$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: AqAr8zahJluEDBnB0y3uIGfCw+P8hgLXPt2V98eCug4= Subject key identifier: 38:8A:08:85:86:21:5A:0D:E7:95:00:8C:D9:6D:F3:0D:E0:0E:A8:29 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 01992C34D4609295621C1F61AB81CD1938FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1699 Signing time: Tue 09 Sep 2025 02:01:23 +0000 Manifest this update: Tue 09 Sep 2025 02:01:23 +0000 Manifest next update: Wed 10 Sep 2025 02:01:23 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: CmTytSOG/3/smhjMuk2JczOuWnDkOjkwXskyD3oE5QA=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:34:d4:60:92:95:62:1c:1f:61:ab:81:cd:19:38:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Sep 9 02:01:23 2025 GMT Not After : Sep 10 02:01:23 2025 GMT Subject: CN=388a088586215a0de795008cd96df30de00ea829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:d3:87:f0:c8:e0:17:d0:62:47:40:10:f5: 67:9f:9d:dc:29:fb:f1:87:ea:cc:d6:a6:e2:f4:3d: 8e:9c:e5:2f:b4:b8:95:40:9f:f2:31:82:52:7d:cb: 11:b2:74:20:6b:15:ae:a3:ae:63:26:5d:15:71:4c: 2e:46:02:86:24:a0:90:3e:07:cd:7d:c2:dd:f1:f5: f6:55:3c:58:ec:cf:ea:4b:72:d9:b0:00:eb:a8:ba: e3:ed:6f:63:c7:e4:e4:12:e8:8a:e8:2e:e2:7a:90: ab:0c:17:35:17:c9:10:3b:0f:c0:f6:44:46:f0:e9: 99:bc:d5:0b:43:c0:ae:70:81:3a:85:88:4b:b8:af: 88:56:80:65:fc:06:6d:b4:c7:c0:2f:1f:ad:bb:50: f5:67:b2:87:ba:e8:ce:14:5d:d5:6b:4b:aa:e9:38: 6e:0a:bd:e0:0f:c1:98:cc:4c:bc:22:b8:c5:be:5e: 7a:9e:4f:51:d9:f0:a1:37:22:d4:58:20:2d:5b:24: 60:e6:00:30:d8:19:d9:8d:61:d4:c7:11:30:52:fd: 0c:69:d4:03:c9:25:43:fe:c7:c3:b7:34:5c:46:da: 13:23:75:fa:dd:70:3c:0f:d2:43:ff:79:32:5e:42: 11:a2:7e:05:61:97:62:50:6f:91:91:da:75:83:f8: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:08:85:86:21:5A:0D:E7:95:00:8C:D9:6D:F3:0D:E0:0E:A8:29 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:14:b7:22:f8:1a:35:c3:b3:13:5d:3f:ef:34:5f:2b:11:7e: dd:0c:52:5e:0e:ee:64:1b:3e:f6:5f:c0:f2:70:c0:ce:08:63: be:57:ee:96:83:66:9a:6f:4a:db:60:39:0c:38:98:ca:7b:e5: b7:e9:53:fa:08:2d:70:0e:ca:8a:22:e0:ff:d6:7c:20:2f:5f: 24:78:d2:af:76:25:da:54:9c:aa:55:6a:b1:e2:de:b6:7d:71: a8:0e:11:73:7a:f5:d5:e2:6d:e5:ce:46:e4:85:53:68:d2:f8: eb:fc:92:a6:20:09:4d:80:3f:31:9f:a3:22:2e:47:1b:4d:b8: e9:84:8d:1f:c6:d6:2b:46:3e:aa:cf:6c:a6:ec:50:81:1e:43: 2b:f9:43:b5:93:27:33:4c:85:04:3f:72:6d:03:06:3b:ff:99: 2d:e0:39:dd:99:dc:6f:ef:84:16:59:57:90:d0:af:9c:40:d2: 2f:26:d6:13:a5:2c:91:02:17:62:54:f0:7b:b6:de:1e:91:77: 12:7c:16:70:e2:98:58:dc:fc:ee:7a:07:85:fb:36:f1:8e:61: 0a:82:88:c1:2b:51:ee:27:fc:a8:ee:28:a7:ba:c6:b2:f4:23: 08:b1:b4:d8:e3:16:ba:08:c2:86:05:b9:3f:ec:e4:21:28:97: 98:ea:0c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksNNRgkpViHB9hq4HNGTj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUwOTA5MDIwMTIzWhcNMjUwOTEwMDIwMTIzWjAzMTEwLwYDVQQD EygzODhhMDg4NTg2MjE1YTBkZTc5NTAwOGNkOTZkZjMwZGUwMGVhODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kTTh/DI4BfQYkdAEPVnn53cKfvx h+rM1qbi9D2OnOUvtLiVQJ/yMYJSfcsRsnQgaxWuo65jJl0VcUwuRgKGJKCQPgfN fcLd8fX2VTxY7M/qS3LZsADrqLrj7W9jx+TkEuiK6C7iepCrDBc1F8kQOw/A9kRG 8OmZvNULQ8CucIE6hYhLuK+IVoBl/AZttMfALx+tu1D1Z7KHuujOFF3Va0uq6Thu Cr3gD8GYzEy8IrjFvl56nk9R2fChNyLUWCAtWyRg5gAw2BnZjWHUxxEwUv0MadQD ySVD/sfDtzRcRtoTI3X63XA8D9JD/3kyXkIRon4FYZdiUG+Rkdp1g/h7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiKCIWGIVoN55UAjNlt8w3gDqgpMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhS3Ivga NcOzE10/7zRfKxF+3QxSXg7uZBs+9l/A8nDAzghjvlfuloNmmm9K22A5DDiYynvl t+lT+ggtcA7KiiLg/9Z8IC9fJHjSr3Yl2lScqlVqseLetn1xqA4Rc3r11eJt5c5G 5IVTaNL46/ySpiAJTYA/MZ+jIi5HG0246YSNH8bWK0Y+qs9spuxQgR5DK/lDtZMn M0yFBD9ybQMGO/+ZLeA53Zncb++EFllXkNCvnEDSLybWE6UskQIXYlTwe7beHpF3 EnwWcOKYWNz87noHhfs28Y5hCoKIwStR7if8qO4op7rGsvQjCLG02OMWugjChgW5 P+zkISiXmOoMOg== -----END CERTIFICATE-----Generated at Tue Sep 9 10:48:42 2025 by rpki-client