$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: xAiAWVBEGxNWxhpF/t28HKT45GApntP3nlWK77myguk= Subject key identifier: 38:D7:0A:14:83:46:43:0E:C7:C0:4F:E1:B6:86:CC:6D:FC:C6:67:C6 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 01987CE58CFAC966FA9DFF375C2B7EA4F965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 164E Signing time: Wed 06 Aug 2025 01:01:15 +0000 Manifest this update: Wed 06 Aug 2025 01:01:15 +0000 Manifest next update: Thu 07 Aug 2025 01:01:15 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: 64BuSo6QeM7L2F_aJTPA9sLOhdA.roa (hash: PMaqbn0zm5F2agi1ODk8ksX5oGo5YkM5MuQW4TQfPLY=) 3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 5: MoOd3UbtCS1jCqfk4Eq1ESLwwHA.roa (hash: IUTY6Kac0RWR6KocRHT3FV3q0t8rT1+uiwnGYkc7UDc=) 6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: hgYBa2AY7d/Co0UjtbjOHOUeCsxOjNP89fIdxVqnFDs=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:8c:fa:c9:66:fa:9d:ff:37:5c:2b:7e:a4:f9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Aug 6 01:01:15 2025 GMT Not After : Aug 7 01:01:15 2025 GMT Subject: CN=38d70a148346430ec7c04fe1b686cc6dfcc667c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:3b:d9:06:a6:c4:ea:ba:9e:f6:ee:6f:7e: cf:e2:3e:f9:5c:11:58:04:76:16:d2:61:e3:ea:d7: bb:e6:14:c7:69:bb:81:83:29:c8:cb:ed:d7:73:a7: db:dd:f9:7a:23:b4:ad:81:f5:7d:d8:d4:4d:98:cd: 50:bd:61:7e:18:67:e6:d8:c7:93:a6:e2:46:85:d8: 66:dd:78:1c:bd:28:62:ad:2d:1c:31:84:07:62:85: de:a7:91:05:bd:93:75:79:0d:50:e2:3f:f8:3f:d2: 0d:c3:0e:a0:0a:08:93:77:c5:6c:9b:21:cc:e3:44: 5e:ba:c2:8d:d8:a0:c8:04:b8:ec:b1:61:38:f1:76: 55:09:ca:71:42:18:0d:6c:8a:3c:e0:65:4f:de:64: 23:bb:f9:9e:c3:13:be:93:8f:63:bd:ca:2a:e5:88: 2a:df:b3:fb:8a:52:46:e2:82:80:27:27:f1:53:77: b1:01:c5:2f:84:1f:c2:cc:ac:73:37:ba:c5:07:6a: 96:dc:ad:1c:fd:74:67:9d:09:8c:de:6a:b4:58:25: 4d:43:0e:dd:d3:c1:ad:b8:6f:fe:98:96:66:a8:3b: 8f:6f:31:86:8e:a3:2a:f1:cb:ab:18:54:90:2a:10: 8c:55:86:6c:43:99:7a:a9:79:72:07:80:0e:07:f7: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D7:0A:14:83:46:43:0E:C7:C0:4F:E1:B6:86:CC:6D:FC:C6:67:C6 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e0:ae:ab:c4:e3:f8:0a:4a:23:15:c4:f6:a1:71:99:41:98: b9:9e:f0:18:3c:b7:f4:55:3d:72:2c:5e:32:e2:46:ad:90:e6: 7b:6e:8d:cf:2d:5a:fc:85:66:92:f0:1c:44:b7:e1:2e:d7:42: 25:31:a8:33:7a:1e:22:a6:f2:da:72:5d:10:7b:2b:4a:b7:98: a0:73:e1:45:99:93:60:68:71:fe:ff:79:bf:a5:c0:c6:f8:2a: ca:ea:fb:5e:1e:29:d2:aa:77:e9:30:ef:9c:c5:b2:21:48:00: 7f:75:76:db:4f:47:bd:32:d3:0b:05:a1:55:2f:b5:4d:d4:3f: 02:7f:21:45:d4:c1:08:cb:2e:bf:6d:5b:16:54:a4:f9:96:f1: 31:6b:31:fe:0e:42:08:49:b6:d7:73:cc:83:41:01:51:db:2b: 63:73:55:0f:d1:b4:ed:29:92:91:35:68:d5:9d:54:44:0d:39: 94:5f:88:0e:b9:15:23:9b:37:2f:7c:7c:62:c5:d7:eb:ae:d9: 28:8b:3f:5c:6d:fc:51:83:36:b2:cf:b9:31:17:ba:ee:8d:1a: 40:63:b2:5f:e5:64:4d:f3:6f:fe:2e:7b:1a:05:52:1d:87:2e: 82:08:da:46:89:be:32:58:3a:b5:ba:93:4d:21:3d:f5:37:2a: 95:ab:5d:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85Yz6yWb6nf83XCt+pPllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUwODA2MDEwMTE1WhcNMjUwODA3MDEwMTE1WjAzMTEwLwYDVQQD EygzOGQ3MGExNDgzNDY0MzBlYzdjMDRmZTFiNjg2Y2M2ZGZjYzY2N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbE72QamxOq6nvbub37P4j75XBFY BHYW0mHj6te75hTHabuBgynIy+3Xc6fb3fl6I7StgfV92NRNmM1QvWF+GGfm2MeT puJGhdhm3XgcvShirS0cMYQHYoXep5EFvZN1eQ1Q4j/4P9INww6gCgiTd8VsmyHM 40ReusKN2KDIBLjssWE48XZVCcpxQhgNbIo84GVP3mQju/mewxO+k49jvcoq5Ygq 37P7ilJG4oKAJyfxU3exAcUvhB/CzKxzN7rFB2qW3K0c/XRnnQmM3mq0WCVNQw7d 08GtuG/+mJZmqDuPbzGGjqMq8curGFSQKhCMVYZsQ5l6qXlyB4AOB/fjIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjXChSDRkMOx8BP4baGzG38xmfGMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuCuq8Tj +ApKIxXE9qFxmUGYuZ7wGDy39FU9cixeMuJGrZDme26Nzy1a/IVmkvAcRLfhLtdC JTGoM3oeIqby2nJdEHsrSreYoHPhRZmTYGhx/v95v6XAxvgqyur7Xh4p0qp36TDv nMWyIUgAf3V2209HvTLTCwWhVS+1TdQ/An8hRdTBCMsuv21bFlSk+ZbxMWsx/g5C CEm213PMg0EBUdsrY3NVD9G07SmSkTVo1Z1URA05lF+IDrkVI5s3L3x8YsXX667Z KIs/XG38UYM2ss+5MRe67o0aQGOyX+VkTfNv/i57GgVSHYcuggjaRom+Mlg6tbqT TSE99TcqlatdiQ== -----END CERTIFICATE-----Generated at Wed Aug 6 04:02:27 2025 by rpki-client