$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: yIFMegE8/UyA0EA7yB2AOIp5UYrHtBfKmR5xh9MBidg= Subject key identifier: 45:2A:41:BC:92:C8:2B:18:4B:BF:26:D9:8A:CD:04:38:11:79:BF:3B Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 0198729906370926A0218F6887B324C52A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 133F Signing time: Mon 04 Aug 2025 01:01:27 +0000 Manifest this update: Mon 04 Aug 2025 01:01:27 +0000 Manifest next update: Tue 05 Aug 2025 01:01:27 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 8: qxv97i_u-oPbXERls-AuUJ-ehN0.roa (hash: 3CpmmFrGAOZMYO7PvcVF3IlSxwWNYbKDyVw/pp4ZIZ0=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: KaTkgzMHsW7itWp9im6VP3lh8qbBAIS/Ls87rL6baiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:99:06:37:09:26:a0:21:8f:68:87:b3:24:c5:2a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Aug 4 01:01:27 2025 GMT Not After : Aug 5 01:01:27 2025 GMT Subject: CN=452a41bc92c82b184bbf26d98acd04381179bf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:10:cf:af:85:e7:5c:38:a6:35:2b:d9:bc: ef:09:d7:81:8e:28:5e:ab:a1:bd:b4:c0:f0:69:4e: 16:0e:ba:c4:22:55:65:5a:cc:42:b3:be:d0:ce:93: 26:5f:88:48:39:88:24:d2:33:3b:50:ba:8b:42:e9: a2:93:13:94:2e:de:35:a0:23:2c:5e:d8:52:1b:d7: 25:18:8e:a0:8a:06:d2:a9:b1:0b:92:20:a1:2a:f7: c9:0c:95:7d:c5:fc:e1:04:8e:a7:36:07:f3:94:a6: 0f:fe:41:c5:24:5e:c4:19:54:4b:05:14:1c:e2:96: e1:9e:fa:b6:d9:ae:92:f1:0f:ff:2c:0a:16:51:f8: 9c:4f:aa:79:55:c1:b6:79:b1:a1:df:ca:c5:98:c4: cb:10:1b:85:18:51:ac:ad:93:f8:02:a5:6d:d8:30: 27:97:7f:11:9c:48:e2:8c:35:25:6f:c8:37:c2:20: f0:9c:7c:fa:2c:fe:e8:f8:85:60:85:be:ca:fe:2a: 84:33:fd:26:eb:35:20:65:1a:a0:fb:35:de:77:d3: ac:f3:58:9a:c2:42:f9:f3:c3:b0:da:ba:e5:80:f6: 3b:cb:f8:8e:04:6d:68:fd:66:90:15:da:a8:4d:a0: a1:95:2d:33:22:c2:0b:cc:c5:47:b6:78:74:1b:7a: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2A:41:BC:92:C8:2B:18:4B:BF:26:D9:8A:CD:04:38:11:79:BF:3B X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7e:59:01:6b:b4:52:98:f8:db:26:f5:63:3b:9b:b9:b8:ff: cd:82:44:7e:86:fe:51:3c:c4:e7:c8:be:46:e4:83:46:cd:fd: cc:08:e5:6a:8d:de:37:86:18:f7:ef:18:e5:18:25:ec:17:00: a0:50:c6:71:be:64:61:83:27:ed:81:d8:b6:36:96:49:5a:3e: 6e:14:64:a7:b8:bf:22:26:fe:22:2b:7b:9b:93:f4:f3:c5:dc: 0e:d7:50:0e:bc:5c:67:62:bc:6b:97:62:b3:57:5e:f5:10:8d: 59:79:68:fb:0f:d2:1b:6a:f5:c4:a8:cb:e2:38:a9:85:1a:d6: 6d:a4:2a:31:b1:bb:f9:b8:22:74:be:1a:24:97:71:a9:d3:f6: d2:97:7f:2b:2a:7e:4e:42:e5:16:ae:a8:a6:37:fb:37:20:b7: c5:b2:c0:59:2a:43:f2:20:d2:19:6d:a0:53:fa:73:1a:86:56: e7:e0:50:d6:e9:1e:19:c3:00:fe:e6:d1:f2:df:1b:1f:3d:0d: 54:a4:02:82:a4:bd:99:93:d5:31:72:8d:cd:7a:53:0c:2b:ce: 6c:88:14:aa:e4:df:f9:a8:41:59:41:f7:ed:f1:00:4b:6e:b8: 5a:8b:06:63:e5:a3:ad:6b:b3:42:13:57:a5:fc:87:ca:20:37: ea:70:82:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymQY3CSagIY9oh7MkxSpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUwODA0MDEwMTI3WhcNMjUwODA1MDEwMTI3WjAzMTEwLwYDVQQD Eyg0NTJhNDFiYzkyYzgyYjE4NGJiZjI2ZDk4YWNkMDQzODExNzliZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGEQz6+F51w4pjUr2bzvCdeBjihe q6G9tMDwaU4WDrrEIlVlWsxCs77QzpMmX4hIOYgk0jM7ULqLQumikxOULt41oCMs XthSG9clGI6gigbSqbELkiChKvfJDJV9xfzhBI6nNgfzlKYP/kHFJF7EGVRLBRQc 4pbhnvq22a6S8Q//LAoWUficT6p5VcG2ebGh38rFmMTLEBuFGFGsrZP4AqVt2DAn l38RnEjijDUlb8g3wiDwnHz6LP7o+IVghb7K/iqEM/0m6zUgZRqg+zXed9Os81ia wkL588Ow2rrlgPY7y/iOBG1o/WaQFdqoTaChlS0zIsILzMVHtnh0G3rXtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUqQbySyCsYS78m2YrNBDgReb87MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX5ZAWu0 Upj42yb1Yzububj/zYJEfob+UTzE58i+RuSDRs39zAjlao3eN4YY9+8Y5Rgl7BcA oFDGcb5kYYMn7YHYtjaWSVo+bhRkp7i/Iib+Iit7m5P088XcDtdQDrxcZ2K8a5di s1de9RCNWXlo+w/SG2r1xKjL4jiphRrWbaQqMbG7+bgidL4aJJdxqdP20pd/Kyp+ TkLlFq6opjf7NyC3xbLAWSpD8iDSGW2gU/pzGoZW5+BQ1ukeGcMA/ubR8t8bHz0N VKQCgqS9mZPVMXKNzXpTDCvObIgUquTf+ahBWUH37fEAS264WosGY+WjrWuzQhNX pfyHyiA36nCC3A== -----END CERTIFICATE-----Generated at Mon Aug 4 11:21:34 2025 by rpki-client