$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: PWCA3eZgs9hgIlY3rnIz0zFW5Z6UeSN+/Cn1jj1ahOM= Subject key identifier: 10:43:B5:D1:B9:51:91:39:90:AE:17:F9:F4:F9:96:A9:D7:8C:47:5E Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 0198D583B64E2D5CF73C0B261CAAB66EE61E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 15B2 Signing time: Sat 23 Aug 2025 06:00:35 +0000 Manifest this update: Sat 23 Aug 2025 06:00:35 +0000 Manifest next update: Sun 24 Aug 2025 06:00:35 +0000 Files and hashes: 1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=) 2: 9ivDIYWbbWyf9XthkrT_WNyR-KE.roa (hash: zcNuXESmQk3bhF6/iOTbudsyigZ75R4PrVSZEKJsBhA=) 3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=) 4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=) 5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=) 6: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: nolKx5Yo3V6mguIL2L/8u3idIdC0kAxAN8w86ymx18M=) 7: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=) 8: eCrToYnvWc95HF4c8-Z46Ax87po.roa (hash: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=) 9: hADWb8Ul-X_A2ySCHhCgfFnA2Yo.roa (hash: iOQmVmIc5hJAt4h0ebp8fY1nzsr9aufJIFiZdvi/Vd0=) 10: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:b6:4e:2d:5c:f7:3c:0b:26:1c:aa:b6:6e:e6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Aug 23 06:00:35 2025 GMT Not After : Aug 24 06:00:35 2025 GMT Subject: CN=1043b5d1b951913990ae17f9f4f996a9d78c475e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:e3:32:80:86:1e:21:a7:cd:df:92:a3:e2: 38:c3:50:d2:73:c2:b7:21:5a:44:ad:fa:33:f9:8d: 2c:0b:a4:ff:35:ad:05:39:8a:6f:76:82:49:cb:26: 17:f9:82:1c:79:f9:2c:35:83:a2:2d:c7:22:71:02: 8e:2b:ea:a9:eb:c7:ca:ff:23:af:2f:9f:75:32:20: 40:84:87:d6:6a:a3:b0:93:00:37:4a:19:1b:2e:a5: de:f4:41:ed:d1:c4:73:41:32:a6:37:0d:fb:f5:53: 3b:ec:16:b9:b2:f7:ff:22:bd:22:b7:28:f3:ee:e6: 64:68:6f:72:ea:2f:eb:e1:f7:e8:65:85:a9:05:a6: 59:9d:2d:2b:c6:17:89:06:ad:cc:78:9c:9f:81:16: b1:95:32:36:b0:d7:c7:3f:a6:84:b8:36:14:e2:41: a8:6c:97:2a:59:d8:c3:fc:e5:25:44:85:12:3f:9d: 9d:c1:bb:38:57:13:ae:a2:a9:ad:a1:47:c8:d8:1b: 79:ae:73:83:cc:c2:6f:1e:39:23:7f:0d:56:93:97: a2:56:da:d6:6c:d8:f8:f7:33:eb:41:88:a8:f8:11: f1:ec:fd:74:a0:66:3c:71:61:21:68:b4:ed:48:c7: 10:23:56:c9:9d:84:36:8f:31:fb:e4:43:aa:e2:04: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:B5:D1:B9:51:91:39:90:AE:17:F9:F4:F9:96:A9:D7:8C:47:5E X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fa:14:a4:b4:bd:15:b9:e5:74:ae:9c:c9:67:f1:f1:7b:3a: 24:a9:b6:79:e1:3e:47:b5:cd:2b:a3:2d:69:2d:4d:4b:bc:85: a6:8d:ab:27:d3:a7:b4:74:0b:4d:d3:7f:ca:ae:77:9c:44:d9: cc:94:8a:04:93:cf:38:93:18:ff:da:dc:c2:b1:3a:16:35:22: ad:5c:9a:c4:ae:44:de:1b:90:1c:4c:f9:9b:ee:36:2f:f0:ad: 9d:39:7a:aa:ad:9b:8f:2b:e3:23:df:e1:f1:7d:c2:8d:9d:1a: 78:87:c0:4e:29:a4:5f:06:02:09:02:06:50:b9:60:58:fb:50: fa:74:e1:f6:9c:cf:f1:96:bd:0e:70:f9:13:35:86:d3:18:cf: 81:85:8a:60:89:f1:21:db:04:67:cf:fa:8a:09:02:56:b8:2a: a4:99:ce:4b:8e:2a:f1:df:ea:23:6d:ae:37:36:59:1d:a8:78: 88:4a:22:6a:92:e5:cd:07:a1:4e:33:5a:ac:3c:39:8d:d3:a7: 31:8b:5d:d5:17:60:72:08:dc:62:00:ed:22:1c:e6:b2:e3:29: 08:ca:86:e1:e0:7d:d9:fa:35:ba:ea:9f:9f:11:1d:7b:1b:ff: dd:5a:a0:6b:32:70:11:1e:c7:0f:ba:1e:11:e0:9a:66:47:91: cd:7e:b7:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg7ZOLVz3PAsmHKq2buYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD EygxMDQzYjVkMWI5NTE5MTM5OTBhZTE3ZjlmNGY5OTZhOWQ3OGM0NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QTjMoCGHiGnzd+So+I4w1DSc8K3 IVpErfoz+Y0sC6T/Na0FOYpvdoJJyyYX+YIcefksNYOiLccicQKOK+qp68fK/yOv L591MiBAhIfWaqOwkwA3ShkbLqXe9EHt0cRzQTKmNw379VM77Ba5svf/Ir0ityjz 7uZkaG9y6i/r4ffoZYWpBaZZnS0rxheJBq3MeJyfgRaxlTI2sNfHP6aEuDYU4kGo bJcqWdjD/OUlRIUSP52dwbs4VxOuoqmtoUfI2Bt5rnODzMJvHjkjfw1Wk5eiVtrW bNj49zPrQYio+BHx7P10oGY8cWEhaLTtSMcQI1bJnYQ2jzH75EOq4gTRpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBDtdG5UZE5kK4X+fT5lqnXjEdeMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPoUpLS9 FbnldK6cyWfx8Xs6JKm2eeE+R7XNK6MtaS1NS7yFpo2rJ9OntHQLTdN/yq53nETZ zJSKBJPPOJMY/9rcwrE6FjUirVyaxK5E3huQHEz5m+42L/CtnTl6qq2bjyvjI9/h 8X3CjZ0aeIfATimkXwYCCQIGULlgWPtQ+nTh9pzP8Za9DnD5EzWG0xjPgYWKYInx IdsEZ8/6igkCVrgqpJnOS44q8d/qI22uNzZZHah4iEoiapLlzQehTjNarDw5jdOn MYtd1RdgcgjcYgDtIhzmsuMpCMqG4eB92fo1uuqfnxEdexv/3VqgazJwER7HD7oe EeCaZkeRzX63Zw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:30 2025 by rpki-client