$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: xdJwkK6QpvoEQ9uRzkWKTAmpaXPOzN4ViacXe7hCOqY= Subject key identifier: 60:D2:D5:C3:7B:E2:4A:90:78:41:32:EF:38:C7:29:05:EE:92:B8:F3 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019832A6E84FACC57B066274CBEC09FC3108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0AA2 Signing time: Tue 22 Jul 2025 15:00:55 +0000 Manifest this update: Tue 22 Jul 2025 15:00:55 +0000 Manifest next update: Wed 23 Jul 2025 15:00:55 +0000 Files and hashes: 1: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 2: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 3: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 4: EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa (hash: amzFmUzQXu8Qk3jOcia7riw9XANsVxhL8nKSAMe7SvU=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: UOWuxC/zitns1LFSWNYz5PrJE7rIrNA95mnYHNhOzbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 13:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:32:a6:e8:4f:ac:c5:7b:06:62:74:cb:ec:09:fc:31:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Jul 22 15:00:55 2025 GMT Not After : Jul 23 15:00:55 2025 GMT Subject: CN=60d2d5c37be24a90784132ef38c72905ee92b8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:fd:de:df:45:e7:20:df:16:ee:97:c4:5a: 24:10:2c:21:c9:6c:6e:55:fe:a1:0d:c1:5f:52:50: b2:63:0b:0e:5c:b2:f7:fb:d2:d1:d2:e3:e1:fb:00: 49:19:e6:3f:f8:6f:25:85:aa:f5:ca:ca:a0:d0:ee: 02:52:8d:fb:5a:84:9a:5f:44:8c:b9:b2:ab:90:b8: 8a:94:b3:54:7e:4a:97:60:d0:6a:93:b8:03:33:df: 7e:4b:ed:26:8a:4b:a5:29:aa:b5:db:9f:96:dc:8c: 3c:f3:da:af:b0:4d:11:b8:d1:8b:fc:39:13:90:8d: 21:c1:f4:4e:d5:3d:79:08:2a:c4:c3:15:4e:8f:6e: 68:fa:99:cb:74:fa:32:c2:ec:47:ff:18:a5:c6:3d: 19:fe:40:02:c5:7e:84:9b:7d:a5:ee:c3:2f:3f:5e: 36:a1:75:cf:19:db:b2:9e:9f:de:bf:58:61:8d:45: 9e:4a:18:f0:f2:bb:5c:c8:8f:ae:e3:13:68:82:05: 7c:63:97:24:03:45:34:fa:78:ae:5c:10:63:e2:9e: 42:5b:9e:85:a2:6d:a6:03:bd:26:8d:02:88:4b:0d: ab:04:3c:c1:8e:23:51:7b:0e:22:de:c6:6b:9e:76: 09:4c:df:77:d4:d0:ed:0c:90:6a:b3:6c:18:67:e2: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D2:D5:C3:7B:E2:4A:90:78:41:32:EF:38:C7:29:05:EE:92:B8:F3 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a7:a7:a8:d7:01:94:82:6f:96:2b:09:4d:63:8b:18:44:33: 7e:db:9f:68:66:40:8a:14:fb:43:75:56:3b:82:98:77:d1:3d: c9:75:d8:ef:71:d8:d6:b4:a7:2a:fa:3e:f3:f1:25:1f:b1:78: 62:45:ed:a4:b8:00:ce:0e:3f:b0:4e:e7:73:63:5b:f6:c8:ae: 10:1e:d8:60:cc:da:5a:2a:6f:08:90:6b:42:82:be:22:c4:ca: 17:40:57:59:cd:d0:55:dc:b4:2f:da:77:fc:37:46:73:a3:87: 54:94:a5:0e:3b:4a:59:fd:30:a4:cd:a3:63:82:f1:e6:a3:0f: 22:c2:fd:a9:01:9f:f5:1a:bd:29:67:a3:f8:47:a8:56:da:3d: 02:ab:77:70:af:e5:93:58:5e:9c:ac:7f:4a:d7:c0:84:9d:cb: 52:66:ad:81:94:a1:ea:df:06:77:91:f8:66:79:ba:02:7b:1b: 04:c3:d3:d5:08:a3:27:f5:eb:04:37:14:22:ad:36:2a:6f:86: aa:32:6d:d7:fe:d2:46:da:37:bd:f0:99:c5:d1:78:4b:aa:db: c3:5d:4f:53:ba:1b:b5:53:6e:08:7e:bb:68:49:0b:52:58:e0: a7:49:b0:cf:81:c8:f6:31:e9:97:27:0d:0c:d4:08:65:10:39: e0:b6:14:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgypuhPrMV7BmJ0y+wJ/DEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwNzIyMTUwMDU1WhcNMjUwNzIzMTUwMDU1WjAzMTEwLwYDVQQD Eyg2MGQyZDVjMzdiZTI0YTkwNzg0MTMyZWYzOGM3MjkwNWVlOTJiOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiz93t9F5yDfFu6XxFokECwhyWxu Vf6hDcFfUlCyYwsOXLL3+9LR0uPh+wBJGeY/+G8lhar1ysqg0O4CUo37WoSaX0SM ubKrkLiKlLNUfkqXYNBqk7gDM99+S+0mikulKaq125+W3Iw889qvsE0RuNGL/DkT kI0hwfRO1T15CCrEwxVOj25o+pnLdPoywuxH/xilxj0Z/kACxX6Em32l7sMvP142 oXXPGduynp/ev1hhjUWeShjw8rtcyI+u4xNoggV8Y5ckA0U0+niuXBBj4p5CW56F om2mA70mjQKISw2rBDzBjiNRew4i3sZrnnYJTN931NDtDJBqs2wYZ+LiZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDS1cN74kqQeEEy7zjHKQXukrjzMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6enqNcB lIJvlisJTWOLGEQzftufaGZAihT7Q3VWO4KYd9E9yXXY73HY1rSnKvo+8/ElH7F4 YkXtpLgAzg4/sE7nc2Nb9siuEB7YYMzaWipvCJBrQoK+IsTKF0BXWc3QVdy0L9p3 /DdGc6OHVJSlDjtKWf0wpM2jY4Lx5qMPIsL9qQGf9Rq9KWej+EeoVto9Aqt3cK/l k1henKx/StfAhJ3LUmatgZSh6t8Gd5H4Znm6AnsbBMPT1QijJ/XrBDcUIq02Km+G qjJt1/7SRto3vfCZxdF4S6rbw11PU7obtVNuCH67aEkLUljgp0mwz4HI9jHplycN DNQIZRA54LYUAg== -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:48 2025 by rpki-client