$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: 0QsH0HUL0Xw5AMrsSnasT02Ua/MO+fvcp8vUhNRIKW0= Subject key identifier: A6:73:1E:80:C7:48:3E:27:0A:7E:DC:15:C0:87:0D:62:FF:39:5B:A0 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 0197B70F4BFF53891FEA6A85332AF78E0274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0A62 Signing time: Sat 28 Jun 2025 15:02:02 +0000 Manifest this update: Sat 28 Jun 2025 15:02:02 +0000 Manifest next update: Sun 29 Jun 2025 15:02:02 +0000 Files and hashes: 1: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 2: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 3: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 4: EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa (hash: amzFmUzQXu8Qk3jOcia7riw9XANsVxhL8nKSAMe7SvU=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: SCtP1ePtv3prVxH5fMDcFZzuNxqNhWxeyXKx9vAEXuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0f:4b:ff:53:89:1f:ea:6a:85:33:2a:f7:8e:02:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Jun 28 15:02:02 2025 GMT Not After : Jun 29 15:02:02 2025 GMT Subject: CN=a6731e80c7483e270a7edc15c0870d62ff395ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:25:ec:3f:bc:30:df:10:ec:f4:c9:31:98: 22:95:bb:dc:1d:5a:62:a5:41:94:41:69:8a:f9:a1: 0c:81:30:3d:67:71:0b:c0:66:82:ff:27:17:d5:03: 05:dd:a9:88:46:a5:c9:d6:6a:38:01:eb:76:22:a6: 7c:10:10:f8:dc:67:f7:f0:e9:d0:d2:69:ad:1a:f4: 51:94:50:4b:0d:5f:71:32:60:bc:ca:03:a9:3a:1f: 4f:34:21:b3:c6:3a:0d:44:a0:71:6e:c4:cc:2f:bc: c2:d7:f9:c3:22:9b:86:db:07:23:bc:26:5f:90:8f: 9e:be:bd:96:a2:25:ef:72:f8:d3:bb:ba:dd:fe:f0: 46:6c:45:c2:70:30:ec:61:d0:4c:e3:1f:28:66:25: d3:e5:3b:df:1b:bb:27:48:e8:1d:82:aa:db:f8:42: aa:b2:22:fb:54:74:b5:66:aa:6a:7d:5e:c5:c4:19: de:1e:ba:b6:ec:4d:e6:a0:06:f5:c1:0c:b7:5f:0c: 01:c1:88:e9:71:05:3d:59:fe:d4:4f:80:e7:da:72: 91:44:7f:5f:01:4f:32:50:00:b3:20:76:5a:d5:e3: db:ec:8f:e0:3c:c4:6c:58:47:e2:47:ca:44:7d:dc: 1e:b6:f1:59:f8:94:24:9e:0a:8c:70:86:06:46:3a: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:73:1E:80:C7:48:3E:27:0A:7E:DC:15:C0:87:0D:62:FF:39:5B:A0 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:12:66:7c:98:17:80:c0:00:e6:29:b1:06:a5:10:96:e4:4f: 86:0e:3b:9f:93:48:9e:76:bd:24:e0:9e:48:57:05:97:ca:7e: 3c:8f:30:8e:1d:8e:3e:c5:94:c5:0c:57:0f:92:e6:4e:15:6e: 3c:a9:2d:5c:c2:f5:f3:59:3d:85:70:4e:e9:a6:13:55:93:1a: 87:a5:ab:3f:13:2d:8f:e1:e8:22:da:86:6c:67:aa:ad:8b:2d: d4:4c:31:2c:8c:cf:3b:25:1e:d9:bf:c5:42:5d:14:9a:44:72: 16:a4:a5:0c:c6:43:20:44:e3:62:de:74:b5:b9:a2:32:9d:56: 44:f7:1e:f1:ad:7c:3a:75:14:db:d3:c8:f8:15:bf:b0:69:d9: f0:b8:f0:28:0b:f4:14:02:3f:be:64:02:80:f6:4f:07:09:3e: 5e:6a:e9:b9:a6:78:7e:62:ca:47:79:9e:92:ae:cc:73:30:7f: 09:ac:a3:c1:e5:7d:07:89:a3:0d:d4:00:57:94:a5:76:26:e3: 7f:11:8f:bd:7e:14:1a:b2:5e:a5:99:58:ef:2a:8e:8a:f7:30: 59:0a:8f:75:ff:df:4f:2e:e8:34:9a:5f:68:bb:ed:ec:80:fe: 15:2a:c8:7f:e1:a1:2d:8d:8a:86:92:d0:f7:b1:f2:cc:70:d1: 55:dc:9b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3D0v/U4kf6mqFMyr3jgJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwNjI4MTUwMjAyWhcNMjUwNjI5MTUwMjAyWjAzMTEwLwYDVQQD EyhhNjczMWU4MGM3NDgzZTI3MGE3ZWRjMTVjMDg3MGQ2MmZmMzk1YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D8l7D+8MN8Q7PTJMZgilbvcHVpi pUGUQWmK+aEMgTA9Z3ELwGaC/ycX1QMF3amIRqXJ1mo4Aet2IqZ8EBD43Gf38OnQ 0mmtGvRRlFBLDV9xMmC8ygOpOh9PNCGzxjoNRKBxbsTML7zC1/nDIpuG2wcjvCZf kI+evr2WoiXvcvjTu7rd/vBGbEXCcDDsYdBM4x8oZiXT5TvfG7snSOgdgqrb+EKq siL7VHS1ZqpqfV7FxBneHrq27E3moAb1wQy3XwwBwYjpcQU9Wf7UT4Dn2nKRRH9f AU8yUACzIHZa1ePb7I/gPMRsWEfiR8pEfdwetvFZ+JQkngqMcIYGRjozXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZzHoDHSD4nCn7cFcCHDWL/OVugMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARJmfJgX gMAA5imxBqUQluRPhg47n5NInna9JOCeSFcFl8p+PI8wjh2OPsWUxQxXD5LmThVu PKktXML181k9hXBO6aYTVZMah6WrPxMtj+HoItqGbGeqrYst1EwxLIzPOyUe2b/F Ql0UmkRyFqSlDMZDIETjYt50tbmiMp1WRPce8a18OnUU29PI+BW/sGnZ8LjwKAv0 FAI/vmQCgPZPBwk+XmrpuaZ4fmLKR3mekq7MczB/CayjweV9B4mjDdQAV5Sldibj fxGPvX4UGrJepZlY7yqOivcwWQqPdf/fTy7oNJpfaLvt7ID+FSrIf+GhLY2KhpLQ 97HyzHDRVdybrQ== -----END CERTIFICATE-----Generated at Sun Jun 29 00:38:32 2025 by rpki-client