$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: C4g0XVvUqQaeCyatxJfRJ45UYTh86Euc0q60l3brhwE= Subject key identifier: 58:86:6A:49:5E:D3:DC:84:8E:5B:F2:0C:78:44:1A:37:B4:52:66:A6 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 0198D4727EE5FBE30BAE43D2BFC849744A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 137F Signing time: Sat 23 Aug 2025 01:02:09 +0000 Manifest this update: Sat 23 Aug 2025 01:02:09 +0000 Manifest next update: Sun 24 Aug 2025 01:02:09 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: u5+UZK5m13pp8D7mWUnPh2/G6Ju4TUo+9uhjl6rcdlc=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:7e:e5:fb:e3:0b:ae:43:d2:bf:c8:49:74:4a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Aug 23 01:02:09 2025 GMT Not After : Aug 24 01:02:09 2025 GMT Subject: CN=58866a495ed3dc848e5bf20c78441a37b45266a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:5d:4c:e8:0b:bd:77:c5:37:42:c5:ed:69: 3f:12:27:13:13:13:17:63:2f:44:85:7f:63:14:e9: 93:f4:19:96:ba:8c:6c:96:02:33:a3:78:df:ba:3a: c0:fd:fa:d0:bf:2f:a2:86:6d:fe:fa:d3:82:ad:20: 8a:b9:7b:94:80:20:7a:89:e2:33:07:15:d9:26:cf: 81:06:0e:20:6f:21:1c:59:63:ca:6c:28:a6:56:11: f0:74:79:d6:dd:f3:8d:96:03:ef:ae:51:d3:c2:cb: 36:13:5c:38:00:8a:48:42:de:d2:99:95:1c:e6:fe: dd:43:14:bb:03:f8:0d:09:7b:a1:92:61:e7:cd:7f: 46:41:74:8c:1a:bc:93:85:14:44:e9:f9:d9:fa:2e: a0:40:2f:67:d8:d6:01:20:87:85:bd:76:16:64:89: 4e:59:b7:b1:90:d4:22:2c:31:39:bf:60:ef:a0:09: d0:c4:3b:04:20:c0:7a:e2:4c:69:a6:92:bb:83:93: 91:7b:4b:5e:43:6a:a2:2f:6f:c8:ef:fe:9d:20:a4: c2:dc:e1:27:ec:5b:f0:a2:3b:1c:49:a6:8f:e0:75: 6a:61:ef:65:1d:91:aa:56:b5:dd:0d:e7:ce:3f:f2: bf:89:2e:02:f9:8c:72:88:e7:96:8d:9a:15:29:b5: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:86:6A:49:5E:D3:DC:84:8E:5B:F2:0C:78:44:1A:37:B4:52:66:A6 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:03:71:b2:08:7c:47:b0:4b:17:00:b0:a1:09:be:f8:a3:17: 47:c6:d4:98:3a:88:1b:67:7e:b4:ca:44:29:a4:97:f6:e8:fd: 44:12:66:dd:9d:42:9f:33:1a:67:54:d6:10:41:ae:79:80:23: 15:0e:e3:99:11:21:dd:9c:44:d9:ca:8f:bd:b9:19:7c:75:bd: 69:bd:da:7a:0d:50:4e:64:c7:16:b3:03:ac:85:9a:9e:58:d7: fc:50:6d:e8:ed:53:3c:d4:30:bc:02:d1:41:1c:9b:26:7b:94: f4:1f:27:ed:79:ea:00:b3:32:85:8e:47:28:56:29:bc:e6:1a: ca:cd:fe:c8:3c:e6:f4:47:87:7b:f0:c3:13:dd:b1:75:26:1a: d4:7a:b0:75:11:42:b1:c7:65:dc:a7:0f:be:ce:16:c9:37:37: b8:59:7a:93:30:6f:73:b3:fd:76:e8:d5:e0:0a:8b:20:ed:ba: f0:6b:bf:a7:00:10:e7:e1:c7:56:45:78:aa:4c:ae:c5:f6:5e: f9:f1:3a:c0:25:91:89:9e:eb:04:20:80:c2:83:a7:27:07:be: 76:a7:6c:29:e5:5a:49:20:67:d9:63:f3:46:ad:d0:4e:21:1f: 1d:fd:28:3d:7e:bc:93:a5:d1:7b:b0:ff:f2:e3:91:9b:f3:4e: d1:29:26:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcn7l++MLrkPSv8hJdEoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUwODIzMDEwMjA5WhcNMjUwODI0MDEwMjA5WjAzMTEwLwYDVQQD Eyg1ODg2NmE0OTVlZDNkYzg0OGU1YmYyMGM3ODQ0MWEzN2I0NTI2NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnddTOgLvXfFN0LF7Wk/EicTExMX Yy9EhX9jFOmT9BmWuoxslgIzo3jfujrA/frQvy+ihm3++tOCrSCKuXuUgCB6ieIz BxXZJs+BBg4gbyEcWWPKbCimVhHwdHnW3fONlgPvrlHTwss2E1w4AIpIQt7SmZUc 5v7dQxS7A/gNCXuhkmHnzX9GQXSMGryThRRE6fnZ+i6gQC9n2NYBIIeFvXYWZIlO WbexkNQiLDE5v2DvoAnQxDsEIMB64kxpppK7g5ORe0teQ2qiL2/I7/6dIKTC3OEn 7FvwojscSaaP4HVqYe9lHZGqVrXdDefOP/K/iS4C+YxyiOeWjZoVKbWGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiGakle09yEjlvyDHhEGje0UmamMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAANxsgh8 R7BLFwCwoQm++KMXR8bUmDqIG2d+tMpEKaSX9uj9RBJm3Z1CnzMaZ1TWEEGueYAj FQ7jmREh3ZxE2cqPvbkZfHW9ab3aeg1QTmTHFrMDrIWanljX/FBt6O1TPNQwvALR QRybJnuU9B8n7XnqALMyhY5HKFYpvOYays3+yDzm9EeHe/DDE92xdSYa1HqwdRFC scdl3KcPvs4WyTc3uFl6kzBvc7P9dujV4AqLIO268Gu/pwAQ5+HHVkV4qkyuxfZe +fE6wCWRiZ7rBCCAwoOnJwe+dqdsKeVaSSBn2WPzRq3QTiEfHf0oPX68k6XRe7D/ 8uORm/NO0Skmxg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:51:46 2025 by rpki-client