$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: mN8PTpAdx9HpNG5Py+r3RPdNKoACnZOp5R1YZ7RK/Zc= Subject key identifier: 67:33:20:C5:C6:53:06:BB:88:13:55:52:A1:5F:6B:A1:DB:41:F0:E0 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 0199FBEBAA6382798EF207293E281F2C70D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 1591 Signing time: Sun 19 Oct 2025 10:02:29 +0000 Manifest this update: Sun 19 Oct 2025 10:02:29 +0000 Manifest next update: Mon 20 Oct 2025 10:02:29 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: 3621kVLU1VT9Fici-tNYNAxF4xw.roa (hash: YevhNJP6n8UEvSB9W3Cp2mhJAKV1d9oeisrAeVxiMSA=) 4: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: PmWybA9-N8dc8PEujc3ISmvp274.roa (hash: RlrXWXlyD6hg5OOiK56C8Z6t9rRYFEPrd9C1t8eKLHU=) 10: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 11: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 12: pGHEbNMtjLRu8Cprmj0HiXypKR0.roa (hash: bK/eBtnsCEyHAZ1AGMsdtF+zE9uQoD6waTin5Xv5Q5M=) 13: pgNfMkpp3i69CoBAR_borZj9z3E.roa (hash: zObb1YXEsof5rty353AjV2YuXW0tkbylm0QLsUYgMRY=) 14: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 15: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: Ot9bF5UtgeW+v35avyP98cXeOfLGyqtGOVa8VyT1Qcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:aa:63:82:79:8e:f2:07:29:3e:28:1f:2c:70:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Oct 19 10:02:29 2025 GMT Not After : Oct 20 10:02:29 2025 GMT Subject: CN=673320c5c65306bb88135552a15f6ba1db41f0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:4e:65:c7:79:4e:68:c8:fe:82:89:b0:f2: ec:7b:d4:da:01:0e:26:1b:2d:78:18:00:31:3e:93: c4:c7:f2:de:86:cd:34:e3:bd:93:02:77:c0:75:26: ab:10:e8:30:1d:e1:3b:a9:f6:7d:f1:9b:a5:0f:54: 19:4a:20:b1:0c:fb:4a:46:6c:a6:13:dc:34:eb:9c: 90:56:80:1d:c1:25:ed:f1:52:87:e4:e7:3d:f0:da: 14:75:f6:89:09:b0:8d:ee:44:33:fd:85:d4:85:49: df:41:5e:a1:0f:e1:75:de:42:1d:28:df:38:f2:5f: df:15:5b:08:53:d9:11:93:59:77:ee:af:46:05:28: f0:f0:70:21:fa:3b:08:f5:8e:d3:67:31:a3:ab:fa: e2:e8:f7:b9:57:a3:53:bb:2c:78:27:b2:68:63:c0: 2c:f9:a5:82:bb:bd:94:b4:30:67:72:67:1d:41:af: 71:e6:d9:87:e0:50:e2:e4:3b:49:47:b9:ce:17:1f: ba:a3:07:f1:28:d0:39:e3:ca:68:96:04:25:20:5d: 41:9d:a2:2d:2e:9b:5b:d5:d8:6a:78:8d:db:b2:3e: 65:b8:79:99:ac:b0:d6:85:9a:1c:48:81:07:80:e6: 0e:53:8f:8d:ec:02:02:d8:f4:ff:10:78:d5:c1:a1: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:33:20:C5:C6:53:06:BB:88:13:55:52:A1:5F:6B:A1:DB:41:F0:E0 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b8:7b:45:b2:18:82:8a:f3:5d:9f:99:9b:86:2c:eb:b3:09: 33:e0:a8:95:44:e7:03:3e:cb:08:fe:6a:49:ff:39:5c:35:ae: 5d:af:a2:f1:39:85:41:aa:a2:4d:31:da:68:31:ec:7d:70:9a: 3c:b2:c9:0a:98:32:57:7a:81:63:20:22:4b:0a:10:5d:46:9b: d8:2c:27:8c:78:0d:57:95:1d:33:b3:09:6e:2d:30:8b:96:92: 10:23:a0:32:a3:58:7d:95:3a:67:44:32:41:6a:ed:05:08:39: a6:62:59:97:0a:b5:a6:8c:ab:48:b8:fa:8d:9b:ed:26:fa:af: 6e:0b:91:d8:58:dd:75:b5:f4:86:8a:68:14:8d:64:9f:aa:42: 08:71:66:f7:51:14:32:27:05:2c:08:79:46:95:10:59:8e:b5: c0:98:7a:33:a4:0b:aa:0c:f3:f2:db:2f:b9:ca:88:41:ae:c8: 35:1a:be:a0:95:94:a9:09:a7:e9:6b:59:4e:9d:22:1e:96:8b: a5:ae:27:38:11:3f:11:1a:b1:16:86:78:92:b2:29:e2:4e:81: 8f:a8:4f:04:54:23:79:e6:be:1d:04:70:ff:0d:be:f2:6f:2c: ae:e8:85:94:e0:cd:2c:6b:2e:67:12:60:6d:57:ba:ca:fd:ff: 79:3f:df:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn766pjgnmO8gcpPigfLHDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUxMDE5MTAwMjI5WhcNMjUxMDIwMTAwMjI5WjAzMTEwLwYDVQQD Eyg2NzMzMjBjNWM2NTMwNmJiODgxMzU1NTJhMTVmNmJhMWRiNDFmMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTVOZcd5TmjI/oKJsPLse9TaAQ4m Gy14GAAxPpPEx/Lehs00472TAnfAdSarEOgwHeE7qfZ98ZulD1QZSiCxDPtKRmym E9w065yQVoAdwSXt8VKH5Oc98NoUdfaJCbCN7kQz/YXUhUnfQV6hD+F13kIdKN84 8l/fFVsIU9kRk1l37q9GBSjw8HAh+jsI9Y7TZzGjq/ri6Pe5V6NTuyx4J7JoY8As +aWCu72UtDBncmcdQa9x5tmH4FDi5DtJR7nOFx+6owfxKNA548polgQlIF1BnaIt Lptb1dhqeI3bsj5luHmZrLDWhZocSIEHgOYOU4+N7AIC2PT/EHjVwaHRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGczIMXGUwa7iBNVUqFfa6HbQfDgMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLh7RbIY gorzXZ+Zm4Ys67MJM+ColUTnAz7LCP5qSf85XDWuXa+i8TmFQaqiTTHaaDHsfXCa PLLJCpgyV3qBYyAiSwoQXUab2CwnjHgNV5UdM7MJbi0wi5aSECOgMqNYfZU6Z0Qy QWrtBQg5pmJZlwq1poyrSLj6jZvtJvqvbguR2FjddbX0hopoFI1kn6pCCHFm91EU MicFLAh5RpUQWY61wJh6M6QLqgzz8tsvucqIQa7INRq+oJWUqQmn6WtZTp0iHpaL pa4nOBE/ERqxFoZ4krIp4k6Bj6hPBFQjeea+HQRw/w2+8m8sruiFlODNLGsuZxJg bVe6yv3/eT/f8w== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:29 2025 by rpki-client