$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: zwqqaKWAyZFdxvnKBZOv0Haab13+FfCcZyOhL2eC2GM= Subject key identifier: 72:56:2B:A5:1C:6E:44:81:A0:42:DD:A1:8E:89:19:04:8D:3B:E2:59 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 0198D69842D43DE0F124B81EF55151C0F123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 1673 Signing time: Sat 23 Aug 2025 11:02:39 +0000 Manifest this update: Sat 23 Aug 2025 11:02:39 +0000 Manifest next update: Sun 24 Aug 2025 11:02:39 +0000 Files and hashes: 1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=) 2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=) 3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=) 4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=) 5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=) 6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=) 7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=) 8: WpLLn3RjoLbyjipUUgV3MfV5sX8.roa (hash: PYHwQtVcmnqDQtX16D1WqJb0WgKnZrAZ19ITOPvDgZc=) 9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=) 10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=) 11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=) 12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=) 13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=) 14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=) 15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=) 16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=) 17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: BtOXYU+jxOQFQkwCwMzwhoxDJkOEnzIJ+mFTnAQxg4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:42:d4:3d:e0:f1:24:b8:1e:f5:51:51:c0:f1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Aug 23 11:02:39 2025 GMT Not After : Aug 24 11:02:39 2025 GMT Subject: CN=72562ba51c6e4481a042dda18e8919048d3be259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:09:a8:49:09:74:4a:bb:65:a6:4d:69:cb: 3e:99:47:ae:97:63:cc:e2:b4:97:c9:30:7c:17:76: 44:46:5a:13:79:cf:ae:74:2d:4b:0e:1e:2b:ad:a6: f4:aa:09:d8:19:a8:43:b4:12:d9:54:f4:70:02:69: 3a:a8:37:e9:34:77:16:6b:6b:04:b2:2a:f7:78:b9: fa:10:64:da:8c:8f:67:1a:62:9e:a3:07:ac:5c:93: 6f:72:3d:4e:85:c5:e1:c6:5a:e0:f9:c2:b6:ae:0b: 41:8e:79:fc:c1:34:1d:38:e5:d0:49:78:ae:b2:0d: 77:02:2a:44:06:0d:f1:7d:f2:2a:22:51:c4:c6:87: b0:c9:69:a1:6e:24:c3:97:01:f0:89:ff:ee:b5:d2: 99:a4:c1:bd:51:4c:e4:20:75:8f:4a:de:c8:bb:0a: db:1b:0a:62:a7:fe:54:60:d0:c1:95:1b:e0:4d:af: 1b:ef:8e:1e:e4:b4:8c:4b:c8:ec:f4:85:77:06:af: 0a:16:2e:98:cb:b8:0c:cd:5e:35:11:15:ba:a3:11: 30:81:78:0a:86:5c:96:e8:bf:14:af:48:dc:e2:8e: 45:62:fb:57:59:df:00:1f:98:37:c9:9c:a2:68:4d: a8:ff:47:17:ee:1a:90:43:5c:0e:fa:97:30:bf:71: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:2B:A5:1C:6E:44:81:A0:42:DD:A1:8E:89:19:04:8D:3B:E2:59 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:61:40:41:e3:b8:ce:93:2e:c8:7a:fa:f9:b4:62:e9:32:f4: 24:52:0a:24:de:f5:75:ff:fb:e3:6d:4d:3b:3a:bb:22:a4:e0: 73:e1:62:55:c9:c8:0a:68:5c:98:b4:53:78:c7:75:2f:b6:fe: 30:71:7a:b2:04:69:bb:dc:f7:75:37:00:3e:38:ac:71:73:de: 05:fd:60:40:69:51:b9:b5:a2:9a:38:5b:b3:5b:b3:45:20:03: a8:e9:fe:79:30:94:e6:bd:c9:f9:14:eb:64:25:76:4a:d9:21: 5a:73:81:6f:75:ce:32:f7:f4:68:e3:2f:15:fe:10:52:6d:09: e8:ef:83:61:b3:b6:39:e7:48:31:f7:6a:f4:69:12:69:e0:9d: 95:47:43:76:30:76:be:14:8e:23:99:44:01:dd:e4:ab:97:a2: ef:88:44:da:d4:dd:00:1c:be:cd:87:13:68:62:93:0d:e2:ae: 23:76:2d:10:c3:18:13:a8:62:d0:5f:bc:07:be:d9:67:bc:a2: 53:d6:9e:ca:eb:ca:76:2d:1f:12:67:95:a2:e8:23:b2:2f:ef: a0:8b:2f:6a:88:b8:86:a4:25:0d:16:ea:68:2f:87:2e:ac:52: 53:a3:36:39:17:29:22:d0:46:74:63:d6:f1:95:3b:96:4e:ca: 49:bd:5e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmELUPeDxJLge9VFRwPEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjUwODIzMTEwMjM5WhcNMjUwODI0MTEwMjM5WjAzMTEwLwYDVQQD Eyg3MjU2MmJhNTFjNmU0NDgxYTA0MmRkYTE4ZTg5MTkwNDhkM2JlMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/EJqEkJdEq7ZaZNacs+mUeul2PM 4rSXyTB8F3ZERloTec+udC1LDh4rrab0qgnYGahDtBLZVPRwAmk6qDfpNHcWa2sE sir3eLn6EGTajI9nGmKeowesXJNvcj1OhcXhxlrg+cK2rgtBjnn8wTQdOOXQSXiu sg13AipEBg3xffIqIlHExoewyWmhbiTDlwHwif/utdKZpMG9UUzkIHWPSt7Iuwrb Gwpip/5UYNDBlRvgTa8b744e5LSMS8js9IV3Bq8KFi6Yy7gMzV41ERW6oxEwgXgK hlyW6L8Ur0jc4o5FYvtXWd8AH5g3yZyiaE2o/0cX7hqQQ1wO+pcwv3Ge6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJWK6UcbkSBoELdoY6JGQSNO+JZMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWFAQeO4 zpMuyHr6+bRi6TL0JFIKJN71df/7421NOzq7IqTgc+FiVcnICmhcmLRTeMd1L7b+ MHF6sgRpu9z3dTcAPjiscXPeBf1gQGlRubWimjhbs1uzRSADqOn+eTCU5r3J+RTr ZCV2StkhWnOBb3XOMvf0aOMvFf4QUm0J6O+DYbO2OedIMfdq9GkSaeCdlUdDdjB2 vhSOI5lEAd3kq5ei74hE2tTdABy+zYcTaGKTDeKuI3YtEMMYE6hi0F+8B77ZZ7yi U9aeyuvKdi0fEmeVougjsi/voIsvaoi4hqQlDRbqaC+HLqxSU6M2ORcpItBGdGPW 8ZU7lk7KSb1eJw== -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:44 2025 by rpki-client