$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: qMMaFpdwrpslgQZMfAMtJ10nyUuO94lU9oKC1fAHMh8= Subject key identifier: 0D:0B:AA:7C:87:AE:2E:22:72:5C:0F:7D:BC:86:5C:69:E2:A2:5E:3F Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 0199239FA31295B26CF1D34178ABF751BE11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 13A8 Signing time: Sun 07 Sep 2025 10:01:28 +0000 Manifest this update: Sun 07 Sep 2025 10:01:28 +0000 Manifest next update: Mon 08 Sep 2025 10:01:28 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: tl22dZc4RitMBKP4XbUMOIP9OGFdUsopLIn4hMh66rg=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:9f:a3:12:95:b2:6c:f1:d3:41:78:ab:f7:51:be:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Sep 7 10:01:28 2025 GMT Not After : Sep 8 10:01:28 2025 GMT Subject: CN=0d0baa7c87ae2e22725c0f7dbc865c69e2a25e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:65:21:20:00:c9:ce:51:7a:b5:d6:7e:9c: e6:3c:5b:ec:77:0f:ec:96:dc:b4:40:ae:bf:18:fd: 8a:9f:06:c2:22:2d:16:c8:16:9f:5c:f2:ef:da:e6: b6:2b:73:f0:aa:29:21:10:83:3a:69:cf:ad:80:49: d9:35:b9:5c:51:72:b8:1e:92:ed:13:e7:43:c9:2c: 49:ee:36:d4:23:29:72:06:a9:5c:5a:b0:33:ea:2e: bb:54:e1:b9:c9:4f:9a:40:eb:70:75:29:e7:5e:86: c3:33:f2:a7:55:ff:66:38:e8:2f:16:00:80:da:d9: 5d:df:74:a9:45:d5:7f:7b:81:e7:cb:f4:51:f9:db: d4:c5:54:17:d7:47:40:2e:e7:6c:5a:ab:ce:c0:24: 07:6b:75:13:75:f5:ae:11:2d:61:b0:71:7f:c1:84: 8e:f5:dc:52:f3:88:0f:6c:25:a9:cd:8d:da:99:28: c8:1e:85:45:1c:ca:9b:32:80:d8:d3:f7:6c:02:26: 9f:34:53:19:aa:60:e1:e7:8d:1d:6e:db:e6:0b:f8: a3:a9:2e:61:02:8b:ba:b0:f8:4f:04:50:20:75:c3: bc:2a:13:6d:f0:5c:44:4e:5f:ff:a5:94:78:1d:f1: f2:8d:59:68:5e:5d:7b:d7:7d:fc:e5:5a:55:8d:cd: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0B:AA:7C:87:AE:2E:22:72:5C:0F:7D:BC:86:5C:69:E2:A2:5E:3F X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b4:aa:93:21:1a:39:00:92:57:34:9f:29:09:e3:01:e9:4f: 7e:a8:a4:19:75:c6:77:3f:c0:a1:16:13:76:17:6e:77:52:a1: dc:8e:1e:93:0e:4a:0b:74:c6:86:3d:5e:8a:be:fd:d0:c1:a4: cd:59:93:6a:73:62:31:06:3d:4f:a3:98:fe:20:bd:02:3f:50: d3:52:35:8b:8d:81:0e:ee:0c:21:96:84:10:e5:0d:86:bb:a6: 90:76:08:f1:8d:a8:42:c9:95:b8:58:2c:be:d3:74:02:ed:1b: 57:8d:73:c9:5c:16:9e:a8:48:0d:aa:d9:7b:01:78:90:be:a1: c2:6b:58:ec:bf:8b:cc:4e:ac:85:7e:f7:68:3f:65:8c:43:ce: 42:0c:d9:57:55:db:91:39:c6:e2:66:56:93:c2:b7:05:82:cf: 06:05:12:f4:c3:08:ee:6e:1f:19:d2:30:b9:01:07:5c:f0:97: bd:72:26:e4:bf:46:8f:fd:d4:3c:a9:6c:72:bb:44:af:39:6b: 47:b4:51:7e:c8:ae:90:0c:67:aa:79:d2:f5:a3:78:51:1d:d9: 80:74:c1:2e:6c:58:8e:4e:32:31:7f:26:4b:7e:09:43:81:11: cf:02:21:5c:44:98:22:39:f8:ea:46:ed:29:15:b5:b0:71:ed: f9:66:be:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjn6MSlbJs8dNBeKv3Ub4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUwOTA3MTAwMTI4WhcNMjUwOTA4MTAwMTI4WjAzMTEwLwYDVQQD EygwZDBiYWE3Yzg3YWUyZTIyNzI1YzBmN2RiYzg2NWM2OWUyYTI1ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19plISAAyc5RerXWfpzmPFvsdw/s lty0QK6/GP2KnwbCIi0WyBafXPLv2ua2K3PwqikhEIM6ac+tgEnZNblcUXK4HpLt E+dDySxJ7jbUIylyBqlcWrAz6i67VOG5yU+aQOtwdSnnXobDM/KnVf9mOOgvFgCA 2tld33SpRdV/e4Hny/RR+dvUxVQX10dALudsWqvOwCQHa3UTdfWuES1hsHF/wYSO 9dxS84gPbCWpzY3amSjIHoVFHMqbMoDY0/dsAiafNFMZqmDh540dbtvmC/ijqS5h Aou6sPhPBFAgdcO8KhNt8FxETl//pZR4HfHyjVloXl1713385VpVjc1mqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0LqnyHri4iclwPfbyGXGniol4/MB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7SqkyEa OQCSVzSfKQnjAelPfqikGXXGdz/AoRYTdhdud1Kh3I4ekw5KC3TGhj1eir790MGk zVmTanNiMQY9T6OY/iC9Aj9Q01I1i42BDu4MIZaEEOUNhrumkHYI8Y2oQsmVuFgs vtN0Au0bV41zyVwWnqhIDarZewF4kL6hwmtY7L+LzE6shX73aD9ljEPOQgzZV1Xb kTnG4mZWk8K3BYLPBgUS9MMI7m4fGdIwuQEHXPCXvXIm5L9Gj/3UPKlscrtErzlr R7RRfsiukAxnqnnS9aN4UR3ZgHTBLmxYjk4yMX8mS34JQ4ERzwIhXESYIjn46kbt KRW1sHHt+Wa+5w== -----END CERTIFICATE-----Generated at Sun Sep 7 17:54:09 2025 by rpki-client