$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: AcgRlb1ZL1ZOxFX/tMWoKPD5OEnWmjKq0MHVQ+hduDE= Subject key identifier: 15:FF:D0:58:90:73:28:C5:E2:D4:DB:33:3A:A9:7C:D0:F2:5C:3E:B2 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 01993794F04B777FDD56C6804DEF2E2A0F3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 13A5 Signing time: Thu 11 Sep 2025 07:02:11 +0000 Manifest this update: Thu 11 Sep 2025 07:02:11 +0000 Manifest next update: Fri 12 Sep 2025 07:02:11 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 8: qxv97i_u-oPbXERls-AuUJ-ehN0.roa (hash: 3CpmmFrGAOZMYO7PvcVF3IlSxwWNYbKDyVw/pp4ZIZ0=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: FnOvSSi62xD5xYhJd3GCL2JcU53s6IfZGlBwAZNUoEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:37:94:f0:4b:77:7f:dd:56:c6:80:4d:ef:2e:2a:0f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Sep 11 07:02:11 2025 GMT Not After : Sep 12 07:02:11 2025 GMT Subject: CN=15ffd058907328c5e2d4db333aa97cd0f25c3eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:06:ab:98:61:d5:b0:51:e7:1b:16:ca:ad: f4:ec:13:b1:19:11:16:36:cd:b2:4c:a9:2b:fb:49: 75:3d:ae:d3:7e:2f:aa:2e:ee:5a:95:a1:a7:32:f7: b1:44:b6:49:08:7b:85:27:f3:d2:f9:3d:6d:46:7c: 9d:c4:5f:d5:28:84:0c:af:64:52:f6:0b:d5:c2:b1: 07:f6:fe:f8:95:40:56:89:d5:9b:65:b6:96:a5:96: 8c:34:a3:8f:96:92:63:f4:1a:d0:a4:89:5a:5e:a1: 8c:b3:94:4d:20:7b:06:5a:f9:53:41:54:a6:f8:65: d4:80:9c:78:8d:a4:6d:2f:71:d0:92:8e:ce:78:45: 3c:b9:aa:76:c5:e5:03:80:da:90:e2:b3:01:8c:15: 89:af:37:c6:53:34:45:58:41:66:83:1e:0a:ae:1b: 1d:58:3f:9f:ca:e9:87:c6:4a:e3:d8:23:e2:bf:6f: ac:6f:ee:78:19:bd:28:8e:eb:09:30:6b:40:7b:2c: 9b:25:ad:be:54:bb:4b:7f:42:57:47:04:e5:22:bf: e6:a9:95:f6:bc:85:c5:64:b1:1a:e0:d8:37:64:28: c9:73:79:df:5e:c3:af:d8:e4:7a:4a:dd:61:fe:4a: b5:ff:a8:1b:bb:90:34:aa:1f:bc:d7:fb:6e:06:de: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:D0:58:90:73:28:C5:E2:D4:DB:33:3A:A9:7C:D0:F2:5C:3E:B2 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:13:d9:44:6d:45:56:dc:e4:aa:f5:b2:ba:f6:ea:3e:f4:5e: d8:65:38:91:10:b0:af:00:cd:58:c8:1c:e8:a1:5e:16:10:da: 21:3e:cc:b7:dd:c7:1a:9f:69:46:3b:25:4f:c3:f5:5f:c5:e8: 6c:71:96:11:db:03:d2:bd:ba:0f:1e:f8:a4:6d:30:99:9c:54: 01:c2:f7:97:6a:b5:26:ad:ac:ec:e4:36:4a:a0:c4:52:9b:f9: b1:d3:10:bf:72:96:c5:37:2e:6d:dd:74:6e:bc:6d:47:50:03: 9b:a7:32:c0:15:b8:d7:d3:73:52:34:36:fb:b6:56:ed:cf:28: db:1b:ca:a5:90:c9:a3:0e:74:b2:7f:4f:46:b5:f5:6f:0c:22: ab:8a:7f:ea:81:be:b4:da:48:4d:66:54:a8:f2:56:b3:ec:dd: dd:28:d2:50:9e:01:7d:ad:b2:6d:45:fd:0c:18:5e:1b:4d:07: 25:c7:8c:75:01:0f:35:00:1a:27:87:d0:45:1b:b5:2b:29:7d: f2:9d:83:1e:99:c0:ec:ca:be:ec:b1:45:7b:46:b9:2d:1b:a5: 77:b1:c0:d8:8d:83:b5:77:02:5b:ab:d1:a3:9d:52:09:e3:2f: f2:e9:4a:65:ca:de:c7:a1:d0:58:e5:f1:eb:d2:43:30:7f:9d: 45:d6:1a:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk3lPBLd3/dVsaATe8uKg87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUwOTExMDcwMjExWhcNMjUwOTEyMDcwMjExWjAzMTEwLwYDVQQD EygxNWZmZDA1ODkwNzMyOGM1ZTJkNGRiMzMzYWE5N2NkMGYyNWMzZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX0Gq5hh1bBR5xsWyq307BOxGREW Ns2yTKkr+0l1Pa7Tfi+qLu5alaGnMvexRLZJCHuFJ/PS+T1tRnydxF/VKIQMr2RS 9gvVwrEH9v74lUBWidWbZbaWpZaMNKOPlpJj9BrQpIlaXqGMs5RNIHsGWvlTQVSm +GXUgJx4jaRtL3HQko7OeEU8uap2xeUDgNqQ4rMBjBWJrzfGUzRFWEFmgx4Krhsd WD+fyumHxkrj2CPiv2+sb+54Gb0ojusJMGtAeyybJa2+VLtLf0JXRwTlIr/mqZX2 vIXFZLEa4Ng3ZCjJc3nfXsOv2OR6St1h/kq1/6gbu5A0qh+81/tuBt5X0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX/0FiQcyjF4tTbMzqpfNDyXD6yMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhPZRG1F VtzkqvWyuvbqPvRe2GU4kRCwrwDNWMgc6KFeFhDaIT7Mt93HGp9pRjslT8P1X8Xo bHGWEdsD0r26Dx74pG0wmZxUAcL3l2q1Jq2s7OQ2SqDEUpv5sdMQv3KWxTcubd10 brxtR1ADm6cywBW419NzUjQ2+7ZW7c8o2xvKpZDJow50sn9PRrX1bwwiq4p/6oG+ tNpITWZUqPJWs+zd3SjSUJ4Bfa2ybUX9DBheG00HJceMdQEPNQAaJ4fQRRu1Kyl9 8p2DHpnA7Mq+7LFFe0a5LRuld7HA2I2DtXcCW6vRo51SCeMv8ulKZcrex6HQWOXx 69JDMH+dRdYavA== -----END CERTIFICATE-----Generated at Thu Sep 11 08:16:11 2025 by rpki-client