$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json) Hash identifier: P4V4PgXcd1HfkJ19dPAN6FgLQuE/FuNKbCAl2SACwWc= Subject key identifier: EF:A8:1F:AE:13:F3:13:A7:E9:11:F5:B2:EE:D3:8F:A3:1C:F8:38:51 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019644E90542D2E9CC59237B9080D3CECDFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft Manifest number: 1623 Signing time: Thu 17 Apr 2025 18:00:43 +0000 Manifest this update: Thu 17 Apr 2025 18:00:43 +0000 Manifest next update: Fri 18 Apr 2025 18:00:43 +0000 Files and hashes: 1: 0_FDf3DlAABqqJiRg1vq-Vce1rM.roa (hash: WZVVSVX8Nx5izNsMwSh1W9KwxXyKF5fjEDNlSQHa/b4=) 2: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=) 3: 1-OleeNWiFkbAJB0cUTzM2QfiVag.roa (hash: QoPQCr0a3Gb6g5JqGieVa4XFRIbDnqnFsde5DsSi8Is=) 4: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=) 5: 4peFkTT6ranzEgINLjQOtSVsY_A.roa (hash: 2i7UduEwqSyLgmnHSAjVrHfIBjINeWAlY4ZYKw5oeNU=) 6: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=) 7: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=) 8: CGcxtmWeCpvy-hws3eRHzilM_U8.roa (hash: jBVl4vxGiFiecF4Ya3SdDsWeuPXdCCfCm0o+ggirOFY=) 9: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=) 10: Do610frDxofc_GIwlM0_-BIBi58.roa (hash: 2fSLFdraUb7r/St9XyxC3w/gDUXK6jtGxtd4pLLXBT4=) 11: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=) 12: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=) 13: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=) 14: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=) 15: Ojh3JtseG6wODFn31ipqC0n9fs4.roa (hash: V3AD5XF03SRAPzSkwGk/OwLxtTWoSykuDscr75xOfT4=) 16: OxvFaONKoxCOrutDpukgqJ3nW28.roa (hash: dLzb+IBamoEUiaEEA1Z/yikvFEJhXOcTvLAmddRrWJ0=) 17: PtTVzUOwY8mkRkDqqOGagTLCipk.roa (hash: Qc6uiKgKoY1QxyUyWxCB3toQGV7PGNgXSiXBkaJ/QpI=) 18: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (hash: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=) 19: YncmmCVbHfc8yNpLIWm9uOVXAt4.roa (hash: qO2gIQaee1JIm40R1DGdhcPp0ebkFcTPiyGLFZw8p7A=) 20: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=) 21: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=) 22: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=) 23: h4lmHtZmc-e8tzOKOXHK6w0H9vo.roa (hash: RNI+7dl19mmJ+6ZDRRtmz8YHjJqtvZ2Bexxp/E4LF/Y=) 24: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (hash: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=) 25: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=) 26: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=) 27: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=) 28: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (hash: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=) 29: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=) 30: uI-XAngekBy-y_fEkUp8IBMMQBM.roa (hash: wcz2lk0sgJKwTKH+ZqTJXICWw3XfoeTeYdhXJJGljN0=) 31: uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa (hash: wxhJlzBnXGlaVOYKUcRmBiT9gU3+on/juFXaoNCdgzE=) 32: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: Bqs3iLJw5o07ffiAED/G0/bNmj+DCyR7THxLSarNIaE=) 33: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=) 34: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:44:e9:05:42:d2:e9:cc:59:23:7b:90:80:d3:ce:cd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Apr 17 18:00:43 2025 GMT Not After : Apr 18 18:00:43 2025 GMT Subject: CN=efa81fae13f313a7e911f5b2eed38fa31cf83851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:d0:cf:5a:8f:01:52:33:7e:7a:ab:a5:98: 22:13:91:2f:ae:cd:e7:0c:4b:0d:6b:19:3c:39:95: c6:a3:31:46:65:4a:0b:e1:23:12:b3:0e:d5:46:79: f0:48:71:4e:e1:d8:9d:18:62:bc:7a:7f:81:63:39: c6:37:34:f0:62:a6:4c:28:9b:34:f5:26:f8:8e:ba: fb:ce:00:54:24:45:cd:61:b3:41:18:45:71:ec:41: b7:88:07:45:73:46:22:72:3f:48:18:b1:ce:dc:ba: 79:00:5f:1b:53:65:58:64:59:aa:57:94:64:4f:c0: 0d:20:3c:0c:ca:5a:af:7e:6f:c2:d2:ba:15:35:1c: 5d:64:d6:cd:41:3f:de:bb:a1:32:af:db:18:fe:e6: 26:c9:67:d9:01:7b:bd:e9:a9:ec:7b:0d:e9:a4:75: 8e:c0:9d:4c:5c:51:59:47:88:95:95:16:7f:12:c5: 33:16:b6:14:c1:45:f6:76:2e:48:5d:95:15:22:d0: 01:99:96:81:85:d6:3b:5c:2e:88:87:e9:a8:51:ef: 25:6d:68:77:7e:5d:94:4b:46:c1:4f:0c:72:04:1b: 03:4f:7d:f7:39:7e:f5:ab:2e:e7:07:1e:54:9b:ba: d8:e1:ec:4f:5c:89:1f:ba:4a:40:99:fe:94:41:9f: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A8:1F:AE:13:F3:13:A7:E9:11:F5:B2:EE:D3:8F:A3:1C:F8:38:51 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b5:16:fe:9c:29:9c:01:a1:b6:40:12:4f:3b:13:f9:e3:4a: f2:af:b5:e1:3e:3f:a0:1d:d2:39:1c:6b:52:11:f0:64:db:ad: fd:17:bb:21:b9:a7:a0:9f:64:b8:ca:90:01:f4:63:0d:aa:9f: 43:97:1f:11:00:d6:67:71:44:99:5a:e6:16:12:05:77:1a:c7: af:cb:09:6a:1b:b7:b9:a7:a3:81:94:29:53:5a:22:da:37:e5: 9b:60:f2:8e:a1:50:d5:11:83:45:1c:45:23:46:48:e3:dd:af: 8e:8a:17:e0:fa:29:6a:ef:ca:b4:1f:3b:54:4d:c0:13:55:b5: ea:b0:74:62:7b:98:95:4c:31:e9:65:66:6b:1f:69:4a:d4:d0: 6a:3e:b5:b5:e1:66:1e:02:fb:e5:cb:c8:d0:3c:c3:54:42:49: 4e:a1:f7:73:f5:f1:7c:0c:b2:53:eb:5d:08:4b:ef:82:a9:31: 9a:eb:bf:dc:ab:ca:aa:2a:11:5b:b2:be:7e:c9:9a:67:92:4b: 1d:a4:6d:0c:86:6f:99:7b:20:c0:f0:90:46:2d:45:45:75:ef: 41:14:97:da:12:3a:e6:b5:13:56:52:4c:fc:96:16:d9:3e:32: a7:a5:4d:b6:3e:df:11:8e:b3:d8:98:20:31:e9:3b:91:6b:70: f9:d9:fa:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZE6QVC0unMWSN7kIDTzs3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUwNDE3MTgwMDQzWhcNMjUwNDE4MTgwMDQzWjAzMTEwLwYDVQQD EyhlZmE4MWZhZTEzZjMxM2E3ZTkxMWY1YjJlZWQzOGZhMzFjZjgzODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6XQz1qPAVIzfnqrpZgiE5Evrs3n DEsNaxk8OZXGozFGZUoL4SMSsw7VRnnwSHFO4didGGK8en+BYznGNzTwYqZMKJs0 9Sb4jrr7zgBUJEXNYbNBGEVx7EG3iAdFc0Yicj9IGLHO3Lp5AF8bU2VYZFmqV5Rk T8ANIDwMylqvfm/C0roVNRxdZNbNQT/eu6Eyr9sY/uYmyWfZAXu96ansew3ppHWO wJ1MXFFZR4iVlRZ/EsUzFrYUwUX2di5IXZUVItABmZaBhdY7XC6Ih+moUe8lbWh3 fl2US0bBTwxyBBsDT333OX71qy7nBx5Um7rY4exPXIkfukpAmf6UQZ/tWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+oH64T8xOn6RH1su7Tj6Mc+DhRMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbUW/pwp nAGhtkASTzsT+eNK8q+14T4/oB3SORxrUhHwZNut/Re7IbmnoJ9kuMqQAfRjDaqf Q5cfEQDWZ3FEmVrmFhIFdxrHr8sJahu3uaejgZQpU1oi2jflm2DyjqFQ1RGDRRxF I0ZI492vjooX4Popau/KtB87VE3AE1W16rB0YnuYlUwx6WVmax9pStTQaj61teFm HgL75cvI0DzDVEJJTqH3c/XxfAyyU+tdCEvvgqkxmuu/3KvKqioRW7K+fsmaZ5JL HaRtDIZvmXsgwPCQRi1FRXXvQRSX2hI65rUTVlJM/JYW2T4yp6VNtj7fEY6z2Jgg Mek7kWtw+dn6Aw== -----END CERTIFICATE-----Generated at Thu Apr 17 22:56:13 2025 by rpki-client