Jul 3 10:16:42 2025 by rpki-client