$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: JVesy0km6cVJZ7z1IY6veEEzpcy1YL7ftkA05uxomyM= Subject key identifier: 52:D0:51:18:E3:5A:B3:08:15:AC:20:43:26:81:50:EC:33:0E:5D:BC Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019749314809DA5717D291BEAA32A9E5E6B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1592 Signing time: Sat 07 Jun 2025 07:00:55 +0000 Manifest this update: Sat 07 Jun 2025 07:00:55 +0000 Manifest next update: Sun 08 Jun 2025 07:00:55 +0000 Files and hashes: 1: 1-0URATiYn4nWMHZbWNa1y4LiAcE.roa (hash: qnoIsvmT1NGoh4R21XKrhNbrolncENGMdF/rtoG9oNM=) 2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: ijnS7CCas5cJHWnm8mKGI+Bxkil6rK5g9fMHA+oS2d8=) 3: 4u-FrWKWaho_ISyzc5VOsCnPB-Q.roa (hash: YfroGaZGo+3Y5Nuhq7M/QzCuhU+RFQDjKrM1lqbk5uM=) 4: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 5: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 6: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 7: JvZUEi7A7V388WY-38Um7sLP4iA.roa (hash: CvMgS2JS1B5/pFFOBX0cIZilf0BG410ECm9I/vEGJ5c=) 8: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 9: UWV4l3kE-brWJX9uRkRZO53lO9o.roa (hash: cAU+zNWLTTRLrd7RdQn+sxXYtefOYpWRpuIgwXau7iA=) 10: W5a7DdwJaAnEaRHZv6EO9kbudzg.roa (hash: oyakXu5rs8SXNOZxzAoWDuA9NdXgDHDVljC1e0neNkA=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa (hash: 0VHL8dNRCWtY3U9FsisIK+yIftWh4d0//02eZdVbL24=) 13: iTss4dVuEO8u2zrybey6wjkQ5CM.roa (hash: iS+Pl9gnUh0T0PMsvXCrH+rna0Q4YPkZDZcMC+K1GTQ=) 14: osgJC1j873fUuICkEREfgiPJqL4.roa (hash: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=) 15: whqum5btfebJ92EiHlAqEY1dMyI.roa (hash: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:48:09:da:57:17:d2:91:be:aa:32:a9:e5:e6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jun 7 07:00:55 2025 GMT Not After : Jun 8 07:00:55 2025 GMT Subject: CN=52d05118e35ab30815ac2043268150ec330e5dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9c:d1:22:6d:ab:8e:3b:ae:2b:97:0a:dd:58: 1f:41:55:11:4b:09:0a:f0:e2:ce:80:a0:cb:4c:de: 73:e3:49:68:87:0e:2d:7d:74:ab:90:31:79:bf:e5: dc:b3:fa:04:be:41:5a:ed:63:17:1f:e8:58:c7:8d: b1:74:12:c6:fa:9d:4f:75:97:52:1d:0d:60:1d:7e: 0a:39:43:a1:6b:6d:a4:35:8f:86:23:42:e6:f0:9c: ff:e1:74:fa:62:c6:f1:88:ce:21:d0:ca:c9:58:17: d4:d3:80:7b:bf:ac:15:5d:40:64:a4:de:97:c9:94: 50:c0:5b:92:22:2f:ed:1c:54:75:58:00:f8:fa:11: 8f:05:e5:b0:77:8a:9f:51:62:0b:7c:21:f0:16:2a: a1:a6:ba:cd:9a:79:03:16:df:72:24:d1:2f:3d:91: b3:da:7c:f0:7f:8f:e4:eb:65:4b:f0:f0:cb:7c:9c: bd:f7:90:cd:c2:22:93:e0:fc:e5:b1:17:03:29:e6: 68:ed:8f:e4:f1:47:37:62:3e:bd:08:33:67:4c:29: 20:27:9e:ee:00:a9:b1:ec:3c:d2:2b:dc:c4:93:64: 32:36:53:0a:00:70:84:2f:75:64:e4:00:a9:04:67: db:fc:c1:8e:0d:41:f7:dd:eb:b6:a8:b4:58:d8:1d: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D0:51:18:E3:5A:B3:08:15:AC:20:43:26:81:50:EC:33:0E:5D:BC X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4c:0e:a8:ee:51:3c:ab:b3:de:db:69:b5:23:11:57:9f:24: 51:cc:e5:c3:f2:52:73:18:dc:d9:d4:19:6b:d6:eb:f2:52:c2: 26:c6:27:9c:95:02:70:f1:b8:92:c0:e3:49:06:ba:d1:24:3b: 84:5b:ee:f4:01:e0:c7:83:da:12:6f:ed:4e:f4:50:1b:b9:62: 13:3e:8d:4a:e4:e0:62:ac:d6:b0:aa:ef:01:7d:e7:74:bf:0f: 04:e7:9c:ee:c9:f8:93:78:e2:e7:75:f6:f8:16:0b:0f:5c:27: 1b:e7:9a:96:30:88:64:ab:7e:92:1f:5b:48:fd:5d:c1:e2:65: c0:2f:99:71:87:66:18:dd:b8:7d:b9:73:4d:c4:fd:84:98:5a: 83:89:0a:d5:dd:8a:f1:a7:54:84:bb:e4:16:56:9f:94:6f:d1: 88:b9:49:e6:ce:c4:b8:cb:8d:fc:ca:13:de:06:09:ae:15:bd: c4:a9:88:2f:c8:40:df:41:79:3e:69:32:ab:6c:a8:45:7e:9c: 75:38:95:27:53:f0:eb:b3:e4:e2:be:93:37:86:b1:49:fe:c9: 4d:04:b6:bd:39:9d:20:8b:26:cb:33:94:5e:d4:63:be:d9:56: 98:c1:2e:c9:7f:a5:57:a9:fa:a2:72:7f:29:1d:9b:78:57:d5: 33:d2:90:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMUgJ2lcX0pG+qjKp5eazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUwNjA3MDcwMDU1WhcNMjUwNjA4MDcwMDU1WjAzMTEwLwYDVQQD Eyg1MmQwNTExOGUzNWFiMzA4MTVhYzIwNDMyNjgxNTBlYzMzMGU1ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55zRIm2rjjuuK5cK3VgfQVURSwkK 8OLOgKDLTN5z40lohw4tfXSrkDF5v+Xcs/oEvkFa7WMXH+hYx42xdBLG+p1PdZdS HQ1gHX4KOUOha22kNY+GI0Lm8Jz/4XT6YsbxiM4h0MrJWBfU04B7v6wVXUBkpN6X yZRQwFuSIi/tHFR1WAD4+hGPBeWwd4qfUWILfCHwFiqhprrNmnkDFt9yJNEvPZGz 2nzwf4/k62VL8PDLfJy995DNwiKT4PzlsRcDKeZo7Y/k8Uc3Yj69CDNnTCkgJ57u AKmx7DzSK9zEk2QyNlMKAHCEL3Vk5ACpBGfb/MGODUH33eu2qLRY2B076wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLQURjjWrMIFawgQyaBUOwzDl28MB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUwOqO5R PKuz3ttptSMRV58kUczlw/JScxjc2dQZa9br8lLCJsYnnJUCcPG4ksDjSQa60SQ7 hFvu9AHgx4PaEm/tTvRQG7liEz6NSuTgYqzWsKrvAX3ndL8PBOec7sn4k3ji53X2 +BYLD1wnG+ealjCIZKt+kh9bSP1dweJlwC+ZcYdmGN24fblzTcT9hJhag4kK1d2K 8adUhLvkFlaflG/RiLlJ5s7EuMuN/MoT3gYJrhW9xKmIL8hA30F5Pmkyq2yoRX6c dTiVJ1Pw67Pk4r6TN4axSf7JTQS2vTmdIIsmyzOUXtRjvtlWmMEuyX+lV6n6onJ/ KR2beFfVM9KQkQ== -----END CERTIFICATE-----Generated at Sat Jun 7 15:49:29 2025 by rpki-client