$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: jZbbFNnqji81nSccc0zGnve1SQQEVPW6jAjXTDTiTcI= Subject key identifier: 47:F2:5B:A9:82:18:12:DC:2E:9E:28:B4:56:CD:70:2D:DA:38:CF:17 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019A01B4BD09C8192CA928F55324DB8924C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 164F Signing time: Mon 20 Oct 2025 13:00:13 +0000 Manifest this update: Mon 20 Oct 2025 13:00:13 +0000 Manifest next update: Tue 21 Oct 2025 13:00:13 +0000 Files and hashes: 1: 3aqcaFvnX3K7WdJarseDjVUiXLA.roa (hash: oYUYigd9Vtvfrvv9o0boJiIVHaAtMoZ5zO4oUtqPXO4=) 2: AjDeBQs6ZvLd-XSQ5CBj4sm5ydg.roa (hash: Cwl60Pf8FeqjdxXJ5cDfKK3o0IpaaLfb9WkIIUUlizI=) 3: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=) 4: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=) 5: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=) 6: KQWIvRkUPfDI9UbToA1ZOCt6wGw.roa (hash: ReALyg40wpRA61FQrWQgXjMRadBzLsNR095IRjmcuPY=) 7: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: Ek7VdPX/iG1rCibgyzcMLwIW+jSke5/+mliJe7lpy6o=) 8: WVXExIOsUuzD4I3TzgSlOau0QaQ.roa (hash: pTI7uh69ubYgLlvdqCFzeXWGgfLVV4/U16+Sy+TrVp4=) 9: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=) 10: eCrToYnvWc95HF4c8-Z46Ax87po.roa (hash: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=) 11: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:b4:bd:09:c8:19:2c:a9:28:f5:53:24:db:89:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Oct 20 13:00:13 2025 GMT Not After : Oct 21 13:00:13 2025 GMT Subject: CN=47f25ba9821812dc2e9e28b456cd702dda38cf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:79:33:96:41:46:3c:9e:ef:ab:ee:9a:7e: bd:2f:33:50:eb:43:22:e9:ca:57:5a:6f:d3:b6:e0: d1:22:98:5c:45:c5:a6:98:39:58:ff:17:49:90:e6: 90:19:5a:33:29:2b:b2:f2:84:a7:28:a5:de:b2:82: 8e:59:c9:b1:30:57:af:74:4a:ba:38:23:10:58:d1: 82:e7:65:4f:b4:ca:8a:e9:ea:3d:ea:3f:94:01:e2: c0:ba:e4:30:b9:25:c2:5f:96:64:ec:e2:9b:63:5e: 4c:6a:31:0d:48:d9:40:84:73:40:6c:aa:4d:15:2d: 53:72:eb:c1:f6:93:cc:b8:cc:b2:de:af:eb:05:9d: f2:01:c7:c4:1e:0e:c9:f0:37:9d:73:40:12:eb:56: 87:bd:cf:c4:c4:04:35:4c:ae:44:b4:1b:80:bd:31: 89:ca:5b:08:e1:ab:52:0d:10:32:5a:7e:f4:3d:1a: 93:79:e9:85:98:e8:44:85:67:f2:d7:a7:ab:2a:ec: 8d:3c:4e:9e:33:a9:fa:cb:57:cc:3d:cf:2b:a5:a4: 25:18:fd:f4:1c:34:cc:23:39:c8:6d:d2:36:d6:06: 1d:04:0a:0f:96:23:f8:10:18:cf:be:f9:08:ae:8c: e7:d5:f4:6f:67:e0:a2:04:c0:22:3f:b1:52:f8:3a: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F2:5B:A9:82:18:12:DC:2E:9E:28:B4:56:CD:70:2D:DA:38:CF:17 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:26:7c:0e:4c:c9:a5:26:58:b7:ea:4b:3a:d1:14:3d:9e:12: 08:1f:d9:f3:72:be:db:31:7c:20:4f:85:84:b0:fd:c2:4e:84: 30:6c:28:fc:fc:32:af:ad:b7:33:03:82:3b:7d:d9:de:25:f7: 25:60:fe:c3:85:9c:42:dc:78:00:17:ec:17:16:c8:ac:4d:83: 82:56:5b:c6:0d:b5:39:25:a4:c9:76:29:85:26:b9:8c:be:32: eb:21:8c:d4:f4:ee:10:20:2a:27:61:30:99:aa:fe:55:de:b3: 22:82:81:4b:c4:c1:5c:e6:7a:ae:97:f4:a3:8a:15:e5:98:eb: 4a:d4:71:fa:35:57:cc:8c:44:0a:09:a3:b8:cf:92:c3:c1:90: 26:d8:9e:af:37:de:f2:85:0c:61:ea:90:33:e5:0a:97:2a:90: 78:3d:3e:54:99:60:4f:7d:31:b9:71:f2:3c:76:f2:ea:0b:33: 82:a5:50:5a:29:2a:85:77:a6:e6:f8:d3:fa:56:fc:ad:f2:3a: 7b:2d:67:f8:72:d6:14:40:a7:cc:48:3f:38:de:94:a0:04:42: 2e:01:43:b8:6b:ef:b9:49:c4:15:62:c0:07:30:69:80:8f:cd: e7:12:1b:65:42:f8:17:66:0a:ca:52:2c:25:45:d5:8e:46:7a: d8:b6:6b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoBtL0JyBksqSj1UyTbiSTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjUxMDIwMTMwMDEzWhcNMjUxMDIxMTMwMDEzWjAzMTEwLwYDVQQD Eyg0N2YyNWJhOTgyMTgxMmRjMmU5ZTI4YjQ1NmNkNzAyZGRhMzhjZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9l5M5ZBRjye76vumn69LzNQ60Mi 6cpXWm/TtuDRIphcRcWmmDlY/xdJkOaQGVozKSuy8oSnKKXesoKOWcmxMFevdEq6 OCMQWNGC52VPtMqK6eo96j+UAeLAuuQwuSXCX5Zk7OKbY15MajENSNlAhHNAbKpN FS1TcuvB9pPMuMyy3q/rBZ3yAcfEHg7J8Dedc0AS61aHvc/ExAQ1TK5EtBuAvTGJ ylsI4atSDRAyWn70PRqTeemFmOhEhWfy16erKuyNPE6eM6n6y1fMPc8rpaQlGP30 HDTMIznIbdI21gYdBAoPliP4EBjPvvkIrozn1fRvZ+CiBMAiP7FS+DoiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfyW6mCGBLcLp4otFbNcC3aOM8XMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiZ8DkzJ pSZYt+pLOtEUPZ4SCB/Z83K+2zF8IE+FhLD9wk6EMGwo/Pwyr623MwOCO33Z3iX3 JWD+w4WcQtx4ABfsFxbIrE2DglZbxg21OSWkyXYphSa5jL4y6yGM1PTuECAqJ2Ew mar+Vd6zIoKBS8TBXOZ6rpf0o4oV5ZjrStRx+jVXzIxECgmjuM+Sw8GQJtierzfe 8oUMYeqQM+UKlyqQeD0+VJlgT30xuXHyPHby6gszgqVQWikqhXem5vjT+lb8rfI6 ey1n+HLWFECnzEg/ON6UoARCLgFDuGvvuUnEFWLABzBpgI/N5xIbZUL4F2YKylIs JUXVjkZ62LZrpA== -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:30 2025 by rpki-client