$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: VGnUjqJFXsiTb0ICDIy3IrMxaKlldUFdUzwsOvhh4lg= Subject key identifier: 78:10:E8:BB:F4:2E:19:5E:84:30:32:5F:D8:7B:B3:23:4A:56:2E:A3 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 0199326DAFF574612B2B16705C458116055E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 16AC Signing time: Wed 10 Sep 2025 07:01:13 +0000 Manifest this update: Wed 10 Sep 2025 07:01:13 +0000 Manifest next update: Thu 11 Sep 2025 07:01:13 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: 64BuSo6QeM7L2F_aJTPA9sLOhdA.roa (hash: PMaqbn0zm5F2agi1ODk8ksX5oGo5YkM5MuQW4TQfPLY=) 3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 5: MoOd3UbtCS1jCqfk4Eq1ESLwwHA.roa (hash: IUTY6Kac0RWR6KocRHT3FV3q0t8rT1+uiwnGYkc7UDc=) 6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: R0ec6nF809P6Ozs+J6ZgQxGbgFO78VHdab8QgwERFIU=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:6d:af:f5:74:61:2b:2b:16:70:5c:45:81:16:05:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Sep 10 07:01:13 2025 GMT Not After : Sep 11 07:01:13 2025 GMT Subject: CN=7810e8bbf42e195e8430325fd87bb3234a562ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:ae:25:e1:80:73:a0:8e:a9:e2:d0:cc:19: c4:76:e6:b6:5d:e8:27:cf:69:63:b8:32:bc:2e:72: 24:cb:23:62:63:ab:94:2f:ff:fa:20:a9:0a:f4:fc: 72:24:d6:ed:44:62:60:27:18:f1:e0:cb:a2:59:a1: f3:d3:fc:46:bf:ad:49:d9:a7:47:39:eb:aa:20:75: d6:9c:44:1c:a0:60:07:5c:c3:bf:90:3a:51:e0:22: 18:b7:7a:b6:f5:2a:0e:ec:91:84:60:4d:9d:c5:f0: 0f:37:39:54:96:02:de:d4:b4:7f:14:97:ba:c4:b1: ca:75:29:6f:c1:3d:43:41:26:6f:98:91:b5:83:da: 99:06:1e:fc:da:23:fd:19:a8:54:76:09:cf:bd:9c: ac:7d:2c:c4:6c:55:ff:9d:33:d4:c1:2b:3e:5a:55: ab:57:f9:92:19:84:3a:bb:24:96:c6:99:14:d2:8a: 36:f6:b7:87:d5:31:06:e2:6c:46:24:78:29:f4:a3: 4e:e3:ed:65:92:46:1b:65:36:b1:a0:76:09:e2:59: a4:80:47:63:61:b8:7b:b2:43:79:be:47:7a:80:82: 65:6f:ca:c6:3e:48:8b:0c:2b:04:c4:1b:b2:cf:fd: 37:cd:e7:cc:86:62:78:6f:49:8e:87:3d:05:5d:ee: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:E8:BB:F4:2E:19:5E:84:30:32:5F:D8:7B:B3:23:4A:56:2E:A3 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7a:c8:f2:90:82:ce:f9:db:84:a6:c6:fe:57:6c:60:ab:38: e0:d1:e1:d6:f4:09:05:d6:c1:02:43:49:5a:73:38:bc:57:dd: f0:27:62:32:33:0a:49:af:37:8e:a2:75:75:19:be:33:7b:ea: c8:bd:98:dc:e4:d3:6a:f3:7b:7a:40:16:f7:a4:69:3e:2a:d1: dd:80:61:85:91:13:eb:e9:4e:0c:9e:12:50:1d:ee:a3:1f:fd: 0c:05:2d:e1:cf:1e:31:5c:32:33:b7:70:74:06:0e:08:1d:7d: 62:bc:a0:89:9b:51:84:07:71:56:2b:9a:32:3e:22:a1:39:0b: 0e:1a:9e:d1:dc:16:f5:e3:a0:fa:b9:ef:9e:21:bd:cf:fb:14: 95:1f:0b:a7:2e:60:ad:0b:d7:4b:e6:61:61:8b:7c:4d:c3:e7: 27:dd:6d:d0:fd:31:2d:63:bb:f6:65:cf:ec:b1:c3:68:dc:fe: e4:4b:dc:66:b0:88:70:04:e9:55:69:96:5a:7c:b5:48:e0:97: 86:13:a8:b8:b6:06:ad:b5:b3:e7:12:0e:8f:5d:6a:c7:05:36: 42:5f:b1:c6:ed:4a:28:b4:cf:05:1b:c8:0a:c6:e5:9b:e5:59: 81:fe:10:40:32:a4:f3:b6:01:14:c4:92:50:a7:41:f4:58:2d: c6:72:4e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkyba/1dGErKxZwXEWBFgVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUwOTEwMDcwMTEzWhcNMjUwOTExMDcwMTEzWjAzMTEwLwYDVQQD Eyg3ODEwZThiYmY0MmUxOTVlODQzMDMyNWZkODdiYjMyMzRhNTYyZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndWuJeGAc6COqeLQzBnEdua2Xegn z2ljuDK8LnIkyyNiY6uUL//6IKkK9PxyJNbtRGJgJxjx4MuiWaHz0/xGv61J2adH OeuqIHXWnEQcoGAHXMO/kDpR4CIYt3q29SoO7JGEYE2dxfAPNzlUlgLe1LR/FJe6 xLHKdSlvwT1DQSZvmJG1g9qZBh782iP9GahUdgnPvZysfSzEbFX/nTPUwSs+WlWr V/mSGYQ6uySWxpkU0oo29reH1TEG4mxGJHgp9KNO4+1lkkYbZTaxoHYJ4lmkgEdj Ybh7skN5vkd6gIJlb8rGPkiLDCsExBuyz/03zefMhmJ4b0mOhz0FXe58cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgQ6Lv0LhlehDAyX9h7syNKVi6jMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanrI8pCC zvnbhKbG/ldsYKs44NHh1vQJBdbBAkNJWnM4vFfd8CdiMjMKSa83jqJ1dRm+M3vq yL2Y3OTTavN7ekAW96RpPirR3YBhhZET6+lODJ4SUB3uox/9DAUt4c8eMVwyM7dw dAYOCB19YrygiZtRhAdxViuaMj4ioTkLDhqe0dwW9eOg+rnvniG9z/sUlR8Lpy5g rQvXS+ZhYYt8TcPnJ91t0P0xLWO79mXP7LHDaNz+5EvcZrCIcATpVWmWWny1SOCX hhOouLYGrbWz5xIOj11qxwU2Ql+xxu1KKLTPBRvICsblm+VZgf4QQDKk87YBFMSS UKdB9FgtxnJOSQ== -----END CERTIFICATE-----Generated at Wed Sep 10 10:06:20 2025 by rpki-client