$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: Cu/fNQeu5YrUUnSE6BCY5PN6svvwGPzEGWSl4P0fyqE= Subject key identifier: 3B:0F:3B:2D:92:8B:A3:01:9B:7D:87:9A:C5:C7:6D:46:63:3C:15:6F Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 0199269FBD4547FAECD21FCA6774F098FB69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0FE6 Signing time: Mon 08 Sep 2025 00:00:26 +0000 Manifest this update: Mon 08 Sep 2025 00:00:26 +0000 Manifest next update: Tue 09 Sep 2025 00:00:26 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: O7DX1/DiVnlWpG6iCgxgZw/k8v0fB/JPMyOnVw8HEOQ=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:9f:bd:45:47:fa:ec:d2:1f:ca:67:74:f0:98:fb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Sep 8 00:00:26 2025 GMT Not After : Sep 9 00:00:26 2025 GMT Subject: CN=3b0f3b2d928ba3019b7d879ac5c76d46633c156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:95:33:bf:73:38:8e:b4:1c:61:69:56:4c: 60:af:62:1d:10:f4:58:d4:2b:9f:76:9a:c7:91:38: a0:5b:89:d9:65:bd:de:b0:8d:d7:d9:e4:02:b3:89: de:c4:3c:bf:46:75:d6:8f:3a:5c:59:f8:c2:61:94: c7:77:59:00:e5:e8:48:52:6f:0a:d1:a9:a6:22:8d: 18:46:3b:28:76:53:26:e7:cc:4b:df:3b:37:35:ef: 7e:9b:18:87:29:1e:10:08:ef:6d:19:36:b2:1a:6d: ba:a6:e9:ed:38:96:0f:f4:10:10:29:fb:9b:8b:7e: 82:c3:84:d1:2f:30:44:a8:67:e2:0b:3c:c2:1f:73: d9:b3:66:18:2d:01:47:dd:d2:63:2a:e8:09:89:c9: 01:bd:66:11:2e:9b:70:04:26:08:89:e5:1f:a5:c1: 41:79:48:33:1e:39:cc:a5:21:fd:69:67:d9:58:9c: 18:64:89:35:e1:8a:99:40:1a:32:ef:17:40:36:db: 45:7b:cb:c5:5f:b7:be:d8:1a:09:73:c4:c0:1d:48: c1:07:8f:50:0c:9b:e7:b9:b2:11:5f:62:b7:fe:f7: d8:f1:82:ab:d6:44:ab:fe:5b:f2:ce:63:d9:1b:9a: 5c:2c:ac:73:cb:72:fb:58:f7:ed:03:96:b7:d4:f6: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:3B:2D:92:8B:A3:01:9B:7D:87:9A:C5:C7:6D:46:63:3C:15:6F X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:c7:42:bc:0d:bc:25:8e:a5:66:5f:a5:99:b5:11:c6:af: ff:5e:91:e9:95:a2:b9:07:00:7f:c5:72:24:2e:37:bc:96:9a: ea:fe:2b:7e:1e:f8:98:81:6a:f0:0d:ed:ca:80:c7:17:2c:59: 6e:a4:ea:08:a6:4a:ff:1f:7d:4a:e0:38:f7:6e:34:64:47:67: 1d:7e:97:80:49:92:53:00:5f:06:07:bf:ee:55:4f:06:4c:9c: b6:cf:1f:fc:7d:30:9d:34:5d:66:2a:12:9c:b2:a9:1b:30:04: cf:17:39:44:7a:cb:85:09:29:e7:77:ac:4d:a2:ab:25:d5:cb: 7e:32:0d:97:ab:49:46:b9:1d:11:23:bf:88:73:5c:e4:23:e9: fa:e9:61:c3:58:aa:56:84:8d:8b:bf:d0:2e:01:7c:49:f1:fb: 27:44:30:33:18:11:e7:b3:68:4e:4d:cf:aa:7e:74:48:bd:98: 5d:e6:1d:fa:69:c7:ed:00:6a:8a:a4:53:cb:85:24:a5:69:90: 30:e1:e3:d5:54:c6:a2:93:69:2e:76:c9:c0:dd:f4:20:ef:e3: 86:53:44:15:be:46:0c:e2:63:ae:60:29:2e:f8:f5:59:b2:f5: a7:ed:c7:7a:a2:38:b8:d1:4e:e5:50:45:10:08:0d:84:2d:c4: 16:c0:d9:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmn71FR/rs0h/KZ3TwmPtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwOTA4MDAwMDI2WhcNMjUwOTA5MDAwMDI2WjAzMTEwLwYDVQQD EygzYjBmM2IyZDkyOGJhMzAxOWI3ZDg3OWFjNWM3NmQ0NjYzM2MxNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9WVM79zOI60HGFpVkxgr2IdEPRY 1CufdprHkTigW4nZZb3esI3X2eQCs4nexDy/RnXWjzpcWfjCYZTHd1kA5ehIUm8K 0ammIo0YRjsodlMm58xL3zs3Ne9+mxiHKR4QCO9tGTayGm26puntOJYP9BAQKfub i36Cw4TRLzBEqGfiCzzCH3PZs2YYLQFH3dJjKugJickBvWYRLptwBCYIieUfpcFB eUgzHjnMpSH9aWfZWJwYZIk14YqZQBoy7xdANttFe8vFX7e+2BoJc8TAHUjBB49Q DJvnubIRX2K3/vfY8YKr1kSr/lvyzmPZG5pcLKxzy3L7WPftA5a31PY8AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsPOy2Si6MBm32HmsXHbUZjPBVvMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOPHQrwN vCWOpWZfpZm1Ecav/16R6ZWiuQcAf8VyJC43vJaa6v4rfh74mIFq8A3tyoDHFyxZ bqTqCKZK/x99SuA49240ZEdnHX6XgEmSUwBfBge/7lVPBkycts8f/H0wnTRdZioS nLKpGzAEzxc5RHrLhQkp53esTaKrJdXLfjINl6tJRrkdESO/iHNc5CPp+ulhw1iq VoSNi7/QLgF8SfH7J0QwMxgR57NoTk3Pqn50SL2YXeYd+mnH7QBqiqRTy4UkpWmQ MOHj1VTGopNpLnbJwN30IO/jhlNEFb5GDOJjrmApLvj1WbL1p+3HeqI4uNFO5VBF EAgNhC3EFsDZig== -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:27 2025 by rpki-client