$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json) Hash identifier: EzEFpI5LFS2G7txz95AbSq+SmVzAyKvuLXh2HX+MQNE= Subject key identifier: 7D:C1:C6:D1:9F:AA:ED:16:E3:58:17:30:27:86:93:87:36:DC:B3:57 Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 01987419577B6711B8DE8A0EEEB831F32E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft Manifest number: 0F6E Signing time: Mon 04 Aug 2025 08:01:14 +0000 Manifest this update: Mon 04 Aug 2025 08:01:14 +0000 Manifest next update: Tue 05 Aug 2025 08:01:14 +0000 Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=) 2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=) 3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: NTxvdxSUnft6f2/3pKNFN8x8UquAPAqsGZFdkuC+8mU=) 4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=) 5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=) 6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=) 7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=) 8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=) 9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=) 10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:19:57:7b:67:11:b8:de:8a:0e:ee:b8:31:f3:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Aug 4 08:01:14 2025 GMT Not After : Aug 5 08:01:14 2025 GMT Subject: CN=7dc1c6d19faaed16e35817302786938736dcb357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:b5:ba:12:30:ca:d6:b8:91:39:1a:95:3f: 09:86:22:da:2c:cf:f8:34:38:1d:db:1a:e2:48:fc: 5c:91:13:92:c0:76:f4:20:d8:4f:5a:39:1d:1f:aa: de:3e:77:03:2c:92:62:fb:7f:40:e6:61:d6:66:27: 50:0f:d4:ab:9c:1f:02:c3:43:40:e7:2a:44:10:fd: 7b:65:38:40:52:ce:ce:f4:09:b0:93:fb:fe:1d:11: 3c:ff:c6:1c:a0:48:d0:4c:e0:1d:d7:e4:f4:b9:c9: a8:46:eb:9c:1b:f6:85:03:9f:42:6f:78:e8:4e:5a: e9:10:37:e4:db:e1:c9:7d:df:99:1e:96:f2:1a:95: 26:36:d2:a0:3e:15:5f:67:13:7d:d6:b9:c9:8e:7c: 99:cb:61:09:da:da:68:e4:ae:83:00:85:72:ab:b6: 8a:5c:3c:63:d5:fb:f7:9e:f1:fa:83:03:58:ca:b0: aa:88:76:07:a2:b5:4c:60:33:5b:a9:38:24:37:42: 9c:90:b1:f1:14:34:bf:42:8e:74:69:44:35:1c:94: 30:c4:49:cd:af:e7:e1:6b:b3:13:e1:6d:48:56:ea: 72:b0:f2:da:95:5f:f2:c7:8b:0a:17:bd:47:45:55: de:37:da:07:0f:d7:42:a4:b4:4d:17:dd:2b:eb:b5: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C1:C6:D1:9F:AA:ED:16:E3:58:17:30:27:86:93:87:36:DC:B3:57 X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c7:33:2c:37:16:70:33:7b:aa:22:a7:1a:18:dc:c2:2b:99: 4d:35:2f:48:d0:89:f5:63:f4:c3:de:20:83:09:bd:af:97:e1: c1:32:56:15:51:8c:2e:ba:ec:0e:42:fc:66:3e:ab:96:58:0d: 9c:e1:18:1c:db:6a:9a:f3:02:23:1c:be:59:04:a5:c6:d3:48: df:d0:8a:9f:82:67:5d:82:ea:26:48:a7:69:21:ad:ff:9e:88: b3:ac:63:e4:ba:20:31:8d:ba:28:fd:18:c8:19:3f:22:09:85: 33:4e:1c:ab:5f:6a:e7:d1:55:11:5a:8b:7a:41:d4:4e:e8:38: cd:6b:a6:c4:09:56:cc:ef:01:d0:46:b2:76:40:3c:95:48:4d: c6:5d:56:e3:cc:ed:9b:47:25:37:fa:36:74:79:69:96:0e:65: 01:7a:85:c5:3e:65:dd:67:5a:73:55:92:8b:8c:12:67:26:1e: 5b:46:5e:d1:61:c3:9a:d5:0b:d4:9c:b7:54:7c:f6:e4:02:d3: 7c:80:ef:3a:01:c6:69:18:4b:6a:14:05:ec:4b:bc:e1:63:ec: 13:6d:b8:63:b0:50:03:01:bb:bf:fd:55:15:9e:b8:c8:7f:29: 5f:6a:41:72:59:c6:1f:ac:cc:bf:2a:08:c5:e1:6c:44:fe:05: 09:3f:87:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GVd7ZxG43ooO7rgx8y4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjUwODA0MDgwMTE0WhcNMjUwODA1MDgwMTE0WjAzMTEwLwYDVQQD Eyg3ZGMxYzZkMTlmYWFlZDE2ZTM1ODE3MzAyNzg2OTM4NzM2ZGNiMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodO1uhIwyta4kTkalT8JhiLaLM/4 NDgd2xriSPxckROSwHb0INhPWjkdH6rePncDLJJi+39A5mHWZidQD9SrnB8Cw0NA 5ypEEP17ZThAUs7O9Amwk/v+HRE8/8YcoEjQTOAd1+T0ucmoRuucG/aFA59Cb3jo TlrpEDfk2+HJfd+ZHpbyGpUmNtKgPhVfZxN91rnJjnyZy2EJ2tpo5K6DAIVyq7aK XDxj1fv3nvH6gwNYyrCqiHYHorVMYDNbqTgkN0KckLHxFDS/Qo50aUQ1HJQwxEnN r+fha7MT4W1IVupysPLalV/yx4sKF71HRVXeN9oHD9dCpLRNF90r67U3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3BxtGfqu0W41gXMCeGk4c23LNXMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8czLDcW cDN7qiKnGhjcwiuZTTUvSNCJ9WP0w94ggwm9r5fhwTJWFVGMLrrsDkL8Zj6rllgN nOEYHNtqmvMCIxy+WQSlxtNI39CKn4JnXYLqJkinaSGt/56Is6xj5LogMY26KP0Y yBk/IgmFM04cq19q59FVEVqLekHUTug4zWumxAlWzO8B0EaydkA8lUhNxl1W48zt m0clN/o2dHlplg5lAXqFxT5l3Wdac1WSi4wSZyYeW0Ze0WHDmtUL1Jy3VHz25ALT fIDvOgHGaRhLahQF7Eu84WPsE224Y7BQAwG7v/1VFZ64yH8pX2pBclnGH6zMvyoI xeFsRP4FCT+HFQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:24:50 2025 by rpki-client