$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: KxWX8YWGyAa37TSph2uF6KCyGMLzrE75/3Dd9J5qeyc= Subject key identifier: 3D:A9:4B:E4:F0:6C:37:F6:C9:BA:21:DB:F5:6B:0E:46:25:CA:35:4C Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0198304B631C0683A8368EF3BA1FC785495F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1612 Signing time: Tue 22 Jul 2025 04:01:43 +0000 Manifest this update: Tue 22 Jul 2025 04:01:43 +0000 Manifest next update: Wed 23 Jul 2025 04:01:43 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: bQl/2KnpbVfb2+4gqW9yTV7oMeaJBPbX4E49D83ileA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:30:4b:63:1c:06:83:a8:36:8e:f3:ba:1f:c7:85:49:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jul 22 04:01:43 2025 GMT Not After : Jul 23 04:01:43 2025 GMT Subject: CN=3da94be4f06c37f6c9ba21dbf56b0e4625ca354c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:19:c5:cc:65:a2:c1:f4:25:54:50:07:bf: 05:0e:09:82:f9:04:10:7e:b1:88:88:44:3e:f0:18: 9e:00:05:50:37:f3:3d:61:64:23:80:9e:54:12:a0: b5:f9:5c:2f:97:3a:76:55:79:82:19:17:44:ae:16: 4d:1f:6d:39:9a:54:d5:b1:48:05:49:bb:f6:71:83: cb:92:38:6d:08:a4:5e:36:71:73:86:90:85:49:6a: 7e:be:fb:31:46:39:88:75:6d:ad:5f:89:1a:ff:8a: 97:d3:cd:a5:51:9e:46:89:f7:bf:8f:e5:4b:8f:00: fc:a2:54:54:aa:90:80:c3:24:1a:af:e1:97:69:b7: ee:8a:6b:38:8e:31:36:0f:68:ff:ff:1d:f0:bf:95: 9c:0e:73:51:31:d4:e7:9c:c9:32:85:f8:fe:97:b7: 25:dd:2f:62:e6:0b:85:04:be:7a:d6:df:c2:67:3e: ce:b2:64:28:ac:72:e0:2c:3a:46:85:f9:21:19:b6: 96:56:90:99:d5:49:e1:c9:75:cb:5d:bc:9e:10:82: b5:d7:d0:5b:0c:c3:30:19:06:53:4a:4d:75:e3:9a: ac:ad:a8:b2:8c:93:00:c6:53:7a:ba:11:1d:00:74: dc:49:a1:c4:f2:d0:46:38:d6:af:8a:5b:f5:17:5d: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:4B:E4:F0:6C:37:F6:C9:BA:21:DB:F5:6B:0E:46:25:CA:35:4C X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:7c:ab:75:51:fa:a2:f0:f7:f9:e4:f5:eb:59:61:a2:e4: c8:6c:4a:c7:aa:ba:75:1d:b7:80:16:f4:c4:26:40:e1:71:03: 57:d3:c8:56:be:29:bd:1d:f0:fe:bf:6e:b7:56:47:27:cf:96: 5e:3b:d3:3b:e4:36:97:32:a6:57:1f:80:49:4d:64:5f:fa:e4: 41:76:d8:f9:4b:a0:ac:cd:49:88:1e:84:a4:e3:1b:d6:7b:a4: 5f:95:07:25:a2:be:91:60:91:6d:0f:9c:b6:6e:1d:3c:0b:e2: 6f:fd:f5:9c:cf:1d:de:bc:a0:47:b7:82:0a:ad:ea:c5:11:05: d6:b8:2e:30:94:f3:a1:b8:16:19:c6:d4:61:f1:2a:04:70:39: 73:5e:7a:41:df:15:7e:33:c7:20:9d:89:d0:21:d0:89:7a:de: e9:68:53:42:0c:69:79:16:62:bb:d2:7a:72:22:1a:7e:bc:b2: 30:db:9b:a1:91:47:17:a5:ed:85:a8:09:79:d0:57:94:1c:ff: 56:81:39:05:41:8e:85:86:b4:53:d3:de:b9:1e:02:14:11:eb: 87:2f:81:0d:96:b0:49:31:92:c5:b7:52:06:b5:ba:fc:5f:34: df:ca:05:27:a9:80:66:2d:f7:07:5d:32:2f:be:82:72:d7:6f: f3:75:93:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgwS2McBoOoNo7zuh/HhUlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwNzIyMDQwMTQzWhcNMjUwNzIzMDQwMTQzWjAzMTEwLwYDVQQD EygzZGE5NGJlNGYwNmMzN2Y2YzliYTIxZGJmNTZiMGU0NjI1Y2EzNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr14ZxcxlosH0JVRQB78FDgmC+QQQ frGIiEQ+8BieAAVQN/M9YWQjgJ5UEqC1+Vwvlzp2VXmCGRdErhZNH205mlTVsUgF Sbv2cYPLkjhtCKReNnFzhpCFSWp+vvsxRjmIdW2tX4ka/4qX082lUZ5Gife/j+VL jwD8olRUqpCAwyQar+GXabfuims4jjE2D2j//x3wv5WcDnNRMdTnnMkyhfj+l7cl 3S9i5guFBL561t/CZz7OsmQorHLgLDpGhfkhGbaWVpCZ1UnhyXXLXbyeEIK119Bb DMMwGQZTSk1145qsraiyjJMAxlN6uhEdAHTcSaHE8tBGONavilv1F13tsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2pS+TwbDf2yboh2/VrDkYlyjVMMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1Z8q3VR +qLw9/nk9etZYaLkyGxKx6q6dR23gBb0xCZA4XEDV9PIVr4pvR3w/r9ut1ZHJ8+W XjvTO+Q2lzKmVx+ASU1kX/rkQXbY+UugrM1JiB6EpOMb1nukX5UHJaK+kWCRbQ+c tm4dPAvib/31nM8d3rygR7eCCq3qxREF1rguMJTzobgWGcbUYfEqBHA5c156Qd8V fjPHIJ2J0CHQiXre6WhTQgxpeRZiu9J6ciIafryyMNuboZFHF6XthagJedBXlBz/ VoE5BUGOhYa0U9PeuR4CFBHrhy+BDZawSTGSxbdSBrW6/F8038oFJ6mAZi33B10y L76Cctdv83WTKg== -----END CERTIFICATE-----Generated at Tue Jul 22 11:45:49 2025 by rpki-client