$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: A83rjiqJ5TnPZII2ormnUhjyRH9t/2gcUi0gTEpSOdM= Subject key identifier: 38:2A:CA:C0:C1:CF:BA:7B:C3:F0:F5:7E:F7:AA:B2:5A:78:49:A8:0D Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 0197BA0F9B03534B66E67B06040B059CD309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 145D Signing time: Sun 29 Jun 2025 05:01:14 +0000 Manifest this update: Sun 29 Jun 2025 05:01:14 +0000 Manifest next update: Mon 30 Jun 2025 05:01:14 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 4: B84STFeKoQGNNPVu7qjqse7G6tE.roa (hash: MtuuUttjdEHBfw9pQ6wLwNYRQchbll7oYwTHz6pA12k=) 5: CyIPGIrlqcoByOmlmEv79O0R7X0.roa (hash: VsM4lVpD4fIP5GlqXuHNJVTXy3FeCIeYwJjMGGWmXmo=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: cmg4VeeFHVC_UWhho_CrQbVWcC8.roa (hash: 1EwZCwgAmjaMM5LT34JdZWrdxMVOcyev3ayJtE5hagk=) 10: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 11: lc6-J-M0Ug8u55OV8BPW88L2DFk.roa (hash: k8pMP4+1+b/AH4Rx6dUxAINmCkCXnf2EzGttVUmBvns=) 12: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 13: tvkZ4fqE6QJf8xxvSBRkdJHYoXY.roa (hash: 7tw+NyMEQGhNa6VQJeHyXXe47cTc78mCtTCXpfOWObQ=) 14: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: fX4NzLWfPWuyb8XZTe8eCWie3rMJ7bOawgiX49dojzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:0f:9b:03:53:4b:66:e6:7b:06:04:0b:05:9c:d3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Jun 29 05:01:14 2025 GMT Not After : Jun 30 05:01:14 2025 GMT Subject: CN=382acac0c1cfba7bc3f0f57ef7aab25a7849a80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:0a:7f:f5:fa:73:d8:a9:54:8e:6e:12:0e: 3b:07:14:79:3f:10:74:9a:60:3a:cf:cd:25:87:7b: b9:99:91:7a:ec:23:31:83:a6:72:43:9f:9a:a4:be: 1c:73:bc:9a:de:dc:7f:b8:a5:4a:84:26:86:09:93: 01:b2:03:67:bd:a7:72:fd:33:7b:b6:65:dd:e7:d2: 21:f5:8e:87:6f:c7:1c:a4:5f:e8:00:40:01:d1:a6: 87:6c:cf:f9:ee:6a:e3:69:80:2d:9c:76:07:82:39: 74:56:ff:a0:bb:76:fa:90:2a:05:4b:3a:ed:7a:4d: e1:99:14:3f:d1:06:0d:ce:1b:da:e6:ff:2b:08:58: 96:9d:f5:1e:48:42:af:ab:b2:b7:1d:93:3b:bb:2d: ce:01:c1:a5:bd:63:30:1c:bb:43:64:16:97:97:ac: c5:e6:4e:cd:4d:cb:93:55:f2:c6:52:34:be:9d:48: 57:fc:ca:29:73:00:cd:9e:2b:ab:0f:fc:77:68:a5: 8c:8e:1c:9a:47:31:f3:27:41:8e:26:0c:03:72:5d: 58:52:30:fd:b3:b1:84:e3:f9:b2:73:29:8c:6b:9c: 8f:1f:a5:a7:da:e2:0a:73:77:14:d7:41:8a:04:e4: 73:e5:4b:ab:68:42:3c:14:e3:08:5a:d2:91:e0:3d: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:CA:C0:C1:CF:BA:7B:C3:F0:F5:7E:F7:AA:B2:5A:78:49:A8:0D X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e9:e3:55:04:9a:10:ba:12:b9:aa:99:83:df:9d:c8:52:37: 90:5f:ae:d5:be:a2:92:6b:0a:db:d5:71:f0:2e:0a:d4:0a:7d: 2e:a8:20:9e:e8:e9:90:ff:ed:e9:6c:ad:c9:2c:f0:fb:7c:83: 40:3a:26:7d:a0:ef:33:7d:d3:2b:78:1c:c9:36:25:c2:5c:20: 4f:d6:b4:59:5c:2b:ee:f5:5f:6c:b0:f4:90:06:6b:0a:95:11: 82:aa:fc:5d:38:3a:d0:0a:5e:ad:0c:38:c4:69:9a:e4:39:f4: d3:f4:62:96:dd:b3:5d:99:8c:b3:1d:9d:50:7a:ce:ec:f9:bf: dc:99:c2:65:0a:76:0d:35:4c:1e:61:33:db:49:1b:4a:8e:f5: 25:55:97:f8:a3:9f:67:4f:4f:82:33:1a:0f:b0:34:f2:d7:d9: f2:4a:46:f4:a9:dc:85:81:03:5a:40:40:61:ac:f1:e6:d7:2f: cf:9d:e5:c7:f5:10:6e:92:9e:b9:16:8e:d1:cf:14:ea:64:ee: 9b:85:5f:11:a3:8a:86:ff:39:17:65:ac:08:a3:f7:e7:41:f2: a7:19:ab:4c:cf:9a:0f:2b:81:51:e1:17:d6:07:4b:00:82:b7: ef:ec:0a:b4:18:24:57:21:01:97:cd:4d:47:ec:d6:7b:e2:e2: eb:2b:74:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6D5sDU0tm5nsGBAsFnNMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwNjI5MDUwMTE0WhcNMjUwNjMwMDUwMTE0WjAzMTEwLwYDVQQD EygzODJhY2FjMGMxY2ZiYTdiYzNmMGY1N2VmN2FhYjI1YTc4NDlhODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCcKf/X6c9ipVI5uEg47BxR5PxB0 mmA6z80lh3u5mZF67CMxg6ZyQ5+apL4cc7ya3tx/uKVKhCaGCZMBsgNnvady/TN7 tmXd59Ih9Y6Hb8ccpF/oAEAB0aaHbM/57mrjaYAtnHYHgjl0Vv+gu3b6kCoFSzrt ek3hmRQ/0QYNzhva5v8rCFiWnfUeSEKvq7K3HZM7uy3OAcGlvWMwHLtDZBaXl6zF 5k7NTcuTVfLGUjS+nUhX/MopcwDNniurD/x3aKWMjhyaRzHzJ0GOJgwDcl1YUjD9 s7GE4/mycymMa5yPH6Wn2uIKc3cU10GKBORz5UuraEI8FOMIWtKR4D3rzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgqysDBz7p7w/D1fveqslp4SagNMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+njVQSa ELoSuaqZg9+dyFI3kF+u1b6ikmsK29Vx8C4K1Ap9LqggnujpkP/t6WytySzw+3yD QDomfaDvM33TK3gcyTYlwlwgT9a0WVwr7vVfbLD0kAZrCpURgqr8XTg60AperQw4 xGma5Dn00/Rilt2zXZmMsx2dUHrO7Pm/3JnCZQp2DTVMHmEz20kbSo71JVWX+KOf Z09PgjMaD7A08tfZ8kpG9KnchYEDWkBAYazx5tcvz53lx/UQbpKeuRaO0c8U6mTu m4VfEaOKhv85F2WsCKP350HypxmrTM+aDyuBUeEX1gdLAIK37+wKtBgkVyEBl81N R+zWe+Li6yt0TA== -----END CERTIFICATE-----Generated at Sun Jun 29 14:34:13 2025 by rpki-client