$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: 1v9LNxHFPsgCdCcoyrLqL0pWedGAh2xRIAehw8u5x3I= Subject key identifier: 4C:9A:63:F8:35:EF:D8:78:2F:5B:B9:D7:84:7E:E8:1B:B4:4C:38:A0 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 01983B3C200D023438C9116FE1F64453E711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0C04 Signing time: Thu 24 Jul 2025 07:00:52 +0000 Manifest this update: Thu 24 Jul 2025 07:00:52 +0000 Manifest next update: Fri 25 Jul 2025 07:00:52 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: PiOLvtKhv89vOhmxM7Qtp4x8CfSvvaKEZfutF3Wcvb4=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 5: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=) 6: OcU1aCir7x5ZDAB0SDO85ir2vLs.roa (hash: WJWgjZA7WfRlKV6lm0oqVs5ZaPA407AGVO1IW26xyww=) 7: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 8: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 9: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 10: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 11: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3b:3c:20:0d:02:34:38:c9:11:6f:e1:f6:44:53:e7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jul 24 07:00:52 2025 GMT Not After : Jul 25 07:00:52 2025 GMT Subject: CN=4c9a63f835efd8782f5bb9d7847ee81bb44c38a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:e2:dc:b3:60:d9:3c:62:e3:35:8a:20:7d: 4b:e5:73:85:7f:e6:dd:93:50:e2:1c:93:2c:66:44: 24:62:ef:1c:b3:ef:3e:1d:1e:74:23:dd:e7:12:ae: b2:fb:bd:7f:04:9b:d2:10:4b:a9:63:ad:65:23:e9: 6d:81:e0:42:dd:4c:dc:d8:45:d1:28:09:73:15:39: a7:6a:9a:f4:77:0d:13:ba:7d:98:2d:3a:a7:e1:8d: 88:28:a9:ad:92:eb:46:41:4f:f9:52:76:ce:92:65: 06:ac:b9:61:d5:04:36:56:ce:e0:bb:27:0a:30:ae: 19:53:64:56:6e:01:c6:d9:24:1d:52:3b:66:42:b4: f2:e2:c9:8d:d6:ea:7f:47:ff:db:e5:59:60:ef:9e: f1:2e:73:a6:33:77:db:72:f9:52:af:ca:10:d8:96: 8e:8f:66:6c:f3:24:25:9f:66:34:5d:09:db:59:fa: 46:4c:82:48:cc:36:2e:32:35:15:6b:4d:6e:28:bd: a6:32:69:c6:16:ad:ba:5a:02:b6:fc:44:45:b1:42: d0:2c:0d:f6:50:79:e2:ec:50:a5:33:3f:a0:ac:64: 9d:97:46:17:49:d2:38:1c:a6:a5:62:0b:18:a4:15: 9a:fc:88:e1:b2:df:a7:2b:92:b7:6e:e2:6d:46:44: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9A:63:F8:35:EF:D8:78:2F:5B:B9:D7:84:7E:E8:1B:B4:4C:38:A0 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7c:04:cb:30:40:64:b0:b1:36:43:07:38:c7:f4:a4:7e:4f: 00:58:91:b9:c0:16:47:27:3e:a9:30:be:37:6c:e8:e2:a8:ad: 3b:c6:ca:8d:32:dc:2b:83:af:8a:ff:9a:d4:45:96:7a:ee:1a: 6a:a1:e8:04:ff:76:36:9c:7a:4e:be:9b:47:9c:cf:6c:15:26: 6e:66:78:fd:c4:d6:db:90:40:be:de:98:ab:d8:ae:7e:75:64: 02:74:16:82:72:ce:02:a5:0f:f5:01:d3:68:a6:ce:17:e8:0e: 26:49:4a:11:f0:57:74:96:dc:3e:f2:d3:02:7b:d9:e9:3f:be: ba:ee:84:a7:c3:d0:f9:3a:a5:aa:d7:09:0a:83:46:7e:a8:9c: e3:0c:30:5a:4a:a5:7e:c7:35:e3:e7:31:de:1c:ec:cb:1b:6c: 3b:17:45:0a:f2:67:58:9f:9c:f2:6e:ff:5a:2a:16:1f:52:be: 9b:42:99:f0:46:9d:e4:ff:c9:03:ba:33:1e:2d:66:58:0c:33: a6:57:f9:4f:5d:21:e7:d3:5c:98:c3:5a:8e:b0:65:b5:04:82: 1b:ec:52:a4:62:d0:42:47:39:80:5e:86:23:46:7b:d7:89:67: 55:05:eb:f4:40:f7:46:05:29:3c:5d:50:4d:bc:63:6f:b5:6e: df:dc:f4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg7PCANAjQ4yRFv4fZEU+cRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNzI0MDcwMDUyWhcNMjUwNzI1MDcwMDUyWjAzMTEwLwYDVQQD Eyg0YzlhNjNmODM1ZWZkODc4MmY1YmI5ZDc4NDdlZTgxYmI0NGMzOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHji3LNg2Txi4zWKIH1L5XOFf+bd k1DiHJMsZkQkYu8cs+8+HR50I93nEq6y+71/BJvSEEupY61lI+ltgeBC3Uzc2EXR KAlzFTmnapr0dw0Tun2YLTqn4Y2IKKmtkutGQU/5UnbOkmUGrLlh1QQ2Vs7guycK MK4ZU2RWbgHG2SQdUjtmQrTy4smN1up/R//b5Vlg757xLnOmM3fbcvlSr8oQ2JaO j2Zs8yQln2Y0XQnbWfpGTIJIzDYuMjUVa01uKL2mMmnGFq26WgK2/ERFsULQLA32 UHni7FClMz+grGSdl0YXSdI4HKalYgsYpBWa/Ijhst+nK5K3buJtRkRzNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyaY/g179h4L1u514R+6Bu0TDigMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXwEyzBA ZLCxNkMHOMf0pH5PAFiRucAWRyc+qTC+N2zo4qitO8bKjTLcK4Oviv+a1EWWeu4a aqHoBP92Npx6Tr6bR5zPbBUmbmZ4/cTW25BAvt6Yq9iufnVkAnQWgnLOAqUP9QHT aKbOF+gOJklKEfBXdJbcPvLTAnvZ6T++uu6Ep8PQ+TqlqtcJCoNGfqic4wwwWkql fsc14+cx3hzsyxtsOxdFCvJnWJ+c8m7/WioWH1K+m0KZ8Ead5P/JA7ozHi1mWAwz plf5T10h59NcmMNajrBltQSCG+xSpGLQQkc5gF6GI0Z714lnVQXr9ED3RgUpPF1Q Tbxjb7Vu39z0aw== -----END CERTIFICATE-----Generated at Thu Jul 24 12:08:56 2025 by rpki-client