$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: PXl5C/y9JHJJJDbUBYRozQklPReDTQiGjYWWnVnt9pE= Subject key identifier: 1B:38:D6:CE:F1:F1:9D:D8:FE:E8:E4:9A:C5:5F:08:9F:03:F9:2D:74 Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 01987F66F48587179605E2DC96E6CA9AF103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0C5B Signing time: Wed 06 Aug 2025 12:41:50 +0000 Manifest this update: Wed 06 Aug 2025 12:41:50 +0000 Manifest next update: Thu 07 Aug 2025 12:41:50 +0000 Files and hashes: 1: 1-O5PDCUIluNLwvL9ckZlTCiic5k.roa (hash: qhMDH/EIRf4uY8j8ZGgtmM3x6fh4+mOzTAkLJHzFbx0=) 2: 1-luQCemy9M0kSM82355mkXHaPrY.roa (hash: Rn84NCkprXkTvclrJBulTbz1nE42Wu3XaN57zLtdGo0=) 3: HiyOSlWSUZyoXRKEQ8-AzqVu9kI.roa (hash: MVMF8kukmBZ4pXpEUl0dGUhwl4qbYY4jZ5ApzTER1/M=) 4: Hk5Ktlh8XX2YN7sARUN-QE2JPb4.roa (hash: lYdXNuwgAHw3EHxtGwjOEAw2Wc6pvQ+LS+ixRY0OXZk=) 5: IpV-26RSBCyAkVzi7Inj30YgLcM.roa (hash: ivn8CGpeMH35yLdwrBkCj0ryi6QOV70S64s8vxb45yQ=) 6: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 7: VxDCjm6wjynMra5WGkzJGoCPrhs.roa (hash: 6jDW1q/fW7zMLlE0XVbr19PIoHkbmzCNYkeTGYpRMW4=) 8: XICObafI1aWt9Gx2SLVaja1cbNA.roa (hash: J1QMG5TNEJpgpHuljpCaPS8baWf4GZYS8vktPPu4m00=) 9: dcRsvF_oemW3H50JvCLQ4BVZYms.roa (hash: FAyj8KsdNZUhgag1yQLUlgcxb906IkzoiWzlQwN0S/g=) 10: eVTHYh7c14c-D-F-B7SOqDObhvM.roa (hash: qrDFV3XmeSi0Zuvt7pZ0s9LJ8U6nsNBbLnOPzpjEjB4=) 11: mt3gB2c0raC2BMh6rEGbJNYm3Ug.roa (hash: OmreYbE9KnMOLnziJ5RPsRhv3maIT4ojXqoVqKrQUcA=) 12: qR99udIFfEpRtEFNZHXYjFB6UHw.roa (hash: Wi7Ba0nUM3WL8aGgOKBbibcsF2DVCoY9kqoqiK4+XEg=) 13: vRLj2XfIJCmd2h29ApFam8hZX5g.roa (hash: LIz+t7jd+u0aHEAgwFjWvD8d/UKc2KzNkRXqUvtjicM=) 14: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: WReyM75lVHaA5nDJJbSwH5OKUqFRNEJ2jf8ddVi+cJ8=) 15: zTFcUub-pCxJAeqsrvSihP3jL9M.roa (hash: d706HBkrFmt8lHoLZfF6FkynvvwF8RHS1UFZzTJGSkk=) 16: zuXJbp-JYFxMmWj9XdcLQHi0yrw.roa (hash: VOtwpuK0Kr6KYNr5b4+43BpYw2A+Nr3pOgi0+7HxvDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7f:66:f4:85:87:17:96:05:e2:dc:96:e6:ca:9a:f1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: Aug 6 12:41:50 2025 GMT Not After : Aug 7 12:41:50 2025 GMT Subject: CN=1b38d6cef1f19dd8fee8e49ac55f089f03f92d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:13:37:e5:f7:5d:a1:70:5a:66:0d:2a:1f: 7b:70:ac:4b:c6:b0:4e:5d:b0:d3:60:6f:c3:c7:e8: 11:1f:f8:3f:32:a2:08:8b:33:a5:ea:03:42:68:97: 2f:8d:bf:2a:1f:62:cf:a5:4f:c8:34:da:07:b9:e6: e1:d2:70:7d:6d:f2:ee:d3:2e:7b:7e:87:46:72:04: 04:b1:f6:a1:39:75:38:a7:ea:0f:65:67:5f:9a:c5: c5:f0:3d:2c:00:a6:2c:36:1c:79:c5:e1:cb:ce:dd: 7d:41:10:da:ad:97:2f:4d:c0:c2:bb:86:61:5f:24: 57:a3:f3:54:b7:88:b9:33:4a:b5:16:78:49:52:a0: d2:35:3c:13:58:a7:39:10:66:7c:6b:4d:d6:50:a3: dd:fb:a2:82:d0:a6:31:bf:21:76:33:d2:6b:ed:2b: 44:2c:a1:a3:14:7f:91:42:d8:3d:60:6f:c7:ea:df: 15:c6:0a:0d:57:33:8f:a4:e6:2e:36:80:f0:94:45: 82:de:5f:62:8b:08:7d:dc:8c:27:e9:b7:67:34:13: 88:b9:83:1a:93:4f:be:cb:a5:c2:ca:c1:d1:c3:e3: a7:74:fc:bf:32:f9:9b:93:15:75:c8:27:11:ec:d4: f3:61:46:5e:d1:d5:df:eb:11:02:46:dd:ba:c1:fc: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:38:D6:CE:F1:F1:9D:D8:FE:E8:E4:9A:C5:5F:08:9F:03:F9:2D:74 X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:73:c9:c7:61:20:62:93:c3:24:81:c8:44:96:4b:c7:0b:07: cd:28:ea:45:66:49:76:c2:a9:09:8f:3f:36:84:40:27:f3:79: 6b:f9:a8:62:c8:17:0f:74:22:1d:20:c5:3d:47:24:b9:be:fd: 74:08:0c:2e:49:2a:a2:cc:39:30:95:52:00:4b:56:55:d1:d2: 36:40:ff:6c:26:37:77:30:02:88:cc:39:84:08:c4:0e:5e:59: a4:75:30:fb:ea:55:d4:56:ba:a0:4f:24:4c:72:24:14:57:89: 66:ce:7a:ac:1a:2d:f5:a2:d8:c2:7a:26:63:34:3e:10:7b:26: 6e:97:7a:ef:19:17:e2:56:8d:c6:2f:ed:13:b3:ee:0e:bd:12: 7b:93:52:a9:56:f4:c4:fa:f3:c1:76:6c:db:70:18:5c:1a:b8: 0b:a2:e7:35:14:21:71:8c:15:46:14:f2:72:92:3e:8d:28:97: 15:dc:10:a1:7c:6a:00:27:47:35:62:d6:12:23:d2:ba:44:b5: c9:9b:70:f4:33:fd:1d:d6:b9:0c:a3:92:bb:3e:bf:0e:7b:c9: 91:3e:82:dd:cb:fe:98:65:e1:d2:00:17:77:28:a0:11:1b:f6: 48:fa:7e:12:e7:e5:74:4f:20:80:9c:70:f8:2e:c5:a7:f0:58: 87:43:19:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh/ZvSFhxeWBeLclubKmvEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUwODA2MTI0MTUwWhcNMjUwODA3MTI0MTUwWjAzMTEwLwYDVQQD EygxYjM4ZDZjZWYxZjE5ZGQ4ZmVlOGU0OWFjNTVmMDg5ZjAzZjkyZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T4TN+X3XaFwWmYNKh97cKxLxrBO XbDTYG/Dx+gRH/g/MqIIizOl6gNCaJcvjb8qH2LPpU/INNoHuebh0nB9bfLu0y57 fodGcgQEsfahOXU4p+oPZWdfmsXF8D0sAKYsNhx5xeHLzt19QRDarZcvTcDCu4Zh XyRXo/NUt4i5M0q1FnhJUqDSNTwTWKc5EGZ8a03WUKPd+6KC0KYxvyF2M9Jr7StE LKGjFH+RQtg9YG/H6t8VxgoNVzOPpOYuNoDwlEWC3l9iiwh93Iwn6bdnNBOIuYMa k0++y6XCysHRw+OndPy/MvmbkxV1yCcR7NTzYUZe0dXf6xECRt26wfwyIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs41s7x8Z3Y/ujkmsVfCJ8D+S10MB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3HPJx2Eg YpPDJIHIRJZLxwsHzSjqRWZJdsKpCY8/NoRAJ/N5a/moYsgXD3QiHSDFPUckub79 dAgMLkkqosw5MJVSAEtWVdHSNkD/bCY3dzACiMw5hAjEDl5ZpHUw++pV1Fa6oE8k THIkFFeJZs56rBot9aLYwnomYzQ+EHsmbpd67xkX4laNxi/tE7PuDr0Se5NSqVb0 xPrzwXZs23AYXBq4C6LnNRQhcYwVRhTycpI+jSiXFdwQoXxqACdHNWLWEiPSukS1 yZtw9DP9Hda5DKOSuz6/DnvJkT6C3cv+mGXh0gAXdyigERv2SPp+EufldE8ggJxw +C7Fp/BYh0MZPA== -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:51 2025 by rpki-client