$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: LZr7M5flGj9kt3gBdmUkvhNI3tdDGmK0fTkoxgbq+8o= Subject key identifier: 31:EA:A4:32:78:0D:A0:0F:89:C9:EF:C4:C7:16:6A:92:68:D5:FC:0E Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 0197383DB3BF31317734B152968A93DBC997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0EE6 Signing time: Wed 04 Jun 2025 00:00:57 +0000 Manifest this update: Wed 04 Jun 2025 00:00:57 +0000 Manifest next update: Thu 05 Jun 2025 00:00:57 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: PX9ppUcsfKvJM7EflGSNay0fHRBQgvHI9LAgR5TZmtw=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:3d:b3:bf:31:31:77:34:b1:52:96:8a:93:db:c9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jun 4 00:00:57 2025 GMT Not After : Jun 5 00:00:57 2025 GMT Subject: CN=31eaa432780da00f89c9efc4c7166a9268d5fc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:87:af:97:69:a3:2e:8c:14:7f:9e:27:cc: a1:7a:8d:7b:21:a0:bc:9c:8d:f8:36:94:84:c6:c1: 99:88:7b:aa:d7:0e:75:b4:03:c5:0b:a3:32:de:06: 47:3b:4d:6d:d8:74:f8:18:57:7c:cd:5e:84:65:b5: bf:32:c9:1c:f7:40:6a:12:16:32:ec:e0:d0:18:c5: e5:26:4b:2f:f4:ae:04:3e:1e:ac:9c:79:8c:92:25: b4:e3:86:5f:ee:27:d6:01:86:a0:58:d8:21:2d:1e: bf:eb:98:25:59:cd:1e:1d:fd:42:b1:57:6b:ba:3f: 63:f3:c2:60:37:8c:dc:dd:93:d4:37:8f:37:86:d6: 84:af:c1:3d:ce:8e:28:20:ad:51:4f:5a:80:1d:97: 27:69:3e:8d:43:0a:bd:f8:e8:04:6f:37:bb:01:07: 7f:06:43:13:d9:50:35:98:72:54:11:a9:63:23:d8: dd:4c:c8:a2:c8:85:66:78:02:47:17:02:c3:12:5e: 35:e0:e2:89:d9:20:7f:04:8d:c8:40:44:1e:01:b3: 94:cf:6b:af:9a:53:85:41:ee:bc:cb:7e:2b:fe:34: fd:a7:60:10:07:16:8d:1a:db:70:8a:11:4d:bc:46: 84:78:17:89:65:ab:eb:f5:d7:dd:bd:f7:27:5f:b9: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EA:A4:32:78:0D:A0:0F:89:C9:EF:C4:C7:16:6A:92:68:D5:FC:0E X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:cb:49:26:7c:d0:45:39:0e:d5:28:cf:44:65:43:4d:2e:60: 34:b4:b0:92:bd:02:4b:33:c5:f4:59:c7:22:da:6b:f9:b4:a7: dd:6c:ce:fb:a3:ba:43:68:5b:0b:6e:d5:55:1a:d6:3e:84:e2: d2:2f:af:fb:ca:da:15:05:be:2b:19:7f:1d:52:ac:fc:20:47: 83:7e:04:82:ff:3d:56:2f:ba:f7:4f:1d:1f:ad:b1:da:03:c9: 46:57:20:47:ea:b8:46:a0:45:ab:0e:20:7f:c9:fc:e4:ce:ff: f1:6e:5f:74:98:66:8d:a8:53:57:72:60:3a:ca:a6:eb:b0:df: eb:13:fd:bc:6e:f4:fc:e5:42:7d:e3:d6:43:d7:c9:5d:e8:de: 9f:54:5b:9e:ee:65:74:24:4a:6f:33:69:8d:5a:f7:94:56:bd: d6:e7:63:21:d3:1c:2e:4f:73:e5:b6:f0:f8:87:b9:52:3b:2b: 2e:db:a9:35:8b:a6:96:d4:9c:09:06:f1:14:be:da:e5:e0:12: 03:c3:ad:e0:9c:31:80:a1:e6:a7:4d:5a:1f:7f:5e:78:e5:8e: 4f:d5:8e:52:0f:1c:81:98:68:e8:6c:3c:4f:78:c9:60:79:04: 65:f4:b2:1e:e0:6c:fa:83:d9:d7:0b:0b:f5:5e:a7:0a:7b:35: 89:cf:83:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc4PbO/MTF3NLFSloqT28mXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwNjA0MDAwMDU3WhcNMjUwNjA1MDAwMDU3WjAzMTEwLwYDVQQD EygzMWVhYTQzMjc4MGRhMDBmODljOWVmYzRjNzE2NmE5MjY4ZDVmYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiqHr5dpoy6MFH+eJ8yheo17IaC8 nI34NpSExsGZiHuq1w51tAPFC6My3gZHO01t2HT4GFd8zV6EZbW/Mskc90BqEhYy 7ODQGMXlJksv9K4EPh6snHmMkiW044Zf7ifWAYagWNghLR6/65glWc0eHf1CsVdr uj9j88JgN4zc3ZPUN483htaEr8E9zo4oIK1RT1qAHZcnaT6NQwq9+OgEbze7AQd/ BkMT2VA1mHJUEaljI9jdTMiiyIVmeAJHFwLDEl414OKJ2SB/BI3IQEQeAbOUz2uv mlOFQe68y34r/jT9p2AQBxaNGttwihFNvEaEeBeJZavr9dfdvfcnX7kkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHqpDJ4DaAPicnvxMcWapJo1fwOMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMtJJnzQ RTkO1SjPRGVDTS5gNLSwkr0CSzPF9FnHItpr+bSn3WzO+6O6Q2hbC27VVRrWPoTi 0i+v+8raFQW+Kxl/HVKs/CBHg34Egv89Vi+6908dH62x2gPJRlcgR+q4RqBFqw4g f8n85M7/8W5fdJhmjahTV3JgOsqm67Df6xP9vG70/OVCfePWQ9fJXejen1Rbnu5l dCRKbzNpjVr3lFa91udjIdMcLk9z5bbw+Ie5UjsrLtupNYumltScCQbxFL7a5eAS A8Ot4JwxgKHmp01aH39eeOWOT9WOUg8cgZho6Gw8T3jJYHkEZfSyHuBs+oPZ1wsL 9V6nCns1ic+DKQ== -----END CERTIFICATE-----Generated at Wed Jun 4 11:59:15 2025 by rpki-client