$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: Aj/dZqTrNhVzJdloRxGBQLMIEyBUeITddG84Hr6vBck= Subject key identifier: 2B:7A:11:95:77:76:9E:52:A5:36:12:5F:38:89:5A:1F:A7:ED:45:D7 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 01992BFD77D37006E3940AACF834A3D2D45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0B24 Signing time: Tue 09 Sep 2025 01:00:55 +0000 Manifest this update: Tue 09 Sep 2025 01:00:55 +0000 Manifest next update: Wed 10 Sep 2025 01:00:55 +0000 Files and hashes: 1: 3O-D3rX4CFCdAkLP-WafPBWg7LI.roa (hash: ZjKqIVEFVR9cfjOaAvV16cE3fi3JRCek3PrT1Bdh+pE=) 2: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 3: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 4: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: HZizcpyXysRMBNlrn4qPXadhOd+rmEKobe87JYzDnnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:fd:77:d3:70:06:e3:94:0a:ac:f8:34:a3:d2:d4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Sep 9 01:00:55 2025 GMT Not After : Sep 10 01:00:55 2025 GMT Subject: CN=2b7a119577769e52a536125f38895a1fa7ed45d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:72:e3:54:1a:4f:60:8c:6d:bb:a4:3a:50: 55:51:6a:7d:cb:09:80:c5:ef:51:e7:8f:05:a8:10: 0e:e2:e8:26:31:90:0c:0f:f3:6e:59:90:f7:5b:a0: f5:67:bc:c1:1d:15:27:3b:4a:1b:3b:75:d6:97:6b: 01:02:45:7b:22:0e:fd:8a:65:a2:21:be:31:9b:96: 94:81:df:c1:63:55:2b:cc:9c:1b:3f:ca:74:35:bf: 6b:7e:6b:22:fa:21:7d:1b:a2:b6:13:19:6c:aa:f3: af:f9:a6:24:f4:1e:40:64:3e:43:c7:b6:12:be:a5: 33:bc:62:d6:50:6e:61:4e:0f:4f:6c:01:39:72:40: 9f:16:aa:dd:54:af:1c:8c:e2:be:50:af:5f:c8:4f: de:42:71:58:d2:19:dc:25:a6:01:01:ab:27:d6:d9: 51:dd:31:04:4f:9b:ed:b5:01:90:59:4f:5d:0c:66: 75:43:12:0f:15:d0:44:c9:90:59:b2:ba:82:6f:70: f6:40:57:3c:2a:4e:b6:03:65:53:2b:11:14:1d:6e: fc:77:2d:36:0d:8e:83:c7:5c:23:27:27:3b:78:d1: 2f:33:b5:f3:69:02:ab:83:7a:6b:d6:12:90:60:08: ab:67:e5:e9:ef:d4:d0:73:41:6e:b9:8e:3a:39:60: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:11:95:77:76:9E:52:A5:36:12:5F:38:89:5A:1F:A7:ED:45:D7 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3b:26:29:05:a7:71:10:8c:8f:3c:8b:b0:ee:59:45:45:cc: 9b:0c:b4:9e:28:79:71:92:d6:37:08:39:a2:94:3b:8e:e4:c1: 86:da:ad:52:67:05:e1:67:6b:c7:6f:a0:61:56:f7:c6:98:da: ba:25:8f:07:44:9d:d3:88:ed:be:32:fc:77:d5:45:09:79:0a: 28:a7:0b:03:dd:76:ee:bd:42:28:67:17:ad:74:5f:7d:08:15: d7:8a:43:87:0c:e5:97:51:c9:97:5b:96:55:41:80:6e:aa:e6: ae:06:c8:92:10:0d:db:ac:72:91:78:cb:cf:26:f9:61:3f:fe: 04:f1:f0:e2:28:14:c5:b8:6e:9b:f4:68:ee:53:01:b6:f1:fe: d3:20:dc:af:ab:3d:cf:78:a8:ea:95:ac:24:ec:56:bf:38:bb: 0a:af:d0:e0:19:50:ba:6d:b2:56:19:f6:ec:b8:2f:fa:c8:24: 8b:78:13:40:ff:fa:33:a1:3f:36:45:e3:06:2b:d9:35:ee:0b: 70:c5:f9:ff:3d:85:2f:d3:4c:47:e3:b9:72:d5:4b:f9:b2:66: ee:b0:e8:bb:3a:84:9c:80:13:cf:11:df:60:27:96:ec:1b:f6: 65:59:23:95:45:72:29:fb:bb:35:61:03:fd:7e:e5:44:e0:89: 4d:f7:1d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkr/XfTcAbjlAqs+DSj0tRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwOTA5MDEwMDU1WhcNMjUwOTEwMDEwMDU1WjAzMTEwLwYDVQQD EygyYjdhMTE5NTc3NzY5ZTUyYTUzNjEyNWYzODg5NWExZmE3ZWQ0NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv25y41QaT2CMbbukOlBVUWp9ywmA xe9R548FqBAO4ugmMZAMD/NuWZD3W6D1Z7zBHRUnO0obO3XWl2sBAkV7Ig79imWi Ib4xm5aUgd/BY1UrzJwbP8p0Nb9rfmsi+iF9G6K2ExlsqvOv+aYk9B5AZD5Dx7YS vqUzvGLWUG5hTg9PbAE5ckCfFqrdVK8cjOK+UK9fyE/eQnFY0hncJaYBAasn1tlR 3TEET5vttQGQWU9dDGZ1QxIPFdBEyZBZsrqCb3D2QFc8Kk62A2VTKxEUHW78dy02 DY6Dx1wjJyc7eNEvM7XzaQKrg3pr1hKQYAirZ+Xp79TQc0FuuY46OWDsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt6EZV3dp5SpTYSXziJWh+n7UXXMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjsmKQWn cRCMjzyLsO5ZRUXMmwy0nih5cZLWNwg5opQ7juTBhtqtUmcF4Wdrx2+gYVb3xpja uiWPB0Sd04jtvjL8d9VFCXkKKKcLA9127r1CKGcXrXRffQgV14pDhwzll1HJl1uW VUGAbqrmrgbIkhAN26xykXjLzyb5YT/+BPHw4igUxbhum/Ro7lMBtvH+0yDcr6s9 z3io6pWsJOxWvzi7Cq/Q4BlQum2yVhn27Lgv+sgki3gTQP/6M6E/NkXjBivZNe4L cMX5/z2FL9NMR+O5ctVL+bJm7rDouzqEnIATzxHfYCeW7Bv2ZVkjlUVyKfu7NWED /X7lROCJTfcdrQ== -----END CERTIFICATE-----Generated at Tue Sep 9 08:41:56 2025 by rpki-client