$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: 6s4rYhD+SUml/OIaUm+nJ1dqjZ0Y6sbgxVTiY+KLTT8= Subject key identifier: 2A:9B:E8:7E:C1:9A:3E:04:B6:0D:42:2E:EE:A9:05:E1:65:7A:D8:68 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 0199FFFE4A95C4893E49DCACC2B1AA4A172C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 085F Signing time: Mon 20 Oct 2025 05:01:19 +0000 Manifest this update: Mon 20 Oct 2025 05:01:19 +0000 Manifest next update: Tue 21 Oct 2025 05:01:19 +0000 Files and hashes: 1: 1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa (hash: pZugq23EDIU544OpCuM7hDUd1+y/txfCOV3C5E6h3Bk=) 2: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 3: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 4: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 5: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 6: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: 1pIV0OAmhWCZ2ekTB/QUcRdg+ypu0TkjUzUpaaB0lYo=) 7: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:fe:4a:95:c4:89:3e:49:dc:ac:c2:b1:aa:4a:17:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Oct 20 05:01:19 2025 GMT Not After : Oct 21 05:01:19 2025 GMT Subject: CN=2a9be87ec19a3e04b60d422eeea905e1657ad868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:16:ef:ea:4e:72:df:95:03:e7:7d:26:3b: 56:e5:59:ce:a4:51:0f:57:e6:4f:47:c5:c6:d0:11: dc:64:b4:82:d8:5b:8d:66:6b:7a:6a:f7:96:d3:07: 14:25:04:c2:19:a4:dd:d3:63:76:05:8a:96:57:62: 75:f4:d8:ca:4c:21:ff:d8:be:08:46:03:16:5c:26: 42:23:7f:c4:6d:47:4f:16:4d:78:a1:3e:e7:92:5d: 5f:12:84:20:f8:d7:80:6b:77:95:3b:14:c5:5f:f1: 8f:59:9d:c1:02:eb:d1:7d:db:f3:a9:e3:f0:75:70: 2d:f0:a4:6b:85:7b:b3:fc:ec:b3:b8:30:2d:9b:f0: dd:3c:0f:d3:ee:52:b9:bc:27:94:06:56:5d:53:1e: 4b:f6:7b:9c:fd:34:d2:df:ca:98:f1:c0:17:29:ab: a0:fd:b7:cc:7a:ae:59:e9:eb:2c:d3:a9:b1:a9:f5: 05:08:4d:f0:ca:3b:9b:69:76:0c:00:0b:fe:3b:d9: 83:28:e1:54:e6:9d:25:9d:ab:70:2e:33:26:da:8e: ad:46:ab:f9:5f:57:09:28:f2:2f:db:27:53:5b:74: c3:8c:84:bc:e4:4a:48:15:b0:c0:f5:4c:c7:ca:3b: ea:17:b6:56:d7:2e:f7:49:9b:30:47:cc:f9:1a:b1: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:E8:7E:C1:9A:3E:04:B6:0D:42:2E:EE:A9:05:E1:65:7A:D8:68 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ab:7f:9f:a7:9c:e7:5b:0f:b2:f4:63:44:ff:83:b0:a4:9d: 79:69:14:85:ea:d5:e6:25:13:ac:4e:14:0f:2e:fa:33:99:47: e9:49:cf:3e:4b:1c:01:fc:16:03:34:70:7f:af:c3:93:0c:f1: e7:e5:e6:e6:6a:f2:c9:94:50:6c:84:06:ac:b0:ab:ed:3c:61: 1d:66:e2:33:7a:ca:4e:ea:b7:ed:19:4a:0c:5d:f5:5a:c7:2c: 0a:62:2e:a5:53:37:73:dc:5e:97:36:f8:d5:0b:6e:0d:00:f6: ab:9b:ab:13:f0:e5:4e:5f:39:b0:f2:48:3b:4e:4e:a5:da:39: 25:be:d7:08:84:39:f3:4d:8e:c4:1a:ab:a0:0b:90:12:e1:7f: f7:be:44:59:4b:1b:4a:01:a2:4e:12:09:85:0b:fa:60:86:09: 04:80:17:b2:b6:79:b4:ad:3c:a7:f4:48:c1:25:b7:9b:10:d2: 10:1c:1a:69:d9:47:f2:92:6b:19:5a:6c:fc:29:58:b9:86:61: de:33:3e:2d:bb:bd:4b:fc:33:be:d8:bf:cb:e5:00:00:a9:5c: 73:38:9e:d3:c9:b1:43:30:be:6e:89:1e:19:46:80:7e:97:d6: c0:3b:4c:da:38:ec:99:46:39:2a:70:f7:a2:c5:87:79:b7:e9: 40:b3:27:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn//kqVxIk+SdyswrGqShcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUxMDIwMDUwMTE5WhcNMjUxMDIxMDUwMTE5WjAzMTEwLwYDVQQD EygyYTliZTg3ZWMxOWEzZTA0YjYwZDQyMmVlZWE5MDVlMTY1N2FkODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUW7+pOct+VA+d9JjtW5VnOpFEP V+ZPR8XG0BHcZLSC2FuNZmt6aveW0wcUJQTCGaTd02N2BYqWV2J19NjKTCH/2L4I RgMWXCZCI3/EbUdPFk14oT7nkl1fEoQg+NeAa3eVOxTFX/GPWZ3BAuvRfdvzqePw dXAt8KRrhXuz/OyzuDAtm/DdPA/T7lK5vCeUBlZdUx5L9nuc/TTS38qY8cAXKaug /bfMeq5Z6ess06mxqfUFCE3wyjubaXYMAAv+O9mDKOFU5p0lnatwLjMm2o6tRqv5 X1cJKPIv2ydTW3TDjIS85EpIFbDA9UzHyjvqF7ZW1y73SZswR8z5GrGfvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqb6H7Bmj4Etg1CLu6pBeFlethoMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6t/n6ec 51sPsvRjRP+DsKSdeWkUherV5iUTrE4UDy76M5lH6UnPPkscAfwWAzRwf6/Dkwzx 5+Xm5mryyZRQbIQGrLCr7TxhHWbiM3rKTuq37RlKDF31WscsCmIupVM3c9xelzb4 1QtuDQD2q5urE/DlTl85sPJIO05Opdo5Jb7XCIQ5802OxBqroAuQEuF/975EWUsb SgGiThIJhQv6YIYJBIAXsrZ5tK08p/RIwSW3mxDSEBwaadlH8pJrGVps/ClYuYZh 3jM+Lbu9S/wzvti/y+UAAKlcczie08mxQzC+bokeGUaAfpfWwDtM2jjsmUY5KnD3 osWHebfpQLMnOA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:05 2025 by rpki-client