$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: lpocnZMD1seSGpmy9z+W49f8TtQyHZrCPQo3OhqexaM= Subject key identifier: 37:66:99:6E:BB:58:20:BC:68:58:25:68:CD:81:57:8B:61:79:39:28 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 0198334B73AA72EE7F8D35092F8FD6784841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0F68 Signing time: Tue 22 Jul 2025 18:00:39 +0000 Manifest this update: Tue 22 Jul 2025 18:00:39 +0000 Manifest next update: Wed 23 Jul 2025 18:00:39 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: r6KMiNuHcaQ1mn2a4PX4NRVI0BpWzn4CFAEjks+4EhY=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:33:4b:73:aa:72:ee:7f:8d:35:09:2f:8f:d6:78:48:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jul 22 18:00:39 2025 GMT Not After : Jul 23 18:00:39 2025 GMT Subject: CN=3766996ebb5820bc68582568cd81578b61793928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:46:77:84:68:ac:ac:7f:91:10:d8:d6:ba: c4:ee:00:c7:c9:7c:26:e8:56:74:d6:12:ee:bf:c8: ba:37:11:e6:b5:ed:ba:20:a8:61:57:0f:7f:f7:7b: e4:d7:55:fa:0c:12:9b:81:de:2a:1d:2a:25:db:e7: f0:a4:49:9b:7a:26:f2:89:73:cc:97:ca:7a:74:26: 5f:a5:b2:55:9b:d0:14:8d:45:e2:48:09:bd:2b:21: 9c:1a:0b:d0:aa:77:65:68:7d:7b:95:70:69:74:47: ab:0d:69:64:62:bd:cb:64:6c:75:73:05:1c:e3:9d: 70:3d:82:63:ba:0d:02:54:9c:f6:40:b9:a7:99:6b: c2:25:b2:d5:db:50:89:cb:75:3d:77:64:25:2f:c6: 16:88:ee:3e:cd:a0:69:64:da:dd:cb:78:79:60:45: 53:d7:4c:bb:74:d6:f0:a5:0f:e2:86:6e:c6:f3:5a: 52:c8:f1:36:22:83:45:a3:fc:15:1d:a7:34:22:21: 84:a1:22:35:01:be:63:a4:19:7d:0d:40:da:93:e0: 54:44:5a:cd:12:10:fb:af:36:c3:8d:e0:9c:49:be: 52:8f:cd:68:5e:a5:c0:51:95:f2:d4:cd:47:0c:b2: 07:91:d5:5b:14:11:0e:6d:ac:eb:b0:06:5f:1d:f2: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:66:99:6E:BB:58:20:BC:68:58:25:68:CD:81:57:8B:61:79:39:28 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:45:4e:87:8c:29:50:0e:b7:a4:64:22:a8:88:20:0c:7c:d8: 68:1a:75:ee:b0:5a:38:cd:41:a3:70:dc:59:13:46:22:88:0d: ba:ea:f6:e5:bf:ff:0b:b8:e0:a2:55:cd:76:58:c5:29:d7:50: 7b:0f:7d:40:5c:cd:5d:10:44:60:f4:a0:3d:74:f4:71:64:33: 8e:ad:75:23:1a:3d:a7:c9:b9:bf:5b:ee:30:8f:dc:49:53:fd: b9:43:1d:0e:a6:3f:3b:46:eb:d8:9c:c4:d6:88:e1:d8:e3:f1: e8:9c:41:c5:05:b0:5e:47:8c:b4:93:0a:57:c8:55:68:17:6b: fb:c3:49:cf:55:49:6c:23:f0:ca:fe:bc:a2:65:c0:37:d7:b6: 8f:23:e8:32:21:5a:a6:0d:9a:57:3b:9b:eb:80:22:75:8e:9c: fe:52:aa:98:83:fb:e8:5c:8f:0f:3a:c8:5a:a2:6e:82:9c:7e: 33:30:f6:50:61:3a:a0:dc:0d:a6:fc:de:bd:c6:cc:71:fc:4d: e8:0f:3a:13:f3:70:18:b6:61:6e:08:4d:a9:1d:48:28:b8:88: cc:74:1e:1d:3d:48:06:60:2d:3d:79:ed:ed:dd:00:70:eb:07: 17:ff:c9:bf:15:56:b4:22:91:b7:0c:01:86:4f:a7:83:d9:2c: 46:0b:1d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgzS3Oqcu5/jTUJL4/WeEhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwNzIyMTgwMDM5WhcNMjUwNzIzMTgwMDM5WjAzMTEwLwYDVQQD EygzNzY2OTk2ZWJiNTgyMGJjNjg1ODI1NjhjZDgxNTc4YjYxNzkzOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttNGd4RorKx/kRDY1rrE7gDHyXwm 6FZ01hLuv8i6NxHmte26IKhhVw9/93vk11X6DBKbgd4qHSol2+fwpEmbeibyiXPM l8p6dCZfpbJVm9AUjUXiSAm9KyGcGgvQqndlaH17lXBpdEerDWlkYr3LZGx1cwUc 451wPYJjug0CVJz2QLmnmWvCJbLV21CJy3U9d2QlL8YWiO4+zaBpZNrdy3h5YEVT 10y7dNbwpQ/ihm7G81pSyPE2IoNFo/wVHac0IiGEoSI1Ab5jpBl9DUDak+BURFrN EhD7rzbDjeCcSb5Sj81oXqXAUZXy1M1HDLIHkdVbFBEObazrsAZfHfJb0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdmmW67WCC8aFglaM2BV4theTkoMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEVOh4wp UA63pGQiqIggDHzYaBp17rBaOM1Bo3DcWRNGIogNuur25b//C7jgolXNdljFKddQ ew99QFzNXRBEYPSgPXT0cWQzjq11Ixo9p8m5v1vuMI/cSVP9uUMdDqY/O0br2JzE 1ojh2OPx6JxBxQWwXkeMtJMKV8hVaBdr+8NJz1VJbCPwyv68omXAN9e2jyPoMiFa pg2aVzub64AidY6c/lKqmIP76FyPDzrIWqJugpx+MzD2UGE6oNwNpvzevcbMcfxN 6A86E/NwGLZhbghNqR1IKLiIzHQeHT1IBmAtPXnt7d0AcOsHF//JvxVWtCKRtwwB hk+ng9ksRgsdSA== -----END CERTIFICATE-----Generated at Wed Jul 23 02:06:15 2025 by rpki-client