$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: qCMYk1SkW7EHG/I9z2Zpgxqs1KmIe+koxq7EspQbqWI= Subject key identifier: 43:5A:89:20:A1:08:D0:11:06:C0:B7:A9:47:0A:AA:5F:99:9E:A8:22 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 01973C51820860DFE36C569B01E9AD11DA1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 110D Signing time: Wed 04 Jun 2025 19:01:04 +0000 Manifest this update: Wed 04 Jun 2025 19:01:04 +0000 Manifest next update: Thu 05 Jun 2025 19:01:04 +0000 Files and hashes: 1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 2: 46Z7waoyHHEbsxxpvd3eWc3FesM.roa (hash: RGAVqkABD1kUGcHWFc3ExxqIEMWKWCZccVOCiAVauPA=) 3: 7EWEqRw8RoS0w7RjmP6d3h3BbNg.roa (hash: vEThkmGM+/L+dTFRCTNlorDLU8NBYGnhWNxVYjPgD5c=) 4: 8X1AAWv5potLtJ4cDHAtFN78OuU.roa (hash: fnF7WvbPBcYYZyEZilnnSQmk3qWakl2qKO0bPf7iS24=) 5: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 6: FkULrHP0-g6i2vs6nZAFJWdp7l4.roa (hash: aXfDzIu7X9wZ2L5JUCtBcYTuYorOfY8VxTlZFtA5V/U=) 7: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: SBGzm83qJRZ6SHcyF/ZuVKHJ+Bi9ibrR+YBRD4TPEys=) 8: K26CHbWIdVhV9ZIS1wE5mr28rb0.roa (hash: +uSx+oQPM9JSjxAKGNmQEHxTCMdtnlF8PKSOcjGnM28=) 9: N2e1KwpBdyrR37kUp0a7fUH7zN8.roa (hash: JBgmHvoo9+VvXNhQsnYMPfpkAAYuKk4YvwJXglBCh0o=) 10: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 11: XGOuHgklPAXFF9PgAhcplLrpo5E.roa (hash: Pv9wp2//FIn+5bdveKZPF+ZeW5gxmAnJZ0pNFRghqZU=) 12: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 13: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 14: qkNV4li91v0DO2SAYP6kZn_yUCo.roa (hash: LDMvVs+iroeWuSqAgTXSyF41sdBhPkkO2x6k1tzoUGQ=) 15: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) 16: yYlPdOxEQ-DkkikOUokHzYUMfCw.roa (hash: AgZ8YHYCCPtKRU/kCp/4/N0G8XCw377PsVS8HQ2MJ6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:51:82:08:60:df:e3:6c:56:9b:01:e9:ad:11:da:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jun 4 19:01:04 2025 GMT Not After : Jun 5 19:01:04 2025 GMT Subject: CN=435a8920a108d01106c0b7a9470aaa5f999ea822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:7d:79:72:f5:6b:7c:bf:07:a1:ae:d0:11: 36:38:05:79:1b:0a:dd:69:92:99:8f:ca:b1:d3:ad: 9d:a6:27:03:05:c3:be:c4:27:fd:ab:da:03:e1:92: 90:5a:6b:48:cd:da:7a:85:38:4e:5a:a3:ad:e1:04: 00:57:2f:7e:59:55:16:05:4f:45:98:3b:dc:eb:6d: 88:60:88:a9:fc:9b:0a:c3:76:3a:b3:e6:7a:25:cc: ce:5b:5b:3b:e6:24:5d:34:9a:3e:94:da:80:51:52: 1d:ad:f0:dd:52:39:16:d0:ad:ec:c3:34:91:cb:6c: 35:e0:f9:aa:a3:5a:32:b1:75:48:c7:97:ef:ce:e1: 23:72:1e:cd:69:62:8f:d8:b9:37:d2:89:5f:47:f6: ae:e6:78:34:0e:ef:b5:97:26:2e:bc:54:f0:b7:f5: 8a:4a:4f:ba:82:12:cf:e4:b8:4f:e1:09:2f:bf:fb: 70:80:74:45:91:6c:c8:3a:e9:4a:d1:80:b5:cc:1a: 7f:68:a6:a6:fb:51:34:63:2e:4e:f2:49:9d:81:6f: 39:99:cb:8b:2f:ca:a9:19:73:ec:b9:8d:90:84:8b: 5d:73:6c:14:4c:76:f6:57:e8:11:ba:e1:4f:ad:29: 21:b8:9c:cb:a7:a2:4a:59:cd:1c:76:85:09:37:a6: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5A:89:20:A1:08:D0:11:06:C0:B7:A9:47:0A:AA:5F:99:9E:A8:22 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:59:3e:da:8b:61:1e:37:2f:fb:30:2d:b9:92:71:bb:4f:10: 8d:13:fe:0d:b1:e7:6a:4d:c8:36:dd:78:88:3c:37:94:5d:c5: ca:65:b2:1b:e7:16:78:c7:4b:8f:35:3f:9b:11:c8:e7:27:8a: 98:b2:54:82:4b:35:a3:c6:2a:49:c4:65:91:65:a7:33:89:df: 08:26:1c:f4:e6:83:30:36:d4:73:eb:a9:a5:e9:43:a0:9a:ef: 7c:0b:c4:bf:bc:1b:58:a9:c6:13:7a:ba:5b:13:b1:18:01:97: 80:99:8f:46:d7:d0:e1:28:4a:33:5f:61:73:20:51:00:0d:ea: e6:9f:8e:9f:74:7d:c7:d5:1f:55:65:a8:90:b2:d6:68:d5:0a: f7:05:0c:57:d7:82:a5:83:2c:d6:00:1c:ae:b8:10:92:7b:55: f7:22:e6:1f:ee:31:43:eb:f8:6a:c9:73:36:73:02:dd:ea:54: 1c:01:2e:05:43:ca:d6:03:2d:16:7e:1a:93:8a:b0:f1:ba:67: 5b:d8:eb:8a:87:e7:d5:4d:ed:45:c5:a7:b0:2e:73:dc:15:f5: 40:b1:e4:58:2c:bf:40:b2:32:a8:32:e7:37:bd:19:3b:54:98: b4:32:35:94:b1:58:13:bf:c8:b9:76:09:2a:04:e4:d4:2f:cd: bf:f9:bc:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8UYIIYN/jbFabAemtEdoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUwNjA0MTkwMTA0WhcNMjUwNjA1MTkwMTA0WjAzMTEwLwYDVQQD Eyg0MzVhODkyMGExMDhkMDExMDZjMGI3YTk0NzBhYWE1Zjk5OWVhODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Z9eXL1a3y/B6Gu0BE2OAV5Gwrd aZKZj8qx062dpicDBcO+xCf9q9oD4ZKQWmtIzdp6hThOWqOt4QQAVy9+WVUWBU9F mDvc622IYIip/JsKw3Y6s+Z6JczOW1s75iRdNJo+lNqAUVIdrfDdUjkW0K3swzSR y2w14Pmqo1oysXVIx5fvzuEjch7NaWKP2Lk30olfR/au5ng0Du+1lyYuvFTwt/WK Sk+6ghLP5LhP4Qkvv/twgHRFkWzIOulK0YC1zBp/aKam+1E0Yy5O8kmdgW85mcuL L8qpGXPsuY2QhItdc2wUTHb2V+gRuuFPrSkhuJzLp6JKWc0cdoUJN6Z6FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENaiSChCNARBsC3qUcKql+ZnqgiMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1k+2oth Hjcv+zAtuZJxu08QjRP+DbHnak3INt14iDw3lF3FymWyG+cWeMdLjzU/mxHI5yeK mLJUgks1o8YqScRlkWWnM4nfCCYc9OaDMDbUc+uppelDoJrvfAvEv7wbWKnGE3q6 WxOxGAGXgJmPRtfQ4ShKM19hcyBRAA3q5p+On3R9x9UfVWWokLLWaNUK9wUMV9eC pYMs1gAcrrgQkntV9yLmH+4xQ+v4aslzNnMC3epUHAEuBUPK1gMtFn4ak4qw8bpn W9jriofn1U3tRcWnsC5z3BX1QLHkWCy/QLIyqDLnN70ZO1SYtDI1lLFYE7/IuXYJ KgTk1C/Nv/m8lQ== -----END CERTIFICATE-----Generated at Thu Jun 5 05:20:18 2025 by rpki-client