$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json) Hash identifier: BPSqTO6nayfZtb1JRRJifgBySnlmLC9AeOx37BhKU+E= Subject key identifier: 3C:AA:E6:15:2A:55:3A:C7:61:2F:C3:9A:1D:88:2A:01:67:B0:75:56 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019738E1ED2DA94C8B1B0585D4819F7BCABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft Manifest number: 16A4 Signing time: Wed 04 Jun 2025 03:00:19 +0000 Manifest this update: Wed 04 Jun 2025 03:00:19 +0000 Manifest next update: Thu 05 Jun 2025 03:00:19 +0000 Files and hashes: 1: 0_FDf3DlAABqqJiRg1vq-Vce1rM.roa (hash: WZVVSVX8Nx5izNsMwSh1W9KwxXyKF5fjEDNlSQHa/b4=) 2: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=) 3: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=) 4: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=) 5: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=) 6: CGcxtmWeCpvy-hws3eRHzilM_U8.roa (hash: jBVl4vxGiFiecF4Ya3SdDsWeuPXdCCfCm0o+ggirOFY=) 7: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=) 8: Do610frDxofc_GIwlM0_-BIBi58.roa (hash: 2fSLFdraUb7r/St9XyxC3w/gDUXK6jtGxtd4pLLXBT4=) 9: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=) 10: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=) 11: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=) 12: H5fCqBpm_f7hXygoIa8xLisQf4o.roa (hash: NKYGYeat86NvKM0eWJwmhRu9GEV6wXY2dnHdfl8Rsog=) 13: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=) 14: NDdIZTu2cO-2MSwcME7e6z5035A.roa (hash: HWUwyXODVIxpS68jzNDkQgPerIYoek/cS4msL56qyTA=) 15: Ojh3JtseG6wODFn31ipqC0n9fs4.roa (hash: V3AD5XF03SRAPzSkwGk/OwLxtTWoSykuDscr75xOfT4=) 16: VDJUY-bEZOrE2WX3z3d6PtIM26E.roa (hash: iDW0DThQvCt2R2cKVGK+w9aT0FJJO22Pn5/lB1HACYc=) 17: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (hash: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=) 18: Xh_nIIhlIVq5rKHv1IjCncovJ4o.roa (hash: mtjAhRm8JR66Itk63UwTKx7Mn6caonQ7wqNPv8b3naM=) 19: YncmmCVbHfc8yNpLIWm9uOVXAt4.roa (hash: qO2gIQaee1JIm40R1DGdhcPp0ebkFcTPiyGLFZw8p7A=) 20: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=) 21: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=) 22: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=) 23: gpZNbKCPqq5Lf_i3zYCl0zgzJaI.roa (hash: jArVzj+o9obydS84VxQoY0cNnD9X7oy7c/gnENfE4s8=) 24: h4lmHtZmc-e8tzOKOXHK6w0H9vo.roa (hash: RNI+7dl19mmJ+6ZDRRtmz8YHjJqtvZ2Bexxp/E4LF/Y=) 25: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (hash: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=) 26: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=) 27: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=) 28: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=) 29: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (hash: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=) 30: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=) 31: uP-fAvFvobRbaY-tuVNSvxjd8Pk.roa (hash: Xo/hIPHKY0gj9xaTXvvbQYV5yR7+D5C4GK3YyWkkoMk=) 32: uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa (hash: wxhJlzBnXGlaVOYKUcRmBiT9gU3+on/juFXaoNCdgzE=) 33: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: gEi9WdTQ609qsk7YkhRaudpXNZXQM+/2duDtjPhloBM=) 34: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=) 35: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 03:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:e1:ed:2d:a9:4c:8b:1b:05:85:d4:81:9f:7b:ca:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jun 4 03:00:19 2025 GMT Not After : Jun 5 03:00:19 2025 GMT Subject: CN=3caae6152a553ac7612fc39a1d882a0167b07556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:7b:42:3c:6c:25:bc:42:28:ff:3f:ac:f8: 9e:df:75:af:a4:1d:5b:0a:e3:e9:8b:ab:7c:53:c5: 95:d5:69:1a:90:e4:6f:bc:0c:74:cb:99:18:c7:a3: a8:7b:b2:0a:f6:3b:a1:a6:be:fb:b8:35:60:b6:ab: 66:b3:a3:de:16:4a:95:55:15:2b:fe:03:b2:42:1b: 84:6a:11:29:b7:3c:17:90:5c:2f:62:eb:5f:dc:76: 45:09:c9:4f:ed:9f:b6:82:1b:bd:59:99:dd:fd:c3: a5:3e:d6:c1:1b:ef:40:a7:8b:ca:36:87:1f:70:df: 6f:a0:a5:ab:74:ba:cd:20:24:22:81:7b:97:52:0c: ba:b0:b6:1e:a7:cf:b5:86:38:c4:33:53:d6:fe:2e: 39:1a:58:93:6d:fb:86:5d:0d:7b:12:3c:24:62:e9: 34:e9:01:73:1b:b5:e4:cc:73:a7:35:49:d1:66:43: 25:7c:28:cc:2e:b1:66:83:55:9e:bd:b4:fe:82:40: 11:fa:44:21:c5:27:e1:55:5a:7c:35:bb:cd:03:58: 58:67:bc:83:63:18:18:32:5e:0b:cc:97:07:fa:1b: 1c:49:d7:d8:6e:19:b3:cb:d0:53:cb:4e:de:87:31: 00:ec:d9:cc:97:7c:cd:3b:98:f2:07:1d:c2:df:e8: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:E6:15:2A:55:3A:C7:61:2F:C3:9A:1D:88:2A:01:67:B0:75:56 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c5:ee:17:a4:15:22:61:1b:b5:3d:cc:49:fc:81:04:ae:e8: 2b:d8:ba:58:7b:38:7d:c8:9a:2b:99:a4:f4:a2:a3:ee:8b:4f: 55:53:ee:a0:68:a6:3d:66:66:19:e4:53:72:ac:63:dd:c0:3b: f9:01:15:41:01:e6:a2:14:c9:fe:2e:a5:9c:47:67:5d:31:0e: 07:e2:89:ee:1a:73:dd:c7:82:dd:a1:ed:b4:ae:7e:60:ce:00: 62:94:db:77:e5:e4:ad:6e:15:20:24:99:b5:df:9e:94:cd:f1: ab:3d:cd:4a:1f:0a:13:7e:19:64:85:05:50:7c:8d:44:0c:1b: 46:03:55:32:54:c9:a0:e7:dd:0b:db:f1:48:7b:a5:11:51:3e: b9:4d:b1:bf:13:84:3f:c4:49:76:b0:58:41:c7:b5:72:ac:38: e1:7f:db:4f:bf:fd:7c:18:e2:09:b6:d3:12:3b:e7:d6:d9:8a: 95:5c:f8:56:f2:4b:49:5f:23:6b:ad:02:b8:65:45:29:a5:e2: 52:9e:74:6b:a9:1c:fb:31:a4:55:d5:53:87:6b:f8:27:f4:12: 40:5b:c5:d3:15:42:c7:98:15:1a:2a:ae:ae:26:73:b2:b3:37: f2:a5:56:a7:30:8a:ff:d4:92:f8:28:b0:be:80:9e:aa:29:90: 65:16:44:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc44e0tqUyLGwWF1IGfe8q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUwNjA0MDMwMDE5WhcNMjUwNjA1MDMwMDE5WjAzMTEwLwYDVQQD EygzY2FhZTYxNTJhNTUzYWM3NjEyZmMzOWExZDg4MmEwMTY3YjA3NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyB7QjxsJbxCKP8/rPie33WvpB1b CuPpi6t8U8WV1WkakORvvAx0y5kYx6Ooe7IK9juhpr77uDVgtqtms6PeFkqVVRUr /gOyQhuEahEptzwXkFwvYutf3HZFCclP7Z+2ghu9WZnd/cOlPtbBG+9Ap4vKNocf cN9voKWrdLrNICQigXuXUgy6sLYep8+1hjjEM1PW/i45GliTbfuGXQ17EjwkYuk0 6QFzG7XkzHOnNUnRZkMlfCjMLrFmg1WevbT+gkAR+kQhxSfhVVp8NbvNA1hYZ7yD YxgYMl4LzJcH+hscSdfYbhmzy9BTy07ehzEA7NnMl3zNO5jyBx3C3+iZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyq5hUqVTrHYS/Dmh2IKgFnsHVWMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicXuF6QV ImEbtT3MSfyBBK7oK9i6WHs4fciaK5mk9KKj7otPVVPuoGimPWZmGeRTcqxj3cA7 +QEVQQHmohTJ/i6lnEdnXTEOB+KJ7hpz3ceC3aHttK5+YM4AYpTbd+XkrW4VICSZ td+elM3xqz3NSh8KE34ZZIUFUHyNRAwbRgNVMlTJoOfdC9vxSHulEVE+uU2xvxOE P8RJdrBYQce1cqw44X/bT7/9fBjiCbbTEjvn1tmKlVz4VvJLSV8ja60CuGVFKaXi Up50a6kc+zGkVdVTh2v4J/QSQFvF0xVCx5gVGiquriZzsrM38qVWpzCK/9SS+Ciw voCeqimQZRZEFw== -----END CERTIFICATE-----Generated at Wed Jun 4 12:08:05 2025 by rpki-client