$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: riQPmNGHV9c5M2Cl3xHYBsfkUzV52CcM3s0SdjKi3yU= Subject key identifier: 33:AC:AE:58:2E:22:90:B7:44:98:5E:DE:C3:68:73:0E:1D:9E:22:E5 Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019A00A36C458B2452F747120329B9C38B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 171D Signing time: Mon 20 Oct 2025 08:01:41 +0000 Manifest this update: Mon 20 Oct 2025 08:01:41 +0000 Manifest next update: Tue 21 Oct 2025 08:01:41 +0000 Files and hashes: 1: 7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (hash: 39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=) 2: 8zCnIgh-ZctwaWW9UWnhk5D47-Y.roa (hash: MUHP885QC53KyVAwA3OVuIpjRfltCfNEkey65yD1E0A=) 3: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (hash: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=) 4: JfBP6dS5I5N35c7vJqB7NgG5BpQ.roa (hash: mlxyZUvm8D4amiftjMjNylfXPIWgAcCSgND1WevSbxo=) 5: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: lYPbnXgpJkZ+g7sn/rl4ZLNK4oa1v22TkzclbbRf6hg=) 6: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (hash: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=) 7: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (hash: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=) 8: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (hash: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=) 9: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (hash: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=) 10: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (hash: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=) 11: fs4X3zJFq3DUP70BE5KHHq5PW6A.roa (hash: bGR4PpXG1RT4m3/7nflg7BgdcGbpPQ/v8739XylkQso=) 12: qrKrZlWqP1xYMoyEfKssy_MBOPc.roa (hash: 7HCvDFegj/Om6sM+U3B+gHYXUnQzqvdjd1JcBWwGFb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 08:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:a3:6c:45:8b:24:52:f7:47:12:03:29:b9:c3:8b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Oct 20 08:01:41 2025 GMT Not After : Oct 21 08:01:41 2025 GMT Subject: CN=33acae582e2290b744985edec368730e1d9e22e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:dc:87:25:fa:1a:a4:3b:e5:cf:81:22:4b: d9:06:d1:ad:f9:90:b2:a5:7e:84:a0:cd:7e:28:ae: 87:63:7b:f3:b0:1e:69:88:76:6a:ec:0e:bf:e8:15: b1:aa:27:52:b9:12:a1:80:61:f9:21:3a:c9:4b:69: 74:cf:f3:13:50:1d:07:9b:d4:04:4b:20:38:a4:de: a5:3c:b3:7e:0d:cf:0a:af:8d:ff:08:ca:0c:b9:47: f2:93:3f:92:e2:85:83:18:41:3a:b0:6d:d9:2a:16: 7f:ac:2d:54:d9:b7:eb:c8:95:2c:1f:81:b0:3b:00: b2:46:c2:5b:e6:bb:84:0a:66:d4:b1:3d:c2:b4:d8: cd:d8:8a:5d:3f:b8:f4:55:9a:e5:84:4e:dd:a4:82: 6e:28:4f:fc:bb:8c:10:d6:68:84:e2:a9:d7:ba:82: db:f0:36:b6:a7:d1:17:90:43:ad:2d:ef:c8:9b:85: 5a:e1:23:04:57:db:e3:04:c6:8f:f7:23:a9:a7:db: da:84:46:92:b0:b2:b0:c7:e7:55:3e:9b:95:31:7b: 01:bf:a2:40:c4:e8:59:39:ec:99:48:6f:3d:69:b7: 60:cf:a4:a5:a3:92:2e:f9:07:31:61:27:67:a1:56: 34:c5:7a:14:92:7b:eb:df:12:71:17:e9:43:af:1d: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AC:AE:58:2E:22:90:B7:44:98:5E:DE:C3:68:73:0E:1D:9E:22:E5 X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:17:33:f7:c2:09:28:b9:dc:e3:6e:dc:19:ab:38:07:5f:ae: ec:87:3d:df:f8:bb:f3:cc:62:5e:7b:37:f0:7c:f4:cb:7c:9c: 5b:f4:f6:f8:0a:4c:ef:a1:e6:4f:91:b7:61:02:f3:ef:88:ca: 5b:f1:b9:d9:7f:a4:49:2c:7f:53:89:b7:93:0d:ae:62:2f:f4: fa:5f:42:49:27:52:30:b1:df:0f:c1:40:68:c4:69:8c:ca:90: 67:f0:36:81:3a:d5:9d:34:fc:2c:29:47:46:ad:9e:df:e1:1d: e2:c1:38:1f:af:07:cf:cf:b3:57:34:9a:b2:df:16:0a:03:1c: f0:77:4b:4c:53:1f:8e:f3:bf:d4:39:3e:44:12:a9:14:91:aa: d4:be:a2:88:d0:83:54:f7:80:07:e2:3b:d0:0f:34:5c:f8:23: 2c:c0:23:4f:ab:e1:e2:77:9f:d5:4f:3b:94:2a:b5:72:0f:53: 72:bd:fd:ac:ed:f4:d5:69:50:36:cd:52:48:8b:bf:e7:73:61: 1f:3f:8c:c7:4a:89:6f:c0:cc:2a:d2:25:59:89:13:75:cc:3d: e9:4a:85:dc:db:72:e3:0e:6c:9e:e9:f5:b8:cd:3d:ac:c2:06: 7d:1b:ad:d6:69:d3:cc:ce:51:73:c1:8e:dd:a8:c0:34:38:0e: dd:9b:93:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAo2xFiyRS90cSAym5w4tcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjUxMDIwMDgwMTQxWhcNMjUxMDIxMDgwMTQxWjAzMTEwLwYDVQQD EygzM2FjYWU1ODJlMjI5MGI3NDQ5ODVlZGVjMzY4NzMwZTFkOWUyMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuvchyX6GqQ75c+BIkvZBtGt+ZCy pX6EoM1+KK6HY3vzsB5piHZq7A6/6BWxqidSuRKhgGH5ITrJS2l0z/MTUB0Hm9QE SyA4pN6lPLN+Dc8Kr43/CMoMuUfykz+S4oWDGEE6sG3ZKhZ/rC1U2bfryJUsH4Gw OwCyRsJb5ruECmbUsT3CtNjN2IpdP7j0VZrlhE7dpIJuKE/8u4wQ1miE4qnXuoLb 8Da2p9EXkEOtLe/Im4Va4SMEV9vjBMaP9yOpp9vahEaSsLKwx+dVPpuVMXsBv6JA xOhZOeyZSG89abdgz6Slo5Iu+QcxYSdnoVY0xXoUknvr3xJxF+lDrx3pNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOsrlguIpC3RJhe3sNocw4dniLlMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRcz98IJ KLnc427cGas4B1+u7Ic93/i788xiXns38Hz0y3ycW/T2+ApM76HmT5G3YQLz74jK W/G52X+kSSx/U4m3kw2uYi/0+l9CSSdSMLHfD8FAaMRpjMqQZ/A2gTrVnTT8LClH Rq2e3+Ed4sE4H68Hz8+zVzSast8WCgMc8HdLTFMfjvO/1Dk+RBKpFJGq1L6iiNCD VPeAB+I70A80XPgjLMAjT6vh4nef1U87lCq1cg9Tcr39rO301WlQNs1SSIu/53Nh Hz+Mx0qJb8DMKtIlWYkTdcw96UqF3Nty4w5snun1uM09rMIGfRut1mnTzM5Rc8GO 3ajANDgO3ZuTRA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:50 2025 by rpki-client