$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: FBdKgoRdJAOt3m0/w8IUj9HnrzQ4x0BLEVzzq0ZwxGs= Subject key identifier: 07:02:71:EE:4B:B4:F4:8C:32:41:A3:9D:33:90:82:0B:E6:DA:15:8A Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 0197CA2748A546A057BAAA3A3ACD4707490B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 15E8 Signing time: Wed 02 Jul 2025 08:01:01 +0000 Manifest this update: Wed 02 Jul 2025 08:01:01 +0000 Manifest next update: Thu 03 Jul 2025 08:01:01 +0000 Files and hashes: 1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=) 2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=) 3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=) 4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=) 5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=) 6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=) 7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=) 8: WpLLn3RjoLbyjipUUgV3MfV5sX8.roa (hash: PYHwQtVcmnqDQtX16D1WqJb0WgKnZrAZ19ITOPvDgZc=) 9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=) 10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=) 11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=) 12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=) 13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=) 14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=) 15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=) 16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=) 17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: R11m43kiUR6LcHzRa4ix8k/4iaqyS6wkRvV/iVA3mLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:27:48:a5:46:a0:57:ba:aa:3a:3a:cd:47:07:49:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jul 2 08:01:01 2025 GMT Not After : Jul 3 08:01:01 2025 GMT Subject: CN=070271ee4bb4f48c3241a39d3390820be6da158a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:c0:7e:fd:76:17:d3:19:8b:e7:9e:2d:70: 8b:93:de:ec:fb:cf:3c:e2:a8:16:3a:55:ef:b1:f8: 8c:3c:cd:a7:56:f6:21:9d:2f:51:2e:bf:75:38:ed: ec:26:5e:11:79:c6:29:3b:a8:ab:cf:0a:c5:c3:a5: a6:f7:09:7a:64:e9:49:8a:37:80:bd:b1:ea:37:7f: 73:67:02:e5:2a:66:39:36:1b:54:de:72:aa:b7:79: 30:67:6f:9c:1a:a2:06:08:d8:85:45:95:5e:6b:90: 62:f2:0b:59:52:c1:a4:06:a0:d4:8d:f5:a8:33:73: 40:e1:fe:8d:ec:67:22:59:f6:67:ba:cc:01:98:22: fb:8b:f7:8c:32:7c:c7:39:ee:00:77:aa:ce:90:3a: 3b:f0:1d:ea:44:8b:44:24:c2:4c:c3:ff:bc:f8:8f: 28:82:59:6f:ca:d6:56:76:db:39:25:8a:8f:1e:4b: 75:da:20:8f:db:85:f7:68:a2:84:5b:b9:e6:8f:fc: da:79:de:c2:ba:c9:3d:fd:98:16:de:28:26:83:02: 59:d6:95:c8:77:3a:ee:ec:47:e2:e0:c9:20:2f:c9: 5c:90:58:6b:c3:a8:a4:76:f1:18:a9:d1:83:e7:c3: fb:81:b1:5f:a1:49:f4:c2:77:23:02:fa:fd:1c:89: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:02:71:EE:4B:B4:F4:8C:32:41:A3:9D:33:90:82:0B:E6:DA:15:8A X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:69:e8:7a:b9:b9:e7:e2:9d:fb:21:32:ff:97:e4:38:d3:ae: 58:2a:0b:4d:d0:2d:fa:92:3d:9f:d9:4e:8a:04:8b:08:3d:80: 02:6e:95:ae:cb:9d:08:0b:af:84:4d:fc:03:ac:b9:2f:cd:7f: 64:a5:3e:b9:11:8b:9c:f2:2e:dd:bc:93:af:9b:83:17:92:cf: 04:10:02:e6:e7:09:82:9c:81:85:38:6c:20:64:b7:71:40:69: c9:94:56:f2:66:63:cc:30:bf:17:7a:f3:19:42:15:eb:17:ea: 2a:67:ca:c2:e6:da:a4:92:fa:39:8d:f8:a3:63:57:74:1e:ec: 03:07:23:ad:67:4c:ad:96:56:af:73:47:dd:36:dc:e0:5e:d2: cc:df:af:df:be:5c:f8:f7:77:61:9c:75:0f:a3:e7:2d:a3:d9: 5b:93:f3:f4:95:04:60:46:cc:39:75:f7:9b:db:b5:0b:04:29: 25:18:38:fc:e5:92:3a:ee:a9:1b:05:2a:08:fe:50:6e:fd:7b: 68:a3:5f:55:f5:0f:8f:7f:bb:dc:dd:8c:9f:67:fd:4b:af:81: 6e:67:f5:e4:2e:1b:ef:af:4e:8d:46:ef:ca:70:69:18:9c:8d: 40:41:05:df:32:e5:70:54:45:eb:4f:56:d8:fc:ab:ae:ff:a0: c3:02:8a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKJ0ilRqBXuqo6Os1HB0kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjUwNzAyMDgwMTAxWhcNMjUwNzAzMDgwMTAxWjAzMTEwLwYDVQQD EygwNzAyNzFlZTRiYjRmNDhjMzI0MWEzOWQzMzkwODIwYmU2ZGExNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVXAfv12F9MZi+eeLXCLk97s+888 4qgWOlXvsfiMPM2nVvYhnS9RLr91OO3sJl4RecYpO6irzwrFw6Wm9wl6ZOlJijeA vbHqN39zZwLlKmY5NhtU3nKqt3kwZ2+cGqIGCNiFRZVea5Bi8gtZUsGkBqDUjfWo M3NA4f6N7GciWfZnuswBmCL7i/eMMnzHOe4Ad6rOkDo78B3qRItEJMJMw/+8+I8o gllvytZWdts5JYqPHkt12iCP24X3aKKEW7nmj/zaed7Cusk9/ZgW3igmgwJZ1pXI dzru7Efi4MkgL8lckFhrw6ikdvEYqdGD58P7gbFfoUn0wncjAvr9HIn2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcCce5LtPSMMkGjnTOQggvm2hWKMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2noerm5 5+Kd+yEy/5fkONOuWCoLTdAt+pI9n9lOigSLCD2AAm6VrsudCAuvhE38A6y5L81/ ZKU+uRGLnPIu3byTr5uDF5LPBBAC5ucJgpyBhThsIGS3cUBpyZRW8mZjzDC/F3rz GUIV6xfqKmfKwubapJL6OY34o2NXdB7sAwcjrWdMrZZWr3NH3Tbc4F7SzN+v375c +Pd3YZx1D6PnLaPZW5Pz9JUEYEbMOXX3m9u1CwQpJRg4/OWSOu6pGwUqCP5Qbv17 aKNfVfUPj3+73N2Mn2f9S6+Bbmf15C4b769OjUbvynBpGJyNQEEF3zLlcFRF609W 2Pyrrv+gwwKKVw== -----END CERTIFICATE-----Generated at Wed Jul 2 13:03:52 2025 by rpki-client