$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: pPtrdBs5zwCN3DFG3fhP2ui9B/5vOwC9RBRY/iKebc4= Subject key identifier: 8F:90:07:E3:1C:62:C3:85:07:71:C3:E7:DF:B5:DA:7A:D2:26:51:56 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 0199247A6EC8D66325AF54BEEB01311323BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 15DD Signing time: Sun 07 Sep 2025 14:00:27 +0000 Manifest this update: Sun 07 Sep 2025 14:00:27 +0000 Manifest next update: Mon 08 Sep 2025 14:00:27 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 4: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: JQM8cpGrLopNAG14tRr+xEeIkBna3TBBvhj6XOO9KpQ=) 6: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 7: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 8: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 9: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 10: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 11: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:24:7a:6e:c8:d6:63:25:af:54:be:eb:01:31:13:23:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Sep 7 14:00:27 2025 GMT Not After : Sep 8 14:00:27 2025 GMT Subject: CN=8f9007e31c62c3850771c3e7dfb5da7ad2265156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c4:e8:d0:67:60:23:88:5f:b3:56:97:4f:60: ac:3b:92:02:a3:0e:b5:73:63:53:f9:0d:6a:8e:fb: 8f:4a:2b:df:e5:5b:3a:10:2b:f8:09:71:5a:2f:82: da:59:b7:69:5a:a0:b0:5b:48:fd:a6:a5:18:f4:60: 7e:6a:9d:de:8f:6f:aa:2c:2e:0f:08:2b:5f:cd:1e: fc:c4:a6:23:b9:88:0c:ba:41:22:5d:b3:a1:4f:0e: 9a:aa:9d:58:ea:91:db:9a:e9:2f:2d:77:1d:dd:6a: d5:3c:13:5a:4b:ee:25:3f:5e:8e:ce:ca:ec:63:e0: 5c:2a:ec:47:f0:75:0c:da:76:fb:8f:a4:f6:80:54: fc:65:ec:ce:cd:65:6e:75:e3:ed:73:22:ec:9a:4f: 8b:d1:10:1a:78:2d:c7:b8:3c:4b:ca:c7:fb:00:d2: 19:d0:76:fb:95:65:75:d9:71:4d:ff:42:b9:e3:b1: 55:a0:65:53:fb:ca:a6:0d:42:9a:8a:33:d7:3c:53: 65:06:e1:4d:57:6f:ed:10:4e:9d:86:e9:05:01:ec: 23:a8:41:21:21:ae:49:15:80:c0:09:da:d4:f9:d2: b1:1a:6b:06:7a:3b:45:3a:d1:23:9d:f3:dc:64:b9: ea:b7:a9:c5:ad:3d:0d:65:40:c4:e4:e9:29:01:36: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:07:E3:1C:62:C3:85:07:71:C3:E7:DF:B5:DA:7A:D2:26:51:56 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f9:a7:91:bc:89:4e:46:d9:2a:4b:e5:19:f9:f2:09:4f:26: 6b:a5:8a:cc:33:43:86:8e:2c:28:57:33:40:9d:01:62:65:21: 7a:46:f4:a2:32:23:ce:91:21:3e:96:9e:82:11:5d:7b:81:25: d5:10:c2:95:97:da:41:ea:ee:50:89:7f:bd:28:48:06:23:16: 15:02:57:a4:58:fd:00:fb:cb:a8:ba:52:e6:a4:e6:4e:24:9b: f2:1b:9a:c5:6a:d7:42:21:9e:58:c8:45:6d:8b:97:84:1a:a3: c8:ef:9a:40:1b:ec:f3:b1:f6:68:54:c5:d6:bd:75:59:7b:61: 79:c8:65:63:e1:c5:7d:67:06:0f:d8:59:a1:cd:e2:e8:cb:3d: bb:10:14:cc:b8:28:fa:12:a4:b7:20:3d:7f:23:94:93:6f:4d: 22:57:50:ab:8e:1f:c5:2d:bd:21:16:29:94:9a:39:ac:af:f8: 1a:ad:d3:4f:5c:22:65:e8:36:c8:88:15:0f:d6:0d:64:fe:24: d0:77:e3:a8:34:c5:29:2b:95:62:17:40:35:94:75:4f:ea:d6: d1:60:9c:61:eb:f6:b9:05:78:61:92:0f:33:9a:21:16:3f:f0: fe:46:80:b3:81:fe:e4:97:85:3e:d4:31:9a:fb:ed:ee:ed:21: e8:b9:93:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkkem7I1mMlr1S+6wExEyO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUwOTA3MTQwMDI3WhcNMjUwOTA4MTQwMDI3WjAzMTEwLwYDVQQD Eyg4ZjkwMDdlMzFjNjJjMzg1MDc3MWMzZTdkZmI1ZGE3YWQyMjY1MTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MTo0GdgI4hfs1aXT2CsO5ICow61 c2NT+Q1qjvuPSivf5Vs6ECv4CXFaL4LaWbdpWqCwW0j9pqUY9GB+ap3ej2+qLC4P CCtfzR78xKYjuYgMukEiXbOhTw6aqp1Y6pHbmukvLXcd3WrVPBNaS+4lP16Ozsrs Y+BcKuxH8HUM2nb7j6T2gFT8ZezOzWVudePtcyLsmk+L0RAaeC3HuDxLysf7ANIZ 0Hb7lWV12XFN/0K547FVoGVT+8qmDUKaijPXPFNlBuFNV2/tEE6dhukFAewjqEEh Ia5JFYDACdrU+dKxGmsGejtFOtEjnfPcZLnqt6nFrT0NZUDE5OkpATbo+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+QB+McYsOFB3HD59+12nrSJlFWMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfmnkbyJ TkbZKkvlGfnyCU8ma6WKzDNDho4sKFczQJ0BYmUhekb0ojIjzpEhPpaeghFde4El 1RDClZfaQeruUIl/vShIBiMWFQJXpFj9APvLqLpS5qTmTiSb8huaxWrXQiGeWMhF bYuXhBqjyO+aQBvs87H2aFTF1r11WXthechlY+HFfWcGD9hZoc3i6Ms9uxAUzLgo +hKktyA9fyOUk29NIldQq44fxS29IRYplJo5rK/4Gq3TT1wiZeg2yIgVD9YNZP4k 0HfjqDTFKSuVYhdANZR1T+rW0WCcYev2uQV4YZIPM5ohFj/w/kaAs4H+5JeFPtQx mvvt7u0h6LmTQA== -----END CERTIFICATE-----Generated at Sun Sep 7 22:21:02 2025 by rpki-client