$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: W8L4/XpEAbr122sANnbx5w5ZIA7iS4OyZgP7L4yKn40= Subject key identifier: 06:D1:2F:76:82:04:44:F0:AA:3E:27:60:DB:2F:B7:EA:0C:49:DD:1A Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019873E36535A0832AD1D7598476513A1080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1635 Signing time: Mon 04 Aug 2025 07:02:19 +0000 Manifest this update: Mon 04 Aug 2025 07:02:19 +0000 Manifest next update: Tue 05 Aug 2025 07:02:19 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: nVLUumfAO+OCQEadEafryAR4cXXUmT4LUqUJb+CeRZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e3:65:35:a0:83:2a:d1:d7:59:84:76:51:3a:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Aug 4 07:02:19 2025 GMT Not After : Aug 5 07:02:19 2025 GMT Subject: CN=06d12f76820444f0aa3e2760db2fb7ea0c49dd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:b9:6b:40:eb:c9:95:a0:22:26:6e:87:73: 65:5f:1b:ee:39:37:27:91:6a:45:a2:ab:0b:07:3a: b7:10:5b:d2:fc:97:e7:3b:2e:32:c0:65:c7:b0:87: 49:a8:d3:68:60:ee:5c:da:a3:c2:6c:69:7b:46:4f: 80:f9:ea:58:f4:63:2e:0e:62:6c:e4:7d:84:7d:5e: 26:73:df:d5:fb:99:02:7e:fe:34:da:87:af:c5:c9: 6c:95:e6:2d:e7:df:8e:04:3a:99:0c:a0:a8:6f:3d: 1d:2d:da:a6:0c:3c:d6:46:5f:76:e6:d5:6c:48:44: 00:9d:a3:b0:cb:1c:c9:dc:2b:22:5d:ca:e3:9c:ab: c0:b0:98:63:28:ee:e8:65:c2:eb:c7:e5:33:fd:f0: fd:f0:9f:ff:0d:16:96:19:44:97:12:86:e8:73:0d: e7:df:fd:0f:ef:b7:a2:12:25:24:9d:ba:8f:99:4a: 72:d5:82:94:01:7b:bc:1a:a2:91:76:18:87:e1:00: 3c:a4:4f:85:9e:63:8c:0c:07:5e:fc:31:99:3d:cb: d6:21:d5:cf:aa:c0:2e:29:f7:a2:ce:88:27:e1:d8: fa:de:50:cb:5d:3e:72:9f:a1:93:58:15:2c:3a:92: 2e:ca:18:a6:ec:b6:95:f9:a4:f1:62:08:29:cb:fd: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:2F:76:82:04:44:F0:AA:3E:27:60:DB:2F:B7:EA:0C:49:DD:1A X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cc:bc:47:f9:4c:e2:3d:9f:44:52:69:71:81:d4:cd:88:78: 77:be:89:41:39:9b:b8:48:9e:7f:44:cb:f9:85:bc:a6:55:c2: 09:e5:a0:2a:72:95:e7:54:ec:aa:e4:35:f4:30:2c:4c:d5:d0: 0e:07:2f:98:29:af:44:0e:f0:b4:94:17:99:ae:20:a7:cc:72: 26:cd:46:53:fd:40:74:b7:ea:63:ab:0f:70:61:fd:41:85:63: fb:7d:3b:f0:b7:41:11:6a:ef:be:e9:38:d4:66:b2:d8:39:29: a4:48:66:f2:f5:1f:7d:1b:de:07:cd:4e:8e:d4:78:27:b7:d9: d6:34:e8:bd:30:35:f9:1e:87:3b:d5:ab:a9:a1:81:f7:98:65: 71:96:2c:24:09:e0:08:2c:fe:39:1c:9d:8a:b0:ce:af:dd:ee: 39:39:b2:65:20:6a:bf:88:9e:91:26:eb:31:dc:fd:8f:54:59: 13:35:b5:16:38:9e:f7:47:15:87:ec:8c:3f:97:f3:50:e1:7c: d9:dc:17:29:a3:68:ad:e4:e3:3b:85:72:0c:8d:39:c6:04:ec: f3:fe:5c:b5:99:99:8d:ef:e5:c0:8b:87:e1:69:f0:5d:2a:6b: 14:22:63:c1:44:30:4e:fe:a4:c1:27:2c:6b:12:04:2f:c7:a0: 4e:23:8c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz42U1oIMq0ddZhHZROhCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwODA0MDcwMjE5WhcNMjUwODA1MDcwMjE5WjAzMTEwLwYDVQQD EygwNmQxMmY3NjgyMDQ0NGYwYWEzZTI3NjBkYjJmYjdlYTBjNDlkZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcq5a0DryZWgIiZuh3NlXxvuOTcn kWpFoqsLBzq3EFvS/JfnOy4ywGXHsIdJqNNoYO5c2qPCbGl7Rk+A+epY9GMuDmJs 5H2EfV4mc9/V+5kCfv402oevxclsleYt59+OBDqZDKCobz0dLdqmDDzWRl925tVs SEQAnaOwyxzJ3CsiXcrjnKvAsJhjKO7oZcLrx+Uz/fD98J//DRaWGUSXEobocw3n 3/0P77eiEiUknbqPmUpy1YKUAXu8GqKRdhiH4QA8pE+FnmOMDAde/DGZPcvWIdXP qsAuKfeizogn4dj63lDLXT5yn6GTWBUsOpIuyhim7LaV+aTxYggpy/0DfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbRL3aCBETwqj4nYNsvt+oMSd0aMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8y8R/lM 4j2fRFJpcYHUzYh4d76JQTmbuEief0TL+YW8plXCCeWgKnKV51TsquQ19DAsTNXQ DgcvmCmvRA7wtJQXma4gp8xyJs1GU/1AdLfqY6sPcGH9QYVj+3078LdBEWrvvuk4 1Gay2DkppEhm8vUffRveB81OjtR4J7fZ1jTovTA1+R6HO9WrqaGB95hlcZYsJAng CCz+ORydirDOr93uOTmyZSBqv4iekSbrMdz9j1RZEzW1Fjie90cVh+yMP5fzUOF8 2dwXKaNoreTjO4VyDI05xgTs8/5ctZmZje/lwIuH4WnwXSprFCJjwUQwTv6kwScs axIEL8egTiOM6A== -----END CERTIFICATE-----Generated at Mon Aug 4 11:11:16 2025 by rpki-client