$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: UOuJv+5zcJHpQz9XHW6B0K4nik6wjzstFEsR2Mz2L7A= Subject key identifier: DF:9E:72:99:8D:E4:14:13:B8:53:D8:B4:67:59:A9:7F:29:A2:F2:2E Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 0197B88EA39495569137EB8275FE5CFEF9BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0730 Signing time: Sat 28 Jun 2025 22:00:45 +0000 Manifest this update: Sat 28 Jun 2025 22:00:45 +0000 Manifest next update: Sun 29 Jun 2025 22:00:45 +0000 Files and hashes: 1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: DO+Zi8cKSgQTr5fTN8HX0ZeW2IR3NoetdkhZAE3OYTQ=) 6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8e:a3:94:95:56:91:37:eb:82:75:fe:5c:fe:f9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jun 28 22:00:45 2025 GMT Not After : Jun 29 22:00:45 2025 GMT Subject: CN=df9e72998de41413b853d8b46759a97f29a2f22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:9f:75:d9:34:43:13:ac:5d:cb:f6:0c:79: 2e:ba:33:0c:d5:6b:36:d5:b7:b6:36:51:8d:01:3f: d0:ea:a6:37:3c:d0:6a:b6:29:4d:69:96:9e:5b:50: 22:5d:36:00:6b:2c:ae:de:77:b7:62:c2:d7:13:a2: 83:b0:20:0a:78:d6:4a:6d:c3:1d:5c:79:4a:da:93: 81:b3:50:e0:4f:40:5a:6a:16:5b:4b:26:b8:2f:8b: 58:99:a9:92:7c:88:a1:54:0d:b8:3a:34:b8:68:a5: cc:db:bb:ab:4c:e2:41:1d:ca:fd:4d:da:8a:aa:95: 30:a2:13:db:e6:ef:62:57:ec:45:08:9c:81:5c:bc: 4e:29:a5:e4:d7:6c:20:f4:e0:f4:3e:45:00:b9:45: fa:3a:49:ea:c2:02:f0:5c:0c:55:c9:1f:2b:30:b6: cb:c3:e2:38:ea:cd:30:e3:7d:41:e2:80:a0:f5:be: af:e5:e7:1b:44:db:52:b6:86:0f:98:29:47:9c:cd: eb:29:9d:98:94:7f:91:d7:9f:65:37:6e:d7:5c:bd: 9d:d2:11:6a:a4:d6:7d:aa:2f:8e:be:64:66:0b:04: e6:89:0f:90:de:c6:cd:6c:fc:56:3a:1b:05:d0:5c: 81:46:99:d2:e7:94:89:a1:84:e5:73:0c:fa:bc:71: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9E:72:99:8D:E4:14:13:B8:53:D8:B4:67:59:A9:7F:29:A2:F2:2E X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:df:2a:4b:62:e5:e9:d0:d1:4f:ca:bc:ae:5c:af:27:3f: 94:bd:87:f4:35:13:c3:38:29:14:6e:7f:a3:f8:69:fd:5c:af: a3:9b:1f:7c:73:d4:08:1f:78:08:de:96:28:8b:1d:ff:5f:cb: 9a:8f:42:bf:dd:fa:92:67:b8:f4:d8:76:81:77:4b:bd:e3:7d: fe:f7:f1:c1:ea:0b:76:83:3d:fd:98:75:95:d7:08:d1:6c:9d: 7e:b4:8d:03:9b:84:5a:7a:e8:7b:e7:ef:79:6b:c1:c2:80:7e: 21:de:05:9a:41:1a:92:2f:e7:f7:85:54:45:05:1a:af:bc:01: ec:e7:6d:dc:00:5c:9a:80:91:c6:66:0b:dd:d9:17:93:d0:2f: 27:10:c5:6a:0a:81:d5:14:04:8f:35:e5:23:d7:69:2e:cd:17: 77:07:01:9c:22:43:ae:c4:64:05:4b:10:02:04:ed:e9:68:4a: 9e:97:27:0b:49:7e:67:30:e5:f4:74:f9:00:41:91:05:4e:ae: de:a9:a9:f7:f2:39:f1:b4:a6:fe:16:e2:89:09:bc:33:ae:e9: bf:4e:99:cb:71:0c:f2:ef:da:82:0e:61:35:f9:ec:6e:a3:87: 61:a3:ea:14:87:8a:0b:dd:b9:17:d5:d2:96:9a:2f:69:48:3b: 92:64:0f:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4jqOUlVaRN+uCdf5c/vm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwNjI4MjIwMDQ1WhcNMjUwNjI5MjIwMDQ1WjAzMTEwLwYDVQQD EyhkZjllNzI5OThkZTQxNDEzYjg1M2Q4YjQ2NzU5YTk3ZjI5YTJmMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18yfddk0QxOsXcv2DHkuujMM1Ws2 1be2NlGNAT/Q6qY3PNBqtilNaZaeW1AiXTYAayyu3ne3YsLXE6KDsCAKeNZKbcMd XHlK2pOBs1DgT0BaahZbSya4L4tYmamSfIihVA24OjS4aKXM27urTOJBHcr9TdqK qpUwohPb5u9iV+xFCJyBXLxOKaXk12wg9OD0PkUAuUX6OknqwgLwXAxVyR8rMLbL w+I46s0w431B4oCg9b6v5ecbRNtStoYPmClHnM3rKZ2YlH+R159lN27XXL2d0hFq pNZ9qi+OvmRmCwTmiQ+Q3sbNbPxWOhsF0FyBRpnS55SJoYTlcwz6vHEORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+ecpmN5BQTuFPYtGdZqX8povIuMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkzfKkti 5enQ0U/KvK5cryc/lL2H9DUTwzgpFG5/o/hp/Vyvo5sffHPUCB94CN6WKIsd/1/L mo9Cv936kme49Nh2gXdLveN9/vfxweoLdoM9/Zh1ldcI0WydfrSNA5uEWnroe+fv eWvBwoB+Id4FmkEaki/n94VURQUar7wB7Odt3ABcmoCRxmYL3dkXk9AvJxDFagqB 1RQEjzXlI9dpLs0XdwcBnCJDrsRkBUsQAgTt6WhKnpcnC0l+ZzDl9HT5AEGRBU6u 3qmp9/I58bSm/hbiiQm8M67pv06Zy3EM8u/agg5hNfnsbqOHYaPqFIeKC925F9XS lpovaUg7kmQPgQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:35:04 2025 by rpki-client