$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: RNIQTYYTXaXK9HaBseRjvqbsdZPAaKpNPs349yAEG8w= Subject key identifier: 4C:8C:DA:26:E8:30:8E:07:40:32:4C:96:89:D0:F4:CB:1C:4A:B7:CF Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 01983F18CA7527853E8D0EBA1728F3A49C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0C06 Signing time: Fri 25 Jul 2025 01:00:45 +0000 Manifest this update: Fri 25 Jul 2025 01:00:45 +0000 Manifest next update: Sat 26 Jul 2025 01:00:45 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: r94wBS8Dx6eDksbaRcPMSrtmiwOSOlrKNZanLLsovlk=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 5: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=) 6: OcU1aCir7x5ZDAB0SDO85ir2vLs.roa (hash: WJWgjZA7WfRlKV6lm0oqVs5ZaPA407AGVO1IW26xyww=) 7: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 8: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 9: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 10: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 11: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3f:18:ca:75:27:85:3e:8d:0e:ba:17:28:f3:a4:9c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jul 25 01:00:45 2025 GMT Not After : Jul 26 01:00:45 2025 GMT Subject: CN=4c8cda26e8308e0740324c9689d0f4cb1c4ab7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:22:fe:72:1f:dd:bc:a7:bb:62:d8:e6:f4: 8b:77:e7:42:02:62:1f:cc:1b:af:f1:c5:59:85:aa: a4:68:4f:89:58:bf:ba:db:16:95:f1:36:53:38:f8: 28:ad:10:bf:bb:8d:78:f4:eb:a7:78:7c:61:a6:c0: 0c:44:3e:d7:94:5b:c1:d7:35:d4:02:a1:93:ef:64: 48:c3:98:88:5a:fc:7b:49:10:fd:5f:9e:08:c4:73: db:f7:ac:ab:a4:6d:26:0a:8d:e1:b7:b5:58:5f:72: 55:61:d8:0c:ce:1f:0c:18:49:0d:4f:7c:30:6b:45: 1f:60:6a:d0:e5:f5:b5:c7:57:07:81:33:6b:10:ac: a3:db:5a:fe:ad:96:5a:2e:7d:05:e6:b2:7e:ad:5d: fa:17:9a:21:03:a0:a8:c8:8a:af:0c:9a:3d:f6:0d: 69:19:cf:29:28:7c:10:7b:3f:41:52:49:1d:1b:02: d8:16:85:a4:42:e9:ed:36:b8:eb:f0:f4:38:77:64: b2:4a:d7:82:c8:2a:00:97:2f:0f:38:f3:d4:71:cb: 48:fd:3e:a9:cf:6c:e0:00:67:d3:70:61:13:ec:f1: 51:2e:a6:64:b7:71:04:23:e5:11:ed:b3:c6:da:75: e1:82:24:e6:c5:c5:fb:d8:30:7f:ba:84:e9:08:65: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:DA:26:E8:30:8E:07:40:32:4C:96:89:D0:F4:CB:1C:4A:B7:CF X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c8:73:e9:83:1f:b0:ef:2f:40:33:db:6e:f6:30:c2:03:ec: 11:2e:fa:ac:08:d1:61:95:4b:fb:10:b1:40:51:d6:96:6f:85: 65:2d:38:92:93:ff:c5:12:30:7d:38:9e:4e:3f:7c:7c:f2:b8: 75:40:43:28:a6:6a:d6:b0:55:d8:49:a7:ba:dd:16:0b:b4:ce: 52:7c:d4:83:e1:d3:c6:d4:90:97:c6:a3:10:c9:82:4b:f7:4b: a9:5a:e2:0c:e5:c5:f4:29:5e:4e:63:87:07:af:57:e3:2b:34: 9b:82:05:16:36:7b:e1:e1:52:60:f0:25:ec:59:0b:4b:27:a2: ee:3d:47:db:ed:2e:21:a0:e0:07:50:95:b0:8d:41:32:ca:eb: 6a:62:17:b2:2f:16:70:96:ce:7e:16:6f:64:1e:66:79:73:b6: 47:9b:d4:96:e2:52:3d:e0:17:df:80:2a:a2:ad:3c:92:e6:bc: 58:dd:73:82:55:1c:96:39:70:07:cf:0b:40:13:a6:41:36:ba: 1e:3d:46:f3:55:84:a9:86:40:a2:09:ef:36:b5:81:1a:6d:d3: 0d:a1:e0:9a:18:97:94:d0:3f:8c:79:96:3c:8e:46:74:46:49: 99:87:70:e9:60:41:cc:71:91:e7:f1:c5:ab:e3:98:f2:16:f8: 4f:cd:70:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg/GMp1J4U+jQ66FyjzpJx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNzI1MDEwMDQ1WhcNMjUwNzI2MDEwMDQ1WjAzMTEwLwYDVQQD Eyg0YzhjZGEyNmU4MzA4ZTA3NDAzMjRjOTY4OWQwZjRjYjFjNGFiN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUUi/nIf3bynu2LY5vSLd+dCAmIf zBuv8cVZhaqkaE+JWL+62xaV8TZTOPgorRC/u4149OuneHxhpsAMRD7XlFvB1zXU AqGT72RIw5iIWvx7SRD9X54IxHPb96yrpG0mCo3ht7VYX3JVYdgMzh8MGEkNT3ww a0UfYGrQ5fW1x1cHgTNrEKyj21r+rZZaLn0F5rJ+rV36F5ohA6CoyIqvDJo99g1p Gc8pKHwQez9BUkkdGwLYFoWkQuntNrjr8PQ4d2SySteCyCoAly8POPPUcctI/T6p z2zgAGfTcGET7PFRLqZkt3EEI+UR7bPG2nXhgiTmxcX72DB/uoTpCGVa8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyM2iboMI4HQDJMlonQ9MscSrfPMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEchz6YMf sO8vQDPbbvYwwgPsES76rAjRYZVL+xCxQFHWlm+FZS04kpP/xRIwfTieTj98fPK4 dUBDKKZq1rBV2Emnut0WC7TOUnzUg+HTxtSQl8ajEMmCS/dLqVriDOXF9CleTmOH B69X4ys0m4IFFjZ74eFSYPAl7FkLSyei7j1H2+0uIaDgB1CVsI1BMsrramIXsi8W cJbOfhZvZB5meXO2R5vUluJSPeAX34Aqoq08kua8WN1zglUcljlwB88LQBOmQTa6 Hj1G81WEqYZAognvNrWBGm3TDaHgmhiXlNA/jHmWPI5GdEZJmYdw6WBBzHGR5/HF q+OY8hb4T81wtg== -----END CERTIFICATE-----Generated at Fri Jul 25 05:20:20 2025 by rpki-client