$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: 3qhyAtQBH73Du6+kvHUEW7Mz3pNLeLLYKvhDiTnt5No= Subject key identifier: F1:5B:7C:EF:82:6A:3F:42:55:DC:77:82:86:AF:9B:8C:95:4B:86:C9 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 0197B820E5E9FAFD3150B55805E1DECA4B1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 12DE Signing time: Sat 28 Jun 2025 20:00:53 +0000 Manifest this update: Sat 28 Jun 2025 20:00:53 +0000 Manifest next update: Sun 29 Jun 2025 20:00:53 +0000 Files and hashes: 1: 7gLBp0seupB3smWAi_oF18iZRGE.roa (hash: uNlzGqHQooJbP3MKzJQmy02N65RCgyqmWWJhnnmBz3k=) 2: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 3: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 8: qxv97i_u-oPbXERls-AuUJ-ehN0.roa (hash: 3CpmmFrGAOZMYO7PvcVF3IlSxwWNYbKDyVw/pp4ZIZ0=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: nvFUiiOy6+d/w9cNsR174G6pExt7kKjIiDT4S2IchZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:20:e5:e9:fa:fd:31:50:b5:58:05:e1:de:ca:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jun 28 20:00:53 2025 GMT Not After : Jun 29 20:00:53 2025 GMT Subject: CN=f15b7cef826a3f4255dc778286af9b8c954b86c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:0e:1c:0b:5d:8a:2b:30:15:04:2d:20:9a: 16:04:03:ae:bb:0f:5b:af:2e:59:13:ad:43:44:bf: ec:b4:9d:a8:cd:3c:0f:ad:1f:62:3c:88:9a:78:fa: a7:7c:2e:f9:e4:d2:7d:e4:de:74:17:b4:ee:37:24: 27:4c:6c:31:50:4d:d5:7b:cc:31:23:48:5e:66:ae: 18:83:d0:07:e9:29:bc:f5:fa:92:7d:d1:07:86:46: 1a:24:f7:a1:2e:8f:35:1a:2c:3c:01:90:34:c3:9d: 19:d9:b0:b0:46:f2:c0:07:23:7b:31:1b:41:34:ab: f7:d4:14:a4:bf:90:5c:ff:c3:c0:3c:85:0a:43:5a: 6a:64:27:11:81:50:fc:49:3d:54:81:44:f3:0b:62: 44:33:9d:a9:e6:28:78:25:e4:f8:e4:37:42:50:34: c5:c6:3a:48:56:bf:fe:89:de:71:44:03:73:5d:de: e7:6b:19:ec:3a:0f:02:5a:b5:f8:d2:f2:67:0a:a0: 3f:3f:a2:ee:46:42:68:f4:1e:73:41:4d:0c:34:cf: 2d:b7:01:fb:a5:8d:c3:6d:a2:0b:bf:53:22:03:d7: df:6e:68:eb:da:bd:f7:1a:dc:9f:3a:52:ea:d8:4a: 72:75:1d:67:9b:0f:7f:22:3c:fb:59:b5:12:fb:6d: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5B:7C:EF:82:6A:3F:42:55:DC:77:82:86:AF:9B:8C:95:4B:86:C9 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f6:45:5c:61:63:ba:ad:b1:40:9e:fc:0d:ca:c0:29:2d:30: 67:83:af:60:2d:01:13:84:af:9c:55:91:92:3e:af:22:5c:79: 3a:2d:1f:1f:f0:71:54:37:8e:f5:6d:a3:20:ee:54:7f:63:a1: e6:ba:5c:66:c9:25:5d:3a:50:d8:02:f8:98:0a:df:e4:78:e1: 48:57:e8:14:6b:f6:62:c6:a9:34:bd:e5:cf:37:0c:f1:1b:c8: f5:14:4f:cf:ab:1e:39:93:56:6d:c1:df:ce:6b:8d:5b:f4:54: e7:87:58:94:77:d3:b4:da:62:05:c8:02:bd:65:21:38:46:51: b2:72:2a:c7:e1:b5:d2:e3:a1:f0:c9:75:21:9e:6a:d0:9f:60: 84:11:87:e9:a4:94:49:67:e4:9a:8e:b3:d7:65:07:17:03:87: fc:71:2f:39:72:cb:e9:3a:85:e3:21:95:83:61:00:0e:1f:ba: 0f:fe:16:33:29:9b:63:d2:7e:ce:20:95:11:a8:49:c1:be:da: 2b:ba:06:e2:d0:3d:f0:97:64:b3:d6:e4:0d:11:5a:aa:7d:bc: 6f:4c:5e:3e:7b:c7:3e:49:43:63:c2:4c:5f:db:5c:ca:45:bb: 30:9e:d3:f4:3c:a0:c3:26:95:3d:e0:55:0c:07:8b:07:c9:37: 7d:86:c6:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IOXp+v0xULVYBeHeyksbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUwNjI4MjAwMDUzWhcNMjUwNjI5MjAwMDUzWjAzMTEwLwYDVQQD EyhmMTViN2NlZjgyNmEzZjQyNTVkYzc3ODI4NmFmOWI4Yzk1NGI4NmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxncOHAtdiiswFQQtIJoWBAOuuw9b ry5ZE61DRL/stJ2ozTwPrR9iPIiaePqnfC755NJ95N50F7TuNyQnTGwxUE3Ve8wx I0heZq4Yg9AH6Sm89fqSfdEHhkYaJPehLo81Giw8AZA0w50Z2bCwRvLAByN7MRtB NKv31BSkv5Bc/8PAPIUKQ1pqZCcRgVD8ST1UgUTzC2JEM52p5ih4JeT45DdCUDTF xjpIVr/+id5xRANzXd7naxnsOg8CWrX40vJnCqA/P6LuRkJo9B5zQU0MNM8ttwH7 pY3DbaILv1MiA9ffbmjr2r33GtyfOlLq2EpydR1nmw9/Ijz7WbUS+23E5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFbfO+Caj9CVdx3goavm4yVS4bJMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPZFXGFj uq2xQJ78DcrAKS0wZ4OvYC0BE4SvnFWRkj6vIlx5Oi0fH/BxVDeO9W2jIO5Uf2Oh 5rpcZsklXTpQ2AL4mArf5HjhSFfoFGv2YsapNL3lzzcM8RvI9RRPz6seOZNWbcHf zmuNW/RU54dYlHfTtNpiBcgCvWUhOEZRsnIqx+G10uOh8Ml1IZ5q0J9ghBGH6aSU SWfkmo6z12UHFwOH/HEvOXLL6TqF4yGVg2EADh+6D/4WMymbY9J+ziCVEahJwb7a K7oG4tA98Jdks9bkDRFaqn28b0xePnvHPklDY8JMX9tcykW7MJ7T9DygwyaVPeBV DAeLB8k3fYbGjg== -----END CERTIFICATE-----Generated at Sat Jun 28 22:17:37 2025 by rpki-client