$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: DSccuxHEw353IUv1MoGS8xlAGmYvIyZAjP9OhwPoetw= Subject key identifier: 34:03:8E:39:98:DE:F6:48:A3:9E:1F:16:54:03:48:2E:02:D1:ED:D8 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 01992AEB0E79B9B3BB344B32EF2CC76F36DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0C83 Signing time: Mon 08 Sep 2025 20:01:11 +0000 Manifest this update: Mon 08 Sep 2025 20:01:11 +0000 Manifest next update: Tue 09 Sep 2025 20:01:11 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: OK+ABjk3g+sxaT9EOlgJls6xxFr16ULHIxXiJHsRXUc=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=) 5: PI3liVbKDiaCLGIugnWJkh3DbUQ.roa (hash: KjVpzVOHzI2cWVyzxXu5Z5MjrctS7eEJdBT+u20+ygI=) 6: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 7: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 8: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 9: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 10: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 11: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 12: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 13: kwK7qq9-8R1SFEXV8ya4nXhQnGc.roa (hash: mpvYfYbKlNMOOXLEAZPX35jqkxWrEfgNP843asfJZCc=) 14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) 16: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=) 17: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2a:eb:0e:79:b9:b3:bb:34:4b:32:ef:2c:c7:6f:36:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Sep 8 20:01:11 2025 GMT Not After : Sep 9 20:01:11 2025 GMT Subject: CN=34038e3998def648a39e1f165403482e02d1edd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:c2:e7:d2:5c:49:25:ff:cb:fe:3b:5b:47: 08:f2:b0:30:43:09:f2:04:9e:e3:6c:ef:f0:4a:be: 0d:0b:1d:a6:2f:dc:54:76:54:a5:93:6a:e8:48:1b: 7f:49:3b:fb:ae:34:b5:9e:18:11:4d:d4:95:48:13: af:70:bc:7b:f3:c0:64:94:18:fa:cb:e5:90:ee:c5: 71:15:6f:60:19:07:da:5a:1b:2d:53:ac:5c:4a:e1: 01:d1:ff:e1:dd:65:50:2b:77:19:88:0f:b6:24:92: 56:2d:c7:60:a0:bb:80:7e:e6:41:bb:c0:82:f1:ac: 5b:5b:76:88:e0:95:7f:6d:d4:08:9a:60:bf:89:67: dc:63:8d:17:7b:42:c3:8f:8d:2c:e4:23:0a:bc:4e: 0a:60:4f:25:c0:71:48:3b:87:6d:33:f1:78:87:09: 8c:73:58:79:23:2b:06:04:66:e5:d9:ec:44:56:27: 9a:35:05:00:f1:ea:6a:d0:bd:9c:3d:03:d0:f4:7f: b2:c7:1f:6f:96:8e:35:44:08:ff:40:81:b8:e8:c6: a6:c5:ad:de:d0:ec:1a:82:9b:ab:c4:01:27:25:d7: 4b:e9:e6:30:d7:f5:1e:e7:c7:2d:27:95:2f:64:72: cf:4a:56:08:52:4d:ee:19:ba:89:d1:77:2a:ea:66: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:03:8E:39:98:DE:F6:48:A3:9E:1F:16:54:03:48:2E:02:D1:ED:D8 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:85:77:96:9c:9a:c6:2e:ec:9e:07:01:8c:12:7e:2c:c3:33: 55:4d:f6:7e:28:6c:21:71:43:22:b8:21:0e:35:62:9b:ee:ec: 91:71:e0:fd:7b:a7:d8:44:02:fd:4c:2e:59:ab:76:aa:01:26: 36:5f:69:86:fa:d7:ed:42:8a:46:b3:27:37:6f:8a:58:13:e0: ae:4b:47:59:1e:9a:f3:9b:4f:7a:57:bc:e4:e5:72:9a:0e:7e: e5:bf:33:79:97:88:f8:f4:d4:53:7a:2f:a8:d5:77:2f:20:4f: c8:33:77:88:dd:54:42:0d:fa:55:b4:f9:d3:47:9a:ff:b5:9d: b4:3f:59:1b:4b:08:ba:13:27:41:94:b6:eb:8a:da:72:6a:bf: 69:ea:59:d9:cb:01:f1:8e:1b:8c:05:ce:90:92:b9:78:48:58: 24:d1:6e:1a:25:60:0b:3c:18:88:77:48:6a:25:af:d4:2f:60: 72:98:22:a8:3c:5a:78:7c:2d:08:8d:25:ad:1b:5c:f2:35:bd: 8b:e8:b6:55:1a:2b:8e:94:bb:38:f7:85:bb:ed:60:51:8f:8c: a4:96:d3:84:f9:3c:53:36:14:7a:d1:56:9b:a8:13:ca:30:7e: ba:71:48:96:d8:ad:93:67:ef:77:a5:56:cd:77:cf:75:f1:05: 0b:6b:83:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkq6w55ubO7NEsy7yzHbzbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwOTA4MjAwMTExWhcNMjUwOTA5MjAwMTExWjAzMTEwLwYDVQQD EygzNDAzOGUzOTk4ZGVmNjQ4YTM5ZTFmMTY1NDAzNDgyZTAyZDFlZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwDC59JcSSX/y/47W0cI8rAwQwny BJ7jbO/wSr4NCx2mL9xUdlSlk2roSBt/STv7rjS1nhgRTdSVSBOvcLx788BklBj6 y+WQ7sVxFW9gGQfaWhstU6xcSuEB0f/h3WVQK3cZiA+2JJJWLcdgoLuAfuZBu8CC 8axbW3aI4JV/bdQImmC/iWfcY40Xe0LDj40s5CMKvE4KYE8lwHFIO4dtM/F4hwmM c1h5IysGBGbl2exEVieaNQUA8epq0L2cPQPQ9H+yxx9vlo41RAj/QIG46Mamxa3e 0OwagpurxAEnJddL6eYw1/Ue58ctJ5UvZHLPSlYIUk3uGbqJ0Xcq6maSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQDjjmY3vZIo54fFlQDSC4C0e3YMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoV3lpya xi7sngcBjBJ+LMMzVU32fihsIXFDIrghDjVim+7skXHg/Xun2EQC/UwuWat2qgEm Nl9phvrX7UKKRrMnN2+KWBPgrktHWR6a85tPele85OVymg5+5b8zeZeI+PTUU3ov qNV3LyBPyDN3iN1UQg36VbT500ea/7WdtD9ZG0sIuhMnQZS264racmq/aepZ2csB 8Y4bjAXOkJK5eEhYJNFuGiVgCzwYiHdIaiWv1C9gcpgiqDxaeHwtCI0lrRtc8jW9 i+i2VRorjpS7OPeFu+1gUY+MpJbThPk8UzYUetFWm6gTyjB+unFIltitk2fvd6VW zXfPdfEFC2uDvw== -----END CERTIFICATE-----Generated at Tue Sep 9 06:17:53 2025 by rpki-client