$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: ClDp8kQgFy2YHwcwTDjlrTGQbCnAWyOQkH2HMtmpsZ4= Subject key identifier: BB:88:A3:7B:66:6B:A1:7A:26:E0:6C:29:80:24:78:73:14:93:8E:DD Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 01984475CF60CB5F04E2662AA3F3087DB605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1621 Signing time: Sat 26 Jul 2025 02:00:28 +0000 Manifest this update: Sat 26 Jul 2025 02:00:28 +0000 Manifest next update: Sun 27 Jul 2025 02:00:28 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: UpRLx8MkYdK2KuQMnvjvwaTZGd73/CHtaA8ck0pZ4oI=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:75:cf:60:cb:5f:04:e2:66:2a:a3:f3:08:7d:b6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jul 26 02:00:28 2025 GMT Not After : Jul 27 02:00:28 2025 GMT Subject: CN=bb88a37b666ba17a26e06c298024787314938edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:e4:56:07:7d:0c:db:50:b1:99:06:2d:cc: e3:2e:02:2f:50:31:f1:0a:e3:76:0c:ac:3c:49:46: 5e:55:6a:20:18:3f:c1:40:fc:61:7a:6a:42:c4:3a: f5:20:fd:d0:e1:ab:11:e2:e9:d2:89:7e:5d:4f:32: 65:d0:cf:31:6d:35:a3:85:66:fb:6e:8d:26:fe:77: 0e:81:0a:94:a1:27:f7:7d:cf:6e:95:e5:59:7f:a7: 11:ed:88:28:da:98:3c:cc:4e:a1:1a:f0:1a:aa:ab: 1b:32:eb:9d:a0:e5:79:99:1d:b5:ac:38:c6:68:46: d9:76:3a:b7:81:46:9b:9d:bf:0f:a9:dc:3b:c1:0a: c6:a7:b4:d7:24:78:8d:f3:d4:35:ca:60:e9:e2:7b: 12:86:8d:52:89:ca:15:54:50:4c:96:3b:96:9e:6b: 91:0a:78:fa:45:cd:b6:56:e9:4f:2c:50:63:da:d2: 6b:77:e8:0e:22:d6:ab:b4:02:d5:d2:33:f0:a2:cd: 69:05:0c:7a:8a:b0:f9:ec:fe:6b:05:c8:33:d2:44: c0:b6:e5:ef:7d:ad:94:2d:03:ce:d2:3b:6d:be:84: 55:89:ef:e7:70:de:d4:87:51:69:92:a0:fb:c6:94: e8:a1:db:73:fd:78:9e:a6:63:49:d7:20:00:d5:c7: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:A3:7B:66:6B:A1:7A:26:E0:6C:29:80:24:78:73:14:93:8E:DD X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c9:4b:04:5f:4e:b3:a8:cd:0c:94:c5:53:2d:ff:f4:e9:68: ff:39:63:c8:de:f5:4f:69:af:36:e6:31:01:5c:9a:3e:ec:1c: 4d:c8:b3:1d:dc:c7:56:0e:9c:dd:c1:34:3a:0e:d1:44:70:ac: 14:40:06:92:7b:30:71:2b:c1:77:d6:5d:3c:b8:fb:c2:56:23: c8:dd:3b:b3:ab:6f:b1:dd:21:a1:cd:0c:3f:63:a2:36:60:19: ff:94:01:5c:df:57:8e:9e:d4:33:68:ac:cb:c3:a4:c6:48:8c: f4:2e:58:c3:bb:8a:be:3c:64:fd:27:1a:1a:2e:bb:95:c8:c1: df:60:be:2f:61:aa:1f:74:17:cf:c5:50:39:1c:4a:2f:a7:9d: 13:ed:8c:9e:f7:9a:8c:b1:2c:24:36:fb:78:d4:84:03:9d:98: b1:7b:d7:7e:b6:dc:a0:6a:f4:fc:14:cf:9b:e8:16:37:73:be: 8a:ec:40:8a:bf:8e:ad:0e:ca:a1:80:4a:c2:a9:21:91:c7:a7: 3a:33:48:9d:19:63:b4:c0:38:c1:3c:f3:da:f3:37:c2:7c:5d: 7f:8f:ca:ab:b7:93:92:6e:1c:20:89:94:99:88:d5:1b:ef:0c: e7:94:45:b3:49:76:6b:36:87:d1:86:41:a4:62:03:47:d5:3b: 88:25:75:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhEdc9gy18E4mYqo/MIfbYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUwNzI2MDIwMDI4WhcNMjUwNzI3MDIwMDI4WjAzMTEwLwYDVQQD EyhiYjg4YTM3YjY2NmJhMTdhMjZlMDZjMjk4MDI0Nzg3MzE0OTM4ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CzkVgd9DNtQsZkGLczjLgIvUDHx CuN2DKw8SUZeVWogGD/BQPxhempCxDr1IP3Q4asR4unSiX5dTzJl0M8xbTWjhWb7 bo0m/ncOgQqUoSf3fc9uleVZf6cR7Ygo2pg8zE6hGvAaqqsbMuudoOV5mR21rDjG aEbZdjq3gUabnb8Pqdw7wQrGp7TXJHiN89Q1ymDp4nsSho1SicoVVFBMljuWnmuR Cnj6Rc22VulPLFBj2tJrd+gOItartALV0jPwos1pBQx6irD57P5rBcgz0kTAtuXv fa2ULQPO0jttvoRVie/ncN7Uh1FpkqD7xpToodtz/XiepmNJ1yAA1cedUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuIo3tma6F6JuBsKYAkeHMUk47dMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApclLBF9O s6jNDJTFUy3/9Olo/zljyN71T2mvNuYxAVyaPuwcTcizHdzHVg6c3cE0Og7RRHCs FEAGknswcSvBd9ZdPLj7wlYjyN07s6tvsd0hoc0MP2OiNmAZ/5QBXN9Xjp7UM2is y8OkxkiM9C5Yw7uKvjxk/ScaGi67lcjB32C+L2GqH3QXz8VQORxKL6edE+2Mnvea jLEsJDb7eNSEA52YsXvXfrbcoGr0/BTPm+gWN3O+iuxAir+OrQ7KoYBKwqkhkcen OjNInRljtMA4wTzz2vM3wnxdf4/Kq7eTkm4cIImUmYjVG+8M55RFs0l2azaH0YZB pGIDR9U7iCV1Yw== -----END CERTIFICATE-----Generated at Sat Jul 26 06:32:03 2025 by rpki-client