$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: 0kBcopl87Pom+Nm4E5I8KriES8/TTQ3V3nV1O2gEPPQ= Subject key identifier: BF:7E:7D:BC:7C:24:98:D4:FC:E0:61:CB:1C:B2:30:CC:50:03:50:A8 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019933EE099252FFB8FBE4E7C5DA97F96364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1682 Signing time: Wed 10 Sep 2025 14:01:01 +0000 Manifest this update: Wed 10 Sep 2025 14:01:01 +0000 Manifest next update: Thu 11 Sep 2025 14:01:01 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: Itl9zsW0rafudLA0DxHOWAlQ2Vtfhgxe8iiCqol3mSQ=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:33:ee:09:92:52:ff:b8:fb:e4:e7:c5:da:97:f9:63:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Sep 10 14:01:01 2025 GMT Not After : Sep 11 14:01:01 2025 GMT Subject: CN=bf7e7dbc7c2498d4fce061cb1cb230cc500350a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:de:1f:5f:c1:fe:5e:12:3d:2a:cf:6a:c7: 75:1d:de:86:24:31:a2:5b:21:18:ea:31:2b:91:3c: bd:7b:8c:80:64:cf:63:af:e0:67:62:be:ba:ae:d4: 8c:0b:36:ca:3f:60:97:6a:b7:62:16:1d:fb:e5:8b: f7:c3:da:f4:6f:22:52:6c:77:de:37:72:27:a3:0e: 56:ec:1a:36:12:80:0f:49:e5:6f:36:fd:1e:c8:1f: fd:43:81:db:5b:a7:e8:c6:ca:b3:13:45:de:1d:b7: 59:2b:d4:6f:67:5d:7b:fd:a8:55:cb:e4:04:29:3c: 6b:88:a6:8c:f7:eb:12:d2:34:bb:02:9e:9c:20:7b: c8:9b:e8:1d:11:d2:07:4d:e4:56:d3:17:dd:50:d9: dc:12:c6:0e:d7:20:d4:84:85:1e:41:cd:9d:f2:6c: 8e:8c:8d:b0:11:7b:88:5a:7a:d6:8c:dd:43:05:fa: 2f:dc:57:1c:07:31:a9:07:e9:c2:2f:5e:25:28:f3: 6c:b7:34:73:87:6d:27:21:12:42:f3:6c:54:e5:a7: 34:1e:2e:91:0d:58:10:17:5e:96:c6:c1:a7:b1:2b: f3:85:63:3a:07:87:c7:7d:4d:ff:4d:a1:6a:b3:bd: 7e:02:74:1d:99:d5:2d:98:00:c5:8f:54:7b:53:4c: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:7D:BC:7C:24:98:D4:FC:E0:61:CB:1C:B2:30:CC:50:03:50:A8 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4c:cd:87:4d:c1:68:77:8d:61:5e:8b:34:63:77:79:f1:f0: 64:18:eb:f9:2f:a3:17:46:a2:2f:3b:e8:af:c2:9a:1b:6b:ce: a9:84:5c:15:ee:cc:53:36:b8:09:47:de:c3:69:83:2b:80:d3: 27:20:42:eb:8b:ed:3e:53:48:cd:12:5e:1c:df:04:60:3f:b9: c6:07:b4:ad:29:0f:61:a5:9f:76:61:4e:06:6c:34:c9:e8:6f: ad:10:e8:eb:4e:9e:4d:11:cd:a7:82:49:ec:de:82:25:14:17: ba:c6:03:7b:dc:9e:2e:09:7d:e0:a6:bc:57:68:b4:2c:e7:5f: 1c:fb:06:23:12:e8:b2:44:67:1a:f8:f4:21:80:28:62:e2:13: 29:64:3a:d9:97:c6:c4:39:77:69:8a:6e:8d:90:09:cd:31:63: 4e:2d:fd:08:85:c7:18:24:94:63:16:e5:1a:66:5c:5b:1c:62: d5:3a:4d:03:30:b3:21:78:68:e9:8c:57:14:ca:58:ec:44:02: 5a:be:c9:e5:b1:a8:c9:48:ca:47:0b:99:fc:34:af:a0:48:a9: df:ed:9c:be:47:74:1c:15:05:00:5b:f1:87:74:9e:78:12:19: 33:ae:25:27:3d:4a:76:ac:30:93:19:8d:d5:a6:fb:28:e5:a1: 5b:3d:0b:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkz7gmSUv+4++TnxdqX+WNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwOTEwMTQwMTAxWhcNMjUwOTExMTQwMTAxWjAzMTEwLwYDVQQD EyhiZjdlN2RiYzdjMjQ5OGQ0ZmNlMDYxY2IxY2IyMzBjYzUwMDM1MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqDeH1/B/l4SPSrPasd1Hd6GJDGi WyEY6jErkTy9e4yAZM9jr+BnYr66rtSMCzbKP2CXardiFh375Yv3w9r0byJSbHfe N3Inow5W7Bo2EoAPSeVvNv0eyB/9Q4HbW6foxsqzE0XeHbdZK9RvZ117/ahVy+QE KTxriKaM9+sS0jS7Ap6cIHvIm+gdEdIHTeRW0xfdUNncEsYO1yDUhIUeQc2d8myO jI2wEXuIWnrWjN1DBfov3FccBzGpB+nCL14lKPNstzRzh20nIRJC82xU5ac0Hi6R DVgQF16WxsGnsSvzhWM6B4fHfU3/TaFqs71+AnQdmdUtmADFj1R7U0x0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9+fbx8JJjU/OBhyxyyMMxQA1CoMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUzNh03B aHeNYV6LNGN3efHwZBjr+S+jF0aiLzvor8KaG2vOqYRcFe7MUza4CUfew2mDK4DT JyBC64vtPlNIzRJeHN8EYD+5xge0rSkPYaWfdmFOBmw0yehvrRDo606eTRHNp4JJ 7N6CJRQXusYDe9yeLgl94Ka8V2i0LOdfHPsGIxLoskRnGvj0IYAoYuITKWQ62ZfG xDl3aYpujZAJzTFjTi39CIXHGCSUYxblGmZcWxxi1TpNAzCzIXho6YxXFMpY7EQC Wr7J5bGoyUjKRwuZ/DSvoEip3+2cvkd0HBUFAFvxh3SeeBIZM64lJz1KdqwwkxmN 1ab7KOWhWz0LWw== -----END CERTIFICATE-----Generated at Wed Sep 10 18:18:50 2025 by rpki-client