$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: XRrfpqq7hdi4RzjqmNZLjXliJeS/2l2MKF3DxOoc7mQ= Subject key identifier: FD:CC:0F:BF:3E:47:12:52:6D:11:B5:A1:32:91:D1:B3:08:88:4E:41 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 01950F0FA991E7FBABB8CE64F7FA1A493077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 145B Signing time: Sun 16 Feb 2025 14:00:39 +0000 Manifest this update: Sun 16 Feb 2025 14:00:39 +0000 Manifest next update: Mon 17 Feb 2025 14:00:39 +0000 Files and hashes: 1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=) 2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: B005uC5vO36VPQOITh9bheDIwds6VdX0T0JnlYEfixk=) 3: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 4: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 5: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 6: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 7: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 8: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=) 9: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 10: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:0f:0f:a9:91:e7:fb:ab:b8:ce:64:f7:fa:1a:49:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Feb 16 14:00:39 2025 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=fdcc0fbf3e4712526d11b5a13291d1b308884e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:cd:97:93:65:7c:50:c8:97:3e:cd:1a:90: 42:c0:33:91:b9:46:74:2f:ba:49:c0:bb:a9:14:7c: c7:a3:51:82:da:57:3d:63:9f:9c:f4:dc:c5:47:89: 25:26:47:93:ff:bf:9a:a1:7b:cd:f2:0b:74:f7:b0: ee:9c:b1:8b:1b:0e:29:66:12:c2:8a:07:1a:2b:c0: 8c:0b:ed:cc:a6:95:6b:2c:90:c9:16:e0:81:19:d9: 85:b1:da:da:ff:47:17:4b:14:9d:06:89:62:f8:d4: 06:5e:7d:ac:19:ed:b5:bc:f1:9e:de:f6:27:10:7e: 06:71:f3:5f:71:5a:c0:41:1d:1e:65:9f:02:47:56: e8:40:27:59:29:13:1e:9b:99:f1:da:f1:2e:d0:20: 85:3d:2a:87:9b:bb:58:a1:49:07:f5:2f:55:74:ff: a2:3f:bc:3f:e6:76:2d:c3:28:1d:b6:0e:7a:06:8c: f9:51:4d:d6:55:84:80:1c:c4:2d:85:f3:b0:dc:6c: 7c:35:09:45:8f:86:94:b5:ff:53:85:64:b0:78:10: 47:85:d7:21:88:a6:87:c8:5a:28:cd:7e:09:90:99: 1b:3f:cd:c4:b3:67:2f:71:2f:94:29:9c:06:c4:d0: ac:43:cd:89:e9:0a:58:6d:da:a9:e3:97:bc:45:6f: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CC:0F:BF:3E:47:12:52:6D:11:B5:A1:32:91:D1:B3:08:88:4E:41 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bf:ae:32:36:df:f9:5f:76:1c:39:03:5c:e6:5c:b7:78:e0: 2e:90:79:63:b6:93:61:5f:f8:97:45:11:2a:93:ba:eb:21:11: 42:31:7d:e5:22:71:c1:e1:8e:97:48:f2:36:d5:0c:f8:d5:e3: be:3c:ae:2d:72:07:86:e4:29:cf:21:14:8e:80:81:ed:09:25: 7f:03:4b:2d:94:68:69:97:2e:00:dd:b2:ce:19:29:c5:62:bd: f3:e1:91:87:51:6c:d9:40:0f:88:93:05:f8:c1:e8:c3:c9:3b: fe:18:4c:85:3e:4a:05:ea:67:ef:c9:33:84:89:db:5c:90:eb: 54:20:9e:46:ae:04:ca:e7:43:e3:42:86:2a:f8:8b:e9:7a:32: a6:42:f4:91:60:a8:56:5b:21:34:61:f8:0b:62:6a:de:f9:a0: c5:61:fe:67:60:5f:4e:05:17:06:45:d0:2d:13:10:99:37:35: b4:e3:1f:50:22:28:b0:c5:95:3e:73:61:e8:87:fb:63:8a:eb: 46:9d:35:06:7b:ba:a1:79:60:cc:82:cf:12:03:85:1a:af:86: 8b:ac:d2:f7:30:72:d5:68:1a:58:d0:8d:2e:8a:5e:cf:48:ca: bd:41:e4:b2:48:c3:5f:2a:33:12:da:44:a5:c7:2d:4c:03:7e: bc:a2:ab:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUPD6mR5/uruM5k9/oaSTB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwMjE2MTQwMDM5WhcNMjUwMjE3MTQwMDM5WjAzMTEwLwYDVQQD EyhmZGNjMGZiZjNlNDcxMjUyNmQxMWI1YTEzMjkxZDFiMzA4ODg0ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqjNl5NlfFDIlz7NGpBCwDORuUZ0 L7pJwLupFHzHo1GC2lc9Y5+c9NzFR4klJkeT/7+aoXvN8gt097DunLGLGw4pZhLC igcaK8CMC+3MppVrLJDJFuCBGdmFsdra/0cXSxSdBoli+NQGXn2sGe21vPGe3vYn EH4GcfNfcVrAQR0eZZ8CR1boQCdZKRMem5nx2vEu0CCFPSqHm7tYoUkH9S9VdP+i P7w/5nYtwygdtg56Boz5UU3WVYSAHMQthfOw3Gx8NQlFj4aUtf9ThWSweBBHhdch iKaHyFoozX4JkJkbP83Es2cvcS+UKZwGxNCsQ82J6QpYbdqp45e8RW/qeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3MD78+RxJSbRG1oTKR0bMIiE5BMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7+uMjbf +V92HDkDXOZct3jgLpB5Y7aTYV/4l0URKpO66yERQjF95SJxweGOl0jyNtUM+NXj vjyuLXIHhuQpzyEUjoCB7QklfwNLLZRoaZcuAN2yzhkpxWK98+GRh1Fs2UAPiJMF +MHow8k7/hhMhT5KBepn78kzhInbXJDrVCCeRq4EyudD40KGKviL6XoypkL0kWCo VlshNGH4C2Jq3vmgxWH+Z2BfTgUXBkXQLRMQmTc1tOMfUCIosMWVPnNh6If7Y4rr Rp01Bnu6oXlgzILPEgOFGq+Gi6zS9zBy1WgaWNCNLopez0jKvUHkskjDXyozEtpE pcctTAN+vKKr/g== -----END CERTIFICATE-----Generated at Sun Feb 16 22:05:41 2025 by rpki-client