$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: 6VSNHZxPIfCVS/VxpukXZMO1uI920EanGDQDay1cFzo= Subject key identifier: 4F:3F:57:D6:97:AC:42:AC:01:C2:76:A1:50:E7:14:E9:E7:2B:82:06 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 0198D84F2AB56C2A50E5109FDC290DFAE9A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 07C5 Signing time: Sat 23 Aug 2025 19:02:03 +0000 Manifest this update: Sat 23 Aug 2025 19:02:03 +0000 Manifest next update: Sun 24 Aug 2025 19:02:03 +0000 Files and hashes: 1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: pGEtsYisVK1vBAP68uY3szYtm0uSN56ihXfx9M1MwnM=) 6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d8:4f:2a:b5:6c:2a:50:e5:10:9f:dc:29:0d:fa:e9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Aug 23 19:02:03 2025 GMT Not After : Aug 24 19:02:03 2025 GMT Subject: CN=4f3f57d697ac42ac01c276a150e714e9e72b8206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:2e:77:c4:5c:cf:40:27:4d:84:1b:9e:e1: 24:f4:09:f2:78:f4:1e:f7:c9:a1:4a:71:1b:37:7c: 21:8d:2c:40:a7:26:d8:17:e1:35:4c:41:b6:c1:7e: 0b:88:10:c7:e0:c3:a7:38:a7:2c:96:6a:95:1c:92: ad:58:75:05:e8:47:62:cf:e3:fa:c3:0f:d2:89:04: 17:e6:32:28:57:79:69:40:92:4c:73:75:a0:3c:ac: c5:8b:bd:7c:10:b7:cd:8e:72:92:0b:0e:0b:58:25: 60:72:23:86:88:b0:16:e9:b9:2a:1a:71:6d:b1:ea: 33:17:1a:46:1f:d0:2b:76:7b:9f:94:b4:fa:d6:f7: 40:06:86:3a:cd:20:ca:b6:40:51:1c:d5:b7:4b:0c: 5e:4f:f1:42:8b:cf:94:d4:1c:6a:3a:04:b6:38:d4: 69:d6:13:9c:63:ea:68:3e:a0:a6:c7:09:ba:74:f1: 3d:0c:1a:9f:d1:17:be:4f:fe:35:b0:32:15:45:30: a5:8a:70:c4:62:2f:ec:83:09:cd:8a:a4:88:41:cf: bf:62:0a:9f:44:54:bb:af:48:ba:88:fa:d6:35:53: 8f:30:26:63:39:45:eb:cf:50:12:c6:63:68:3a:72: ab:b3:04:63:c7:6e:34:e7:bb:e0:85:51:04:35:41: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3F:57:D6:97:AC:42:AC:01:C2:76:A1:50:E7:14:E9:E7:2B:82:06 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:bd:a5:3e:b8:43:6b:69:05:36:e3:dc:4a:ed:aa:54:25:1b: 75:af:eb:86:ea:a8:eb:a4:38:7d:a6:2d:bc:5a:2d:b3:97:66: 6f:2c:d2:85:79:42:75:84:85:88:b7:42:fa:50:06:cf:3c:9f: 31:bf:b0:79:c8:cf:bb:cd:38:09:ba:67:0d:58:bc:de:35:a4: 58:78:e3:62:31:41:49:0c:6c:a8:d1:92:6f:58:a0:bc:ba:dd: 91:bf:36:77:1b:9a:fa:e7:19:17:20:df:dc:4f:4e:a5:6b:16: 50:67:d9:ff:45:ae:be:6f:c4:33:41:bf:ce:de:a0:9b:45:6f: b3:d5:a1:21:9b:f5:87:12:92:4d:07:b3:32:96:46:bd:04:6e: bd:c7:99:57:ec:a4:2d:d1:2a:77:30:46:5e:86:ab:11:70:2a: f3:1a:67:5a:e8:bb:bb:c7:26:83:50:6d:a5:59:c6:55:3a:fb: 33:2f:fb:5d:68:9a:1a:b2:78:40:67:03:9d:ab:bf:45:f3:9e: 3d:82:9c:cd:a5:d7:bf:c3:66:3c:4e:b1:55:1e:77:f6:6d:06: ec:39:af:96:50:d9:cc:00:24:53:5b:00:61:2d:9e:34:3d:83: ce:7b:19:81:3f:9c:ac:fe:fe:ee:5e:2f:07:d8:ea:14:f6:e3: 34:34:61:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjYTyq1bCpQ5RCf3CkN+umiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwODIzMTkwMjAzWhcNMjUwODI0MTkwMjAzWjAzMTEwLwYDVQQD Eyg0ZjNmNTdkNjk3YWM0MmFjMDFjMjc2YTE1MGU3MTRlOWU3MmI4MjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24oud8Rcz0AnTYQbnuEk9AnyePQe 98mhSnEbN3whjSxApybYF+E1TEG2wX4LiBDH4MOnOKcslmqVHJKtWHUF6Ediz+P6 ww/SiQQX5jIoV3lpQJJMc3WgPKzFi718ELfNjnKSCw4LWCVgciOGiLAW6bkqGnFt seozFxpGH9ArdnuflLT61vdABoY6zSDKtkBRHNW3SwxeT/FCi8+U1BxqOgS2ONRp 1hOcY+poPqCmxwm6dPE9DBqf0Re+T/41sDIVRTClinDEYi/sgwnNiqSIQc+/Ygqf RFS7r0i6iPrWNVOPMCZjOUXrz1ASxmNoOnKrswRjx24057vghVEENUH4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8/V9aXrEKsAcJ2oVDnFOnnK4IGMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApL2lPrhD a2kFNuPcSu2qVCUbda/rhuqo66Q4faYtvFots5dmbyzShXlCdYSFiLdC+lAGzzyf Mb+wecjPu804CbpnDVi83jWkWHjjYjFBSQxsqNGSb1igvLrdkb82dxua+ucZFyDf 3E9OpWsWUGfZ/0Wuvm/EM0G/zt6gm0Vvs9WhIZv1hxKSTQezMpZGvQRuvceZV+yk LdEqdzBGXoarEXAq8xpnWui7u8cmg1BtpVnGVTr7My/7XWiaGrJ4QGcDnau/RfOe PYKczaXXv8NmPE6xVR539m0G7DmvllDZzAAkU1sAYS2eND2DznsZgT+crP7+7l4v B9jqFPbjNDRhWw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:25 2025 by rpki-client