$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: zvT+rhDlPwCJd+6PxJCyr/e4zjSbXBiP/FdOw8vleDw= Subject key identifier: 3E:50:7E:31:AD:CD:12:38:CA:84:37:6A:5C:93:13:01:02:45:B4:1C Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 0197B70F056A7E920655A13E0B40FDE3572B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 151E Signing time: Sat 28 Jun 2025 15:01:44 +0000 Manifest this update: Sat 28 Jun 2025 15:01:44 +0000 Manifest next update: Sun 29 Jun 2025 15:01:44 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: BsYeU7FujT+4V+jeNrgj+gn9YGLJZ+r58RRIgrvpXjM=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0f:05:6a:7e:92:06:55:a1:3e:0b:40:fd:e3:57:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Jun 28 15:01:44 2025 GMT Not After : Jun 29 15:01:44 2025 GMT Subject: CN=3e507e31adcd1238ca84376a5c9313010245b41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:78:b0:bf:43:8e:c4:f6:bb:af:d4:d2:cf: af:4f:4b:8b:b6:ff:f9:4c:d4:9c:7b:69:48:da:80: 2e:84:3e:81:d9:21:d7:5d:4e:05:35:2d:3a:00:95: b3:72:eb:9d:3f:a8:e5:a1:d5:8a:cc:b8:13:5c:5a: bf:6e:bf:42:76:79:eb:3d:cc:39:6b:2e:66:1b:e8: 1d:7c:e0:dd:32:cb:9f:50:dc:bb:ed:c4:ce:98:28: 9f:a6:0d:f5:52:5b:d3:b7:90:29:68:a7:52:fa:79: 6a:09:14:97:be:35:03:72:ea:b8:79:03:88:c4:84: 03:01:85:61:78:1a:d9:d4:a8:f9:24:0e:fb:b1:45: 40:dd:f6:6e:1a:71:69:4c:7d:10:55:f5:f9:6d:c5: d2:81:d2:8e:92:c8:89:c1:73:e8:29:1d:c0:a5:b5: 08:0e:2b:e4:bb:81:a6:da:6a:53:de:c5:6e:a0:0e: 03:47:e6:2f:bb:fd:c4:99:d9:74:54:48:0a:ca:22: 53:48:67:d5:40:e5:29:44:64:00:e2:a4:e9:37:71: a2:d0:0a:fb:a4:44:36:c8:70:8f:50:5f:28:ef:87: 16:7f:d2:34:25:7c:b1:c0:fa:10:fc:45:b5:32:dc: 17:16:3b:9a:96:57:b7:fd:4c:d7:c2:92:21:76:cc: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:50:7E:31:AD:CD:12:38:CA:84:37:6A:5C:93:13:01:02:45:B4:1C X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:c0:2c:85:ff:8f:5a:3d:c5:b0:da:e7:a4:f9:9b:24:07:d5: ae:38:ed:e1:51:d9:69:1b:f1:79:ff:fa:88:51:88:67:4d:f0: dd:eb:0b:8e:7a:0c:27:d5:b6:b3:4e:4a:62:dc:05:db:d7:b5: 8d:15:ae:2f:1b:07:a0:c2:89:1f:7a:40:62:a7:2f:82:82:24: 81:cc:83:a0:1a:1d:9f:86:61:8d:c4:65:5e:ec:14:8b:09:03: d8:65:c5:42:d7:33:1f:f2:b9:a6:c8:62:71:1b:a1:69:76:09: 70:c8:66:97:7c:9c:a9:34:e4:47:19:56:2f:42:3c:89:02:28: 84:b3:d3:fe:3e:7a:97:63:cf:73:2d:04:8f:2b:7f:39:ec:71: ec:1f:02:92:17:3e:07:5c:51:ad:25:d8:51:76:30:9e:7c:a5: c6:8d:6a:c5:3e:fd:09:78:c3:63:6f:f5:50:5e:af:ae:d0:2e: 89:37:3f:2a:f9:f0:14:48:da:e6:72:25:16:f5:67:30:9a:0e: 5b:a2:8d:88:3b:90:05:e5:22:c6:4e:a3:95:cb:22:df:a5:2f: 2e:be:0a:99:d5:c9:cf:83:6a:ab:d3:df:59:d5:c9:a6:ab:ef: 5b:ce:02:4e:c8:13:f5:be:ef:2f:c1:80:e8:7d:09:01:b8:ab: 8e:5a:f1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DwVqfpIGVaE+C0D941crMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUwNjI4MTUwMTQ0WhcNMjUwNjI5MTUwMTQ0WjAzMTEwLwYDVQQD EygzZTUwN2UzMWFkY2QxMjM4Y2E4NDM3NmE1YzkzMTMwMTAyNDViNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aB4sL9DjsT2u6/U0s+vT0uLtv/5 TNSce2lI2oAuhD6B2SHXXU4FNS06AJWzcuudP6jlodWKzLgTXFq/br9CdnnrPcw5 ay5mG+gdfODdMsufUNy77cTOmCifpg31UlvTt5ApaKdS+nlqCRSXvjUDcuq4eQOI xIQDAYVheBrZ1Kj5JA77sUVA3fZuGnFpTH0QVfX5bcXSgdKOksiJwXPoKR3ApbUI Divku4Gm2mpT3sVuoA4DR+Yvu/3Emdl0VEgKyiJTSGfVQOUpRGQA4qTpN3Gi0Ar7 pEQ2yHCPUF8o74cWf9I0JXyxwPoQ/EW1MtwXFjualle3/UzXwpIhdszLFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5QfjGtzRI4yoQ3alyTEwECRbQcMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3sAshf+P Wj3FsNrnpPmbJAfVrjjt4VHZaRvxef/6iFGIZ03w3esLjnoMJ9W2s05KYtwF29e1 jRWuLxsHoMKJH3pAYqcvgoIkgcyDoBodn4ZhjcRlXuwUiwkD2GXFQtczH/K5pshi cRuhaXYJcMhml3ycqTTkRxlWL0I8iQIohLPT/j56l2PPcy0Ejyt/Oexx7B8Ckhc+ B1xRrSXYUXYwnnylxo1qxT79CXjDY2/1UF6vrtAuiTc/KvnwFEja5nIlFvVnMJoO W6KNiDuQBeUixk6jlcsi36UvLr4KmdXJz4Nqq9PfWdXJpqvvW84CTsgT9b7vL8GA 6H0JAbirjlrxmQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:59:19 2025 by rpki-client