$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: KfOS6/RzWwGwMpfpySwCDfGGHwn3mWiKtRjhfkBYvW4= Subject key identifier: BB:1D:95:C8:BB:2C:19:97:D5:52:76:EF:48:1B:7D:3B:57:A0:0D:D5 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0197B6A115925E9596D5B89F26D1692FDAF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 15D3 Signing time: Sat 28 Jun 2025 13:01:39 +0000 Manifest this update: Sat 28 Jun 2025 13:01:39 +0000 Manifest next update: Sun 29 Jun 2025 13:01:39 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: ZCF/HVEKg0vCx9pphFXAsT7bg65PntwjHQu8o8Ciu0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:15:92:5e:95:96:d5:b8:9f:26:d1:69:2f:da:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jun 28 13:01:39 2025 GMT Not After : Jun 29 13:01:39 2025 GMT Subject: CN=bb1d95c8bb2c1997d55276ef481b7d3b57a00dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:c1:ea:db:2c:a8:83:99:4c:a6:61:89:a9: 5b:d0:0c:fc:22:1e:fd:51:30:d9:db:ed:d0:b5:f8: 6f:7c:47:51:1b:f3:ba:b2:9f:f0:e3:f5:be:71:74: 0d:03:27:8d:a9:b9:be:7b:fc:cb:c6:b2:26:28:87: 2e:a9:de:1d:07:3b:58:93:5c:fe:a2:37:f5:9b:dd: b1:33:81:7f:24:0c:62:92:63:fe:64:98:b8:c4:59: a1:98:2c:c7:c7:9b:4c:b7:2c:6f:de:d0:7c:32:06: 46:5f:ea:96:a6:f7:65:e7:5b:49:e4:df:1e:c8:31: be:ad:14:91:f9:10:3a:57:ce:7b:8e:50:a4:73:2c: aa:03:d1:b0:bf:29:61:8b:fe:ab:8d:d1:f8:46:a9: 1d:f0:3d:d9:80:47:cd:ff:96:5f:2d:43:b4:cd:e9: fc:50:56:de:c5:71:a1:be:a8:02:52:59:fe:66:d4: 37:71:de:09:4f:94:48:9d:82:fe:bb:88:10:96:17: 35:f6:c7:27:f8:b3:ff:56:0f:19:e6:cd:7f:b9:e1: 2a:27:be:d7:60:7e:7f:a1:c3:b9:2f:cf:80:48:6f: 3e:e1:9e:46:32:43:80:d1:de:e8:8b:dc:32:f4:33: fa:36:b4:46:08:92:fc:e2:5d:6e:d9:87:a3:9a:1a: 65:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:95:C8:BB:2C:19:97:D5:52:76:EF:48:1B:7D:3B:57:A0:0D:D5 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:fe:4e:b0:11:ae:09:2c:75:ea:c4:8e:f1:60:af:67:12: 7c:3f:d9:da:62:37:4c:35:e0:f1:3a:dd:44:fb:e2:53:5e:41: ce:05:e5:86:f6:dd:5f:2a:a3:d1:48:79:72:b2:4a:f1:9d:98: 8b:8b:0b:2f:0e:7e:d6:ae:67:ad:5b:7f:73:e0:59:be:bb:2f: 3d:f6:f7:f7:13:57:54:2c:f3:90:45:d6:7a:49:6a:80:f2:7d: 65:6e:4a:8b:0d:69:03:88:30:77:b9:79:a7:72:d1:50:01:7e: ef:8f:c2:f0:bb:d9:bb:54:2f:c2:3a:3b:1a:8d:6a:a9:ad:dc: 85:a6:ad:68:21:b9:5f:c3:69:b6:90:64:7c:97:e8:13:b9:bb: d9:e8:49:57:7e:3a:b9:8b:4e:30:e2:04:b5:c1:cf:14:db:2a: 81:b0:72:da:12:b9:96:26:dc:e6:c7:9d:29:c4:3a:dd:e3:a8: df:1f:1a:37:31:75:e0:54:b6:ef:4a:94:28:ef:00:40:ec:39: 86:b3:85:05:c1:7c:ce:84:47:40:42:50:5b:a1:38:e5:ad:ca: b9:17:f3:d1:04:3c:43:2a:a1:0c:2b:f7:08:4f:04:db:52:bb: 93:34:5a:21:9a:33:b7:3a:6c:eb:22:50:bb:90:39:43:d3:10: 34:52:1f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oRWSXpWW1bifJtFpL9r2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwNjI4MTMwMTM5WhcNMjUwNjI5MTMwMTM5WjAzMTEwLwYDVQQD EyhiYjFkOTVjOGJiMmMxOTk3ZDU1Mjc2ZWY0ODFiN2QzYjU3YTAwZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK7B6tssqIOZTKZhialb0Az8Ih79 UTDZ2+3QtfhvfEdRG/O6sp/w4/W+cXQNAyeNqbm+e/zLxrImKIcuqd4dBztYk1z+ ojf1m92xM4F/JAxikmP+ZJi4xFmhmCzHx5tMtyxv3tB8MgZGX+qWpvdl51tJ5N8e yDG+rRSR+RA6V857jlCkcyyqA9Gwvylhi/6rjdH4Rqkd8D3ZgEfN/5ZfLUO0zen8 UFbexXGhvqgCUln+ZtQ3cd4JT5RInYL+u4gQlhc19scn+LP/Vg8Z5s1/ueEqJ77X YH5/ocO5L8+ASG8+4Z5GMkOA0d7oi9wy9DP6NrRGCJL84l1u2YejmhplAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsdlci7LBmX1VJ270gbfTtXoA3VMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAML+TrAR rgksderEjvFgr2cSfD/Z2mI3TDXg8TrdRPviU15BzgXlhvbdXyqj0Uh5crJK8Z2Y i4sLLw5+1q5nrVt/c+BZvrsvPfb39xNXVCzzkEXWeklqgPJ9ZW5Kiw1pA4gwd7l5 p3LRUAF+74/C8LvZu1Qvwjo7Go1qqa3chaataCG5X8NptpBkfJfoE7m72ehJV346 uYtOMOIEtcHPFNsqgbBy2hK5libc5sedKcQ63eOo3x8aNzF14FS270qUKO8AQOw5 hrOFBcF8zoRHQEJQW6E45a3KuRfz0QQ8QyqhDCv3CE8E21K7kzRaIZoztzps6yJQ u5A5Q9MQNFIfuQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:56:42 2025 by rpki-client