$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: k24M6jcgNAn2tIqBU8SUQrKu7RGFueaHabk6WvjTj00= Subject key identifier: 33:FD:9E:5D:4A:54:F5:B1:B7:7B:15:58:34:78:88:2E:E1:29:F0:7F Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01991BAE3C90B87B756FC4F53EC5B8E39B29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 168E Signing time: Fri 05 Sep 2025 21:00:27 +0000 Manifest this update: Fri 05 Sep 2025 21:00:27 +0000 Manifest next update: Sat 06 Sep 2025 21:00:27 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: jObRpu8TEH/kMX2hWco4RRX/+HDyd/GFa+ZiEsvFMdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1b:ae:3c:90:b8:7b:75:6f:c4:f5:3e:c5:b8:e3:9b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Sep 5 21:00:27 2025 GMT Not After : Sep 6 21:00:27 2025 GMT Subject: CN=33fd9e5d4a54f5b1b77b15583478882ee129f07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:3d:f2:e7:9c:7a:1c:5d:3e:14:11:b2:e3: dd:34:1c:fe:4c:39:a2:45:2c:2d:83:0a:c6:56:7b: cf:cb:c8:3c:39:78:ec:b5:93:60:cc:cd:6d:b5:a1: 1c:42:a1:d7:b8:6d:76:b8:df:63:d8:21:e7:eb:30: 92:17:e3:aa:23:53:86:51:01:97:54:ed:7d:5a:34: fb:d5:b0:ca:f6:59:12:11:03:8f:1d:9a:1c:88:f2: e4:1a:2b:4b:8b:8a:23:95:0a:2c:e2:84:1e:14:93: 36:cd:dc:b9:e2:13:25:d8:88:4f:5d:e3:44:85:9e: cb:ef:f3:30:11:50:fa:58:5e:f7:2f:3a:ac:b6:96: a3:b7:56:1e:2b:77:2e:d0:02:93:0c:48:a1:0b:a3: 7a:ea:61:5f:ac:81:82:98:73:c2:bb:01:f2:1f:a6: 2b:80:37:ac:88:ae:64:56:9d:cc:b4:47:17:c2:81: c7:02:f6:43:89:a0:fe:ea:d2:36:77:62:c4:15:8a: e1:5d:39:0a:49:98:ea:fe:62:9c:a3:a8:da:aa:ac: 8a:14:3a:c4:cf:44:f6:b1:9b:e9:82:aa:70:40:b0: f4:71:b6:17:88:77:f4:1d:d7:5a:58:02:46:c1:0f: c2:5d:8a:91:04:3c:3e:03:7b:62:16:03:a0:76:9c: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:9E:5D:4A:54:F5:B1:B7:7B:15:58:34:78:88:2E:E1:29:F0:7F X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:99:7f:f4:3b:16:e9:54:7d:d1:ac:e2:b3:27:96:0a:4e:37: fd:31:da:25:df:16:10:94:11:6d:4e:60:16:e2:2e:32:06:b9: b2:b5:17:4f:57:ef:1a:74:bf:c7:54:f1:3d:d6:42:b0:fb:fd: e0:2e:46:bf:9d:aa:0b:3d:9e:e1:69:ce:ab:46:a3:e2:ff:46: b8:60:43:71:92:b7:ae:17:6d:01:37:5b:5a:7d:b7:e4:b3:79: 35:65:db:ad:7d:df:c0:4f:01:c3:fd:bd:14:b9:c9:76:27:42: b3:da:1a:be:88:71:6b:65:f5:4c:03:37:59:a1:03:22:e5:f7: e6:f1:8f:ca:ed:1e:1a:f0:52:ce:fd:17:db:21:91:6f:80:73: f0:59:3a:de:25:6c:33:96:0d:dd:52:9f:48:ce:87:9b:70:97: a5:5f:eb:e3:f0:cf:94:cc:5d:88:e0:a5:ba:41:45:f3:f6:3c: a8:59:83:08:b5:de:07:c9:ca:24:53:b9:e1:a2:ad:96:08:ea: a0:fc:c7:d7:6f:5e:72:43:e9:89:2a:8e:14:8d:69:68:67:93: 2f:70:9c:60:5a:4c:a0:72:c7:24:37:5e:98:8b:a7:3e:a9:30: 60:87:c3:9e:b5:11:a7:06:c1:d0:63:3f:10:44:0c:53:14:02: 3a:56:af:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkbrjyQuHt1b8T1PsW445spMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwOTA1MjEwMDI3WhcNMjUwOTA2MjEwMDI3WjAzMTEwLwYDVQQD EygzM2ZkOWU1ZDRhNTRmNWIxYjc3YjE1NTgzNDc4ODgyZWUxMjlmMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xk98uecehxdPhQRsuPdNBz+TDmi RSwtgwrGVnvPy8g8OXjstZNgzM1ttaEcQqHXuG12uN9j2CHn6zCSF+OqI1OGUQGX VO19WjT71bDK9lkSEQOPHZociPLkGitLi4ojlQos4oQeFJM2zdy54hMl2IhPXeNE hZ7L7/MwEVD6WF73Lzqstpajt1YeK3cu0AKTDEihC6N66mFfrIGCmHPCuwHyH6Yr gDesiK5kVp3MtEcXwoHHAvZDiaD+6tI2d2LEFYrhXTkKSZjq/mKco6jaqqyKFDrE z0T2sZvpgqpwQLD0cbYXiHf0HddaWAJGwQ/CXYqRBDw+A3tiFgOgdpzVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP9nl1KVPWxt3sVWDR4iC7hKfB/MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpl/9DsW 6VR90azisyeWCk43/THaJd8WEJQRbU5gFuIuMga5srUXT1fvGnS/x1TxPdZCsPv9 4C5Gv52qCz2e4WnOq0aj4v9GuGBDcZK3rhdtATdbWn235LN5NWXbrX3fwE8Bw/29 FLnJdidCs9oavohxa2X1TAM3WaEDIuX35vGPyu0eGvBSzv0X2yGRb4Bz8Fk63iVs M5YN3VKfSM6Hm3CXpV/r4/DPlMxdiOClukFF8/Y8qFmDCLXeB8nKJFO54aKtlgjq oPzH129eckPpiSqOFI1paGeTL3CcYFpMoHLHJDdemIunPqkwYIfDnrURpwbB0GM/ EEQMUxQCOlavYA== -----END CERTIFICATE-----Generated at Sat Sep 6 03:15:19 2025 by rpki-client