$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft File: wOVJ_c7rApEsiodByBaAa74ZxEg.mft (raw, json) Hash identifier: bu4T3+wi4glTSAKTgiIdQQ7wo8ErBkTL9VkPFw1qvFM= Subject key identifier: A1:27:06:4C:06:AC:FE:47:C5:9A:3D:24:EE:04:B3:DB:BB:16:05:BF Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 0198744F978437F63AE04C4666BE9136B96F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft Manifest number: 0AC4 Signing time: Mon 04 Aug 2025 09:00:29 +0000 Manifest this update: Mon 04 Aug 2025 09:00:29 +0000 Manifest next update: Tue 05 Aug 2025 09:00:29 +0000 Files and hashes: 1: 92v4gOX7Hd4VpBM47MNWwQITmiQ.roa (hash: IYC56kc9QpO1Lz7tXp5PsrYKm5wg9hGG4hbFTisgloQ=) 2: BJ6lsg-DXRJALTpWPFS2koaTAyY.roa (hash: IiHbLMYyBvv8idUUWBs1VcBi/2+qrySt01qtestuj3U=) 3: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (hash: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=) 4: EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa (hash: amzFmUzQXu8Qk3jOcia7riw9XANsVxhL8nKSAMe7SvU=) 5: YxVBGHzpZ098_zTBEpObTl9p4Eg.roa (hash: JesGckTpDCNMKUvtvdV1ogwXfe3HeaDGJnDqvGhYCXo=) 6: aF1yx_YEkb4qte3WK4cEGVa4EaM.roa (hash: TFXwtunVP236lozfleJ3EGHJe+mWp3dn3FUFV/gu6fM=) 7: iDdiLh5kCcnVhEcS17XeyUklRpU.roa (hash: vH9FgKr3O/PWH1F99+7VS2TIiEwAAU+Q3wu4ESVAvX4=) 8: lb8SvljV7v-gn9cpNcy7VFlIW4U.roa (hash: TMosDmxteJN205Un1BL0SVx3OHQURc2E5+W3ttZ+rDY=) 9: qkGOcb9ML1ScPc6ocdkEc-fJdPo.roa (hash: rOYR9Hc2I/xQX5WTMTMX9NryWoJMfSMzeGQ9FnM3vXE=) 10: v4giAVOJMEch9tYcozCGJgelH1M.roa (hash: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=) 11: wOVJ_c7rApEsiodByBaAa74ZxEg.crl (hash: /jEGeY/EhjBTIE1oviuPsQRFYBCBr9sLdvdE5HJLajk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:4f:97:84:37:f6:3a:e0:4c:46:66:be:91:36:b9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Aug 4 09:00:29 2025 GMT Not After : Aug 5 09:00:29 2025 GMT Subject: CN=a127064c06acfe47c59a3d24ee04b3dbbb1605bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:be:c8:b3:b7:df:2f:bb:11:2c:58:6b:a2:6a: d0:33:b1:b8:92:8e:fb:d8:ff:8b:fd:fc:62:4d:7e: 1b:c7:a6:f3:27:c4:3b:82:bd:07:de:71:aa:44:d2: c3:d0:dc:00:53:08:2e:77:4a:46:ed:b1:a8:21:ce: e6:a6:b5:e4:ee:47:85:14:77:3c:97:b2:af:88:45: 03:3d:26:42:a4:a9:80:0c:a4:5e:7d:ee:99:99:dd: df:6b:45:3c:61:af:78:23:c8:50:ca:1b:b1:a9:21: b2:d0:95:e7:d5:cf:83:16:a6:f7:e2:4a:e1:d2:22: 85:b5:0c:b2:fe:42:f7:f1:c8:cf:55:bf:07:ec:e5: 9d:5b:55:39:ab:9f:36:1d:93:6a:a2:c3:59:0b:ae: 46:77:be:7d:2b:cb:b2:a6:bf:38:f4:f6:00:3f:09: a6:2e:f7:19:74:f2:37:36:05:32:e0:31:23:6a:ce: 13:76:db:07:2c:df:67:1a:d1:fe:7a:92:ff:a7:64: 97:ec:8b:02:bc:c4:06:36:07:c7:7c:8c:3c:24:5f: 0e:6b:4e:37:d1:14:7d:8b:74:db:9c:32:e9:e1:0b: d6:5e:e2:14:da:f1:a2:b3:47:e0:51:0f:6a:bd:df: 9b:ab:8d:cf:38:f4:cd:79:5f:16:54:40:07:4d:43: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:27:06:4C:06:AC:FE:47:C5:9A:3D:24:EE:04:B3:DB:BB:16:05:BF X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b3:74:6f:bb:f1:db:58:e8:d8:9e:b3:67:63:9b:8e:5f:87: b3:67:41:e2:39:af:c7:76:07:01:c7:2a:91:75:80:93:4e:f3: 52:b5:34:81:14:09:ae:59:14:72:94:93:2d:65:e8:f5:47:90: 56:82:62:a6:53:93:75:61:dc:30:33:52:15:d6:f2:3e:89:d7: 58:6c:39:6f:c7:a2:02:97:ed:09:9f:f6:b5:0c:ce:94:32:f0: 51:a7:e0:98:8b:6b:eb:03:31:d4:82:b7:7d:41:a6:e5:74:e5: 83:83:79:d4:b3:21:73:9b:7b:d4:49:e1:15:80:21:ad:7d:d1: c6:61:07:4b:6e:a1:0a:f0:93:34:89:17:e2:1f:86:09:67:1a: bb:57:31:1e:af:99:14:4f:8d:45:e9:5e:7c:15:8b:b0:bd:72: 57:a0:41:fb:c2:c3:44:66:54:42:c3:18:bd:60:84:fb:8e:cd: 3a:bf:91:39:d6:62:2b:11:8e:da:32:f1:80:02:06:94:6a:d0: 19:44:69:f6:50:c3:eb:95:70:fe:a4:f4:62:fb:d4:7f:4c:ce: e0:1f:d1:d3:54:6d:7c:0c:6d:a9:60:71:d3:bf:5d:59:c4:57: c2:ef:3b:57:85:be:34:05:d6:db:12:74:86:51:f7:25:df:b8: a1:a9:fe:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0T5eEN/Y64ExGZr6RNrlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjUwODA0MDkwMDI5WhcNMjUwODA1MDkwMDI5WjAzMTEwLwYDVQQD EyhhMTI3MDY0YzA2YWNmZTQ3YzU5YTNkMjRlZTA0YjNkYmJiMTYwNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b7Is7ffL7sRLFhromrQM7G4ko77 2P+L/fxiTX4bx6bzJ8Q7gr0H3nGqRNLD0NwAUwgud0pG7bGoIc7mprXk7keFFHc8 l7KviEUDPSZCpKmADKRefe6Zmd3fa0U8Ya94I8hQyhuxqSGy0JXn1c+DFqb34krh 0iKFtQyy/kL38cjPVb8H7OWdW1U5q582HZNqosNZC65Gd759K8uypr849PYAPwmm LvcZdPI3NgUy4DEjas4TdtsHLN9nGtH+epL/p2SX7IsCvMQGNgfHfIw8JF8Oa043 0RR9i3TbnDLp4QvWXuIU2vGis0fgUQ9qvd+bq43POPTNeV8WVEAHTUPPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEnBkwGrP5HxZo9JO4Es9u7FgW/MB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbN0b7vx 21jo2J6zZ2Objl+Hs2dB4jmvx3YHAccqkXWAk07zUrU0gRQJrlkUcpSTLWXo9UeQ VoJiplOTdWHcMDNSFdbyPonXWGw5b8eiApftCZ/2tQzOlDLwUafgmItr6wMx1IK3 fUGm5XTlg4N51LMhc5t71EnhFYAhrX3RxmEHS26hCvCTNIkX4h+GCWcau1cxHq+Z FE+NRelefBWLsL1yV6BB+8LDRGZUQsMYvWCE+47NOr+ROdZiKxGO2jLxgAIGlGrQ GURp9lDD65Vw/qT0YvvUf0zO4B/R01RtfAxtqWBx079dWcRXwu87V4W+NAXW2xJ0 hlH3Jd+4oan+4g== -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:09 2025 by rpki-client