$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: +Csy8HbWoULio+amKM62x6A5xVGigbXwK960YDG/ViI= Subject key identifier: 14:CE:03:96:FB:F6:1B:9B:3E:76:FD:31:BB:8C:03:8C:BC:35:9D:94 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 0197B6D79EDE2950B3EDADD755684EC26127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 15BB Signing time: Sat 28 Jun 2025 14:01:13 +0000 Manifest this update: Sat 28 Jun 2025 14:01:13 +0000 Manifest next update: Sun 29 Jun 2025 14:01:13 +0000 Files and hashes: 1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=) 2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: Aj1nmURpV2iNyTzFepbxEXdMFCFu910IgPHS2g9PHcE=) 3: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 4: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 5: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 6: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 7: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 8: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=) 9: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 10: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:9e:de:29:50:b3:ed:ad:d7:55:68:4e:c2:61:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jun 28 14:01:13 2025 GMT Not After : Jun 29 14:01:13 2025 GMT Subject: CN=14ce0396fbf61b9b3e76fd31bb8c038cbc359d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:d1:1c:4c:b5:f6:98:51:8d:98:2b:b2:11: 3e:80:90:05:fb:bb:66:d2:6b:6e:cc:9b:0f:f7:78: 1c:e3:d9:86:83:7f:49:de:4c:e8:1f:a8:bc:57:7e: 6c:ee:fd:bb:7f:c7:dd:bf:d1:a6:e4:2f:83:53:bb: 80:4e:39:2c:8c:82:68:33:27:19:91:fb:4d:4e:18: 1e:58:46:2a:3e:2c:a8:27:f8:fa:f9:17:c8:a0:5f: 23:72:ce:57:07:56:56:31:b5:79:06:a7:3c:db:3f: 8b:a5:2b:db:f5:c2:c0:79:05:cd:dc:60:44:72:f6: 84:89:65:f6:a7:7a:51:a8:b9:ba:0c:9e:01:a1:c5: 9f:83:e2:63:15:ec:82:77:b2:d8:18:d0:7e:fc:30: d3:57:d8:16:33:d6:4c:f1:6f:6a:07:2a:39:9e:2f: 46:eb:65:44:44:e9:b3:af:c0:54:f3:83:6e:a5:8e: d9:f2:bf:c7:ea:ea:e5:a9:41:1c:26:dc:cb:7b:e8: 83:45:66:90:f6:93:f9:f3:b4:d5:40:76:0d:ed:66: 1c:06:ed:3a:c1:c9:23:6b:3e:cb:96:e6:7f:22:a9: 4d:ab:27:9f:f8:dd:07:6c:c0:5d:6c:df:a1:68:a4: f1:a1:be:e8:af:05:5e:7c:0e:75:1a:93:80:66:78: 72:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CE:03:96:FB:F6:1B:9B:3E:76:FD:31:BB:8C:03:8C:BC:35:9D:94 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3a:cc:96:73:e6:42:6f:ef:16:56:05:dc:18:0c:0d:4a:11: 34:41:0c:09:7b:6c:58:37:e3:b4:9b:8d:94:dc:ac:da:e5:2c: c9:e1:fb:c0:fd:5e:06:ac:a8:68:8f:40:0e:82:b9:4b:b3:be: 53:52:a4:90:8f:08:a9:e0:d7:c7:65:04:c5:0f:21:a6:91:bd: cc:e7:ee:94:e9:35:01:95:6e:ba:46:3b:41:49:16:77:66:06: 78:80:d3:65:d2:2f:78:a1:e9:69:26:d7:b3:1e:38:8a:f8:07: 56:7a:8e:b1:f8:0a:2c:14:b1:b2:e6:f1:da:e6:e6:82:e1:d6: cb:a0:95:c3:f6:9b:de:0e:1f:1e:03:90:85:5f:89:67:76:d2: aa:5c:77:b2:a7:e1:50:f4:a2:80:ea:7f:8e:83:78:f8:72:ba: ab:5f:85:11:19:6b:c1:93:70:bf:6f:20:af:89:6e:58:9a:49: 50:6d:90:55:da:10:15:3e:ef:73:92:8f:3c:1c:93:c0:6e:1c: 20:8d:32:6d:f3:18:f5:91:b1:07:85:a4:97:aa:a3:5c:a9:22: e2:22:30:3a:31:95:fe:0b:45:1f:07:00:65:4d:1b:58:0a:fa: 95:88:4c:25:22:eb:d5:30:08:be:f1:52:a6:a6:89:ee:8a:28: eb:8a:83:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2157eKVCz7a3XVWhOwmEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwNjI4MTQwMTEzWhcNMjUwNjI5MTQwMTEzWjAzMTEwLwYDVQQD EygxNGNlMDM5NmZiZjYxYjliM2U3NmZkMzFiYjhjMDM4Y2JjMzU5ZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8zRHEy19phRjZgrshE+gJAF+7tm 0mtuzJsP93gc49mGg39J3kzoH6i8V35s7v27f8fdv9Gm5C+DU7uATjksjIJoMycZ kftNThgeWEYqPiyoJ/j6+RfIoF8jcs5XB1ZWMbV5Bqc82z+LpSvb9cLAeQXN3GBE cvaEiWX2p3pRqLm6DJ4BocWfg+JjFeyCd7LYGNB+/DDTV9gWM9ZM8W9qByo5ni9G 62VEROmzr8BU84NupY7Z8r/H6urlqUEcJtzLe+iDRWaQ9pP587TVQHYN7WYcBu06 wckjaz7LluZ/IqlNqyef+N0HbMBdbN+haKTxob7orwVefA51GpOAZnhyHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTOA5b79hubPnb9MbuMA4y8NZ2UMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTrMlnPm Qm/vFlYF3BgMDUoRNEEMCXtsWDfjtJuNlNys2uUsyeH7wP1eBqyoaI9ADoK5S7O+ U1KkkI8IqeDXx2UExQ8hppG9zOfulOk1AZVuukY7QUkWd2YGeIDTZdIveKHpaSbX sx44ivgHVnqOsfgKLBSxsubx2ubmguHWy6CVw/ab3g4fHgOQhV+JZ3bSqlx3sqfh UPSigOp/joN4+HK6q1+FERlrwZNwv28gr4luWJpJUG2QVdoQFT7vc5KPPByTwG4c II0ybfMY9ZGxB4Wkl6qjXKki4iIwOjGV/gtFHwcAZU0bWAr6lYhMJSLr1TAIvvFS pqaJ7ooo64qDKg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:18:36 2025 by rpki-client