$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: OtFBtilpKEWPsvx7ZG/dYKKeS+zLnK8k1my10KUw+Ug= Subject key identifier: 65:31:14:DE:59:0F:17:34:31:81:31:AF:58:25:46:0C:81:2A:10:98 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 0197C914BB107D5AB1C2122D02EEC4E1B0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0F31 Signing time: Wed 02 Jul 2025 03:01:08 +0000 Manifest this update: Wed 02 Jul 2025 03:01:08 +0000 Manifest next update: Thu 03 Jul 2025 03:01:08 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: aUb/Cg4ytgPKOeVARusHtutu/mcT7Bs0KANFdJVP07U=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c9:14:bb:10:7d:5a:b1:c2:12:2d:02:ee:c4:e1:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jul 2 03:01:08 2025 GMT Not After : Jul 3 03:01:08 2025 GMT Subject: CN=653114de590f1734318131af5825460c812a1098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:15:e2:02:ec:14:f6:a6:65:7a:34:c0:fc: 3c:d7:98:8b:ac:b6:9d:45:c3:a3:cd:34:9c:a8:71: d7:86:77:44:22:d8:ed:95:01:ee:ab:61:61:b4:ff: fc:de:23:9d:d5:db:8a:35:48:a2:6f:7c:5a:09:12: 71:26:58:dc:99:b3:b1:dd:46:93:5a:7f:9a:c2:40: af:d7:29:0f:ce:a5:a4:7b:e0:42:8b:4f:8c:d1:fc: eb:84:1d:b1:94:72:ee:63:f9:3a:21:68:47:0b:39: 59:cb:df:e0:04:0b:f0:d8:c1:e7:d1:55:77:ac:d5: d4:7f:b5:d0:c7:af:44:61:1c:d7:e3:43:0f:c1:ca: 36:b4:fa:6b:cd:c3:70:d5:33:62:07:f4:4d:bf:22: 62:9f:6d:70:00:f3:aa:ee:5f:f6:d8:f8:4f:d1:f7: 83:f5:79:ec:e8:9e:eb:3b:3d:0a:e6:db:b5:61:94: 65:f1:5e:4b:1f:64:ca:7e:4e:04:3c:24:7c:e9:ae: 0e:24:87:15:4f:fa:bf:56:98:3e:36:79:6a:5d:ba: b7:70:e1:d9:22:ef:6c:1a:b4:d2:19:f6:0d:e3:bd: 8f:e2:28:57:e5:d6:93:77:f9:cd:25:68:3c:93:5f: f3:c2:92:32:45:65:3f:a6:84:04:85:7a:aa:49:4c: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:31:14:DE:59:0F:17:34:31:81:31:AF:58:25:46:0C:81:2A:10:98 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fc:29:bf:44:45:a5:13:b8:16:35:dc:8c:e7:90:0d:67:1e: 94:b8:8e:db:00:1b:9b:91:20:0a:ed:18:46:06:67:52:21:14: ae:ea:48:6d:22:28:cb:1c:db:54:66:73:c9:7b:c5:ba:5c:83: ec:c2:e7:62:58:2a:0c:ff:cf:79:a5:2e:68:6b:8e:7b:52:d8: 00:23:9c:11:1d:80:25:03:72:cd:75:40:e4:5e:97:98:42:60: 61:d5:54:9e:d2:e1:8c:c2:c7:21:be:57:bc:af:05:3e:4f:44: 47:05:c2:a7:eb:09:89:ab:e1:41:ce:31:0a:b5:0b:50:93:b8: 85:fa:90:e1:41:b8:52:1b:ac:26:7b:6e:90:43:02:7e:1d:ed: 0f:45:9d:26:22:c3:a4:e5:bb:f3:b1:b4:1c:f0:0f:4d:8c:23: 17:04:15:78:95:9c:c8:bf:b0:34:dc:e0:39:a6:95:49:08:2f: 55:a6:50:ed:28:e6:62:8e:f0:11:f2:f8:38:58:9c:9d:f3:8e: 15:fa:53:b9:a4:12:27:12:aa:a6:98:f7:d2:ff:1c:c7:e2:12: 8e:d8:c3:df:e6:d4:2a:a2:c9:b0:64:5f:92:9e:91:7c:d1:4e: c4:af:05:d4:bf:80:63:89:b8:bf:c1:aa:3b:30:c4:bd:d9:d7: 6b:a2:21:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfJFLsQfVqxwhItAu7E4bCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwNzAyMDMwMTA4WhcNMjUwNzAzMDMwMTA4WjAzMTEwLwYDVQQD Eyg2NTMxMTRkZTU5MGYxNzM0MzE4MTMxYWY1ODI1NDYwYzgxMmExMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kV4gLsFPamZXo0wPw815iLrLad RcOjzTScqHHXhndEItjtlQHuq2FhtP/83iOd1duKNUiib3xaCRJxJljcmbOx3UaT Wn+awkCv1ykPzqWke+BCi0+M0fzrhB2xlHLuY/k6IWhHCzlZy9/gBAvw2MHn0VV3 rNXUf7XQx69EYRzX40MPwco2tPprzcNw1TNiB/RNvyJin21wAPOq7l/22PhP0feD 9Xns6J7rOz0K5tu1YZRl8V5LH2TKfk4EPCR86a4OJIcVT/q/Vpg+NnlqXbq3cOHZ Iu9sGrTSGfYN472P4ihX5daTd/nNJWg8k1/zwpIyRWU/poQEhXqqSUzj+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUxFN5ZDxc0MYExr1glRgyBKhCYMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefwpv0RF pRO4FjXcjOeQDWcelLiO2wAbm5EgCu0YRgZnUiEUrupIbSIoyxzbVGZzyXvFulyD 7MLnYlgqDP/PeaUuaGuOe1LYACOcER2AJQNyzXVA5F6XmEJgYdVUntLhjMLHIb5X vK8FPk9ERwXCp+sJiavhQc4xCrULUJO4hfqQ4UG4UhusJntukEMCfh3tD0WdJiLD pOW787G0HPAPTYwjFwQVeJWcyL+wNNzgOaaVSQgvVaZQ7SjmYo7wEfL4OFicnfOO FfpTuaQSJxKqppj30v8cx+ISjtjD3+bUKqLJsGRfkp6RfNFOxK8F1L+AY4m4v8Gq OzDEvdnXa6Ihgw== -----END CERTIFICATE-----Generated at Wed Jul 2 11:44:46 2025 by rpki-client