$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: UnMZh8prownApnL0Qq83XBwjFeyndhJnVpaLY96FcqY= Subject key identifier: 41:E9:A1:FC:94:E8:CA:04:EE:72:EA:2A:8E:22:44:70:F0:92:F0:BD Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019872CFE3240E68659F495A801A20B6F1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1639 Signing time: Mon 04 Aug 2025 02:01:23 +0000 Manifest this update: Mon 04 Aug 2025 02:01:23 +0000 Manifest next update: Tue 05 Aug 2025 02:01:23 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: aEokgVrkI6AgiFvIKGsyqTMDjYngRntLr2naLveo6cs=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:e3:24:0e:68:65:9f:49:5a:80:1a:20:b6:f1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Aug 4 02:01:23 2025 GMT Not After : Aug 5 02:01:23 2025 GMT Subject: CN=41e9a1fc94e8ca04ee72ea2a8e224470f092f0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:16:bd:5f:ff:7b:ad:db:a6:8a:60:9f:1e: 66:de:a4:0b:c2:3c:31:2c:2c:d5:c2:38:d1:f7:56: 9c:85:3e:3f:f1:2c:3e:a0:14:a4:0c:ce:8d:95:4f: 3d:dc:11:55:6e:f5:26:24:9d:92:ce:a3:69:ea:15: 4a:80:b5:50:e2:14:5b:61:18:bd:5a:c8:29:ba:e7: de:eb:9a:62:18:a4:ba:b3:44:7e:b2:59:48:e9:b9: 2d:11:2b:4c:d3:a0:d3:f3:72:fb:9c:c2:df:91:cc: 8b:d9:d5:e6:62:19:f2:cd:f4:75:7d:61:65:af:5f: 4f:f6:41:02:4b:ea:13:e1:94:f1:e8:3b:1d:24:80: f2:f3:58:f5:fe:6e:26:76:d2:a0:24:e2:72:3c:1d: 0e:67:74:04:5c:54:de:f8:34:b6:32:a7:30:cc:99: 4e:a5:3c:18:4b:6f:67:00:fb:1b:18:e8:d6:79:6e: 11:7a:d9:18:5b:7c:e5:ad:2d:fa:f6:ff:15:bb:64: fc:ee:9e:ff:83:f0:59:f3:d0:d3:7c:1a:6f:7c:00: f5:fd:4b:61:52:8a:2e:25:b8:48:eb:c5:d3:73:d7: 8d:bf:60:7b:8b:2c:18:bf:02:d7:3e:b3:37:be:21: 50:4b:fe:53:e0:50:2d:46:ff:0e:e8:0b:f2:82:cf: 98:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E9:A1:FC:94:E8:CA:04:EE:72:EA:2A:8E:22:44:70:F0:92:F0:BD X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:72:92:16:56:24:af:f1:72:0e:08:b1:72:9c:ab:e6:6d:c5: f9:00:e8:02:47:dc:d5:26:65:df:4b:07:81:46:5d:5f:e4:2b: 59:39:91:f2:8a:43:2d:8c:2a:44:c6:42:73:4d:6b:23:98:a7: 96:10:6b:83:7f:3c:c9:58:a7:71:08:c4:a0:87:7b:7e:d0:c4: 5f:82:01:1a:ff:c2:29:2e:5f:ee:b2:47:38:2e:5d:b9:7f:63: 6d:32:c5:07:e9:eb:c3:8c:32:97:c3:ac:08:00:ea:b5:07:ce: 04:73:15:99:7b:fd:9d:38:9f:c0:84:b1:f9:01:bf:03:76:af: bc:c1:83:fe:14:43:93:2d:3c:3a:86:f9:65:b4:bd:a1:cb:8d: e4:5d:a5:63:0e:9b:1f:93:f4:54:a8:62:05:27:20:bd:44:75: da:e8:61:b1:e5:09:5a:b6:8e:0b:30:f0:4a:e3:51:2e:d1:14: 56:0a:05:d6:69:48:5b:76:3f:02:e4:eb:b5:00:08:5f:e0:47: 92:83:75:bc:7c:a6:3a:19:78:1b:35:94:64:0f:4d:1a:8e:d8: d1:ee:4c:e3:df:5f:b3:da:b5:8f:22:6d:6e:48:dd:04:4e:4c: 6a:13:21:e8:ed:7d:ab:de:b6:4f:36:7e:19:ad:da:fb:3a:ac: 8c:6b:ed:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz+MkDmhln0lagBogtvHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUwODA0MDIwMTIzWhcNMjUwODA1MDIwMTIzWjAzMTEwLwYDVQQD Eyg0MWU5YTFmYzk0ZThjYTA0ZWU3MmVhMmE4ZTIyNDQ3MGYwOTJmMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTsWvV//e63bpopgnx5m3qQLwjwx LCzVwjjR91achT4/8Sw+oBSkDM6NlU893BFVbvUmJJ2SzqNp6hVKgLVQ4hRbYRi9 Wsgpuufe65piGKS6s0R+sllI6bktEStM06DT83L7nMLfkcyL2dXmYhnyzfR1fWFl r19P9kECS+oT4ZTx6DsdJIDy81j1/m4mdtKgJOJyPB0OZ3QEXFTe+DS2MqcwzJlO pTwYS29nAPsbGOjWeW4RetkYW3zlrS369v8Vu2T87p7/g/BZ89DTfBpvfAD1/Uth UoouJbhI68XTc9eNv2B7iywYvwLXPrM3viFQS/5T4FAtRv8O6Avygs+YXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHpofyU6MoE7nLqKo4iRHDwkvC9MB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXKSFlYk r/FyDgixcpyr5m3F+QDoAkfc1SZl30sHgUZdX+QrWTmR8opDLYwqRMZCc01rI5in lhBrg388yVincQjEoId7ftDEX4IBGv/CKS5f7rJHOC5duX9jbTLFB+nrw4wyl8Os CADqtQfOBHMVmXv9nTifwISx+QG/A3avvMGD/hRDky08Oob5ZbS9ocuN5F2lYw6b H5P0VKhiBScgvUR12uhhseUJWraOCzDwSuNRLtEUVgoF1mlIW3Y/AuTrtQAIX+BH koN1vHymOhl4GzWUZA9NGo7Y0e5M499fs9q1jyJtbkjdBE5MahMh6O19q962TzZ+ Ga3a+zqsjGvtVw== -----END CERTIFICATE-----Generated at Mon Aug 4 10:59:08 2025 by rpki-client