$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: xtqhQJJ8k1HfozDOECBAatCW+IhC5+I2V7xV3rRTw3U= Subject key identifier: 15:FD:0A:68:F4:3E:CB:59:9D:A3:8B:C8:89:72:D4:85:44:F5:AA:2E Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 0198D6298CFD956DD9A44C94C819A764D4A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0C56 Signing time: Sat 23 Aug 2025 09:01:43 +0000 Manifest this update: Sat 23 Aug 2025 09:01:43 +0000 Manifest next update: Sun 24 Aug 2025 09:01:43 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: 6jzfkx15dxLr5g8arfprnREELWd5wkPWJVQPNAp/WLk=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=) 4: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 5: A65jet2sC0NtxfWFCJNnrB3aUWw.roa (hash: 0YlVjuYELRnXb4h0TNfDJ9CtXj5o7G1Mgtd0n11B8qY=) 6: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=) 7: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 8: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 9: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 10: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 11: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 14: kwK7qq9-8R1SFEXV8ya4nXhQnGc.roa (hash: mpvYfYbKlNMOOXLEAZPX35jqkxWrEfgNP843asfJZCc=) 15: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 16: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) 17: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:8c:fd:95:6d:d9:a4:4c:94:c8:19:a7:64:d4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Aug 23 09:01:43 2025 GMT Not After : Aug 24 09:01:43 2025 GMT Subject: CN=15fd0a68f43ecb599da38bc88972d48544f5aa2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:27:13:2b:00:f5:53:f2:40:fd:79:33:81: 07:15:29:dc:ad:2a:53:f5:2a:61:79:1b:d8:c4:df: 6b:9c:02:12:33:36:97:50:73:86:b7:1e:78:56:f8: f4:fd:70:22:e6:b4:81:dc:df:bb:73:73:19:a9:a7: 50:7c:63:dd:d9:fa:3f:65:67:57:31:e8:7a:9d:6f: 68:67:6f:a5:07:23:27:22:b3:86:04:76:08:4a:d8: 5b:07:02:28:44:35:48:2a:60:bb:c7:a2:2b:4f:de: 90:65:e4:4f:aa:12:ad:62:fd:34:17:e3:d3:b7:d4: bc:06:cd:72:b3:ac:38:df:d0:30:a1:af:1d:1f:1c: d2:5d:63:b5:27:8b:e9:7b:89:d8:9d:b0:16:33:be: 36:59:e0:c9:29:7f:c9:8a:97:f4:a2:72:6e:74:1a: 97:89:81:24:cc:6a:92:cb:4f:17:88:e8:6b:8e:75: 43:bf:20:12:44:04:fe:70:d3:2d:07:79:09:86:2a: 50:b9:b1:a0:05:4f:b5:06:2d:82:d4:04:04:94:72: 20:98:d6:a5:8f:cc:2f:30:f7:ac:27:19:3e:62:1a: 7b:20:de:6b:66:26:2e:42:85:f2:1c:2b:f8:de:b4: b6:ed:39:f5:3f:0a:4e:14:b9:e4:ef:55:b9:83:f3: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:0A:68:F4:3E:CB:59:9D:A3:8B:C8:89:72:D4:85:44:F5:AA:2E X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:71:10:35:1a:ac:42:0a:60:af:f8:97:88:de:83:93:74: 25:94:51:b1:f4:cf:7a:c6:a8:1c:27:3c:3f:ec:9e:e9:f5:af: 9e:94:eb:13:62:f9:f9:ad:a5:e3:5d:9f:5d:3f:4d:f4:9b:eb: 2a:c4:e3:63:56:62:89:15:26:f5:39:cd:06:6b:7d:98:a4:73: b3:4a:e4:03:64:3a:33:90:d6:20:16:45:a2:22:f6:2a:b8:73: ac:a4:3e:0e:af:06:24:07:cc:f7:8e:9e:f7:5d:bc:43:bc:82: 5b:92:cb:e9:f7:6a:0d:d0:ad:fe:3a:d5:2d:6e:2b:81:98:66: ce:a0:63:7d:40:c9:bf:d7:6c:b5:71:61:db:8d:1e:b8:20:21: d5:67:4a:e4:f4:12:10:38:59:7a:3f:51:71:ae:ec:04:cc:9b: 5e:3e:ce:05:b0:9c:3d:f9:1f:57:73:28:5d:cc:d9:a3:6c:f1: 2a:e9:44:5a:5e:1b:59:e2:d0:d0:1e:79:39:49:b7:ef:31:8d: fa:bc:0c:13:5c:20:52:5c:8f:33:49:b1:8c:33:aa:e0:b1:2d: 63:ae:93:55:6c:90:fd:3b:5e:af:93:fd:f2:61:c5:4a:11:df: 21:be:18:0d:28:de:c0:82:53:23:f3:e4:6a:3a:a5:52:98:8a: 26:47:e5:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYz9lW3ZpEyUyBmnZNSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwODIzMDkwMTQzWhcNMjUwODI0MDkwMTQzWjAzMTEwLwYDVQQD EygxNWZkMGE2OGY0M2VjYjU5OWRhMzhiYzg4OTcyZDQ4NTQ0ZjVhYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4nEysA9VPyQP15M4EHFSncrSpT 9SpheRvYxN9rnAISMzaXUHOGtx54Vvj0/XAi5rSB3N+7c3MZqadQfGPd2fo/ZWdX Meh6nW9oZ2+lByMnIrOGBHYISthbBwIoRDVIKmC7x6IrT96QZeRPqhKtYv00F+PT t9S8Bs1ys6w439Awoa8dHxzSXWO1J4vpe4nYnbAWM742WeDJKX/Jipf0onJudBqX iYEkzGqSy08XiOhrjnVDvyASRAT+cNMtB3kJhipQubGgBU+1Bi2C1AQElHIgmNal j8wvMPesJxk+Yhp7IN5rZiYuQoXyHCv43rS27Tn1PwpOFLnk71W5g/M/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX9Cmj0PstZnaOLyIly1IVE9aouMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhRxEDUa rEIKYK/4l4jeg5N0JZRRsfTPesaoHCc8P+ye6fWvnpTrE2L5+a2l412fXT9N9Jvr KsTjY1ZiiRUm9TnNBmt9mKRzs0rkA2Q6M5DWIBZFoiL2KrhzrKQ+Dq8GJAfM946e 9128Q7yCW5LL6fdqDdCt/jrVLW4rgZhmzqBjfUDJv9dstXFh240euCAh1WdK5PQS EDhZej9Rca7sBMybXj7OBbCcPfkfV3MoXczZo2zxKulEWl4bWeLQ0B55OUm37zGN +rwME1wgUlyPM0mxjDOq4LEtY66TVWyQ/Tter5P98mHFShHfIb4YDSjewIJTI/Pk ajqlUpiKJkfl8A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:38 2025 by rpki-client