$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json) Hash identifier: dbpQY6OeotS/REyj+y0PBXp2/7kR0Y0ZogUaR3loifM= Subject key identifier: 78:6A:A7:AC:0C:27:07:CB:29:62:10:33:42:FB:F4:5E:58:10:FC:F5 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 0198D439ABDB1F2048E065EE9287CD17F00E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft Manifest number: 17A4 Signing time: Sat 23 Aug 2025 00:00:05 +0000 Manifest this update: Sat 23 Aug 2025 00:00:05 +0000 Manifest next update: Sun 24 Aug 2025 00:00:05 +0000 Files and hashes: 1: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=) 2: 2-cHxc1zMtCcD-GzEWoOdBTTabs.roa (hash: 52l6FusBa/jk0I0sBfVHrE4CEvIY/yW7vGg69O8iKSQ=) 3: 2QQsJJ6tXNfySMKhFuk0X4eceCs.roa (hash: ThLO2KhLuPTXapRFxGR4popYmJIUwR3wQqbgs/aqfNw=) 4: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=) 5: 6oSuHeeQ_sWorxh6r0_5wvvFQgM.roa (hash: 5gk4fc1M3LnlB31mm0S5J9v36W8hpfovoTd5KvJf5f8=) 6: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=) 7: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=) 8: AaUr_dffnDoKax9ioQFPs0fyF1E.roa (hash: xUUyNOjfoVVFcyRYunFBOeObFu44dbGyvv9BKr7nA4Y=) 9: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=) 10: Do610frDxofc_GIwlM0_-BIBi58.roa (hash: 2fSLFdraUb7r/St9XyxC3w/gDUXK6jtGxtd4pLLXBT4=) 11: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=) 12: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=) 13: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=) 14: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=) 15: RX7l8BxO-eKobaPUKlWDX3pgmwk.roa (hash: nHUjRFMgvlJlNqFCQ216ZDqgAbi+pIcXAJSF8ZIkcWo=) 16: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (hash: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=) 17: Xh_nIIhlIVq5rKHv1IjCncovJ4o.roa (hash: mtjAhRm8JR66Itk63UwTKx7Mn6caonQ7wqNPv8b3naM=) 18: Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa (hash: i1clgB9jbW2qji3o2GMb+nasxKoNVYdhbKHCWdPQ0Z8=) 19: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=) 20: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=) 21: bNj9mnPiOJgAqcXA8klOr3r289U.roa (hash: b/bj+v4f/YBSJP7p1ofRiHYABXW3D1c5l42Ks9G5VFQ=) 22: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=) 23: h4lmHtZmc-e8tzOKOXHK6w0H9vo.roa (hash: RNI+7dl19mmJ+6ZDRRtmz8YHjJqtvZ2Bexxp/E4LF/Y=) 24: i29Dnh2kXGiv2yqK76-7vmxUqHk.roa (hash: vCaTmwFWC8Tk0O4g86hzSYP6Qj1wQnNBboWlzkJop3s=) 25: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (hash: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=) 26: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=) 27: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=) 28: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=) 29: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (hash: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=) 30: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=) 31: sFdyS1bi1kemFkcxeMjXf0LBCAw.roa (hash: cN6Apu7mP0IoUWBpLM0zoLwxlQm/BceMlQYohd1ovJY=) 32: v9aN8eUHGc2cFY92JIet8EBdxvQ.roa (hash: ASnHZNq0YfQo/Dbs5rOcZaP8TTutwFdbeAepCV67R0g=) 33: vxkaE8HcRmctvzsbnfwU1QZslMg.roa (hash: T9eJSoy6nMWNYhwlXC0AyroCOIMJaYxhMB2BLD6Lg40=) 34: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: 8RVm7nqJTWw4GFhV95rGTwyEECeBFCK8yYMS9/0mz3o=) 35: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=) 36: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:39:ab:db:1f:20:48:e0:65:ee:92:87:cd:17:f0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Aug 23 00:00:05 2025 GMT Not After : Aug 24 00:00:05 2025 GMT Subject: CN=786aa7ac0c2707cb2962103342fbf45e5810fcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:a7:1c:a2:dd:ca:69:ff:ab:9b:f8:a0:5a: e2:ae:a2:f2:73:3b:47:86:37:1e:04:bd:12:f4:91: ac:15:e5:c2:ab:b5:70:c8:50:5f:8c:46:04:d6:a0: f8:86:04:c6:66:89:05:cf:13:54:cd:67:39:80:88: 56:3d:8a:32:54:c9:13:68:25:c0:53:12:2a:61:51: 71:0d:d7:e8:ab:91:06:f7:06:4a:ea:97:df:6b:db: b0:ce:a8:cd:02:c8:42:8f:c2:6d:fe:8d:01:76:14: 2e:a6:3d:3d:3d:e2:ba:6e:af:a9:91:67:b2:0d:62: 10:b4:65:c8:92:a6:78:95:f8:8e:9d:cd:df:74:f2: 53:96:59:dc:fb:73:21:2f:f6:6a:8c:d4:2d:16:14: 84:46:74:19:79:3e:57:2d:b4:c5:2c:86:0d:65:48: 47:57:11:e8:27:c1:fd:8c:8e:c8:b3:bf:b7:03:81: 6d:5f:ea:84:28:f1:3d:3f:48:64:7d:1e:ca:c2:02: ef:84:09:f7:cf:f2:d6:63:2c:8c:95:76:fc:af:b4: ea:2f:bd:1a:46:a5:54:b9:17:ba:ef:ee:23:81:eb: c7:17:87:9d:5f:7f:58:4d:8b:f2:a5:dc:74:6d:d0: 55:de:60:c8:19:47:ca:05:ad:32:9f:b5:03:60:e8: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6A:A7:AC:0C:27:07:CB:29:62:10:33:42:FB:F4:5E:58:10:FC:F5 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:39:e9:9e:94:5f:ea:78:f8:52:19:4a:19:57:d7:b6:c2:8f: 36:c5:dc:df:42:52:84:d2:df:91:f9:00:91:46:41:25:09:64: af:f5:c6:a5:74:d4:9c:01:26:0e:ef:b1:d2:7b:e1:37:50:b0: bd:10:30:4e:55:bd:5b:2a:da:9a:56:b2:27:50:89:3d:5a:9a: 93:76:20:35:7d:52:36:69:db:1e:ed:8a:c2:09:e8:3a:9a:3b: 02:62:f2:df:6c:a2:96:23:75:9e:1a:ec:1e:3d:84:74:65:24: ec:8e:51:50:ee:cb:ac:85:83:96:1a:c2:13:ce:09:b5:cc:7c: 55:69:e0:0d:c0:1e:51:f8:0d:d8:d2:00:09:99:5a:f0:e6:61: 10:42:7e:04:c2:46:25:ef:23:e2:d2:bb:77:0e:1d:fd:67:55: 99:b3:dc:3c:63:02:89:89:c9:cd:b4:fb:38:da:b8:4f:ed:68: 81:67:df:b0:cb:78:2a:ba:be:7f:14:98:9b:e4:e6:c9:83:9e: 04:cf:42:03:ca:bb:21:e8:6e:8f:6e:08:1c:1d:6c:72:5e:93: a3:29:07:61:66:d3:cd:88:ff:45:b2:cc:f2:5d:d2:40:3a:b8: 11:16:d0:fd:ba:44:99:d3:63:8b:5a:92:67:a4:e7:c6:8e:1a: f5:e6:68:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUOavbHyBI4GXukofNF/AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUwODIzMDAwMDA1WhcNMjUwODI0MDAwMDA1WjAzMTEwLwYDVQQD Eyg3ODZhYTdhYzBjMjcwN2NiMjk2MjEwMzM0MmZiZjQ1ZTU4MTBmY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB2nHKLdymn/q5v4oFrirqLycztH hjceBL0S9JGsFeXCq7VwyFBfjEYE1qD4hgTGZokFzxNUzWc5gIhWPYoyVMkTaCXA UxIqYVFxDdfoq5EG9wZK6pffa9uwzqjNAshCj8Jt/o0BdhQupj09PeK6bq+pkWey DWIQtGXIkqZ4lfiOnc3fdPJTllnc+3MhL/ZqjNQtFhSERnQZeT5XLbTFLIYNZUhH VxHoJ8H9jI7Is7+3A4FtX+qEKPE9P0hkfR7KwgLvhAn3z/LWYyyMlXb8r7TqL70a RqVUuRe67+4jgevHF4edX39YTYvypdx0bdBV3mDIGUfKBa0yn7UDYOjwMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhqp6wMJwfLKWIQM0L79F5YEPz1MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTnpnpRf 6nj4UhlKGVfXtsKPNsXc30JShNLfkfkAkUZBJQlkr/XGpXTUnAEmDu+x0nvhN1Cw vRAwTlW9WyramlayJ1CJPVqak3YgNX1SNmnbHu2KwgnoOpo7AmLy32yiliN1nhrs Hj2EdGUk7I5RUO7LrIWDlhrCE84Jtcx8VWngDcAeUfgN2NIACZla8OZhEEJ+BMJG Je8j4tK7dw4d/WdVmbPcPGMCiYnJzbT7ONq4T+1ogWffsMt4Krq+fxSYm+TmyYOe BM9CA8q7Iehuj24IHB1scl6ToykHYWbTzYj/RbLM8l3SQDq4ERbQ/bpEmdNji1qS Z6Tnxo4a9eZosQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:10 2025 by rpki-client