$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: RSVzQZKDEL+vDao1Nox8YN0OL3hilvx+jjES6YrTuIk= Subject key identifier: 21:EC:7D:5A:E2:FD:0D:CB:2C:61:31:DD:1C:4D:B1:B5:2E:CD:87:B5 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 0199FB7CB56CE42DAA4D37001F4BDD1BA985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 17C1 Signing time: Sun 19 Oct 2025 08:01:18 +0000 Manifest this update: Sun 19 Oct 2025 08:01:18 +0000 Manifest next update: Mon 20 Oct 2025 08:01:18 +0000 Files and hashes: 1: 1EmEaa4KkDBpQbNlqnkHOnBa5ww.roa (hash: 6l4N9QRRCNsTigbsBNhTvCtVipnXhrnl+qFxr2bq3fo=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 5: Kruvgpwuqm6sINlu2g0UdxGTt40.roa (hash: B1Hb3yrdIOl2N6zpO7c45xw8rxyA6hHtaoJIQXik8Xg=) 6: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=) 7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: WlK0juvUNoCW9DHE3tNTBD8t+2rgw+0/RlIPHQ/ZDCM=) 9: dZ61aXpp_DQ_DeLVDYFP6BdIHXQ.roa (hash: sBhkEWCuGRljaolRSEsc1RfhJZuAvgHQSHKRaUnk170=) 10: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:b5:6c:e4:2d:aa:4d:37:00:1f:4b:dd:1b:a9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Oct 19 08:01:18 2025 GMT Not After : Oct 20 08:01:18 2025 GMT Subject: CN=21ec7d5ae2fd0dcb2c6131dd1c4db1b52ecd87b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:c8:6a:a9:50:d1:d6:fd:f7:1d:29:33:d8: 24:42:71:42:f2:82:09:3b:98:04:5d:b3:80:d9:33: 35:f3:a7:ff:ac:f1:7e:3b:57:ed:81:04:43:ec:79: 4c:97:d3:b7:47:ef:90:24:2a:0e:a7:ed:73:1c:e0: f7:b8:23:83:b9:51:61:3b:46:20:7e:0b:46:21:6b: a2:d5:fa:ce:f4:0e:85:ff:9c:c6:30:e9:bf:a1:c1: 96:7c:79:d9:26:f9:57:ca:8a:37:bf:57:de:45:1d: f2:1b:51:65:4e:62:5c:52:d9:3c:de:83:c2:94:9f: 4e:54:e7:a8:02:a6:4a:f9:d3:72:7c:04:bd:6c:36: 6a:38:ec:33:39:f7:36:6a:25:26:f3:ca:63:55:f1: 88:bb:57:7e:87:4e:a8:72:0d:34:85:88:0b:76:f2: ad:e6:2f:af:5c:35:1f:2e:8e:1d:0a:64:5c:1d:eb: 42:9c:30:c1:78:2d:bd:bb:e7:7a:e9:25:59:ea:07: 09:0c:50:a3:45:97:b7:6e:99:e2:51:bb:88:79:50: b5:d4:21:41:7f:af:73:f7:b2:03:bf:ef:7d:ce:59: 5e:ec:09:d9:ac:e9:dd:9e:0b:75:21:23:2d:87:f5: 0d:80:21:ce:9e:2b:58:55:ab:18:e1:e1:63:52:8f: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:7D:5A:E2:FD:0D:CB:2C:61:31:DD:1C:4D:B1:B5:2E:CD:87:B5 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:52:30:2e:e5:4e:de:88:55:cf:86:d4:0a:c4:c6:51:82:e3: dc:f0:c4:5b:b6:c7:25:e7:91:9a:50:a7:e2:32:1a:ac:8d:7b: 14:38:47:54:36:81:11:38:09:8f:05:56:9f:c9:9a:05:b7:ab: 27:96:17:d6:e9:e4:b0:96:dd:47:da:dd:cd:ae:eb:fb:5c:cc: 82:80:f4:0e:eb:08:0e:df:e2:ee:d6:c4:81:36:09:40:6d:0d: 12:f9:e7:f5:e1:a7:69:6f:65:8d:6d:83:6b:37:6e:7e:53:cd: 79:64:8d:b2:d0:f9:d5:b3:73:de:4d:cf:a4:9d:e4:09:f5:c6: 35:76:5f:ad:95:b0:36:8a:9c:93:f8:1c:78:56:7f:9e:c6:4a: ec:65:ce:34:a2:a0:69:a3:ee:7d:d2:be:c9:24:40:c1:cb:a1: 79:a5:8a:bd:84:07:f1:85:c7:85:1b:86:bb:ec:61:f7:5e:4b: 66:fb:9e:e9:13:36:27:f9:46:be:b0:5a:77:66:44:d0:01:2f: db:c8:93:3c:1c:3e:fb:da:b0:0a:42:09:4b:f9:a3:20:fc:d5: 5e:69:a2:1f:f7:5d:cb:e8:f9:d9:27:34:4b:64:a9:83:30:64: a8:f1:51:53:8a:db:6e:40:f9:2e:ab:e9:71:3b:d7:08:31:c7: b3:ba:31:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fLVs5C2qTTcAH0vdG6mFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUxMDE5MDgwMTE4WhcNMjUxMDIwMDgwMTE4WjAzMTEwLwYDVQQD EygyMWVjN2Q1YWUyZmQwZGNiMmM2MTMxZGQxYzRkYjFiNTJlY2Q4N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jPIaqlQ0db99x0pM9gkQnFC8oIJ O5gEXbOA2TM186f/rPF+O1ftgQRD7HlMl9O3R++QJCoOp+1zHOD3uCODuVFhO0Yg fgtGIWui1frO9A6F/5zGMOm/ocGWfHnZJvlXyoo3v1feRR3yG1FlTmJcUtk83oPC lJ9OVOeoAqZK+dNyfAS9bDZqOOwzOfc2aiUm88pjVfGIu1d+h06ocg00hYgLdvKt 5i+vXDUfLo4dCmRcHetCnDDBeC29u+d66SVZ6gcJDFCjRZe3bpniUbuIeVC11CFB f69z97IDv+99zlle7AnZrOndngt1ISMth/UNgCHOnitYVasY4eFjUo9+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHsfVri/Q3LLGEx3RxNsbUuzYe1MB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVIwLuVO 3ohVz4bUCsTGUYLj3PDEW7bHJeeRmlCn4jIarI17FDhHVDaBETgJjwVWn8maBber J5YX1unksJbdR9rdza7r+1zMgoD0DusIDt/i7tbEgTYJQG0NEvnn9eGnaW9ljW2D azduflPNeWSNstD51bNz3k3PpJ3kCfXGNXZfrZWwNoqck/gceFZ/nsZK7GXONKKg aaPufdK+ySRAwcuheaWKvYQH8YXHhRuGu+xh915LZvue6RM2J/lGvrBad2ZE0AEv 28iTPBw++9qwCkIJS/mjIPzVXmmiH/ddy+j52Sc0S2SpgzBkqPFRU4rbbkD5Lqvp cTvXCDHHs7oxbQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:02 2025 by rpki-client