$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft File: w_tAOiQYg-WPztUtOdgOq9Urs28.mft (raw, json) Hash identifier: m6XW8a3jNr5Gllfm0F7BxldZu3e5/idIUahGWM3xr10= Subject key identifier: 79:9E:B8:1E:5D:D2:77:10:87:88:1C:9A:63:FC:AB:07:8B:DE:B1:D2 Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f Certificate serial: 0197C2DC04747DA22A1EC2B70A7BE9DB919C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft Manifest number: 12C6 Signing time: Mon 30 Jun 2025 22:01:28 +0000 Manifest this update: Mon 30 Jun 2025 22:01:28 +0000 Manifest next update: Tue 01 Jul 2025 22:01:28 +0000 Files and hashes: 1: 0O9x83-lbjQhQ0H0QNL4onc5rtE.roa (hash: gCcafB1+mESKS3BVJYDajJPvasqf2Tc5KeBGiyOT4to=) 2: 1-jdIlT59ATtnye0obz3ukqOdzSw.roa (hash: WZteN0hvbeOfkaazAFqc4a1Hb3S3n64JbzhuBh5/71o=) 3: 2Gso70Bxi4cBy_WodKxdmUIwtcI.roa (hash: /C593JYHyt/Js1dmu1EsZBHQvb2UcIHLzg2ko4L4lPo=) 4: 8DzD2uq5lN_KH_22IY31T_I5eUA.roa (hash: YwlgZskvfXHSFdpGYunNlSWojU8CZ8UtlqZ7vcZMWHk=) 5: H6DguWyAKB8u-XwiA-wSbFWSyyM.roa (hash: HhyM4zbUFZiPEk4/CITr/Hv8a8wBk7oLKs2GIwW2o7U=) 6: KntaM8lbcY4c01Dw4SaSSX2lodw.roa (hash: cLp1SD6XtpquL0QHMFnM+17dWoMSgXrVeFdbvQlKhQM=) 7: Phmx9blLQ7v5rgeNAupIAeVATYQ.roa (hash: ql8UKx0lpekuzUNBWqBQ1mqh/lL/DJd1b7ik/nG/cD4=) 8: ePoIjSzwu99M4WhvEDpbXSDvvQo.roa (hash: R96ob6c+Fl2Ot6tWCC9JDy+m8b6W3TjrV6Ao1DPqb1c=) 9: qQnpsIyhfC_30_02N13kTh1MqLQ.roa (hash: MbMug/0ttDrSz8GeinJuhxQXXHeOISrtY8I3Yes9Trc=) 10: w_tAOiQYg-WPztUtOdgOq9Urs28.crl (hash: mbbKLpZ9x/kudsQhrwF7qQeG56vmu9sbbiKQJQMVusc=) 11: yODzbE0zP6j_JHKYXWAzphsQNA8.roa (hash: VWJD33neAhmMaiHQw/4mg0RmMd404ON+a4BHqIO3tqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c2:dc:04:74:7d:a2:2a:1e:c2:b7:0a:7b:e9:db:91:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f Validity Not Before: Jun 30 22:01:28 2025 GMT Not After : Jul 1 22:01:28 2025 GMT Subject: CN=799eb81e5dd2771087881c9a63fcab078bdeb1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:a9:4b:8d:d6:56:b2:23:cd:c1:9a:4c:c4: 93:f8:72:cb:db:bc:b4:2d:7f:48:7e:bf:7d:41:f8: 84:02:99:62:cc:01:e0:d7:60:3c:3e:ce:9e:4d:57: 0e:19:27:b9:ec:ba:4d:ed:4a:a4:61:25:14:45:e1: 19:26:1b:f9:ce:79:57:dc:5a:3a:50:a0:b5:94:68: 81:ec:ce:23:63:6c:1d:f1:82:3f:b8:d3:61:61:9d: 63:c0:a6:b0:50:81:40:0b:fc:98:28:10:5b:09:28: 8c:e9:44:fc:e4:b7:7b:c2:99:de:4e:93:2e:96:09: b7:50:02:1d:22:c5:11:bc:9c:63:58:b6:4c:67:68: b3:97:56:97:b5:1c:e3:c4:e2:1b:81:fa:24:af:33: f2:a7:d1:da:21:fe:7d:c5:ce:68:23:bc:56:41:8b: 03:37:53:e9:fa:f9:d3:5f:6d:f4:8d:30:f3:0b:8b: ba:ab:1a:da:c4:b9:7e:35:7c:2a:88:7d:87:f5:61: db:e1:ce:85:13:97:1f:2d:5b:63:3e:f4:76:6b:3a: 2c:f3:b1:d2:3d:84:52:cc:04:f9:05:5b:1c:95:e7: c7:0a:98:a7:54:14:0d:1e:36:7f:95:aa:fb:28:ea: 42:e8:ff:c8:5a:0c:4d:16:dc:5c:5e:17:47:f4:39: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9E:B8:1E:5D:D2:77:10:87:88:1C:9A:63:FC:AB:07:8B:DE:B1:D2 X509v3 Authority Key Identifier: keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:2d:9e:0a:32:c4:d3:da:56:ee:b0:95:63:fa:0c:27:ac: 0a:75:5f:9f:48:97:8b:18:66:58:b6:62:89:df:36:69:d6:fd: ee:60:ca:c3:68:21:c9:85:39:06:c8:2a:0b:12:c4:7d:7f:0d: f3:f2:aa:f0:74:b2:1f:37:71:77:49:38:3e:58:5d:51:13:44: db:7c:ee:6a:c1:d3:bb:ae:ff:60:a3:99:34:0e:67:e4:48:83: c9:9d:70:2e:62:bf:01:d8:3b:bf:13:05:20:32:66:3e:a7:79: ac:da:c9:cc:88:c5:db:f2:9a:47:a9:31:8f:8b:55:e3:92:a5: 80:5b:ad:36:ab:48:f5:0c:9d:0f:f3:09:b7:9a:20:3f:e1:4a: ca:c9:a0:7b:01:d7:ef:a6:d4:4b:4d:da:79:b4:6d:c8:11:39: 4c:cc:1a:c7:c2:a8:b7:48:ff:d8:6d:74:e8:bc:7b:af:64:08: ac:5c:7e:09:33:59:60:ca:92:a9:94:7c:c2:c4:25:e0:1c:bf: 1e:79:2d:d3:6b:d4:7c:34:37:7d:68:9f:c8:7f:81:71:66:82: 6f:02:e5:8d:7f:96:30:5f:27:6e:09:b1:ca:e4:fa:ac:3a:2a: 17:7e:b7:b0:6f:15:a2:bc:c4:7c:2a:8e:e8:2e:ab:81:9a:f3: f5:90:70:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfC3AR0faIqHsK3Cnvp25GcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy YmIzNmYwHhcNMjUwNjMwMjIwMTI4WhcNMjUwNzAxMjIwMTI4WjAzMTEwLwYDVQQD Eyg3OTllYjgxZTVkZDI3NzEwODc4ODFjOWE2M2ZjYWIwNzhiZGViMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHSpS43WVrIjzcGaTMST+HLL27y0 LX9Ifr99QfiEAplizAHg12A8Ps6eTVcOGSe57LpN7UqkYSUUReEZJhv5znlX3Fo6 UKC1lGiB7M4jY2wd8YI/uNNhYZ1jwKawUIFAC/yYKBBbCSiM6UT85Ld7wpneTpMu lgm3UAIdIsURvJxjWLZMZ2izl1aXtRzjxOIbgfokrzPyp9HaIf59xc5oI7xWQYsD N1Pp+vnTX230jTDzC4u6qxraxLl+NXwqiH2H9WHb4c6FE5cfLVtjPvR2azos87HS PYRSzAT5BVsclefHCpinVBQNHjZ/lar7KOpC6P/IWgxNFtxcXhdH9Dlb3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmeuB5d0ncQh4gcmmP8qweL3rHSMB8GA1UdIwQY MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt YTlhNzc5MDI2ZjBhLzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8Atngoy xNPaVu6wlWP6DCesCnVfn0iXixhmWLZiid82adb97mDKw2ghyYU5BsgqCxLEfX8N 8/Kq8HSyHzdxd0k4PlhdURNE23zuasHTu67/YKOZNA5n5EiDyZ1wLmK/Adg7vxMF IDJmPqd5rNrJzIjF2/KaR6kxj4tV45KlgFutNqtI9QydD/MJt5ogP+FKysmgewHX 76bUS03aebRtyBE5TMwax8Kot0j/2G106Lx7r2QIrFx+CTNZYMqSqZR8wsQl4By/ Hnkt02vUfDQ3fWifyH+BcWaCbwLljX+WMF8nbgmxyuT6rDoqF363sG8VorzEfCqO 6C6rgZrz9ZBwKQ== -----END CERTIFICATE-----Generated at Tue Jul 1 00:48:00 2025 by rpki-client