$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: BrHu64nUrhX2S67mJNolAQLQi3KWSVEqrcA0mvWWMxU= Subject key identifier: 27:EF:19:BA:ED:88:05:34:19:12:76:61:E7:1F:EA:6B:50:2F:FA:5D Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 0198D5BBD79A840067F8D7FCA9422CE66DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 14F4 Signing time: Sat 23 Aug 2025 07:01:53 +0000 Manifest this update: Sat 23 Aug 2025 07:01:53 +0000 Manifest next update: Sun 24 Aug 2025 07:01:53 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 5: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 6: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 7: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 8: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 9: krCyhkuDWdtiE8IBk6ZAqu30Qw0.roa (hash: ajTMX25iwhDAaSs7jdJKz1hQnILnvbn3Eu+OgcDLty8=) 10: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 11: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 12: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: fcshzvJUDLL6MCGQ/zgYgQfTsw9Y+z75qaGBKNG2Mbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:d7:9a:84:00:67:f8:d7:fc:a9:42:2c:e6:6d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Aug 23 07:01:53 2025 GMT Not After : Aug 24 07:01:53 2025 GMT Subject: CN=27ef19baed88053419127661e71fea6b502ffa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:20:88:da:1e:7e:46:3f:11:4d:ae:95:01: c9:fb:32:00:01:57:cd:0e:de:1f:6e:1f:b6:27:28: fd:e3:e0:2c:2a:64:3e:e4:a5:dd:ba:78:d1:30:14: 10:1f:be:35:e5:04:87:56:87:6d:f1:d1:45:26:d0: fb:1e:7c:05:4f:fa:ca:50:80:bc:67:fd:74:d4:49: aa:26:95:76:44:dd:fa:ab:08:55:e7:b7:52:c8:94: 90:a8:b7:86:a3:48:a7:aa:12:8f:79:c2:48:3a:c9: 57:ea:68:35:fb:16:03:1b:f2:41:d2:85:bb:1e:64: 97:0c:40:26:73:ee:48:a4:a9:58:aa:cb:76:d5:54: 63:4e:bd:f5:da:5c:5a:77:00:4f:5b:d5:d7:db:03: 3e:e9:81:ae:0b:51:14:73:2f:9a:27:f4:5a:76:b3: c8:46:da:ce:29:cf:e1:9a:42:ba:d5:6e:4a:b1:5b: 0e:6f:40:a0:a1:0b:18:98:1f:4f:05:1e:1c:90:a3: 8c:27:e9:fd:aa:aa:89:52:56:7b:64:4b:c0:04:d0: 24:6c:d9:4f:4c:b0:f4:48:9c:77:ec:63:05:66:1e: 5d:57:c1:7d:4e:e3:77:86:fc:ba:6d:4a:e5:ff:27: 47:ad:1d:79:4d:29:bd:37:60:6a:c2:ce:e0:39:82: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EF:19:BA:ED:88:05:34:19:12:76:61:E7:1F:EA:6B:50:2F:FA:5D X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:50:d2:eb:4e:29:49:66:64:b3:6a:62:58:b5:25:c7:4c:f1: 77:ee:73:53:78:0e:96:bf:67:48:3b:7e:b7:9f:af:f2:75:18: 69:0f:cc:c9:db:6b:62:0c:e1:d4:e7:a6:ee:85:55:01:e4:16: 39:3d:91:6d:1f:cb:65:1d:78:bd:97:1a:2b:b9:fd:cb:78:92: 13:8f:28:3a:3b:da:f1:15:37:d0:2e:11:c3:60:40:59:91:d2: cc:7c:f5:a5:54:50:03:e6:a3:c3:72:b5:2f:41:b9:a6:3a:72: 90:bf:0d:65:c6:45:4f:15:86:03:fe:50:87:79:a2:c7:14:22: 03:90:19:3d:e9:a0:64:e4:85:72:d1:65:4a:f7:55:5f:5e:fe: eb:a3:08:e1:1a:b0:8f:28:e5:2b:11:9d:f6:ee:e5:71:d2:2d: 87:31:50:db:18:bd:c6:c8:37:b2:c7:85:6a:14:05:0f:aa:aa: 00:82:f9:aa:5d:49:be:a2:23:3b:09:9f:c0:70:46:ae:d2:4e: da:e7:80:7a:8f:57:95:42:70:3e:5a:e0:72:36:6b:02:fd:58: 2d:38:4f:b9:d6:59:ae:5b:63:81:66:12:ed:8c:a5:52:40:42: bb:b9:4d:a2:a8:bc:c5:fa:06:94:89:f9:17:cb:d5:04:ca:ba: 39:b5:04:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu9eahABn+Nf8qUIs5m23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwODIzMDcwMTUzWhcNMjUwODI0MDcwMTUzWjAzMTEwLwYDVQQD EygyN2VmMTliYWVkODgwNTM0MTkxMjc2NjFlNzFmZWE2YjUwMmZmYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aMgiNoefkY/EU2ulQHJ+zIAAVfN Dt4fbh+2Jyj94+AsKmQ+5KXdunjRMBQQH7415QSHVodt8dFFJtD7HnwFT/rKUIC8 Z/101EmqJpV2RN36qwhV57dSyJSQqLeGo0inqhKPecJIOslX6mg1+xYDG/JB0oW7 HmSXDEAmc+5IpKlYqst21VRjTr312lxadwBPW9XX2wM+6YGuC1EUcy+aJ/RadrPI RtrOKc/hmkK61W5KsVsOb0CgoQsYmB9PBR4ckKOMJ+n9qqqJUlZ7ZEvABNAkbNlP TLD0SJx37GMFZh5dV8F9TuN3hvy6bUrl/ydHrR15TSm9N2Bqws7gOYKPAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfvGbrtiAU0GRJ2Yecf6mtQL/pdMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1DS604p SWZks2piWLUlx0zxd+5zU3gOlr9nSDt+t5+v8nUYaQ/MydtrYgzh1Oem7oVVAeQW OT2RbR/LZR14vZcaK7n9y3iSE48oOjva8RU30C4Rw2BAWZHSzHz1pVRQA+ajw3K1 L0G5pjpykL8NZcZFTxWGA/5Qh3mixxQiA5AZPemgZOSFctFlSvdVX17+66MI4Rqw jyjlKxGd9u7lcdIthzFQ2xi9xsg3sseFahQFD6qqAIL5ql1JvqIjOwmfwHBGrtJO 2ueAeo9XlUJwPlrgcjZrAv1YLThPudZZrltjgWYS7YylUkBCu7lNoqi8xfoGlIn5 F8vVBMq6ObUEoQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:57 2025 by rpki-client