$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: YYfojuJoSFAMCkTpAsxQyjXL9GUDjvLTOmOdK88qJXc= Subject key identifier: 90:8B:8A:72:13:87:E8:45:40:37:2B:5B:B0:9C:98:68:AB:1A:45:72 Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 0198D4E05AD6BBE444BECA60F5B8DA40326E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0AF6 Signing time: Sat 23 Aug 2025 03:02:09 +0000 Manifest this update: Sat 23 Aug 2025 03:02:09 +0000 Manifest next update: Sun 24 Aug 2025 03:02:09 +0000 Files and hashes: 1: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 2: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 3: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 4: EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa (hash: amzFmUzQXu8Qk3jOcia7riw9XANsVxhL8nKSAMe7SvU=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: Z2O6nJK9sTsr/xRvgcIxoOB4cbLcAEu1UZMdOO30nq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:5a:d6:bb:e4:44:be:ca:60:f5:b8:da:40:32:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Aug 23 03:02:09 2025 GMT Not After : Aug 24 03:02:09 2025 GMT Subject: CN=908b8a721387e84540372b5bb09c9868ab1a4572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1e:e4:40:76:2f:eb:23:a6:b9:8e:f5:dd:0f: ce:e4:8b:e7:6b:09:40:7d:ab:46:c0:be:e3:0c:e8: e1:de:4d:20:92:63:e4:f3:06:71:80:dc:36:48:40: b9:ad:36:cd:cf:e7:1e:ea:61:d7:82:34:bf:bf:d5: 25:d0:cd:32:60:27:c2:bc:cb:50:ef:1d:b1:c1:50: 61:a7:e1:3b:b8:2b:3f:cc:cd:27:31:e8:6e:84:f6: 75:ec:ec:6a:c7:5c:e1:43:fd:8a:ca:11:db:68:67: 63:2a:d1:82:2f:4d:19:69:4f:b9:89:5a:c4:2c:fe: ca:a4:8f:b2:c5:6e:99:9f:d3:ce:38:f7:b4:6d:b7: c8:21:ae:f5:93:25:e4:7b:f3:10:b4:6c:f0:21:9a: fa:79:c5:f5:2c:48:2d:3f:a5:0f:df:a4:13:42:13: 9e:b4:18:06:8e:6e:fd:3b:3a:04:25:67:e8:4b:9b: 45:09:dd:9a:fa:39:41:77:90:23:7e:fb:61:09:11: 8b:e5:43:ba:f7:1b:d0:16:f0:da:32:6a:58:72:7d: 1d:ba:cf:28:fe:ba:f7:dd:11:d1:28:2c:48:e5:03: 03:b3:7d:55:c3:68:41:35:45:6d:a5:e6:91:44:2a: 24:69:c2:0d:c7:06:f8:4d:cd:83:5d:2d:0e:1e:c7: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8B:8A:72:13:87:E8:45:40:37:2B:5B:B0:9C:98:68:AB:1A:45:72 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:70:61:d1:c5:53:2a:75:9e:56:c3:d9:48:32:33:bf:28:09: b9:3d:65:1c:38:a7:66:0d:ea:60:71:b3:97:ff:94:ee:82:50: d6:8d:b6:86:9c:f3:e5:79:93:36:a0:fe:25:c1:ac:9d:61:1a: bf:19:37:bd:72:eb:d0:41:bc:a4:c5:e8:c7:c7:f9:f3:a6:f5: 45:aa:0a:b2:18:81:9e:59:dd:eb:1a:b8:d7:e0:2f:4d:b2:21: eb:36:20:b1:d5:dc:f4:1c:1b:67:92:b9:99:be:f4:b9:0a:de: f9:7f:b7:b8:35:56:de:85:47:9c:6b:09:ce:fd:e1:39:11:a8: cb:ed:21:f2:ae:28:08:52:a0:10:5d:7c:0c:97:8b:f3:76:1e: 8b:9a:3d:58:2b:d9:fc:1a:a7:f1:95:14:d8:91:08:c4:c4:4a: 3f:37:3c:db:5b:49:f6:a8:96:c4:2a:cb:36:42:66:c9:8b:50: 8d:ff:e8:48:ee:1d:23:f1:7e:79:dc:d0:6d:a9:6c:51:25:61: 28:76:19:cd:3a:77:72:2a:95:c6:68:df:52:28:0b:40:2c:e3: c1:60:98:1b:42:f6:03:6f:bf:44:ce:52:91:4a:60:8e:e9:6a: 59:2f:13:72:25:fe:6c:2e:82:a5:26:06:2b:64:ff:ec:ea:8f: 6c:6b:b7:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4FrWu+REvspg9bjaQDJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwODIzMDMwMjA5WhcNMjUwODI0MDMwMjA5WjAzMTEwLwYDVQQD Eyg5MDhiOGE3MjEzODdlODQ1NDAzNzJiNWJiMDljOTg2OGFiMWE0NTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR7kQHYv6yOmuY713Q/O5IvnawlA fatGwL7jDOjh3k0gkmPk8wZxgNw2SEC5rTbNz+ce6mHXgjS/v9Ul0M0yYCfCvMtQ 7x2xwVBhp+E7uCs/zM0nMehuhPZ17Oxqx1zhQ/2KyhHbaGdjKtGCL00ZaU+5iVrE LP7KpI+yxW6Zn9POOPe0bbfIIa71kyXke/MQtGzwIZr6ecX1LEgtP6UP36QTQhOe tBgGjm79OzoEJWfoS5tFCd2a+jlBd5AjfvthCRGL5UO69xvQFvDaMmpYcn0dus8o /rr33RHRKCxI5QMDs31Vw2hBNUVtpeaRRCokacINxwb4Tc2DXS0OHsd7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCLinITh+hFQDcrW7CcmGirGkVyMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHBh0cVT KnWeVsPZSDIzvygJuT1lHDinZg3qYHGzl/+U7oJQ1o22hpzz5XmTNqD+JcGsnWEa vxk3vXLr0EG8pMXox8f586b1RaoKshiBnlnd6xq41+AvTbIh6zYgsdXc9BwbZ5K5 mb70uQre+X+3uDVW3oVHnGsJzv3hORGoy+0h8q4oCFKgEF18DJeL83Yei5o9WCvZ /Bqn8ZUU2JEIxMRKPzc821tJ9qiWxCrLNkJmyYtQjf/oSO4dI/F+edzQbalsUSVh KHYZzTp3ciqVxmjfUigLQCzjwWCYG0L2A2+/RM5SkUpgjulqWS8TciX+bC6CpSYG K2T/7OqPbGu3qA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:34 2025 by rpki-client