$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: 5eCozCH+JZOIGnKhYRtDNDn0e4i00L13HkKJBJ9fdXI= Subject key identifier: 0F:5A:4D:3D:2A:CD:C0:BD:4F:DF:1E:3F:9A:54:A7:E0:19:C9:F8:47 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019872CF621DC838C3BDD5C804DAAC331264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 161E Signing time: Mon 04 Aug 2025 02:00:50 +0000 Manifest this update: Mon 04 Aug 2025 02:00:50 +0000 Manifest next update: Tue 05 Aug 2025 02:00:50 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: mtusCvsVHzzh8mTPDfWCoALFuNnZw644+xMmmi4nbbM=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:62:1d:c8:38:c3:bd:d5:c8:04:da:ac:33:12:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Aug 4 02:00:50 2025 GMT Not After : Aug 5 02:00:50 2025 GMT Subject: CN=0f5a4d3d2acdc0bd4fdf1e3f9a54a7e019c9f847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:69:8d:77:22:01:e8:dc:db:29:71:1d:43: bf:00:c0:f4:7d:5e:4b:f0:2d:56:ec:51:3d:c5:27: 08:59:63:98:cf:e5:61:68:48:c9:77:75:89:81:bb: 71:0c:59:db:3e:03:54:ef:59:14:8d:63:77:85:3b: ec:86:1f:fa:95:77:ae:85:fa:06:ac:0a:37:ce:42: 3c:cb:71:12:a8:5a:83:8b:b6:0e:8c:34:4e:68:5f: 1a:ff:58:f0:aa:75:92:29:fb:ed:93:d5:cd:63:de: 95:52:e5:1c:14:0e:fc:d6:f7:d7:c3:df:c5:45:68: 1f:dd:55:0e:18:d1:57:40:90:6c:a3:79:11:2d:6c: af:d1:d1:5a:58:be:96:8a:e5:20:5c:3c:2f:17:94: 16:6d:38:ba:8c:50:75:d2:5b:fb:16:f6:c2:95:18: db:37:48:f7:8e:8e:21:d9:61:27:0e:f0:de:a1:8e: bd:78:8d:de:24:55:d5:bb:39:0c:49:9d:ea:2b:8e: c7:28:99:58:52:e1:e2:a0:71:a1:66:a3:16:f6:34: a3:c3:a3:dd:49:c1:20:3c:e9:88:3b:49:78:9e:12: ae:6e:74:f1:7b:dc:ad:c9:a7:a6:97:b2:82:06:d7: 99:a3:1e:1d:b0:f1:a5:c9:e1:f2:83:bb:8b:88:ca: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:4D:3D:2A:CD:C0:BD:4F:DF:1E:3F:9A:54:A7:E0:19:C9:F8:47 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5f:41:06:cc:e6:af:63:d7:21:34:71:7f:35:30:c4:a5:6e: c8:c7:5a:76:af:8f:cb:03:22:6a:6d:8f:de:d7:39:92:92:e9: 05:7d:5d:58:d1:52:41:5e:37:9c:bf:af:e6:88:12:42:9f:8c: da:f1:10:17:92:77:bc:b7:e1:5e:41:e6:34:cd:67:51:d7:1d: ef:c8:86:0e:cb:41:2d:8a:45:f1:ae:6c:5e:72:84:d9:df:a2: 46:f6:b2:41:60:49:96:72:26:2a:ff:7b:b7:3a:be:f7:0a:ef: 75:4b:cd:e6:27:06:b3:e9:be:21:ba:56:10:a3:6e:e8:4f:f1: 88:4b:cf:4f:0c:ae:95:42:cc:d4:e3:65:0d:11:d4:ca:0b:33: 0a:55:95:30:02:07:7c:f2:0b:07:b2:a6:d0:03:56:9a:27:42: 2c:92:f8:a9:1a:3a:ab:e8:b6:09:76:e9:3a:cd:19:0f:f2:db: 64:ac:e7:d2:c3:d9:58:e7:87:b7:4e:93:42:21:0b:d5:14:a2: b0:56:17:cb:f3:f1:fe:54:86:c5:2f:77:19:79:c6:8d:78:fb: ac:9a:8d:2f:d0:27:18:58:d1:99:ab:cb:44:7c:9e:16:01:1f: d3:52:2a:13:96:6a:64:22:d3:b3:ed:ea:c9:48:45:e5:3b:f6: a2:70:3e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz2IdyDjDvdXIBNqsMxJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwODA0MDIwMDUwWhcNMjUwODA1MDIwMDUwWjAzMTEwLwYDVQQD EygwZjVhNGQzZDJhY2RjMGJkNGZkZjFlM2Y5YTU0YTdlMDE5YzlmODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnppjXciAejc2ylxHUO/AMD0fV5L 8C1W7FE9xScIWWOYz+VhaEjJd3WJgbtxDFnbPgNU71kUjWN3hTvshh/6lXeuhfoG rAo3zkI8y3ESqFqDi7YOjDROaF8a/1jwqnWSKfvtk9XNY96VUuUcFA781vfXw9/F RWgf3VUOGNFXQJBso3kRLWyv0dFaWL6WiuUgXDwvF5QWbTi6jFB10lv7FvbClRjb N0j3jo4h2WEnDvDeoY69eI3eJFXVuzkMSZ3qK47HKJlYUuHioHGhZqMW9jSjw6Pd ScEgPOmIO0l4nhKubnTxe9ytyaeml7KCBteZox4dsPGlyeHyg7uLiMo5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9aTT0qzcC9T98eP5pUp+AZyfhHMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF9BBszm r2PXITRxfzUwxKVuyMdadq+PywMiam2P3tc5kpLpBX1dWNFSQV43nL+v5ogSQp+M 2vEQF5J3vLfhXkHmNM1nUdcd78iGDstBLYpF8a5sXnKE2d+iRvayQWBJlnImKv97 tzq+9wrvdUvN5icGs+m+IbpWEKNu6E/xiEvPTwyulULM1ONlDRHUygszClWVMAIH fPILB7Km0ANWmidCLJL4qRo6q+i2CXbpOs0ZD/LbZKzn0sPZWOeHt06TQiEL1RSi sFYXy/Px/lSGxS93GXnGjXj7rJqNL9AnGFjRmavLRHyeFgEf01IqE5ZqZCLTs+3q yUhF5Tv2onA+kA== -----END CERTIFICATE-----Generated at Mon Aug 4 10:59:07 2025 by rpki-client