$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: M859yybTKOygo0+UTmcao+Tp4hjt2zzVMp7dB74JjIk= Subject key identifier: F3:FE:DD:EE:FB:FF:70:03:AB:BC:21:02:2F:4C:CA:1E:C8:03:95:51 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 0198D472A86BF783A1C28A282FAEBFCE369B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 11FA Signing time: Sat 23 Aug 2025 01:02:20 +0000 Manifest this update: Sat 23 Aug 2025 01:02:20 +0000 Manifest next update: Sun 24 Aug 2025 01:02:20 +0000 Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=) 2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=) 3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=) 4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=) 5: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=) 6: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=) 7: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=) 8: YqK1nXW8w2q_X2z3lSICRsWfjFw.roa (hash: l725tDRDqMSX597l+gr9+lU8fQNlGlVTOUy4mlZEjNw=) 9: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=) 10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: HyERhxfUTS8dMG98aOcaQ1r1MIcPrnHE14na6nrHCgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:a8:6b:f7:83:a1:c2:8a:28:2f:ae:bf:ce:36:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Aug 23 01:02:20 2025 GMT Not After : Aug 24 01:02:20 2025 GMT Subject: CN=f3feddeefbff7003abbc21022f4cca1ec8039551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:6e:92:01:4d:42:35:ab:9b:10:d8:d7:33: 65:45:bf:4f:50:20:2c:2a:fa:18:a8:9f:6d:24:85: 35:85:3b:6a:04:27:a5:a1:27:2a:b1:87:58:f5:9b: ed:53:b6:91:b0:38:23:d0:90:36:0c:db:80:4e:48: 32:04:db:52:2c:e1:a6:15:a3:73:52:a4:c7:bd:04: 08:fb:4d:fb:4b:d6:d6:29:ee:a1:79:47:9c:4c:23: 8c:c8:55:30:79:77:21:d9:f3:2c:66:da:7b:56:a3: 06:3a:7a:c2:e1:fb:57:25:39:19:8f:7e:dc:de:13: a1:21:50:26:69:96:3c:da:fc:21:99:fa:9c:d3:b6: a8:8e:6b:59:b9:65:ca:5b:db:44:bf:88:69:bf:69: 2d:5e:b1:f1:e1:c4:21:19:67:a8:8d:78:26:08:65: 0d:d2:da:3b:37:f9:6a:89:67:53:15:ba:4b:dc:bd: 98:9b:bf:75:bb:b4:19:61:e4:69:8b:17:74:47:a4: d3:56:06:e5:0d:dd:0c:94:b8:28:aa:e2:b6:32:72: 04:4e:d1:c2:20:14:91:b8:3a:4c:24:ee:1c:ca:bf: 96:a4:6b:ed:3e:c1:21:e3:00:ed:8e:ea:5e:37:f0: 5c:64:1c:c5:d0:a2:59:7e:db:e5:0a:74:28:d6:ca: d0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FE:DD:EE:FB:FF:70:03:AB:BC:21:02:2F:4C:CA:1E:C8:03:95:51 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cf:78:7f:c9:93:06:13:91:b7:92:01:0e:5e:9f:cd:46:7c: 10:40:79:bf:82:94:de:01:9e:b7:78:21:3d:6f:3a:9c:81:85: 52:4d:e0:7c:79:cf:2d:ce:3a:71:c2:b4:95:6d:29:66:9f:0b: d3:82:11:e4:4c:45:40:f9:3a:13:10:3e:73:01:df:6f:8c:e4: 0c:69:bb:18:c3:1e:28:34:18:a5:ad:66:95:91:41:63:0f:d2: 02:d4:fe:53:de:2c:aa:a0:5e:21:f2:2a:9d:04:58:59:64:c3: 38:3d:e9:13:0a:71:c3:dd:9b:56:5a:0c:2a:c1:1a:a6:c3:bb: 16:28:0c:71:53:c3:9f:f8:c4:9c:4e:95:d2:df:3d:8c:4c:03: 9b:93:80:7a:25:98:5b:52:43:9d:85:63:39:33:c4:a3:75:d3: f1:84:d5:57:2b:78:84:cf:79:6b:d1:94:ab:8d:2b:d8:25:96: d2:d9:38:f8:8e:19:3b:2e:a4:6d:35:25:90:09:72:af:4a:e4: 2f:e9:16:79:46:79:18:6e:e0:f0:1b:7d:c2:3d:11:4b:d1:b6: d3:e2:ef:ac:af:8e:23:c9:99:4b:a4:50:09:9c:45:29:27:97: 41:e3:2e:ab:47:f2:39:6e:02:4d:43:71:f0:e1:5b:cd:a0:10: 00:45:1c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcqhr94OhwoooL66/zjabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUwODIzMDEwMjIwWhcNMjUwODI0MDEwMjIwWjAzMTEwLwYDVQQD EyhmM2ZlZGRlZWZiZmY3MDAzYWJiYzIxMDIyZjRjY2ExZWM4MDM5NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0lukgFNQjWrmxDY1zNlRb9PUCAs KvoYqJ9tJIU1hTtqBCeloScqsYdY9ZvtU7aRsDgj0JA2DNuATkgyBNtSLOGmFaNz UqTHvQQI+037S9bWKe6heUecTCOMyFUweXch2fMsZtp7VqMGOnrC4ftXJTkZj37c 3hOhIVAmaZY82vwhmfqc07aojmtZuWXKW9tEv4hpv2ktXrHx4cQhGWeojXgmCGUN 0to7N/lqiWdTFbpL3L2Ym791u7QZYeRpixd0R6TTVgblDd0MlLgoquK2MnIETtHC IBSRuDpMJO4cyr+WpGvtPsEh4wDtjupeN/BcZBzF0KJZftvlCnQo1srQOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP+3e77/3ADq7whAi9Myh7IA5VRMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM94f8mT BhORt5IBDl6fzUZ8EEB5v4KU3gGet3ghPW86nIGFUk3gfHnPLc46ccK0lW0pZp8L 04IR5ExFQPk6ExA+cwHfb4zkDGm7GMMeKDQYpa1mlZFBYw/SAtT+U94sqqBeIfIq nQRYWWTDOD3pEwpxw92bVloMKsEapsO7FigMcVPDn/jEnE6V0t89jEwDm5OAeiWY W1JDnYVjOTPEo3XT8YTVVyt4hM95a9GUq40r2CWW0tk4+I4ZOy6kbTUlkAlyr0rk L+kWeUZ5GG7g8Bt9wj0RS9G20+LvrK+OI8mZS6RQCZxFKSeXQeMuq0fyOW4CTUNx 8OFbzaAQAEUc8w== -----END CERTIFICATE-----Generated at Sat Aug 23 11:36:07 2025 by rpki-client