$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: 7VwkEJFncSYSeqHCjoFp8rFzujDVO6fnahZ3AF7CiX8= Subject key identifier: 19:92:DF:38:02:4D:FF:31:CD:9A:EF:32:AE:6A:47:2E:2E:DD:82:2F Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 0197B6D76019DC997DE9C5CB11148B8A6E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0BBE Signing time: Sat 28 Jun 2025 14:00:57 +0000 Manifest this update: Sat 28 Jun 2025 14:00:57 +0000 Manifest next update: Sun 29 Jun 2025 14:00:57 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: T/kYMyeYnC6RMnTndXiBKdbl1KnmN0O67fcuCBTmaaE=) 2: 7dqni1Uekr4LIJ7l89gIDXQvQuM.roa (hash: 1L6EsUhb4cKjHpodJIGaqnF6PfeyAEuJ6PfaxdKbyvc=) 3: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 4: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 5: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 6: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=) 7: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 8: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 9: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 10: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 11: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:60:19:dc:99:7d:e9:c5:cb:11:14:8b:8a:6e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jun 28 14:00:57 2025 GMT Not After : Jun 29 14:00:57 2025 GMT Subject: CN=1992df38024dff31cd9aef32ae6a472e2edd822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:45:79:20:34:6a:b4:0c:04:b7:66:dc:56: 1d:04:8a:50:99:a4:bd:58:4c:c4:28:1f:eb:c1:32: 76:8c:26:6e:62:82:f5:4b:e7:bb:c6:e9:07:7f:b1: 77:6a:48:74:8c:00:6d:66:57:db:e1:2d:b3:65:97: 9d:b1:c4:2f:36:ab:5e:a0:1b:5f:cd:11:ff:5b:7b: c7:ab:4f:76:e2:d8:79:90:75:1e:9d:ee:a0:4f:81: 57:9e:ed:fc:db:44:a9:ee:e7:d6:26:d7:ea:5c:b9: f2:46:42:be:8a:7a:fa:f4:92:03:b8:13:23:2a:b4: ff:a7:b0:c7:46:a5:70:c3:1f:34:7a:3e:73:30:06: 1b:56:bc:bc:71:1e:38:42:8a:1b:1c:d5:b0:00:0d: 38:57:b4:a2:cc:0b:5d:76:55:f0:59:ca:28:57:65: 0e:0d:33:cc:b0:71:a6:83:32:16:e4:4c:cf:76:bc: b4:55:7b:b4:68:e4:d5:50:5f:54:a5:a4:6c:2a:44: 1b:52:a6:cf:02:82:40:a4:b2:52:ae:39:7b:f3:5a: 31:de:63:b1:2b:fa:69:7c:6c:09:08:3b:54:0b:9f: 52:28:1b:d5:87:df:f9:ff:d6:2e:97:28:72:9e:6f: 68:77:51:29:0b:1b:03:9a:be:3c:a0:d7:7a:cb:1c: f4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:92:DF:38:02:4D:FF:31:CD:9A:EF:32:AE:6A:47:2E:2E:DD:82:2F X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ff:fd:05:a8:c2:6b:a1:38:57:98:34:2b:22:da:e3:d8:e9: 7d:b1:b5:1d:64:03:e7:93:2e:63:b4:a6:1b:c2:5f:09:9b:a2: 53:20:21:12:d4:db:ae:d7:15:f5:09:f8:52:ec:cd:0c:18:64: 2b:84:ba:52:9c:6a:ad:bb:ca:5d:3c:60:ef:6e:85:29:68:01: 97:67:e1:24:0a:73:13:8e:68:fa:97:f7:fe:a5:db:f2:06:30: e7:29:c7:4d:3b:6a:2c:e7:0a:53:d2:c0:12:76:6d:8c:3a:33: 81:72:1b:dc:22:d8:90:1e:fd:d1:74:17:ac:21:df:62:12:69: 22:3d:5a:f1:fb:74:cd:2d:c2:d0:43:55:e2:4b:5c:f9:e6:17: 20:b3:06:43:70:a2:c3:e2:28:c7:7c:e0:cd:0d:56:91:e3:23: 58:b9:e8:98:3b:e6:68:f4:a0:41:e8:04:29:c7:3b:b6:8c:3e: 6c:d8:2a:9d:3d:23:00:d9:06:a8:3c:0c:42:23:26:e0:f7:97: 16:ef:bc:ac:92:5e:18:41:9e:a4:7d:4c:d5:4a:c5:d5:4c:fe: 6c:8e:f5:94:05:63:58:62:e5:40:fd:ab:57:ba:ee:f3:eb:89: ea:b7:74:5f:b9:bf:fa:f8:d0:4b:07:c5:86:22:e7:fa:8a:50: 5f:40:a9:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe212AZ3Jl96cXLERSLim4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNjI4MTQwMDU3WhcNMjUwNjI5MTQwMDU3WjAzMTEwLwYDVQQD EygxOTkyZGYzODAyNGRmZjMxY2Q5YWVmMzJhZTZhNDcyZTJlZGQ4MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBtFeSA0arQMBLdm3FYdBIpQmaS9 WEzEKB/rwTJ2jCZuYoL1S+e7xukHf7F3akh0jABtZlfb4S2zZZedscQvNqteoBtf zRH/W3vHq0924th5kHUene6gT4FXnu3820Sp7ufWJtfqXLnyRkK+inr69JIDuBMj KrT/p7DHRqVwwx80ej5zMAYbVry8cR44QoobHNWwAA04V7SizAtddlXwWcooV2UO DTPMsHGmgzIW5EzPdry0VXu0aOTVUF9UpaRsKkQbUqbPAoJApLJSrjl781ox3mOx K/ppfGwJCDtUC59SKBvVh9/5/9Yulyhynm9od1EpCxsDmr48oNd6yxz06wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmS3zgCTf8xzZrvMq5qRy4u3YIvMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP/9BajC a6E4V5g0KyLa49jpfbG1HWQD55MuY7SmG8JfCZuiUyAhEtTbrtcV9Qn4UuzNDBhk K4S6UpxqrbvKXTxg726FKWgBl2fhJApzE45o+pf3/qXb8gYw5ynHTTtqLOcKU9LA EnZtjDozgXIb3CLYkB790XQXrCHfYhJpIj1a8ft0zS3C0ENV4ktc+eYXILMGQ3Ci w+Iox3zgzQ1WkeMjWLnomDvmaPSgQegEKcc7tow+bNgqnT0jANkGqDwMQiMm4PeX Fu+8rJJeGEGepH1M1UrF1Uz+bI71lAVjWGLlQP2rV7ru8+uJ6rd0X7m/+vjQSwfF hiLn+opQX0CpYg== -----END CERTIFICATE-----Generated at Sat Jun 28 20:57:24 2025 by rpki-client