$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: IsQlEBoex/N3Pctp1iDGdHM6d4bNgZAM5kBmn8ecltI= Subject key identifier: 65:B5:AE:98:F9:3F:75:52:C4:FD:B8:0C:DF:3F:1A:8E:D7:F8:0D:38 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 01973EE541E16449B5F570CF296D77BF92D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1595 Signing time: Thu 05 Jun 2025 07:01:41 +0000 Manifest this update: Thu 05 Jun 2025 07:01:41 +0000 Manifest next update: Fri 06 Jun 2025 07:01:41 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 9: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 10: jQVct_I-Q9u8SJsbhp_aBJKmAO4.roa (hash: Goq6CQ+X0WEoVfwAUI4pBsxNxBCuYLwqrXAabZR3bPo=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: yUhiM5xca6ymlVSUZSMO3dbvWTlqY8kgdxz7oA0QLkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3e:e5:41:e1:64:49:b5:f5:70:cf:29:6d:77:bf:92:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jun 5 07:01:41 2025 GMT Not After : Jun 6 07:01:41 2025 GMT Subject: CN=65b5ae98f93f7552c4fdb80cdf3f1a8ed7f80d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:a1:2b:fa:de:ec:89:9a:b5:61:e1:2d:5b: 43:15:2e:e8:4c:f1:3c:a3:16:82:22:06:f5:40:fb: f1:8b:49:89:2b:95:86:db:ca:91:1f:68:66:a1:d4: 4a:c8:49:db:06:74:f3:b1:df:9b:a3:b0:b3:39:e6: 22:56:a7:3e:ac:d4:74:2f:85:29:d2:13:0a:e9:98: 18:d8:b2:00:94:43:66:d9:41:7a:f1:de:db:1c:73: 9e:61:d8:17:52:53:b4:11:45:36:22:0f:71:c6:b5: cf:68:a0:bb:27:4e:c6:62:56:8e:1e:88:cb:68:d2: b4:eb:1d:87:eb:bf:d1:fa:eb:08:1c:a2:01:44:fb: 64:ee:16:6c:60:ab:29:d9:c6:05:f1:f0:6b:5f:91: 1c:b4:8e:b4:4c:9d:19:9b:ab:d6:56:5e:46:c2:58: 7f:a3:63:9b:7d:2c:51:78:77:06:7a:ed:57:7e:47: e2:85:95:63:8d:4b:8a:0d:4a:8f:8a:93:c5:fb:a6: ad:ca:6e:de:63:37:5d:0e:07:8c:fd:63:6e:fd:2c: 0b:50:b8:7d:2f:98:64:ee:a8:b6:3a:8d:aa:72:3b: 34:06:c0:d4:b2:34:d2:ff:39:75:91:c1:ff:1b:e7: cf:9e:b3:7b:80:90:65:36:7d:5b:b0:1d:3c:32:28: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:AE:98:F9:3F:75:52:C4:FD:B8:0C:DF:3F:1A:8E:D7:F8:0D:38 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:94:28:78:03:cd:d6:c7:9a:81:13:41:a8:98:cb:56:57:8c: 12:ce:5d:f7:e6:3b:ac:e7:a8:d2:ca:d2:3f:7e:0f:a1:67:53: 53:ea:dd:01:42:52:3a:9d:4a:78:bf:e7:8c:d8:0e:43:e6:76: 52:cb:ef:a7:37:69:d7:87:e5:e7:7b:91:4e:33:b7:64:ca:e3: 0f:38:42:ae:e8:2e:6e:50:d8:17:7b:94:c1:25:67:0a:90:3c: 0b:39:e7:e1:30:5e:14:c0:c8:03:4d:0e:43:d1:43:94:d1:07: 91:cb:a9:c9:25:1c:a6:d6:a5:38:d7:d3:d8:86:15:f7:23:ff: c8:ec:24:64:5a:df:83:ad:a5:2a:2a:46:50:74:e8:6a:60:2c: cb:ff:a0:30:35:ce:99:8b:17:c3:aa:8a:1a:91:a4:25:a9:cc: d8:16:04:1b:b4:4b:97:6c:4b:ae:ee:e8:14:1a:3c:00:a3:bc: ce:1c:f8:db:9f:aa:22:59:0a:db:85:7f:d5:e2:2b:b2:85:9a: e7:01:16:e1:96:66:af:1e:6a:d3:f6:0b:c1:a2:9f:b8:f9:1c: 00:7b:dd:c9:5e:7c:d6:87:7f:e1:3f:1d:42:7a:63:e0:7a:f7: 27:03:eb:b1:62:a0:c4:c4:0e:e4:a6:cc:5f:42:dc:7e:c7:92: c0:5f:50:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc+5UHhZEm19XDPKW13v5LTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUwNjA1MDcwMTQxWhcNMjUwNjA2MDcwMTQxWjAzMTEwLwYDVQQD Eyg2NWI1YWU5OGY5M2Y3NTUyYzRmZGI4MGNkZjNmMWE4ZWQ3ZjgwZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HihK/re7ImatWHhLVtDFS7oTPE8 oxaCIgb1QPvxi0mJK5WG28qRH2hmodRKyEnbBnTzsd+bo7CzOeYiVqc+rNR0L4Up 0hMK6ZgY2LIAlENm2UF68d7bHHOeYdgXUlO0EUU2Ig9xxrXPaKC7J07GYlaOHojL aNK06x2H67/R+usIHKIBRPtk7hZsYKsp2cYF8fBrX5EctI60TJ0Zm6vWVl5Gwlh/ o2ObfSxReHcGeu1XfkfihZVjjUuKDUqPipPF+6atym7eYzddDgeM/WNu/SwLULh9 L5hk7qi2Oo2qcjs0BsDUsjTS/zl1kcH/G+fPnrN7gJBlNn1bsB08MiiqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW1rpj5P3VSxP24DN8/Go7X+A04MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpQoeAPN 1seagRNBqJjLVleMEs5d9+Y7rOeo0srSP34PoWdTU+rdAUJSOp1KeL/njNgOQ+Z2 Usvvpzdp14fl53uRTjO3ZMrjDzhCrugublDYF3uUwSVnCpA8Cznn4TBeFMDIA00O Q9FDlNEHkcupySUcptalONfT2IYV9yP/yOwkZFrfg62lKipGUHToamAsy/+gMDXO mYsXw6qKGpGkJanM2BYEG7RLl2xLru7oFBo8AKO8zhz425+qIlkK24V/1eIrsoWa 5wEW4ZZmrx5q0/YLwaKfuPkcAHvdyV581od/4T8dQnpj4Hr3JwPrsWKgxMQO5KbM X0LcfseSwF9Qzw== -----END CERTIFICATE-----Generated at Thu Jun 5 09:47:34 2025 by rpki-client