$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: KYnkg4LKlQe7Fbsa5o87LlFh2PNQDm31pO8LOnWpOIE= Subject key identifier: 63:8B:9B:1A:9B:F3:ED:DB:B4:81:41:A6:C4:6D:FB:84:E1:28:90:07 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 0198D54E05485A2433E33E2F9F423337EA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 15B4 Signing time: Sat 23 Aug 2025 05:01:56 +0000 Manifest this update: Sat 23 Aug 2025 05:01:56 +0000 Manifest next update: Sun 24 Aug 2025 05:01:56 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 4: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 5: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: mZ6DwhhEzdvsFu1ATFVqHskH4KMZYvvTZYa00GIcOcE=) 6: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 7: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 8: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 9: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 10: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 11: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:05:48:5a:24:33:e3:3e:2f:9f:42:33:37:ea:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Aug 23 05:01:56 2025 GMT Not After : Aug 24 05:01:56 2025 GMT Subject: CN=638b9b1a9bf3eddbb48141a6c46dfb84e1289007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:19:8d:cb:e9:6e:66:01:21:83:e6:b8:05:9b: 16:bb:e5:53:eb:41:c2:ce:25:24:01:e9:ba:3e:b7: 9f:2e:6d:30:a2:c9:56:36:f4:1d:84:67:2b:42:21: fe:02:4f:7e:ff:1e:06:a7:6c:10:18:b6:71:15:40: 07:6f:c4:d1:16:e3:52:0f:0e:a3:58:d5:69:b7:cc: 9e:d6:e0:e6:68:9c:c2:f6:49:04:f0:e1:ce:5f:09: 8f:44:48:44:55:a2:78:8f:6a:73:0b:75:c0:7e:97: 71:be:77:95:ac:a7:c7:0b:52:1f:93:a7:b3:4d:69: 99:f1:ad:e7:79:97:b0:1b:3d:89:42:75:9b:99:84: c5:ad:cc:2b:b1:98:06:54:21:99:e0:26:5b:eb:a0: e6:23:4e:b6:0c:48:fa:03:39:5b:e1:2b:64:1c:75: ae:05:45:18:7e:a8:30:3d:0b:09:4f:e7:7c:97:a2: 9e:06:3f:b7:02:53:87:27:98:d4:06:2f:f9:5c:5c: f9:a3:ec:d5:26:ab:b5:bd:17:34:71:10:30:78:89: 27:2a:72:26:cd:10:e0:dd:a7:fe:96:41:51:fd:a1: c9:40:82:44:93:df:bf:e8:a7:5e:ed:c5:39:87:e6: b7:49:e5:fa:00:82:7d:1b:92:8c:9b:0b:7f:e8:55: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:9B:1A:9B:F3:ED:DB:B4:81:41:A6:C4:6D:FB:84:E1:28:90:07 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:de:85:d6:eb:75:d5:89:8c:70:75:cc:3a:54:3d:83:04:b4: ac:e1:87:af:f6:43:73:75:04:b9:c7:50:f6:62:bd:59:a5:a9: dc:32:14:2b:b3:bd:72:28:1a:95:d2:2a:64:2f:63:75:ad:cb: 38:00:ce:2e:84:8e:44:5f:f2:9c:1b:28:75:76:d8:59:d9:8d: 03:42:95:19:54:69:ab:85:85:fd:66:cc:82:4f:22:55:7a:fc: 23:7e:ae:ff:7d:84:1f:65:52:89:1c:a4:02:d9:24:8c:a7:93: 21:9d:2f:9d:56:ab:3b:d5:23:ef:09:0e:c7:e1:58:a7:c2:6d: 1d:10:d1:52:43:e6:a6:b7:5f:ae:8e:ff:88:ae:01:e0:3e:e1: da:76:36:62:a5:ee:4d:26:5a:f2:d0:70:a5:aa:d2:bd:0f:0f: 24:7c:79:e1:09:3e:46:b3:07:a3:71:87:af:fc:42:a1:3d:97: e7:72:c4:bb:c8:f2:0f:5e:e6:6c:b8:f4:c8:db:26:31:d7:f8: 26:58:c1:24:07:46:87:a6:d0:02:e5:4d:65:d8:c9:b1:ca:f6: 35:9e:33:e9:2b:dc:ae:03:ca:e7:6e:65:50:8c:8e:b2:63:6d: d7:03:fb:a2:f6:2d:44:6a:02:63:8c:9f:54:3d:91:2f:66:06: 6d:02:c9:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTgVIWiQz4z4vn0IzN+oCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUwODIzMDUwMTU2WhcNMjUwODI0MDUwMTU2WjAzMTEwLwYDVQQD Eyg2MzhiOWIxYTliZjNlZGRiYjQ4MTQxYTZjNDZkZmI4NGUxMjg5MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xmNy+luZgEhg+a4BZsWu+VT60HC ziUkAem6PrefLm0woslWNvQdhGcrQiH+Ak9+/x4Gp2wQGLZxFUAHb8TRFuNSDw6j WNVpt8ye1uDmaJzC9kkE8OHOXwmPREhEVaJ4j2pzC3XAfpdxvneVrKfHC1Ifk6ez TWmZ8a3neZewGz2JQnWbmYTFrcwrsZgGVCGZ4CZb66DmI062DEj6Azlb4StkHHWu BUUYfqgwPQsJT+d8l6KeBj+3AlOHJ5jUBi/5XFz5o+zVJqu1vRc0cRAweIknKnIm zRDg3af+lkFR/aHJQIJEk9+/6Kde7cU5h+a3SeX6AIJ9G5KMmwt/6FU2JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOLmxqb8+3btIFBpsRt+4ThKJAHMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfd6F1ut1 1YmMcHXMOlQ9gwS0rOGHr/ZDc3UEucdQ9mK9WaWp3DIUK7O9cigaldIqZC9jda3L OADOLoSORF/ynBsodXbYWdmNA0KVGVRpq4WF/WbMgk8iVXr8I36u/32EH2VSiRyk AtkkjKeTIZ0vnVarO9Uj7wkOx+FYp8JtHRDRUkPmprdfro7/iK4B4D7h2nY2YqXu TSZa8tBwparSvQ8PJHx54Qk+RrMHo3GHr/xCoT2X53LEu8jyD17mbLj0yNsmMdf4 JljBJAdGh6bQAuVNZdjJscr2NZ4z6SvcrgPK525lUIyOsmNt1wP7ovYtRGoCY4yf VD2RL2YGbQLJmA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:41:45 2025 by rpki-client