$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: nVjGloY23DrO7NW6vfg2qb0D+cHQ9DPs+lPFOqlvESs= Subject key identifier: C2:B0:12:37:F5:F5:7E:C1:D8:92:27:2A:D9:2A:2E:08:1A:58:0B:E0 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019768F2E37A9E8EACB1A7090346B650EC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 12B5 Signing time: Fri 13 Jun 2025 11:00:37 +0000 Manifest this update: Fri 13 Jun 2025 11:00:37 +0000 Manifest next update: Sat 14 Jun 2025 11:00:37 +0000 Files and hashes: 1: 7gLBp0seupB3smWAi_oF18iZRGE.roa (hash: uNlzGqHQooJbP3MKzJQmy02N65RCgyqmWWJhnnmBz3k=) 2: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 3: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 8: qxv97i_u-oPbXERls-AuUJ-ehN0.roa (hash: 3CpmmFrGAOZMYO7PvcVF3IlSxwWNYbKDyVw/pp4ZIZ0=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: lV8Pzw2Ci188xXkTXFiKnoes5ODbPz8kF0HObRyufJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:f2:e3:7a:9e:8e:ac:b1:a7:09:03:46:b6:50:ec:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Jun 13 11:00:37 2025 GMT Not After : Jun 14 11:00:37 2025 GMT Subject: CN=c2b01237f5f57ec1d892272ad92a2e081a580be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:02:f2:b8:2a:de:1d:18:23:c6:f3:11:d2: 8b:a3:92:0e:2e:ab:b1:d1:90:03:12:6e:c4:53:5d: b6:74:97:4d:c2:92:3f:71:c2:d9:e4:70:4e:b0:16: a9:8e:6a:20:26:a2:10:9a:80:12:93:e2:0d:8e:0d: 4a:b7:e2:9e:9e:da:d2:bc:62:05:1b:7f:71:3f:bd: b7:2e:ca:a4:7f:a6:22:bd:2c:90:25:d8:3f:e2:b4: 02:77:f3:ac:67:52:41:4b:8f:32:65:14:0e:8f:7a: 41:52:cd:9c:31:29:5e:10:63:7d:ca:8a:5f:c9:ba: a1:fc:90:64:bf:a4:55:71:6d:04:7b:e8:b5:72:d3: a9:d6:3c:d9:eb:b5:8e:21:fe:65:93:22:df:7e:76: 0f:78:87:93:6a:0f:cf:11:3a:d1:c7:4b:72:30:37: fe:14:5b:0b:af:52:5c:64:e1:3b:99:72:5d:b3:7b: e2:7f:30:fd:36:c5:bb:51:42:b8:3d:6e:51:d5:df: dd:f1:a6:96:a9:76:cf:81:7e:44:4e:95:f9:0e:6e: db:b1:0e:45:db:4a:79:80:dc:f9:4f:a7:39:91:39: 9b:b0:b7:8a:22:00:6d:44:85:0c:b7:67:0d:f4:d5: 05:56:24:50:0c:85:2e:f6:1b:87:c2:6d:96:98:e2: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:12:37:F5:F5:7E:C1:D8:92:27:2A:D9:2A:2E:08:1A:58:0B:E0 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4a:f5:c4:65:56:ba:77:ec:00:f3:d3:d1:fe:f3:67:3d:10: 13:4c:5c:23:a6:69:6c:b7:45:fa:bb:36:52:c1:c0:76:87:42: 42:1d:1d:d1:62:a0:2f:60:40:c0:b4:03:52:7f:19:45:85:44: 8d:69:87:a6:21:a9:ba:c3:7b:ff:2f:5b:1b:66:8a:ef:b5:0a: 90:e5:a6:fb:e2:ed:cb:01:be:0f:88:8f:8e:65:31:d9:2c:08: c2:4c:08:ec:6a:19:33:1c:8e:6f:a7:13:c9:44:df:61:fd:70: f4:44:66:0b:f2:b0:e9:30:7f:64:c8:cb:57:2a:f3:82:35:b9: 84:a7:1f:97:0d:e8:64:d1:8b:30:55:c3:51:c0:7b:6c:63:da: 29:69:fa:a9:78:9a:78:2f:11:f2:5d:90:63:f6:77:b3:78:ba: 0d:85:00:26:57:ab:09:45:af:24:8f:0c:4c:2b:43:ec:a0:25: e3:83:2d:2c:35:5b:1b:e1:69:9d:9c:a7:de:9d:ff:4c:aa:01: fd:ed:b5:13:2f:55:f2:c7:25:ac:cc:37:c7:c6:36:87:b9:de: 51:ca:e6:20:37:31:f2:14:81:ef:99:65:f3:22:fb:8c:55:9e: 27:4d:de:c5:55:b8:87:67:b6:eb:53:2f:39:ad:e5:b1:1c:e3: 2e:86:b5:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdo8uN6no6ssacJA0a2UOybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUwNjEzMTEwMDM3WhcNMjUwNjE0MTEwMDM3WjAzMTEwLwYDVQQD EyhjMmIwMTIzN2Y1ZjU3ZWMxZDg5MjI3MmFkOTJhMmUwODFhNTgwYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMEC8rgq3h0YI8bzEdKLo5IOLqux 0ZADEm7EU122dJdNwpI/ccLZ5HBOsBapjmogJqIQmoASk+INjg1Kt+KentrSvGIF G39xP723Lsqkf6YivSyQJdg/4rQCd/OsZ1JBS48yZRQOj3pBUs2cMSleEGN9yopf ybqh/JBkv6RVcW0Ee+i1ctOp1jzZ67WOIf5lkyLffnYPeIeTag/PETrRx0tyMDf+ FFsLr1JcZOE7mXJds3vifzD9NsW7UUK4PW5R1d/d8aaWqXbPgX5ETpX5Dm7bsQ5F 20p5gNz5T6c5kTmbsLeKIgBtRIUMt2cN9NUFViRQDIUu9huHwm2WmOJcsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKwEjf19X7B2JInKtkqLggaWAvgMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEr1xGVW unfsAPPT0f7zZz0QE0xcI6ZpbLdF+rs2UsHAdodCQh0d0WKgL2BAwLQDUn8ZRYVE jWmHpiGpusN7/y9bG2aK77UKkOWm++LtywG+D4iPjmUx2SwIwkwI7GoZMxyOb6cT yUTfYf1w9ERmC/Kw6TB/ZMjLVyrzgjW5hKcflw3oZNGLMFXDUcB7bGPaKWn6qXia eC8R8l2QY/Z3s3i6DYUAJlerCUWvJI8MTCtD7KAl44MtLDVbG+FpnZyn3p3/TKoB /e21Ey9V8sclrMw3x8Y2h7neUcrmIDcx8hSB75ll8yL7jFWeJ03exVW4h2e261Mv Oa3lsRzjLoa1Zg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:17:13 2025 by rpki-client