$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: UJAmZVxDZmdV8VI3Wg6njk64encOWKoMk50q8gr2+wI= Subject key identifier: D6:F8:BE:3E:7A:EE:83:F0:9E:EE:D5:16:9E:78:E4:2E:EF:AF:31:40 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 01984A0A232EEF5AD9DC0192DE1BF5DD0479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 132A Signing time: Sun 27 Jul 2025 04:00:34 +0000 Manifest this update: Sun 27 Jul 2025 04:00:34 +0000 Manifest next update: Mon 28 Jul 2025 04:00:34 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 8: qxv97i_u-oPbXERls-AuUJ-ehN0.roa (hash: 3CpmmFrGAOZMYO7PvcVF3IlSxwWNYbKDyVw/pp4ZIZ0=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: NjhyZWexG4hpIF7EOkq8fwlxoNsGCSVFaV/wBa9MeLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:0a:23:2e:ef:5a:d9:dc:01:92:de:1b:f5:dd:04:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jul 27 04:00:34 2025 GMT Not After : Jul 28 04:00:34 2025 GMT Subject: CN=d6f8be3e7aee83f09eeed5169e78e42eefaf3140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:96:53:94:ac:f5:29:66:2b:b3:59:49:ce:25: b3:2d:14:01:b3:a7:aa:2a:a0:30:a5:71:f5:51:74: d4:84:46:9b:ad:1d:9c:db:1c:f1:53:1e:30:85:62: 13:85:4f:db:2f:4c:d5:b4:25:26:dd:1b:95:01:a3: 95:27:71:77:7f:74:84:1c:81:da:a8:6d:6e:0b:7d: c8:b5:e1:d9:fc:cd:72:ff:79:dd:e8:3e:f9:7e:e8: 31:4b:ec:bb:46:dc:b6:bd:94:a2:02:01:cf:fa:f9: 48:97:ec:60:2c:7d:23:e9:44:f4:6c:9b:5f:b0:d0: 36:29:bd:22:c3:a1:b7:3a:4d:30:5b:b0:59:5c:2b: 19:82:bb:9d:4a:3f:37:ea:91:7a:1d:b3:24:91:d7: 79:8e:a3:bd:56:49:0b:09:b4:d5:aa:e7:ef:b9:a7: e1:cd:5a:b8:b5:f6:0f:0c:cb:44:db:b2:b3:db:0c: d7:59:9d:c4:93:24:26:b1:e0:9b:b6:9b:ca:fb:46: c4:91:61:68:d5:d3:7b:05:34:fb:9a:32:b3:aa:01: 78:e5:4e:45:8d:96:0e:30:74:4d:ad:9f:48:c4:54: e0:81:65:4b:dd:e4:bf:90:cb:43:8a:07:b0:91:6e: 76:9c:83:10:0e:9b:6d:90:c0:d5:da:65:ee:00:e1: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F8:BE:3E:7A:EE:83:F0:9E:EE:D5:16:9E:78:E4:2E:EF:AF:31:40 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:a7:52:3c:54:72:dc:e2:ab:aa:d5:19:06:cc:d9:c7:2a:80: 02:32:0a:58:27:ff:de:47:84:33:a9:09:d4:89:7d:c9:aa:e3: 7a:38:a1:b5:20:af:14:92:99:d4:06:f5:6d:33:8b:a6:db:ff: d5:f4:a8:3c:aa:7e:25:5b:a6:66:62:ae:d8:16:5f:6c:b9:98: 3b:cc:6e:b7:ed:9d:b3:42:07:69:9a:b2:6c:d1:ed:3f:14:28: ab:a8:74:18:e4:bf:08:5b:0b:1c:45:4c:78:0b:ed:29:16:7c: a9:51:6a:ae:71:8e:72:ee:27:91:98:88:37:ec:d2:bf:15:a4: d7:66:a3:76:d9:7e:74:04:38:b6:e0:0c:51:29:f7:78:8f:68: a7:28:01:af:e6:ea:d8:b1:45:ff:a8:64:80:99:c4:ae:52:15: a6:69:50:58:08:28:e1:02:67:43:bc:93:49:b5:84:5f:1c:42: 3f:6a:76:59:c1:18:b6:86:c7:df:72:d9:0d:dc:c6:e4:fb:93: cd:42:1f:e2:0f:40:6e:2f:eb:94:4e:5b:af:15:d6:09:34:44: f5:dc:ec:15:cd:d6:24:1d:dc:0f:71:49:63:c2:be:57:f6:f9: 53:ec:47:99:75:ed:66:56:72:e2:c7:cf:9a:5b:fd:4c:cd:34: 26:ce:c2:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKCiMu71rZ3AGS3hv13QR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUwNzI3MDQwMDM0WhcNMjUwNzI4MDQwMDM0WjAzMTEwLwYDVQQD EyhkNmY4YmUzZTdhZWU4M2YwOWVlZWQ1MTY5ZTc4ZTQyZWVmYWYzMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZZTlKz1KWYrs1lJziWzLRQBs6eq KqAwpXH1UXTUhEabrR2c2xzxUx4whWIThU/bL0zVtCUm3RuVAaOVJ3F3f3SEHIHa qG1uC33IteHZ/M1y/3nd6D75fugxS+y7Rty2vZSiAgHP+vlIl+xgLH0j6UT0bJtf sNA2Kb0iw6G3Ok0wW7BZXCsZgrudSj836pF6HbMkkdd5jqO9VkkLCbTVqufvuafh zVq4tfYPDMtE27Kz2wzXWZ3EkyQmseCbtpvK+0bEkWFo1dN7BTT7mjKzqgF45U5F jZYOMHRNrZ9IxFTggWVL3eS/kMtDigewkW52nIMQDpttkMDV2mXuAOFw8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb4vj567oPwnu7VFp545C7vrzFAMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6dSPFRy 3OKrqtUZBszZxyqAAjIKWCf/3keEM6kJ1Il9yarjejihtSCvFJKZ1Ab1bTOLptv/ 1fSoPKp+JVumZmKu2BZfbLmYO8xut+2ds0IHaZqybNHtPxQoq6h0GOS/CFsLHEVM eAvtKRZ8qVFqrnGOcu4nkZiIN+zSvxWk12ajdtl+dAQ4tuAMUSn3eI9opygBr+bq 2LFF/6hkgJnErlIVpmlQWAgo4QJnQ7yTSbWEXxxCP2p2WcEYtobH33LZDdzG5PuT zUIf4g9Abi/rlE5brxXWCTRE9dzsFc3WJB3cD3FJY8K+V/b5U+xHmXXtZlZy4sfP mlv9TM00Js7CDg== -----END CERTIFICATE-----Generated at Sun Jul 27 05:19:27 2025 by rpki-client