$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: VkkU3GpFv3OxaapCDT3Shn/8SUgXrgSMFxAXYkuw3XI= Subject key identifier: 82:5B:39:31:D0:4E:F1:7A:AB:C3:D8:D0:01:78:1C:A8:5A:93:D9:4F Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 0198D6988E72B4103C0C95DC33A632C97DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 0FA1 Signing time: Sat 23 Aug 2025 11:02:58 +0000 Manifest this update: Sat 23 Aug 2025 11:02:58 +0000 Manifest next update: Sun 24 Aug 2025 11:02:58 +0000 Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=) 2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=) 3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: KeEF1Rds7LyNAsJi6Nfi/p1PjqSoeCe7Qi/OciPPKNE=) 4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=) 5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=) 6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=) 7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=) 8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=) 9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=) 10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:8e:72:b4:10:3c:0c:95:dc:33:a6:32:c9:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Aug 23 11:02:58 2025 GMT Not After : Aug 24 11:02:58 2025 GMT Subject: CN=825b3931d04ef17aabc3d8d001781ca85a93d94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2c:5d:e4:fc:8b:20:04:b9:65:d7:fb:66:32: 4d:26:6d:68:ee:7e:3b:03:ca:63:89:30:64:9f:bb: d4:a1:d4:20:63:b2:dc:9d:42:e1:15:83:ab:a0:0d: 2e:4e:d0:ff:76:6a:47:81:10:26:04:af:e6:51:ea: e1:a7:72:57:4b:72:c9:29:59:a9:1d:d2:2c:39:c7: 4e:bc:7d:f4:f7:2b:49:48:f7:5b:04:83:31:6f:37: 4f:ea:2e:1a:b1:21:38:a3:4e:9f:ab:ae:eb:84:40: 00:c2:04:34:ec:69:50:19:04:38:3e:df:73:8c:4c: 5a:e4:15:2d:4e:a3:3c:50:41:98:67:94:ca:c2:90: 85:bc:4f:43:6f:bf:bd:37:8c:34:3e:83:b3:7a:f3: 48:92:1d:8f:ff:af:fc:dc:25:20:4c:60:d0:d3:33: a5:b2:44:e6:a4:bc:a1:e5:a8:f0:ca:e7:a0:91:99: ec:7c:92:45:19:73:56:70:16:57:00:e6:31:9c:77: a8:72:8c:ac:ce:52:22:d1:ff:6a:4c:df:8a:56:c7: 62:0f:e8:f3:73:7b:77:3d:1d:43:ab:28:39:2b:80: 26:95:48:a9:a1:8e:48:91:84:5f:dd:d4:f4:61:f7: 04:e9:5f:05:59:b3:c2:c5:e6:e8:4b:19:12:25:35: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5B:39:31:D0:4E:F1:7A:AB:C3:D8:D0:01:78:1C:A8:5A:93:D9:4F X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:79:6c:84:59:41:30:1e:ca:fc:8c:f0:99:8f:3d:03:f2:0d: d8:0e:6d:22:b2:ec:6e:1a:7e:ff:48:98:5f:01:95:74:9b:a8: b2:83:33:4d:7e:f3:37:20:0f:e9:e3:49:b1:3d:0e:25:33:56: 69:c3:bc:cd:ca:50:c6:dd:d3:f6:6b:df:f8:52:ff:be:6d:fb: 05:d5:b4:0b:df:df:2a:a4:6e:fa:8c:cb:82:ae:66:52:80:5e: a0:84:e3:9c:fe:e2:b0:83:8e:b7:37:44:99:52:b4:e0:7e:88: 8e:d7:c9:5a:97:08:78:ae:57:26:48:f4:e4:08:98:3a:98:ca: 9a:c5:12:86:08:d9:02:e9:68:6e:db:4d:90:dc:9a:f0:3d:e8: c0:82:96:07:f6:72:51:27:fb:97:55:35:a2:35:98:d0:43:85: 6b:b8:ac:27:b1:a6:f2:d0:4c:cb:3e:f7:75:b3:48:b0:50:59: ae:b4:c2:74:83:7a:ef:48:9f:09:9d:d8:bf:f0:02:87:af:9e: 6e:12:f6:8b:4d:26:fb:6e:ea:32:6b:f0:f6:2a:e5:e8:6f:ce: e7:1b:4c:c6:07:17:20:39:80:75:a6:51:2d:bf:16:3b:24:52: 3e:36:30:8c:d1:5c:55:9c:f6:9a:f6:2b:69:9b:4b:ed:4b:fd: 0b:ea:4c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmI5ytBA8DJXcM6YyyX39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjUwODIzMTEwMjU4WhcNMjUwODI0MTEwMjU4WjAzMTEwLwYDVQQD Eyg4MjViMzkzMWQwNGVmMTdhYWJjM2Q4ZDAwMTc4MWNhODVhOTNkOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyxd5PyLIAS5Zdf7ZjJNJm1o7n47 A8pjiTBkn7vUodQgY7LcnULhFYOroA0uTtD/dmpHgRAmBK/mUerhp3JXS3LJKVmp HdIsOcdOvH309ytJSPdbBIMxbzdP6i4asSE4o06fq67rhEAAwgQ07GlQGQQ4Pt9z jExa5BUtTqM8UEGYZ5TKwpCFvE9Db7+9N4w0PoOzevNIkh2P/6/83CUgTGDQ0zOl skTmpLyh5ajwyuegkZnsfJJFGXNWcBZXAOYxnHeocoyszlIi0f9qTN+KVsdiD+jz c3t3PR1Dqyg5K4AmlUipoY5IkYRf3dT0YfcE6V8FWbPCxeboSxkSJTVYGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJbOTHQTvF6q8PY0AF4HKhak9lPMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3lshFlB MB7K/IzwmY89A/IN2A5tIrLsbhp+/0iYXwGVdJuosoMzTX7zNyAP6eNJsT0OJTNW acO8zcpQxt3T9mvf+FL/vm37BdW0C9/fKqRu+ozLgq5mUoBeoITjnP7isIOOtzdE mVK04H6IjtfJWpcIeK5XJkj05AiYOpjKmsUShgjZAulobttNkNya8D3owIKWB/Zy USf7l1U1ojWY0EOFa7isJ7Gm8tBMyz73dbNIsFBZrrTCdIN670ifCZ3Yv/ACh6+e bhL2i00m+27qMmvw9irl6G/O5xtMxgcXIDmAdaZRLb8WOyRSPjYwjNFcVZz2mvYr aZtL7Uv9C+pMKA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:55 2025 by rpki-client