$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: eTI/2xmKHZ82Ku4oBNnaTbVj5vE2HW8F9n+ZumcVCuY= Subject key identifier: 88:0A:5B:F9:80:40:EF:21:1A:BE:B0:26:88:61:6D:DC:26:49:F6:BC Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 0198D4A7B98E3B7555EB90F2A9CAF77039F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1417 Signing time: Sat 23 Aug 2025 02:00:18 +0000 Manifest this update: Sat 23 Aug 2025 02:00:18 +0000 Manifest next update: Sun 24 Aug 2025 02:00:18 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 8: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 9: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 10: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: XtZgsoA85DIv3GfliBNGyFFkjcVu9bY4MTmihGf2kTk=) 12: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:b9:8e:3b:75:55:eb:90:f2:a9:ca:f7:70:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Aug 23 02:00:18 2025 GMT Not After : Aug 24 02:00:18 2025 GMT Subject: CN=880a5bf98040ef211abeb02688616ddc2649f6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:de:47:c7:9f:07:37:b0:7c:5f:19:bb:ec: e2:da:6b:a1:2d:96:e0:a4:f6:04:40:49:41:9d:df: 55:75:e1:d8:18:fe:3a:85:32:4d:8e:39:ea:fa:31: 5b:59:46:06:7a:b8:90:f6:0c:dd:90:31:a9:5a:cd: c1:43:91:f1:1d:b8:7e:d1:d1:00:03:a8:b3:c4:47: 77:09:be:f5:99:58:f7:6a:46:05:a8:e5:9c:46:e5: 85:1e:8d:e4:09:7f:aa:1e:2a:9a:e5:06:f9:04:59: 77:65:cf:bb:c9:ed:8d:16:ec:f2:7c:fb:2a:42:d9: f1:ec:ff:ae:ba:ef:d1:bc:6a:03:f7:bf:78:a1:59: 46:9b:56:df:99:4d:8c:f5:48:aa:ad:da:d6:11:1f: 1b:a2:a9:24:c3:43:0a:37:ff:19:62:18:54:44:4c: 86:d5:83:ac:18:d9:52:8e:e4:28:7c:55:4c:f4:82: 25:a7:5a:35:a8:5e:f7:c4:52:28:d8:ba:d1:7e:99: f0:f5:b9:d0:46:47:ae:c3:ae:3a:2d:68:b3:c6:de: c1:03:2b:a8:ca:08:a9:35:e1:a8:c0:0d:75:5d:c8: 43:fd:53:f2:e2:92:41:dd:3c:4e:1d:88:e2:b9:5f: 2b:95:b9:2b:4f:a4:c7:b9:1b:71:db:bb:5c:51:3b: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0A:5B:F9:80:40:EF:21:1A:BE:B0:26:88:61:6D:DC:26:49:F6:BC X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:79:d2:88:21:0f:58:60:24:b5:96:56:e3:0c:fa:5e:98: ae:79:21:e7:2f:b2:70:1b:87:cb:5d:19:63:ce:14:ef:73:89: ca:2a:9f:f2:fa:50:d8:6a:e2:f0:77:d9:49:2b:61:ae:24:26: 27:f8:48:d6:e4:00:19:c4:d9:e8:93:73:e7:b2:2d:1b:80:b9: d7:35:ac:89:31:a5:e2:97:62:d5:84:b9:c3:a8:fc:d7:0f:9f: c5:8f:9e:2e:ba:0c:52:e1:4e:c2:bf:ea:fb:7a:7c:0d:1a:70: 5e:bd:ab:14:aa:41:d4:52:ef:26:23:98:0a:47:e1:5b:c6:54: 76:d0:eb:ff:f3:36:3b:1f:8b:39:ad:53:68:f4:c2:bf:0b:e6: 3c:79:16:2f:f2:57:05:b9:00:8d:9d:12:cc:fc:ec:2b:c4:05: 2c:d8:bb:db:be:78:34:4b:f3:71:b9:49:f2:2d:12:36:b5:4a: da:3e:a7:c2:95:cc:2c:76:7f:f1:b3:90:79:d7:da:f2:e1:aa: d9:c7:5f:82:7b:36:f4:6f:53:a4:8a:05:2c:2e:f9:36:15:34: a0:97:b4:70:df:20:a1:e9:17:9f:84:e6:86:c6:3a:cb:39:37: a5:16:34:45:d2:88:ce:ec:24:cf:de:d2:0c:7c:6f:38:d4:50: 89:6a:87:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp7mOO3VV65Dyqcr3cDnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwODIzMDIwMDE4WhcNMjUwODI0MDIwMDE4WjAzMTEwLwYDVQQD Eyg4ODBhNWJmOTgwNDBlZjIxMWFiZWIwMjY4ODYxNmRkYzI2NDlmNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuDeR8efBzewfF8Zu+zi2muhLZbg pPYEQElBnd9VdeHYGP46hTJNjjnq+jFbWUYGeriQ9gzdkDGpWs3BQ5HxHbh+0dEA A6izxEd3Cb71mVj3akYFqOWcRuWFHo3kCX+qHiqa5Qb5BFl3Zc+7ye2NFuzyfPsq Qtnx7P+uuu/RvGoD9794oVlGm1bfmU2M9UiqrdrWER8boqkkw0MKN/8ZYhhUREyG 1YOsGNlSjuQofFVM9IIlp1o1qF73xFIo2LrRfpnw9bnQRkeuw646LWizxt7BAyuo ygipNeGowA11XchD/VPy4pJB3TxOHYjiuV8rlbkrT6THuRtx27tcUTvUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgKW/mAQO8hGr6wJohhbdwmSfa8MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea550ogh D1hgJLWWVuMM+l6Yrnkh5y+ycBuHy10ZY84U73OJyiqf8vpQ2Gri8HfZSSthriQm J/hI1uQAGcTZ6JNz57ItG4C51zWsiTGl4pdi1YS5w6j81w+fxY+eLroMUuFOwr/q +3p8DRpwXr2rFKpB1FLvJiOYCkfhW8ZUdtDr//M2Ox+LOa1TaPTCvwvmPHkWL/JX BbkAjZ0SzPzsK8QFLNi72754NEvzcblJ8i0SNrVK2j6nwpXMLHZ/8bOQedfa8uGq 2cdfgns29G9TpIoFLC75NhU0oJe0cN8goekXn4TmhsY6yzk3pRY0RdKIzuwkz97S DHxvONRQiWqH/w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:45 2025 by rpki-client