$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: hfzihXnDP4d9FLJGdN7+Xy53Z2WWPT0tvKTzs4krPLk= Subject key identifier: EE:41:B5:20:D3:0D:33:DB:29:7C:90:89:A2:50:98:DB:6F:8D:1C:C0 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 01984A41871A2915111FBC1C1E6AA6D43CA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1609 Signing time: Sun 27 Jul 2025 05:01:05 +0000 Manifest this update: Sun 27 Jul 2025 05:01:05 +0000 Manifest next update: Mon 28 Jul 2025 05:01:05 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: kC+NWqowagDWMAG5x4IOeKUHgur7CchVNHRSk/iePrM=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:41:87:1a:29:15:11:1f:bc:1c:1e:6a:a6:d4:3c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jul 27 05:01:05 2025 GMT Not After : Jul 28 05:01:05 2025 GMT Subject: CN=ee41b520d30d33db297c9089a25098db6f8d1cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:6d:5b:36:a2:8c:dd:32:45:c5:70:93:c1: da:27:13:fc:9d:b5:08:36:35:a0:50:19:98:af:25: fb:50:77:6c:16:c1:a4:b6:88:6a:c0:d0:94:6e:28: 02:4d:77:5a:7a:1f:e8:41:98:16:5f:26:66:64:f6: e3:ba:30:6e:1c:dd:71:b7:0b:02:86:aa:4a:d4:36: 8b:07:1b:1a:a5:8f:9e:5f:ae:af:b5:e7:56:33:ab: ec:05:e6:7b:33:64:ce:01:9c:d5:c5:dc:34:4e:f0: 28:af:3f:bf:86:f9:cb:56:eb:71:3b:d6:48:8d:e2: 7f:fe:7b:9f:a3:45:1e:0d:89:29:ef:a2:8f:e1:e1: 58:f8:78:f7:dc:a2:b4:34:42:fc:b6:33:5c:3b:ed: 5c:ca:eb:6a:a2:f1:e3:8f:65:a6:fb:e2:31:09:5a: c5:86:58:03:04:c1:b4:8e:0f:85:00:c6:5a:cb:42: 56:7f:3f:29:d7:9f:62:31:1a:5b:f8:b7:82:64:61: ed:1d:45:80:4e:cb:81:b6:ae:10:07:b0:78:57:5d: b0:4e:19:b0:fd:45:f1:25:c9:31:3f:e5:bb:65:e9: ca:ca:06:da:38:53:e1:64:f7:33:9e:46:08:a7:63: b0:32:7d:0f:a4:61:9a:8a:a5:8b:19:e9:f2:c3:7e: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:41:B5:20:D3:0D:33:DB:29:7C:90:89:A2:50:98:DB:6F:8D:1C:C0 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:db:bb:8c:25:61:50:e0:0c:e4:36:d5:f6:20:42:be:5f:51: a1:22:24:75:13:73:e2:dd:74:d3:24:3d:d3:d4:27:91:9e:de: 47:9a:e5:dc:f9:12:be:0c:43:b7:73:cd:23:50:fa:03:b0:4f: 34:ff:b0:f8:b0:20:16:34:ec:76:8f:65:bb:be:66:4e:24:32: 8d:49:4a:d7:29:8d:e1:c9:fd:d3:12:a7:e7:77:34:da:2d:5a: 36:d1:20:cd:0e:98:b7:17:50:b8:92:dd:12:be:61:6f:1b:be: a2:dd:06:2c:16:bf:1a:af:0c:c9:07:be:b1:f3:eb:f6:ad:39: 61:9f:af:03:c0:6d:7b:e9:95:a1:ca:4c:64:1a:c4:ba:75:1c: e6:54:e2:b3:4b:ed:25:48:0a:3a:bf:9c:af:ae:fa:ec:e0:1b: 07:2d:3a:09:5f:d0:2b:cb:16:74:17:4b:da:32:b2:8a:9c:3b: 9b:41:ad:0b:32:e5:bf:40:10:66:97:b9:0f:15:54:b8:5e:cf: 58:f7:52:d9:89:2e:24:1e:89:73:fe:40:6a:81:50:fe:3e:18: 00:a2:98:f6:49:02:db:35:41:e7:f7:ea:4b:22:be:c6:00:81: ea:39:ce:da:a4:6c:f9:31:56:78:76:7a:dc:bc:89:4e:db:44: 28:3b:78:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKQYcaKRURH7wcHmqm1DyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwNzI3MDUwMTA1WhcNMjUwNzI4MDUwMTA1WjAzMTEwLwYDVQQD EyhlZTQxYjUyMGQzMGQzM2RiMjk3YzkwODlhMjUwOThkYjZmOGQxY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3JtWzaijN0yRcVwk8HaJxP8nbUI NjWgUBmYryX7UHdsFsGktohqwNCUbigCTXdaeh/oQZgWXyZmZPbjujBuHN1xtwsC hqpK1DaLBxsapY+eX66vtedWM6vsBeZ7M2TOAZzVxdw0TvAorz+/hvnLVutxO9ZI jeJ//nufo0UeDYkp76KP4eFY+Hj33KK0NEL8tjNcO+1cyutqovHjj2Wm++IxCVrF hlgDBMG0jg+FAMZay0JWfz8p159iMRpb+LeCZGHtHUWATsuBtq4QB7B4V12wThmw /UXxJckxP+W7ZenKygbaOFPhZPcznkYIp2OwMn0PpGGaiqWLGenyw36LewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5BtSDTDTPbKXyQiaJQmNtvjRzAMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltu7jCVh UOAM5DbV9iBCvl9RoSIkdRNz4t100yQ909QnkZ7eR5rl3PkSvgxDt3PNI1D6A7BP NP+w+LAgFjTsdo9lu75mTiQyjUlK1ymN4cn90xKn53c02i1aNtEgzQ6YtxdQuJLd Er5hbxu+ot0GLBa/Gq8MyQe+sfPr9q05YZ+vA8Bte+mVocpMZBrEunUc5lTis0vt JUgKOr+cr6767OAbBy06CV/QK8sWdBdL2jKyipw7m0GtCzLlv0AQZpe5DxVUuF7P WPdS2YkuJB6Jc/5AaoFQ/j4YAKKY9kkC2zVB5/fqSyK+xgCB6jnO2qRs+TFWeHZ6 3LyJTttEKDt4cA== -----END CERTIFICATE-----Generated at Sun Jul 27 11:52:21 2025 by rpki-client