$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: hX8fqhEUazPDEdlOVYnvFq1rT9aArEVJD7cIejIw7Ac= Subject key identifier: FF:F6:8C:2C:A2:CE:1C:6B:15:1B:C9:8D:4F:00:25:C1:43:A1:1B:18 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 01987298475C51E04D13C3D28FB68453300C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 1712 Signing time: Mon 04 Aug 2025 01:00:39 +0000 Manifest this update: Mon 04 Aug 2025 01:00:39 +0000 Manifest next update: Tue 05 Aug 2025 01:00:39 +0000 Files and hashes: 1: 31WGNidSandr9euyp3MWEMrhhgA.roa (hash: x8vN4oWKPx+2cHAvBJjaBV1Li/LtuBIrATot66gBDS8=) 2: 610oWuA19CUxqtcpknzHzlP4b_A.roa (hash: QcmNpOYbrKuqehe3yN7fh6llD6xiMjT8+u7m0AQZJkU=) 3: 671gBYW6ETXc3uLLcMWFydigIAE.roa (hash: uojR24E1qs72oxVJvoIC5cuU67AWyV57CVyY3tIitjE=) 4: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (hash: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=) 5: B0nI6fOws8P3pqodL4PU8KT7DmU.roa (hash: nGQOoanXiIa97PP5tOpyO+UWP7GNwTyEKohGtmNn4G4=) 6: G7Gj-wNHQ4f1McLnqLZ1qzcaJ3Q.roa (hash: a3cjYcM4+KPGd8Ub1jI8tlRifmfOnBjLF0b8hwTZjiw=) 7: GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa (hash: 5W1UPJlc7q2qwrOgo4Cf0M5PPMa5x9YyDkf7wVYVJbA=) 8: OUUAGwuhS9k0RLk2OQ2YMgWfJ9k.roa (hash: I6UnjrAhwxJpksTNqd8b4yrJQsgKAZ6ux+daYCpTF24=) 9: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (hash: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=) 10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: ri5qp+3iX47NjYBqLuMWwPZt4hLZES9Slixtu0O7AE4=) 11: WIdSsyCX57O0jLNkXtjrP1vhXSg.roa (hash: g0ccLEN+zmZYzIcNucOxzQOSHm/WBMyRcfAkc8Yy9KQ=) 12: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (hash: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=) 13: _6g9hACvWcVAEeTkzJOAyhX-tWg.roa (hash: qUZvDYSWm9vpCRTIRF10lCkqAXJtkr/0IHLPg39jHcQ=) 14: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (hash: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=) 15: e6h_e1l_GBB-YTi9wxz8vLZyCdg.roa (hash: wioIGHuZ359Ftozmd9jj5SGM0AdzlgpJU2wqq65dW5I=) 16: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (hash: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=) 17: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (hash: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:47:5c:51:e0:4d:13:c3:d2:8f:b6:84:53:30:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Aug 4 01:00:39 2025 GMT Not After : Aug 5 01:00:39 2025 GMT Subject: CN=fff68c2ca2ce1c6b151bc98d4f0025c143a11b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:7d:67:62:f3:95:54:16:f8:93:10:c9:bd: 7c:85:82:12:2c:1e:33:42:9b:81:a9:eb:43:dd:e4: 02:96:3f:e9:ad:d8:98:de:f3:ee:74:84:70:90:24: fe:67:d7:ec:ef:d2:d4:7e:96:8e:ee:ed:61:06:43: 66:c7:fa:ce:53:60:27:3a:20:8f:47:32:5c:66:b0: 08:ae:43:2f:08:4d:6f:7e:ab:e5:e2:af:d8:c6:02: 6b:0a:11:18:c8:1d:4e:6c:01:47:6e:4b:6a:81:60: d1:76:53:5c:6c:77:0e:7d:8f:60:30:59:6c:05:b0: 12:c5:df:81:20:df:ac:95:a2:61:f1:d1:ca:e1:00: b2:98:45:0a:7e:cd:d3:3b:8d:9b:de:3f:98:62:3b: 84:c4:5c:84:47:e8:36:86:64:9b:ec:c7:fc:a1:72: cf:f7:b5:58:45:e2:27:1f:d4:a6:d1:2f:7d:89:30: b7:45:f9:4c:5d:21:b7:e6:e9:99:97:72:c5:72:bb: 67:35:ee:c9:48:79:1a:ab:01:ed:18:8e:b3:5f:60: 27:29:de:65:c8:41:95:6b:c6:f2:86:51:49:fd:84: 77:02:27:9e:d1:a2:54:f8:d2:6b:a0:5a:99:e1:a3: 9b:02:df:52:94:71:56:89:a8:9f:1e:53:fc:68:18: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:8C:2C:A2:CE:1C:6B:15:1B:C9:8D:4F:00:25:C1:43:A1:1B:18 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d6:33:a0:cf:54:b6:a6:b1:36:b5:01:74:69:b2:ad:5b:0f: 0e:44:a7:5f:54:aa:dd:70:fb:16:39:6f:32:01:55:9d:09:1c: 6b:2a:44:74:a6:10:40:0a:9b:c1:38:25:8d:49:4c:d1:92:29: 27:8a:32:62:9e:27:7c:60:e3:58:ba:d4:32:98:8f:e9:a1:ff: cd:d8:62:04:9a:ec:a3:18:ea:37:1f:20:bb:67:ca:8b:5f:6e: b9:23:d6:92:47:45:03:e0:af:3a:16:c4:69:33:e2:53:c5:8e: a3:f6:3e:b4:91:86:e5:fd:21:64:50:e0:a6:2e:52:49:ac:7a: 7f:08:5c:26:75:7d:fd:34:3c:aa:49:28:19:ad:bb:09:cf:1f: 72:59:b9:e3:c8:b1:9d:78:18:2a:2b:e8:ee:a0:cb:77:d5:95: c0:42:6e:a7:f4:7d:ee:38:a8:59:53:ca:dd:fc:90:10:e2:d1: 6c:9b:ca:d9:f5:19:ec:60:f1:54:06:ed:72:4e:18:5f:dc:9f: 6d:67:1a:da:93:c5:94:dd:bf:11:ca:f7:e0:b4:12:be:2e:88: 9a:b8:f4:22:49:a1:c6:98:db:39:e6:72:6b:44:7a:8a:91:b1: d4:3a:c8:e3:2b:ed:e6:26:74:ab:62:15:09:31:d0:ea:6b:70: d6:ed:a0:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymEdcUeBNE8PSj7aEUzAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjUwODA0MDEwMDM5WhcNMjUwODA1MDEwMDM5WjAzMTEwLwYDVQQD EyhmZmY2OGMyY2EyY2UxYzZiMTUxYmM5OGQ0ZjAwMjVjMTQzYTExYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLB9Z2LzlVQW+JMQyb18hYISLB4z QpuBqetD3eQClj/prdiY3vPudIRwkCT+Z9fs79LUfpaO7u1hBkNmx/rOU2AnOiCP RzJcZrAIrkMvCE1vfqvl4q/YxgJrChEYyB1ObAFHbktqgWDRdlNcbHcOfY9gMFls BbASxd+BIN+slaJh8dHK4QCymEUKfs3TO42b3j+YYjuExFyER+g2hmSb7Mf8oXLP 97VYReInH9Sm0S99iTC3RflMXSG35umZl3LFcrtnNe7JSHkaqwHtGI6zX2AnKd5l yEGVa8byhlFJ/YR3Aiee0aJU+NJroFqZ4aObAt9SlHFWiaifHlP8aBhQEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/2jCyizhxrFRvJjU8AJcFDoRsYMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNYzoM9U tqaxNrUBdGmyrVsPDkSnX1Sq3XD7FjlvMgFVnQkcaypEdKYQQAqbwTgljUlM0ZIp J4oyYp4nfGDjWLrUMpiP6aH/zdhiBJrsoxjqNx8gu2fKi19uuSPWkkdFA+CvOhbE aTPiU8WOo/Y+tJGG5f0hZFDgpi5SSax6fwhcJnV9/TQ8qkkoGa27Cc8fclm548ix nXgYKivo7qDLd9WVwEJup/R97jioWVPK3fyQEOLRbJvK2fUZ7GDxVAbtck4YX9yf bWca2pPFlN2/Ecr34LQSvi6Imrj0IkmhxpjbOeZya0R6ipGx1DrI4yvt5iZ0q2IV CTHQ6mtw1u2g9A== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:52 2025 by rpki-client