$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft File: w_tAOiQYg-WPztUtOdgOq9Urs28.mft (raw, json) Hash identifier: tsRdVKt+cPhi7bug2kJZKQywy/SG0TW98bcN1yVNSj0= Subject key identifier: 93:B6:1B:8A:08:1C:2F:00:23:E3:F5:86:BF:E5:C0:16:B2:5F:D8:51 Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f Certificate serial: 019749317C3DF2C21C929DD50B4060CBE393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft Manifest number: 1287 Signing time: Sat 07 Jun 2025 07:01:09 +0000 Manifest this update: Sat 07 Jun 2025 07:01:09 +0000 Manifest next update: Sun 08 Jun 2025 07:01:09 +0000 Files and hashes: 1: 0O9x83-lbjQhQ0H0QNL4onc5rtE.roa (hash: gCcafB1+mESKS3BVJYDajJPvasqf2Tc5KeBGiyOT4to=) 2: 1-jdIlT59ATtnye0obz3ukqOdzSw.roa (hash: WZteN0hvbeOfkaazAFqc4a1Hb3S3n64JbzhuBh5/71o=) 3: 2Gso70Bxi4cBy_WodKxdmUIwtcI.roa (hash: /C593JYHyt/Js1dmu1EsZBHQvb2UcIHLzg2ko4L4lPo=) 4: 8DzD2uq5lN_KH_22IY31T_I5eUA.roa (hash: YwlgZskvfXHSFdpGYunNlSWojU8CZ8UtlqZ7vcZMWHk=) 5: H6DguWyAKB8u-XwiA-wSbFWSyyM.roa (hash: HhyM4zbUFZiPEk4/CITr/Hv8a8wBk7oLKs2GIwW2o7U=) 6: KntaM8lbcY4c01Dw4SaSSX2lodw.roa (hash: cLp1SD6XtpquL0QHMFnM+17dWoMSgXrVeFdbvQlKhQM=) 7: Phmx9blLQ7v5rgeNAupIAeVATYQ.roa (hash: ql8UKx0lpekuzUNBWqBQ1mqh/lL/DJd1b7ik/nG/cD4=) 8: ePoIjSzwu99M4WhvEDpbXSDvvQo.roa (hash: R96ob6c+Fl2Ot6tWCC9JDy+m8b6W3TjrV6Ao1DPqb1c=) 9: qQnpsIyhfC_30_02N13kTh1MqLQ.roa (hash: MbMug/0ttDrSz8GeinJuhxQXXHeOISrtY8I3Yes9Trc=) 10: w_tAOiQYg-WPztUtOdgOq9Urs28.crl (hash: 3xhpNgmFgfOiCG9jCRY09Zh+g0VHTvpmeNuxxIel9rU=) 11: yODzbE0zP6j_JHKYXWAzphsQNA8.roa (hash: VWJD33neAhmMaiHQw/4mg0RmMd404ON+a4BHqIO3tqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:7c:3d:f2:c2:1c:92:9d:d5:0b:40:60:cb:e3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f Validity Not Before: Jun 7 07:01:09 2025 GMT Not After : Jun 8 07:01:09 2025 GMT Subject: CN=93b61b8a081c2f0023e3f586bfe5c016b25fd851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:38:7a:8f:36:c9:15:0b:af:0e:8e:dd:3c: 5c:fe:07:63:b7:a4:dc:63:fb:00:33:08:99:f8:8e: cd:9e:ef:43:23:50:b7:f7:0b:4a:1b:f7:d3:1c:67: 80:0a:b4:e0:f6:55:27:ae:0a:5b:fd:36:8a:76:a1: e8:59:3c:da:51:30:8c:bd:a8:18:33:50:42:90:c3: 1a:80:28:a9:a5:51:2a:da:a8:d8:76:d8:81:a2:ac: 8d:a1:88:e3:05:8f:a2:20:6f:be:d2:5f:05:f1:03: 60:58:73:df:7a:4d:72:14:94:96:81:f3:8c:24:e0: e9:18:b1:7f:81:59:e1:ed:24:db:b9:0e:01:00:7e: 5a:f9:df:85:c3:ac:40:67:86:19:60:f4:49:28:f0: 4b:28:40:85:0a:07:ef:18:d1:77:65:fb:a2:02:de: e3:a2:bf:e0:96:de:21:f7:bc:0a:f4:e2:9e:67:40: f6:30:6b:49:79:af:c9:01:6a:5d:2b:83:25:d0:f8: ff:c0:b5:79:65:6f:a5:78:f3:60:53:26:93:06:54: a7:1f:9f:d8:cf:6e:97:d0:29:8f:92:ee:d0:8d:23: 39:42:d2:24:70:67:cb:df:26:96:10:50:25:fa:08: 97:12:5d:73:f1:6b:d6:b3:c1:63:c0:8f:9d:07:06: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:1B:8A:08:1C:2F:00:23:E3:F5:86:BF:E5:C0:16:B2:5F:D8:51 X509v3 Authority Key Identifier: keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:26:7c:6f:97:a1:53:f5:9e:8d:2b:68:28:bc:b2:79:1f:e4: b4:ae:99:d3:1b:e3:5b:7f:cb:15:89:d6:6d:25:62:08:40:29: 17:45:5c:04:9f:0a:e7:d7:4b:93:14:21:9a:93:e3:a5:be:92: a9:90:14:d1:0e:b7:8b:4e:a1:23:5e:05:84:91:35:b9:eb:d3: ad:10:81:ad:e0:c7:19:1b:45:8c:89:95:cc:d5:12:92:26:79: 8d:9a:e4:0f:44:8f:04:1e:ed:4c:74:67:65:be:ed:55:ef:14: 04:24:41:e7:db:19:2d:7e:58:1d:61:17:dd:4e:2a:2e:28:43: 1a:7e:cf:ae:df:8d:b2:19:05:de:77:17:81:56:d8:8d:36:e2: 3c:a5:ff:9b:51:44:13:c4:b7:92:d3:4c:c7:5c:13:b2:07:9c: 4a:cd:20:a2:fc:05:4a:02:d8:3e:99:a0:76:4a:12:6e:4d:22: ff:92:91:29:bf:ab:31:9e:6a:67:db:94:3b:3a:fb:ef:a8:3e: cf:8d:2a:a2:d4:83:49:7d:28:ae:e0:05:ec:1c:b8:95:a5:f8: 9d:2b:e0:64:49:73:a3:66:a9:fb:bf:7f:3d:cb:51:39:85:f2: a4:fa:43:c6:1c:ec:ac:3c:a9:99:85:88:54:94:3b:c6:2c:d1: aa:69:ec:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMXw98sIckp3VC0Bgy+OTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy YmIzNmYwHhcNMjUwNjA3MDcwMTA5WhcNMjUwNjA4MDcwMTA5WjAzMTEwLwYDVQQD Eyg5M2I2MWI4YTA4MWMyZjAwMjNlM2Y1ODZiZmU1YzAxNmIyNWZkODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg84eo82yRULrw6O3Txc/gdjt6Tc Y/sAMwiZ+I7Nnu9DI1C39wtKG/fTHGeACrTg9lUnrgpb/TaKdqHoWTzaUTCMvagY M1BCkMMagCippVEq2qjYdtiBoqyNoYjjBY+iIG++0l8F8QNgWHPfek1yFJSWgfOM JODpGLF/gVnh7STbuQ4BAH5a+d+Fw6xAZ4YZYPRJKPBLKECFCgfvGNF3ZfuiAt7j or/glt4h97wK9OKeZ0D2MGtJea/JAWpdK4Ml0Pj/wLV5ZW+lePNgUyaTBlSnH5/Y z26X0CmPku7QjSM5QtIkcGfL3yaWEFAl+giXEl1z8WvWs8FjwI+dBwbwrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO2G4oIHC8AI+P1hr/lwBayX9hRMB8GA1UdIwQY MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt YTlhNzc5MDI2ZjBhLzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiZ8b5eh U/WejStoKLyyeR/ktK6Z0xvjW3/LFYnWbSViCEApF0VcBJ8K59dLkxQhmpPjpb6S qZAU0Q63i06hI14FhJE1uevTrRCBreDHGRtFjImVzNUSkiZ5jZrkD0SPBB7tTHRn Zb7tVe8UBCRB59sZLX5YHWEX3U4qLihDGn7Prt+NshkF3ncXgVbYjTbiPKX/m1FE E8S3ktNMx1wTsgecSs0govwFSgLYPpmgdkoSbk0i/5KRKb+rMZ5qZ9uUOzr776g+ z40qotSDSX0oruAF7By4laX4nSvgZElzo2ap+79/PctROYXypPpDxhzsrDypmYWI VJQ7xizRqmns1g== -----END CERTIFICATE-----Generated at Sat Jun 7 17:45:53 2025 by rpki-client