$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: Jn+kgwWBHmcm8te6KqRa9avTsJsc/9UbYTuHgYeL394= Subject key identifier: 6A:44:57:0C:0E:07:47:06:5A:1A:FE:D2:3E:A3:4A:60:E6:14:55:C8 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 01983EE197B3F362915EF823A2F5D9059681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0F6E Signing time: Fri 25 Jul 2025 00:00:28 +0000 Manifest this update: Fri 25 Jul 2025 00:00:28 +0000 Manifest next update: Sat 26 Jul 2025 00:00:28 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: xfMySf8IyhjAAHjpDQ4VhPqGcPCQ9OxeTVnR8bAYr1k=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3e:e1:97:b3:f3:62:91:5e:f8:23:a2:f5:d9:05:96:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jul 25 00:00:28 2025 GMT Not After : Jul 26 00:00:28 2025 GMT Subject: CN=6a44570c0e0747065a1afed23ea34a60e61455c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:f0:b3:4c:3e:c6:4f:3e:72:fc:43:56:98: c7:c8:8a:ce:b7:5b:c0:e7:a9:e6:98:7c:fe:dd:f9: c1:c2:79:af:43:c9:28:58:73:45:61:2c:59:5d:9e: c5:f5:5b:e9:03:71:ce:f8:e5:4a:1c:0f:ac:9a:17: f6:21:1f:80:47:7f:f2:f5:b2:d9:33:36:4a:6a:c0: 0e:82:9a:59:48:0c:92:78:bb:09:a7:60:1c:13:81: 04:1b:37:4b:aa:1d:d8:9d:38:de:c4:01:31:04:7a: a7:5a:6f:ce:98:9a:a0:a3:6c:73:06:e5:8a:20:34: 12:1a:fa:98:2c:79:cc:8c:37:e9:f1:e3:09:f9:00: 39:b0:bb:87:27:32:ee:4b:d0:82:ab:b0:06:40:aa: 19:7a:d0:8e:7d:88:f6:d5:f5:47:0b:91:ff:9d:09: 24:f6:8c:7f:d8:be:51:00:97:1e:c9:6e:60:e8:82: 48:ab:d7:d0:99:f3:61:ed:40:6e:5c:63:28:8a:e6: 25:16:f2:3b:ad:fe:6e:ea:e3:fb:23:4e:e0:6f:0e: ff:b3:50:61:41:ed:af:13:04:d3:7b:1f:19:3d:60: 9a:99:a9:6e:e6:9f:b5:1c:50:70:31:7f:a3:3a:32: 68:80:24:98:dc:47:d4:bd:f0:7b:45:54:69:90:5c: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:44:57:0C:0E:07:47:06:5A:1A:FE:D2:3E:A3:4A:60:E6:14:55:C8 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0e:b5:ff:33:6a:80:40:75:fe:ad:59:bf:37:a0:06:fa:ed: 98:35:54:0f:c6:0d:22:ea:42:e3:cd:a5:4d:d0:7d:0b:98:1d: b6:cd:23:e8:a2:0e:21:b9:a6:61:8f:3f:f8:18:e3:66:02:7c: bb:e8:de:8e:01:f9:8e:23:69:97:01:b1:9d:7b:84:0a:ba:47: b3:45:1a:32:c3:d6:39:3c:e5:9b:54:6b:29:41:2d:9d:93:5b: aa:32:e0:4c:30:3f:09:bb:f0:27:d4:5a:f4:38:2f:e9:4e:1f: 77:5d:29:15:3d:12:6e:c7:4a:3a:08:75:ee:ce:c9:84:1d:a7: 8e:fe:a3:ae:7c:71:a8:d2:c9:3b:02:66:e7:ae:f4:27:01:de: d9:c2:ef:9c:85:f1:ca:cf:33:21:3e:82:a0:81:cb:df:39:43: 08:78:3d:0d:e6:bd:b1:a5:2e:a8:63:12:e2:62:ce:c2:06:b8: 02:dc:e5:ac:c9:70:6f:b4:22:ec:75:72:74:21:9c:8c:bc:8c: fd:72:b6:a7:b3:21:06:4f:3e:45:50:8d:83:f2:a9:12:8a:24: 22:fb:f2:24:f9:9e:b0:c1:15:9c:b4:cf:88:37:51:de:40:f9: 43:63:0a:0b:fe:b3:33:f0:45:cf:f2:90:21:ca:6d:bc:41:51: 36:de:7c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg+4Zez82KRXvgjovXZBZaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwNzI1MDAwMDI4WhcNMjUwNzI2MDAwMDI4WjAzMTEwLwYDVQQD Eyg2YTQ0NTcwYzBlMDc0NzA2NWExYWZlZDIzZWEzNGE2MGU2MTQ1NWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTnws0w+xk8+cvxDVpjHyIrOt1vA 56nmmHz+3fnBwnmvQ8koWHNFYSxZXZ7F9VvpA3HO+OVKHA+smhf2IR+AR3/y9bLZ MzZKasAOgppZSAySeLsJp2AcE4EEGzdLqh3YnTjexAExBHqnWm/OmJqgo2xzBuWK IDQSGvqYLHnMjDfp8eMJ+QA5sLuHJzLuS9CCq7AGQKoZetCOfYj21fVHC5H/nQkk 9ox/2L5RAJceyW5g6IJIq9fQmfNh7UBuXGMoiuYlFvI7rf5u6uP7I07gbw7/s1Bh Qe2vEwTTex8ZPWCamalu5p+1HFBwMX+jOjJogCSY3EfUvfB7RVRpkFy7zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpEVwwOB0cGWhr+0j6jSmDmFFXIMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg61/zNq gEB1/q1ZvzegBvrtmDVUD8YNIupC482lTdB9C5gdts0j6KIOIbmmYY8/+BjjZgJ8 u+jejgH5jiNplwGxnXuECrpHs0UaMsPWOTzlm1RrKUEtnZNbqjLgTDA/CbvwJ9Ra 9Dgv6U4fd10pFT0SbsdKOgh17s7JhB2njv6jrnxxqNLJOwJm5670JwHe2cLvnIXx ys8zIT6CoIHL3zlDCHg9Dea9saUuqGMS4mLOwga4AtzlrMlwb7Qi7HVydCGcjLyM /XK2p7MhBk8+RVCNg/KpEookIvvyJPmesMEVnLTPiDdR3kD5Q2MKC/6zM/BFz/KQ IcptvEFRNt58/w== -----END CERTIFICATE-----Generated at Fri Jul 25 06:28:46 2025 by rpki-client