$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json) Hash identifier: xgapR+ZEtxAaOFQTFabTH5XyJC6wzy1oSf1AJzHSvo4= Subject key identifier: 14:D3:3C:3A:7F:20:9D:6C:4B:A1:FA:B7:3C:A0:CE:72:C2:CB:62:07 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 0197CB39B810A3326CB96FEF82C7A566A0F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft Manifest number: 16F2 Signing time: Wed 02 Jul 2025 13:00:46 +0000 Manifest this update: Wed 02 Jul 2025 13:00:46 +0000 Manifest next update: Thu 03 Jul 2025 13:00:46 +0000 Files and hashes: 1: 0_FDf3DlAABqqJiRg1vq-Vce1rM.roa (hash: WZVVSVX8Nx5izNsMwSh1W9KwxXyKF5fjEDNlSQHa/b4=) 2: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=) 3: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=) 4: 6oSuHeeQ_sWorxh6r0_5wvvFQgM.roa (hash: 5gk4fc1M3LnlB31mm0S5J9v36W8hpfovoTd5KvJf5f8=) 5: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=) 6: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=) 7: CGcxtmWeCpvy-hws3eRHzilM_U8.roa (hash: jBVl4vxGiFiecF4Ya3SdDsWeuPXdCCfCm0o+ggirOFY=) 8: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=) 9: Do610frDxofc_GIwlM0_-BIBi58.roa (hash: 2fSLFdraUb7r/St9XyxC3w/gDUXK6jtGxtd4pLLXBT4=) 10: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=) 11: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=) 12: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=) 13: H5fCqBpm_f7hXygoIa8xLisQf4o.roa (hash: NKYGYeat86NvKM0eWJwmhRu9GEV6wXY2dnHdfl8Rsog=) 14: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=) 15: Ojh3JtseG6wODFn31ipqC0n9fs4.roa (hash: V3AD5XF03SRAPzSkwGk/OwLxtTWoSykuDscr75xOfT4=) 16: RX7l8BxO-eKobaPUKlWDX3pgmwk.roa (hash: nHUjRFMgvlJlNqFCQ216ZDqgAbi+pIcXAJSF8ZIkcWo=) 17: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (hash: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=) 18: Xh_nIIhlIVq5rKHv1IjCncovJ4o.roa (hash: mtjAhRm8JR66Itk63UwTKx7Mn6caonQ7wqNPv8b3naM=) 19: YncmmCVbHfc8yNpLIWm9uOVXAt4.roa (hash: qO2gIQaee1JIm40R1DGdhcPp0ebkFcTPiyGLFZw8p7A=) 20: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=) 21: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=) 22: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=) 23: gpZNbKCPqq5Lf_i3zYCl0zgzJaI.roa (hash: jArVzj+o9obydS84VxQoY0cNnD9X7oy7c/gnENfE4s8=) 24: h4lmHtZmc-e8tzOKOXHK6w0H9vo.roa (hash: RNI+7dl19mmJ+6ZDRRtmz8YHjJqtvZ2Bexxp/E4LF/Y=) 25: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (hash: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=) 26: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=) 27: jD20aZmi_BXkx_t4OhIGj8PD8Xs.roa (hash: HTlOKXfj+hdlSIyPVlb3We94XddbrwPK92+WGXKz8K0=) 28: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=) 29: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=) 30: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (hash: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=) 31: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=) 32: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: 1cu7M3r2MVdEfo2GGDwU1WGCPTr4wNewDJ0TKqGn94U=) 33: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=) 34: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cb:39:b8:10:a3:32:6c:b9:6f:ef:82:c7:a5:66:a0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jul 2 13:00:46 2025 GMT Not After : Jul 3 13:00:46 2025 GMT Subject: CN=14d33c3a7f209d6c4ba1fab73ca0ce72c2cb6207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:23:d2:15:4b:7d:55:cd:53:75:b0:d3:d1: a1:05:f7:4d:44:e8:fe:6b:cc:72:b7:2a:29:99:b7: 8a:13:bb:10:b7:25:f9:f9:d1:09:83:29:00:28:3d: f9:d1:fe:59:c6:ae:de:22:f1:76:15:91:a9:21:80: b8:2a:2a:16:12:d2:98:cf:99:60:99:4f:aa:a4:7a: 21:ca:0d:b7:a4:30:db:e3:5b:c0:f2:3d:83:0b:db: 72:36:5d:94:96:96:37:8e:a7:f8:c9:fa:3b:48:d2: 36:70:e9:20:6f:cc:b0:59:f2:a7:af:21:86:5c:0d: 6b:56:38:62:ca:53:93:ab:95:18:33:9d:68:c3:fa: 61:b7:7e:42:47:41:48:7b:14:84:e5:46:11:00:f0: 64:99:7c:94:c9:76:34:5a:5d:7f:b0:6f:99:c1:da: f3:23:14:ab:10:a0:a7:1d:2d:11:b7:4a:8f:ef:97: 77:42:9d:2f:30:ae:9b:31:0d:ec:78:49:18:74:c2: 4a:7b:4f:da:f3:d6:d9:07:aa:25:e8:70:f2:7b:2b: 77:b6:af:d6:ec:d3:1f:90:c6:93:e7:2a:d6:87:44: a4:fc:be:ff:b6:8d:6b:e6:01:d6:ae:65:ef:88:26: cd:41:cb:05:f8:8b:ef:0b:ae:c3:1b:46:6c:bf:40: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D3:3C:3A:7F:20:9D:6C:4B:A1:FA:B7:3C:A0:CE:72:C2:CB:62:07 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:77:e9:6f:c7:a9:d4:73:15:4c:a3:11:0f:a9:6f:59:92:23: 78:0e:9f:23:6a:57:e6:6f:6a:de:67:ed:6e:78:28:5c:3e:cb: 93:23:71:5f:bd:7d:ef:2c:65:c2:e6:bc:69:1a:f0:7a:23:a0: ed:e5:b2:33:b3:74:6f:e1:66:ef:be:4d:fd:0d:77:b4:0b:d0: 3b:10:47:85:c6:f4:d6:56:d2:ac:cc:2f:f6:7d:d9:66:a6:b8: ac:5a:54:1c:12:80:17:23:08:fd:7e:a0:38:0c:7e:96:8c:82: ea:81:b3:53:7e:45:3f:4f:55:35:6c:88:37:2d:49:bc:7b:66: 42:23:74:11:ee:eb:19:a7:5e:d4:61:3c:38:09:b4:66:65:3e: e9:64:81:d8:65:03:07:12:a3:e9:8e:d1:69:48:f5:f9:d5:ff: 91:c8:6a:2a:5e:f6:c2:e1:7b:d2:ba:8f:9c:5a:f5:ea:cf:79: 9d:26:2b:17:e1:92:da:35:29:40:f0:fe:e5:e5:c8:dd:4e:96: 1f:80:f1:22:d5:49:27:01:23:70:62:56:8a:32:34:0e:90:8f: c3:8d:fa:2b:52:8a:2f:4d:3b:2c:f0:6b:4a:8f:e3:10:2c:a0: 05:4b:59:92:f3:3e:c3:24:07:cc:06:e6:56:d8:6d:bf:0e:56: 33:51:00:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfLObgQozJsuW/vgselZqD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUwNzAyMTMwMDQ2WhcNMjUwNzAzMTMwMDQ2WjAzMTEwLwYDVQQD EygxNGQzM2MzYTdmMjA5ZDZjNGJhMWZhYjczY2EwY2U3MmMyY2I2MjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V8j0hVLfVXNU3Ww09GhBfdNROj+ a8xytyopmbeKE7sQtyX5+dEJgykAKD350f5Zxq7eIvF2FZGpIYC4KioWEtKYz5lg mU+qpHohyg23pDDb41vA8j2DC9tyNl2UlpY3jqf4yfo7SNI2cOkgb8ywWfKnryGG XA1rVjhiylOTq5UYM51ow/pht35CR0FIexSE5UYRAPBkmXyUyXY0Wl1/sG+Zwdrz IxSrEKCnHS0Rt0qP75d3Qp0vMK6bMQ3seEkYdMJKe0/a89bZB6ol6HDyeyt3tq/W 7NMfkMaT5yrWh0Sk/L7/to1r5gHWrmXviCbNQcsF+IvvC67DG0Zsv0C6JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTTPDp/IJ1sS6H6tzygznLCy2IHMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3fpb8ep 1HMVTKMRD6lvWZIjeA6fI2pX5m9q3mftbngoXD7LkyNxX7197yxlwua8aRrweiOg 7eWyM7N0b+Fm775N/Q13tAvQOxBHhcb01lbSrMwv9n3ZZqa4rFpUHBKAFyMI/X6g OAx+loyC6oGzU35FP09VNWyINy1JvHtmQiN0Ee7rGade1GE8OAm0ZmU+6WSB2GUD BxKj6Y7RaUj1+dX/kchqKl72wuF70rqPnFr16s95nSYrF+GS2jUpQPD+5eXI3U6W H4DxItVJJwEjcGJWijI0DpCPw436K1KKL007LPBrSo/jECygBUtZkvM+wyQHzAbm Vthtvw5WM1EANg== -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:13 2025 by rpki-client