$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: LErVCQOPhQxiA+LjouqFzR+pxdbZCHUhBkkuZ6NFEOM= Subject key identifier: A6:CF:83:BB:6A:AF:9A:E6:22:C9:34:FA:0B:A7:40:55:10:38:46:56 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019842F57EC9B80804AE30B0D302DB2E74FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0C08 Signing time: Fri 25 Jul 2025 19:00:41 +0000 Manifest this update: Fri 25 Jul 2025 19:00:41 +0000 Manifest next update: Sat 26 Jul 2025 19:00:41 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: xSl1HeTCPgTjhx9uP0SzqBK26jgE/+F39aK9RPowUuA=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 5: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=) 6: OcU1aCir7x5ZDAB0SDO85ir2vLs.roa (hash: WJWgjZA7WfRlKV6lm0oqVs5ZaPA407AGVO1IW26xyww=) 7: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 8: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 9: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 10: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 11: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:42:f5:7e:c9:b8:08:04:ae:30:b0:d3:02:db:2e:74:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jul 25 19:00:41 2025 GMT Not After : Jul 26 19:00:41 2025 GMT Subject: CN=a6cf83bb6aaf9ae622c934fa0ba7405510384656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:f4:e7:a6:d2:88:04:17:d6:8d:c6:69:a3: db:b5:dc:c9:b2:19:2c:a8:54:d5:b6:27:e2:54:85: 5d:0d:a1:0f:18:28:bd:4e:f4:c3:55:c5:dd:50:f2: 95:56:9e:95:86:fa:1a:e9:09:a3:b2:f1:8d:75:d6: 23:b5:b9:83:be:ce:a7:cf:ca:38:cc:df:62:43:c0: 34:e2:92:e6:d3:41:29:f7:a3:dc:d2:ae:53:ea:c3: 1b:2f:1f:f5:96:fe:c3:db:69:50:97:b3:85:d5:da: dd:9b:e6:41:85:21:22:e8:ad:f6:f7:36:e2:1e:2f: c5:0c:81:1f:d2:89:da:2b:6c:09:56:bd:88:ec:3b: bf:ea:d8:50:23:e8:06:aa:31:2e:ae:e4:ac:ed:45: 6f:19:7f:93:2e:6a:0b:4f:5c:3a:02:b1:ad:7e:31: 90:fd:13:6d:52:84:3a:7c:e5:72:bd:39:51:d7:84: 1d:c8:26:f7:b1:97:9c:b9:e6:e7:c0:36:2c:27:6d: e0:42:13:07:51:8d:ec:90:7d:d5:6e:28:41:cf:38: 79:4e:43:58:1b:07:16:4b:29:a5:ec:e4:b4:7b:3e: ab:ea:d4:f9:a0:f3:92:8b:44:9f:11:01:35:66:61: cb:70:03:3b:40:77:e7:d3:ea:2d:be:82:70:98:e7: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CF:83:BB:6A:AF:9A:E6:22:C9:34:FA:0B:A7:40:55:10:38:46:56 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:23:33:84:36:00:5c:86:8e:0b:a7:be:5d:89:11:60:25:db: 42:bb:e8:2c:b1:43:d1:71:6d:44:04:0f:98:f1:4f:38:18:e8: 91:be:e1:06:94:2a:33:18:65:7a:e0:62:6b:0c:31:57:8a:4e: 8c:14:76:1a:dc:52:35:2e:d5:51:e4:ba:cd:81:7c:33:d8:0e: 40:13:58:97:d1:9b:32:43:3d:85:c7:75:ee:53:e2:3a:25:72: 75:ef:8b:6f:66:68:75:14:22:5e:3a:05:72:45:71:98:b6:bb: c2:38:06:9f:13:ec:81:c3:5d:51:14:a1:21:14:9d:ea:f6:e6: ca:dd:f8:f0:97:6e:29:9c:55:5a:2a:07:4f:94:37:c5:35:09: 8a:15:2c:71:54:7c:e9:56:ce:02:74:97:1e:62:d1:b7:9c:7a: 11:dc:2b:70:92:b7:64:db:fc:01:0c:6a:65:10:ca:eb:d5:0c: 82:05:16:7a:03:a9:70:87:aa:b8:56:e8:02:fc:34:72:7f:98: 34:11:8c:c9:56:83:3c:41:ef:34:79:c8:d1:8c:c7:49:61:8e: 1e:c9:b9:16:2d:94:c4:60:75:1a:50:6f:66:09:0e:74:4a:a0: 5f:7a:1f:2d:de:5e:20:d0:7d:73:a2:b1:7d:40:7b:d4:46:04: f8:d0:13:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhC9X7JuAgErjCw0wLbLnT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNzI1MTkwMDQxWhcNMjUwNzI2MTkwMDQxWjAzMTEwLwYDVQQD EyhhNmNmODNiYjZhYWY5YWU2MjJjOTM0ZmEwYmE3NDA1NTEwMzg0NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj7056bSiAQX1o3GaaPbtdzJshks qFTVtifiVIVdDaEPGCi9TvTDVcXdUPKVVp6Vhvoa6QmjsvGNddYjtbmDvs6nz8o4 zN9iQ8A04pLm00Ep96Pc0q5T6sMbLx/1lv7D22lQl7OF1drdm+ZBhSEi6K329zbi Hi/FDIEf0onaK2wJVr2I7Du/6thQI+gGqjEuruSs7UVvGX+TLmoLT1w6ArGtfjGQ /RNtUoQ6fOVyvTlR14QdyCb3sZecuebnwDYsJ23gQhMHUY3skH3VbihBzzh5TkNY GwcWSyml7OS0ez6r6tT5oPOSi0SfEQE1ZmHLcAM7QHfn0+otvoJwmOfaYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbPg7tqr5rmIsk0+gunQFUQOEZWMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiMzhDYA XIaOC6e+XYkRYCXbQrvoLLFD0XFtRAQPmPFPOBjokb7hBpQqMxhleuBiawwxV4pO jBR2GtxSNS7VUeS6zYF8M9gOQBNYl9GbMkM9hcd17lPiOiVyde+Lb2ZodRQiXjoF ckVxmLa7wjgGnxPsgcNdURShIRSd6vbmyt348JduKZxVWioHT5Q3xTUJihUscVR8 6VbOAnSXHmLRt5x6EdwrcJK3ZNv8AQxqZRDK69UMggUWegOpcIequFboAvw0cn+Y NBGMyVaDPEHvNHnI0YzHSWGOHsm5Fi2UxGB1GlBvZgkOdEqgX3ofLd5eINB9c6Kx fUB71EYE+NATGA== -----END CERTIFICATE-----Generated at Sat Jul 26 01:55:52 2025 by rpki-client