$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json) Hash identifier: oFmxdiTYxGhROfzs5j9mzrqicolW5HD9XsYm+t8G64Q= Subject key identifier: 50:B7:FF:B4:F4:54:0C:CE:61:F5:66:30:27:7B:AA:35:2C:B3:EE:14 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 0196146B572C72C4DFC69816A7F5FCA26AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft Manifest number: 1537 Signing time: Tue 08 Apr 2025 08:01:40 +0000 Manifest this update: Tue 08 Apr 2025 08:01:40 +0000 Manifest next update: Wed 09 Apr 2025 08:01:40 +0000 Files and hashes: 1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=) 2: 1l2ArbgF3qVBDh248pT8ghQwr8g.roa (hash: YA33bykfjW3z3Yekpa5KV5s6fAvShyo0RB0/5uqiA+w=) 3: 1y9h67sjn_VjHFrVe0Z3K6XNjqA.roa (hash: 2JQPf5WO6517JYBXHWCSR7Hd0Z7lAJY8xvwRiWg3zfc=) 4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=) 5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=) 6: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=) 7: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: SR+yGDhwgQSSiaGpuR1nV4z9eqg417Ht+dlKuWUsPAg=) 8: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=) 9: PkVu03D1CRld76GED_NQa3Zviig.roa (hash: OkHPN7thUETTaMK2SKswCUlcs0r0An8Tlc/LHXOT+S8=) 10: QeO41CAcoeY5Jb6ckPmPdMtCGJ8.roa (hash: Nr1rB/vJsu0ebZqnfkywnf9dXpXohyswafUIZqT1VeU=) 11: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=) 12: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=) 13: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=) 14: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=) 15: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=) 16: YylrwMGF3qFvnaGvkmUDnZyYZ9g.roa (hash: 8q8rerl630r/DmStNSsnGkxyqlbQwETqo+P5suMsVIo=) 17: Zc32tz1ZjSWwVgQorA7lXMaw-xA.roa (hash: HRYYNy4880mDT+crSQhmT3WO1uhHjRCZk7D2GRyCL/w=) 18: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=) 19: cId8Oh2ku7xx6TmW6OIZ4A9R3SI.roa (hash: DosNmul2GOxycmJ7sNN3zGw9XmJX9NxE7he1ScFFL4k=) 20: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (hash: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=) 21: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (hash: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=) 22: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=) 23: iCU2vJ363CZpyHNUurK_dNuVXdE.roa (hash: 6PP00+RtDHO5sFS+pfDuEa6e1rb1QssNLnp4R4FRlAQ=) 24: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=) 25: nFmg1ZbaugFoP4r46DmMM1bx6Dk.roa (hash: 8HuaUsP5wd4g7g+IHer22eSFYfBXdh5/suZjeTrgNVc=) 26: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=) 27: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=) 28: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=) 29: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=) 30: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:14:6b:57:2c:72:c4:df:c6:98:16:a7:f5:fc:a2:6a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Apr 8 08:01:40 2025 GMT Not After : Apr 9 08:01:40 2025 GMT Subject: CN=50b7ffb4f4540cce61f56630277baa352cb3ee14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:72:4e:5f:41:86:b7:4c:ac:13:f7:3d:ed: 15:59:c7:98:cf:04:39:28:85:26:7e:a3:90:98:b1: e7:28:d4:66:41:96:af:17:40:81:84:a1:71:4e:95: bd:a2:e7:24:ca:64:ed:1c:4f:f1:48:c7:5d:d9:3a: 2b:5b:b2:e6:b8:d0:74:cf:fa:d6:dc:38:79:b6:57: 6a:75:77:e5:8d:fe:e1:f6:0f:e2:2e:88:1c:42:04: d0:71:79:43:b4:c0:30:84:17:2c:47:5b:88:3d:6d: 17:0e:e7:27:aa:16:6c:b6:e6:b6:76:b5:83:36:83: 06:40:d8:aa:e8:ca:b1:15:21:46:ed:ee:4a:77:8d: c5:57:e7:65:64:eb:e7:96:ca:07:29:dd:ba:92:48: 1c:2d:05:d8:59:33:bf:5f:28:79:c0:a2:6b:42:16: 6b:af:d6:97:be:c5:b7:c1:96:77:d3:3f:c2:65:36: 7b:b8:76:dd:a0:34:ed:a2:58:91:a5:e5:3b:c2:08: e2:d0:f2:58:6e:fe:d3:5d:23:21:45:c4:7b:e9:49: 5d:b4:58:fb:6a:47:b9:11:00:db:85:20:f4:20:20: a2:12:9d:84:97:9f:23:2b:f3:4f:7c:fc:e9:92:58: 47:11:5f:83:ff:1b:3d:8a:53:15:15:83:9e:0a:cd: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B7:FF:B4:F4:54:0C:CE:61:F5:66:30:27:7B:AA:35:2C:B3:EE:14 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d9:37:39:d9:d9:f1:dd:10:de:75:27:be:e7:ed:e3:df:29: 20:9a:2e:c3:fb:f5:71:b1:ec:27:e3:a4:48:8b:bc:c4:a9:dc: d9:9e:fa:1f:ff:c3:b7:28:a6:d9:0d:5b:d8:33:e1:0b:8d:f6: a5:2a:5f:25:4c:a4:e3:74:a4:0c:e6:aa:b7:ef:78:15:ca:8f: a5:40:54:22:ea:8c:0f:af:64:ec:50:fa:28:3f:a1:f0:72:f0: 78:46:e7:11:d5:00:aa:a4:47:1c:b5:e2:f1:7a:af:cc:89:dd: f0:b5:13:85:ad:74:c8:4f:4c:e4:a5:e6:d4:58:34:bf:42:60: d8:df:21:0c:c3:ba:02:94:e7:a6:7d:27:7f:3d:a1:a4:0b:db: d4:b6:7a:f7:a8:22:57:60:1a:91:85:45:2b:d8:0c:cc:ee:f8: 81:1c:18:c6:e1:33:11:8b:9f:f8:2c:d8:50:c5:6d:b2:ac:9c: 1d:34:72:73:54:dd:ad:84:98:34:88:a1:b9:97:54:1d:b3:f1: d2:d9:12:e7:13:92:cb:a4:67:85:cf:ba:8e:41:13:2c:cb:51: c8:f6:0e:26:54:3a:18:9b:8d:7c:f6:f3:94:a8:92:33:52:7e: 44:ef:06:b0:76:c8:12:31:39:af:2e:e8:ee:15:44:fe:d9:8e: cd:4d:0a:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYUa1cscsTfxpgWp/X8omrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUwNDA4MDgwMTQwWhcNMjUwNDA5MDgwMTQwWjAzMTEwLwYDVQQD Eyg1MGI3ZmZiNGY0NTQwY2NlNjFmNTY2MzAyNzdiYWEzNTJjYjNlZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8JyTl9BhrdMrBP3Pe0VWceYzwQ5 KIUmfqOQmLHnKNRmQZavF0CBhKFxTpW9ouckymTtHE/xSMdd2TorW7LmuNB0z/rW 3Dh5tldqdXfljf7h9g/iLogcQgTQcXlDtMAwhBcsR1uIPW0XDucnqhZstua2drWD NoMGQNiq6MqxFSFG7e5Kd43FV+dlZOvnlsoHKd26kkgcLQXYWTO/Xyh5wKJrQhZr r9aXvsW3wZZ30z/CZTZ7uHbdoDTtoliRpeU7wgji0PJYbv7TXSMhRcR76UldtFj7 ake5EQDbhSD0ICCiEp2El58jK/NPfPzpklhHEV+D/xs9ilMVFYOeCs2fYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFC3/7T0VAzOYfVmMCd7qjUss+4UMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtk3OdnZ 8d0Q3nUnvuft498pIJouw/v1cbHsJ+OkSIu8xKnc2Z76H//Dtyim2Q1b2DPhC432 pSpfJUyk43SkDOaqt+94FcqPpUBUIuqMD69k7FD6KD+h8HLweEbnEdUAqqRHHLXi 8XqvzInd8LUTha10yE9M5KXm1Fg0v0Jg2N8hDMO6ApTnpn0nfz2hpAvb1LZ696gi V2AakYVFK9gMzO74gRwYxuEzEYuf+CzYUMVtsqycHTRyc1TdrYSYNIihuZdUHbPx 0tkS5xOSy6Rnhc+6jkETLMtRyPYOJlQ6GJuNfPbzlKiSM1J+RO8GsHbIEjE5ry7o 7hVE/tmOzU0K9w== -----END CERTIFICATE-----Generated at Tue Apr 8 12:09:35 2025 by rpki-client