$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft File: w_tAOiQYg-WPztUtOdgOq9Urs28.mft (raw, json) Hash identifier: KMuSP7j4zmUJxqPKC3i8vekGgEsg49UT57tXoeu3rOc= Subject key identifier: C5:B7:15:99:B8:8D:B9:CB:E5:C6:EA:0D:77:B1:45:DA:7A:26:48:27 Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f Certificate serial: 01960A8C5712ACD6E587D4B65747FB817815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft Manifest number: 11E2 Signing time: Sun 06 Apr 2025 10:01:31 +0000 Manifest this update: Sun 06 Apr 2025 10:01:31 +0000 Manifest next update: Mon 07 Apr 2025 10:01:31 +0000 Files and hashes: 1: 0O9x83-lbjQhQ0H0QNL4onc5rtE.roa (hash: gCcafB1+mESKS3BVJYDajJPvasqf2Tc5KeBGiyOT4to=) 2: 1-jdIlT59ATtnye0obz3ukqOdzSw.roa (hash: WZteN0hvbeOfkaazAFqc4a1Hb3S3n64JbzhuBh5/71o=) 3: 2Gso70Bxi4cBy_WodKxdmUIwtcI.roa (hash: /C593JYHyt/Js1dmu1EsZBHQvb2UcIHLzg2ko4L4lPo=) 4: 8DzD2uq5lN_KH_22IY31T_I5eUA.roa (hash: YwlgZskvfXHSFdpGYunNlSWojU8CZ8UtlqZ7vcZMWHk=) 5: H6DguWyAKB8u-XwiA-wSbFWSyyM.roa (hash: HhyM4zbUFZiPEk4/CITr/Hv8a8wBk7oLKs2GIwW2o7U=) 6: KntaM8lbcY4c01Dw4SaSSX2lodw.roa (hash: cLp1SD6XtpquL0QHMFnM+17dWoMSgXrVeFdbvQlKhQM=) 7: Phmx9blLQ7v5rgeNAupIAeVATYQ.roa (hash: ql8UKx0lpekuzUNBWqBQ1mqh/lL/DJd1b7ik/nG/cD4=) 8: ePoIjSzwu99M4WhvEDpbXSDvvQo.roa (hash: R96ob6c+Fl2Ot6tWCC9JDy+m8b6W3TjrV6Ao1DPqb1c=) 9: qQnpsIyhfC_30_02N13kTh1MqLQ.roa (hash: MbMug/0ttDrSz8GeinJuhxQXXHeOISrtY8I3Yes9Trc=) 10: w_tAOiQYg-WPztUtOdgOq9Urs28.crl (hash: tK6T2L2OZICBYQUkF9B+8EkOH7MMxcFVU0Hat1eFJTQ=) 11: yODzbE0zP6j_JHKYXWAzphsQNA8.roa (hash: VWJD33neAhmMaiHQw/4mg0RmMd404ON+a4BHqIO3tqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:8c:57:12:ac:d6:e5:87:d4:b6:57:47:fb:81:78:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f Validity Not Before: Apr 6 10:01:31 2025 GMT Not After : Apr 7 10:01:31 2025 GMT Subject: CN=c5b71599b88db9cbe5c6ea0d77b145da7a264827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:1e:7e:3b:7c:2a:4f:0a:a5:ba:49:da:a4: 2b:b7:de:d4:33:b5:e7:ff:b9:11:7f:62:5c:ea:5f: b8:d3:47:40:a1:f2:93:e0:cb:97:80:08:91:47:7f: 82:c2:17:79:6a:ef:74:6d:67:a8:79:ef:e4:4f:a6: 78:24:c2:8a:64:e6:fc:06:0f:fa:02:d2:98:12:92: 2c:bd:b6:19:c2:22:e6:0c:e5:12:0e:34:d9:11:1f: 1f:f2:ec:0a:9b:b3:9e:1b:29:7b:ba:dc:09:8e:82: e7:50:35:e7:d8:ca:7a:a1:0f:28:af:ac:c0:7b:59: e9:0c:f7:ca:9a:e4:91:2d:18:8d:11:f1:21:38:1a: 15:6c:24:9e:32:85:49:a7:61:05:7d:98:cf:21:8c: 62:df:8e:6f:47:c2:cd:9e:30:5a:21:96:f3:c7:59: 1a:ce:1d:f8:c7:be:49:7b:af:b5:fa:15:ee:ca:5b: 00:1a:bc:08:b8:bb:11:29:07:b5:8e:dc:3f:c0:e5: 7b:83:55:13:a5:a3:a1:e3:93:59:90:3b:80:4c:c2: 9a:72:f6:e8:cb:81:11:a6:6c:33:94:a7:44:8a:c8: 18:fd:aa:2b:3b:62:2b:85:b6:a4:e5:2b:8f:9e:5a: dc:98:71:cf:9e:8c:56:8c:a3:bb:2b:98:d3:0d:5c: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B7:15:99:B8:8D:B9:CB:E5:C6:EA:0D:77:B1:45:DA:7A:26:48:27 X509v3 Authority Key Identifier: keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:20:c9:04:11:e2:c1:4f:57:e3:c0:1a:13:15:e8:33:5f:8a: 83:75:a4:59:51:55:d8:e9:50:61:30:41:64:31:93:ed:38:f5: 17:ae:a1:cf:ba:0a:5d:47:7c:d4:b3:af:98:fc:3d:06:0c:e4: 8e:e8:93:50:6e:b4:49:26:b9:43:b4:6a:c6:4b:fe:06:49:45: 57:b6:02:16:81:a8:2a:5a:8c:dd:2c:42:a6:32:d5:28:22:c6: dd:27:0d:1b:2c:c6:82:d7:da:73:66:67:d4:5f:4b:1b:31:49: 17:d9:d1:5a:cf:8d:a6:6b:09:f9:8d:ce:3d:55:04:ce:99:a0: 96:28:45:39:81:4e:2f:1e:0b:f8:e4:70:1c:79:00:06:27:f3: c1:f9:b0:5b:f1:ef:ce:47:6d:b1:c0:ac:e9:e7:d1:20:7c:36: c8:bd:0e:4d:cc:17:45:24:77:1f:9d:93:d5:26:16:91:6c:21: 57:b5:c3:32:f3:82:eb:79:25:02:c7:c4:40:f4:87:78:97:dc: e6:02:60:fc:f3:c3:12:0c:94:1d:33:48:a3:e9:b8:ec:9a:50: 58:89:ff:78:43:e3:1a:7b:e0:9e:af:d8:51:ec:54:b4:03:f3: f0:39:c2:e1:fa:39:bf:da:d3:4d:56:08:01:b0:2e:73:00:08: fb:4a:16:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKjFcSrNblh9S2V0f7gXgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy YmIzNmYwHhcNMjUwNDA2MTAwMTMxWhcNMjUwNDA3MTAwMTMxWjAzMTEwLwYDVQQD EyhjNWI3MTU5OWI4OGRiOWNiZTVjNmVhMGQ3N2IxNDVkYTdhMjY0ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8oefjt8Kk8KpbpJ2qQrt97UM7Xn /7kRf2Jc6l+400dAofKT4MuXgAiRR3+Cwhd5au90bWeoee/kT6Z4JMKKZOb8Bg/6 AtKYEpIsvbYZwiLmDOUSDjTZER8f8uwKm7OeGyl7utwJjoLnUDXn2Mp6oQ8or6zA e1npDPfKmuSRLRiNEfEhOBoVbCSeMoVJp2EFfZjPIYxi345vR8LNnjBaIZbzx1ka zh34x75Je6+1+hXuylsAGrwIuLsRKQe1jtw/wOV7g1UTpaOh45NZkDuATMKacvbo y4ERpmwzlKdEisgY/aorO2Irhbak5SuPnlrcmHHPnoxWjKO7K5jTDVxyPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW3FZm4jbnL5cbqDXexRdp6JkgnMB8GA1UdIwQY MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt YTlhNzc5MDI2ZjBhLzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyDJBBHi wU9X48AaExXoM1+Kg3WkWVFV2OlQYTBBZDGT7Tj1F66hz7oKXUd81LOvmPw9Bgzk juiTUG60SSa5Q7Rqxkv+BklFV7YCFoGoKlqM3SxCpjLVKCLG3ScNGyzGgtfac2Zn 1F9LGzFJF9nRWs+NpmsJ+Y3OPVUEzpmglihFOYFOLx4L+ORwHHkABifzwfmwW/Hv zkdtscCs6efRIHw2yL0OTcwXRSR3H52T1SYWkWwhV7XDMvOC63klAsfEQPSHeJfc 5gJg/PPDEgyUHTNIo+m47JpQWIn/eEPjGnvgnq/YUexUtAPz8DnC4fo5v9rTTVYI AbAucwAI+0oW6w== -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:09 2025 by rpki-client