$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: P59r0R5593hfo0ULgdA/pgu6lGBHc9U96RC2tnyZqTY= Subject key identifier: 86:14:06:A0:FB:F9:09:C7:7F:37:D5:1D:7D:21:E5:02:85:70:78:35 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 0198D629833A0D73BCB7953816D246F7A8B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1669 Signing time: Sat 23 Aug 2025 09:01:41 +0000 Manifest this update: Sat 23 Aug 2025 09:01:41 +0000 Manifest next update: Sun 24 Aug 2025 09:01:41 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: QaN4zU0tIg8vsJnbfYaE1xu5cFM.roa (hash: q3GjPCS6b+BePutZrZ4n2T04dPhFe06YI9wao5GM50s=) 11: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 12: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 13: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 14: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 15: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: vuLPk/8I0KHEzxNuH2tbh0Gb8iyuMbQdJ1HD15NiYvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:83:3a:0d:73:bc:b7:95:38:16:d2:46:f7:a8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Aug 23 09:01:41 2025 GMT Not After : Aug 24 09:01:41 2025 GMT Subject: CN=861406a0fbf909c77f37d51d7d21e50285707835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:e9:4f:03:62:ac:2b:14:53:69:75:ea:ce: 85:60:26:62:e7:e3:0e:5b:8d:de:55:89:10:b4:f4: c7:48:d8:ea:10:d8:b3:65:7a:09:cf:5e:de:7b:d6: fb:a2:6a:51:f2:16:23:3c:67:ba:97:7a:41:74:92: 1b:c3:7f:1d:59:7d:d0:dc:10:14:4a:5d:46:52:9d: 4d:f1:be:8a:8f:84:17:66:7f:96:57:3a:42:93:37: 2c:a6:38:9c:4c:10:4d:43:ef:01:54:f1:74:49:55: a5:08:ce:6a:44:67:ae:be:65:1f:33:85:dd:fd:2d: a3:24:e3:1e:1b:c9:18:7c:c5:8b:09:e3:94:e7:19: f4:a5:31:ca:b1:66:77:bb:47:cd:11:42:a4:2e:37: d5:f4:f3:3c:71:59:f8:48:d6:6d:50:a1:54:52:73: b5:a8:eb:bf:b2:08:dc:55:c2:75:2b:bd:f3:92:26: 4d:dc:a1:e9:1d:e7:fb:dc:dd:fd:5d:97:70:95:a6: 79:06:ba:63:b1:26:ff:a5:6b:c1:5f:8c:18:b7:b8: 08:31:83:7e:57:f5:f6:f7:b1:66:15:bc:83:b8:d2: 22:99:ca:36:fd:58:cf:89:4f:5c:7a:6d:55:72:9f: 46:46:27:8c:9e:97:c9:94:67:bb:7b:96:a7:97:d2: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:14:06:A0:FB:F9:09:C7:7F:37:D5:1D:7D:21:E5:02:85:70:78:35 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:91:f6:13:15:ea:bf:be:be:cb:a2:1d:cf:35:c9:34:6a: 9b:54:4e:d2:eb:39:61:84:d0:dc:83:73:b6:0b:e6:71:6d:fc: fe:82:a7:c7:9e:f3:e7:5b:e1:3e:72:04:82:5f:78:c9:83:d1: da:a1:63:7c:6c:72:9d:4f:03:d9:ca:42:55:e9:dc:10:2a:f7: 8a:22:61:49:a0:9c:64:60:9a:48:96:6b:6a:68:0f:4c:a6:bf: 2a:71:2c:87:28:e3:3f:38:8c:13:00:30:53:7e:5d:55:32:93: c5:e8:8c:b8:44:4f:ab:ff:b0:6b:24:53:e2:6e:b7:76:e2:2a: 4e:3c:2f:70:c8:36:d3:3e:c2:8d:7c:10:98:3b:6e:27:19:1c: a5:b9:43:71:9c:40:8b:ee:27:a0:53:1b:60:67:9b:db:d0:8d: 49:fd:03:ce:43:3b:35:1d:de:0d:ae:55:de:f4:2d:ea:26:c0: 61:61:5c:7d:74:7e:00:ec:74:79:53:93:0d:01:5a:31:35:89: bf:62:f3:ac:e1:f4:68:d2:8c:63:08:43:98:52:46:21:d9:e0: a6:cc:8a:8a:71:73:54:ef:ac:3d:04:48:f2:cb:fd:4b:42:d8: 6a:00:c7:9a:81:ca:d7:92:65:2d:2f:8d:37:81:98:be:1f:1b: f1:0d:12:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYM6DXO8t5U4FtJG96i1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwODIzMDkwMTQxWhcNMjUwODI0MDkwMTQxWjAzMTEwLwYDVQQD Eyg4NjE0MDZhMGZiZjkwOWM3N2YzN2Q1MWQ3ZDIxZTUwMjg1NzA3ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNDpTwNirCsUU2l16s6FYCZi5+MO W43eVYkQtPTHSNjqENizZXoJz17ee9b7ompR8hYjPGe6l3pBdJIbw38dWX3Q3BAU Sl1GUp1N8b6Kj4QXZn+WVzpCkzcspjicTBBNQ+8BVPF0SVWlCM5qRGeuvmUfM4Xd /S2jJOMeG8kYfMWLCeOU5xn0pTHKsWZ3u0fNEUKkLjfV9PM8cVn4SNZtUKFUUnO1 qOu/sgjcVcJ1K73zkiZN3KHpHef73N39XZdwlaZ5BrpjsSb/pWvBX4wYt7gIMYN+ V/X297FmFbyDuNIimco2/VjPiU9cem1Vcp9GRieMnpfJlGe7e5anl9JYOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYUBqD7+QnHfzfVHX0h5QKFcHg1MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKiR9hMV 6r++vsuiHc81yTRqm1RO0us5YYTQ3INztgvmcW38/oKnx57z51vhPnIEgl94yYPR 2qFjfGxynU8D2cpCVencECr3iiJhSaCcZGCaSJZramgPTKa/KnEshyjjPziMEwAw U35dVTKTxeiMuERPq/+wayRT4m63duIqTjwvcMg20z7CjXwQmDtuJxkcpblDcZxA i+4noFMbYGeb29CNSf0DzkM7NR3eDa5V3vQt6ibAYWFcfXR+AOx0eVOTDQFaMTWJ v2LzrOH0aNKMYwhDmFJGIdngpsyKinFzVO+sPQRI8sv9S0LYagDHmoHK15JlLS+N N4GYvh8b8Q0SVw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:24 2025 by rpki-client