$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: HvY8oUOCoYl/E68DKrK75R0vXfK/Mpx35R3PGiaPe4M= Subject key identifier: E2:4C:02:65:D5:CD:7E:11:C5:F0:EF:4D:5D:5E:9C:ED:69:45:E2:86 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 0198D73BCCE2349A21245B845379F5EEE24D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1652 Signing time: Sat 23 Aug 2025 14:01:17 +0000 Manifest this update: Sat 23 Aug 2025 14:01:17 +0000 Manifest next update: Sun 24 Aug 2025 14:01:17 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: Do/6vMnV5ap3y1Uw84yw7yHtOjw5ezVMNVUw4cdVRsk=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:cc:e2:34:9a:21:24:5b:84:53:79:f5:ee:e2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Aug 23 14:01:17 2025 GMT Not After : Aug 24 14:01:17 2025 GMT Subject: CN=e24c0265d5cd7e11c5f0ef4d5d5e9ced6945e286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:94:26:8b:e7:0e:4c:8c:9e:55:a3:dc:07: 47:a2:86:1f:0a:c0:7b:5b:4e:f2:85:16:a4:26:ec: 03:86:72:c5:a3:70:2b:03:ad:bc:27:66:c5:55:10: c1:6a:2b:07:d8:4e:17:8a:19:70:5d:89:0a:7b:4d: 60:7b:58:51:6e:cc:78:09:dc:f1:e9:f6:e6:22:f9: 7f:41:08:63:8a:f5:d3:fa:ce:8b:4c:02:39:b2:9e: ae:f0:96:68:25:0b:4f:7b:c9:4b:7b:67:9f:c8:32: 5a:fa:57:25:86:da:f6:b5:08:90:40:f2:f9:d1:7e: e8:88:ab:60:82:22:57:91:bf:ff:64:5e:fb:75:c6: 67:b1:54:8d:8a:1b:21:dd:43:95:06:cd:b7:10:fb: 46:9f:b6:21:58:ca:3a:38:0f:cd:1b:1d:e9:7b:5a: 7f:d8:f0:f1:b1:3c:0d:57:48:7e:23:ac:9b:e7:07: 24:19:54:bf:b4:84:79:ac:33:d9:81:1d:f0:c1:ef: 63:10:5c:09:cb:2a:f1:fc:fd:6b:d3:6f:3f:65:37: 0e:4f:8d:a8:2a:ba:74:17:63:09:ec:a0:66:70:79: cd:bb:68:b5:03:6f:c8:78:35:53:1a:10:73:ca:32: da:06:94:4b:49:00:cb:74:a2:e7:44:5c:03:c2:0a: c4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:02:65:D5:CD:7E:11:C5:F0:EF:4D:5D:5E:9C:ED:69:45:E2:86 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f9:33:56:d7:3e:94:39:d9:06:63:b8:db:0b:bd:71:15:08: c4:e0:b2:11:ae:cb:ab:69:6d:56:16:6f:b7:30:bb:1b:a1:30: 10:90:0e:a0:c4:51:e4:f3:29:c1:5a:70:1b:87:8f:90:21:90: 35:a8:ec:37:1d:6c:2f:ef:d7:c0:6a:52:66:07:75:7a:37:19: 22:cc:bc:1a:58:c5:e6:f6:a1:63:94:98:47:e8:1f:6d:cb:34: a6:9a:3f:3e:35:0d:de:d0:51:27:92:c1:20:5d:e8:94:30:db: fa:e2:4c:6a:52:80:c3:4e:4b:5f:16:8b:85:9a:9d:d2:94:3f: 05:bd:e1:83:57:f4:87:ae:91:d4:69:a6:de:1b:09:9f:7c:a3: 4c:fb:58:f5:ad:29:95:be:4c:45:9e:c2:d6:9c:f4:e5:8a:22: 1f:04:11:bb:5f:25:59:ef:0f:e9:9b:39:2a:1c:62:78:ab:63: c8:51:9e:cc:b0:93:3d:4a:32:6d:1d:29:07:70:28:9f:cf:91: c7:55:90:b4:d4:2f:a4:17:62:b4:53:51:14:e8:85:2b:c1:05: 62:26:6c:35:8f:92:90:04:20:10:51:0b:85:af:75:d0:be:82: 58:fe:5c:c2:ce:e3:53:2b:4c:cd:30:82:fb:d0:76:ff:9e:7f: 0d:7c:ed:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXO8ziNJohJFuEU3n17uJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwODIzMTQwMTE3WhcNMjUwODI0MTQwMTE3WjAzMTEwLwYDVQQD EyhlMjRjMDI2NWQ1Y2Q3ZTExYzVmMGVmNGQ1ZDVlOWNlZDY5NDVlMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfaUJovnDkyMnlWj3AdHooYfCsB7 W07yhRakJuwDhnLFo3ArA628J2bFVRDBaisH2E4XihlwXYkKe01ge1hRbsx4Cdzx 6fbmIvl/QQhjivXT+s6LTAI5sp6u8JZoJQtPe8lLe2efyDJa+lclhtr2tQiQQPL5 0X7oiKtggiJXkb//ZF77dcZnsVSNihsh3UOVBs23EPtGn7YhWMo6OA/NGx3pe1p/ 2PDxsTwNV0h+I6yb5wckGVS/tIR5rDPZgR3wwe9jEFwJyyrx/P1r028/ZTcOT42o Krp0F2MJ7KBmcHnNu2i1A2/IeDVTGhBzyjLaBpRLSQDLdKLnRFwDwgrEyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJMAmXVzX4RxfDvTV1enO1pReKGMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPkzVtc+ lDnZBmO42wu9cRUIxOCyEa7Lq2ltVhZvtzC7G6EwEJAOoMRR5PMpwVpwG4ePkCGQ NajsNx1sL+/XwGpSZgd1ejcZIsy8GljF5vahY5SYR+gfbcs0ppo/PjUN3tBRJ5LB IF3olDDb+uJMalKAw05LXxaLhZqd0pQ/Bb3hg1f0h66R1Gmm3hsJn3yjTPtY9a0p lb5MRZ7C1pz05YoiHwQRu18lWe8P6Zs5KhxieKtjyFGezLCTPUoybR0pB3Aon8+R x1WQtNQvpBditFNRFOiFK8EFYiZsNY+SkAQgEFELha910L6CWP5cws7jUytMzTCC +9B2/55/DXzt3A== -----END CERTIFICATE-----Generated at Sat Aug 23 19:17:27 2025 by rpki-client