$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: x0W923h+TDgichD0PJC6IuQp5pzTdB8tmWYkKWjlMak= Subject key identifier: C4:59:77:FD:A2:59:D5:90:4F:90:CD:12:1B:9E:2D:A9:16:D2:71:25 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 0196146AFE46C4513447FA083C16F5C0E0DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 15B1 Signing time: Tue 08 Apr 2025 08:01:18 +0000 Manifest this update: Tue 08 Apr 2025 08:01:18 +0000 Manifest next update: Wed 09 Apr 2025 08:01:18 +0000 Files and hashes: 1: 31WGNidSandr9euyp3MWEMrhhgA.roa (hash: x8vN4oWKPx+2cHAvBJjaBV1Li/LtuBIrATot66gBDS8=) 2: 524Md7rl4GkRFlKMZKCXn-mZcFk.roa (hash: VimFM1BURFehzICblZ7pRloyfbeJVzcBbz7vVvExsg0=) 3: 671gBYW6ETXc3uLLcMWFydigIAE.roa (hash: uojR24E1qs72oxVJvoIC5cuU67AWyV57CVyY3tIitjE=) 4: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (hash: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=) 5: B0nI6fOws8P3pqodL4PU8KT7DmU.roa (hash: nGQOoanXiIa97PP5tOpyO+UWP7GNwTyEKohGtmNn4G4=) 6: CFCmNRTV4cgbqENhCgIo-jH5izo.roa (hash: d/llClcAP9tYeLSvkDCwXEj+sgeHwcPGz0vZU6f8GCE=) 7: G7Gj-wNHQ4f1McLnqLZ1qzcaJ3Q.roa (hash: a3cjYcM4+KPGd8Ub1jI8tlRifmfOnBjLF0b8hwTZjiw=) 8: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (hash: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=) 9: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: CZlgRncPnJxGPp8vHFggBeFXja6RdKuwnRsxO0Nobg0=) 10: WIdSsyCX57O0jLNkXtjrP1vhXSg.roa (hash: g0ccLEN+zmZYzIcNucOxzQOSHm/WBMyRcfAkc8Yy9KQ=) 11: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (hash: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=) 12: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (hash: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=) 13: e6h_e1l_GBB-YTi9wxz8vLZyCdg.roa (hash: wioIGHuZ359Ftozmd9jj5SGM0AdzlgpJU2wqq65dW5I=) 14: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (hash: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=) 15: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (hash: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=) 16: vnLI7k4bxMUqTt_BNXGL9AWKllg.roa (hash: xvHvA365LrFdV5I9RvHfYl/MGU4RcjLJnC1Y25FDuEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:14:6a:fe:46:c4:51:34:47:fa:08:3c:16:f5:c0:e0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Apr 8 08:01:18 2025 GMT Not After : Apr 9 08:01:18 2025 GMT Subject: CN=c45977fda259d5904f90cd121b9e2da916d27125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:f9:d1:7a:7e:ed:96:1c:1c:24:69:2b:fb: 39:54:73:41:a9:f7:38:90:a1:64:57:bc:64:4b:c5: ca:9a:1e:60:d5:66:0d:3a:50:65:59:20:54:7d:34: 42:61:24:61:56:63:fc:fb:c0:bf:4d:37:08:20:7e: 82:76:42:d8:b6:72:88:24:ff:f0:b5:4b:7b:fe:9f: e8:a2:a9:51:ee:54:71:e9:c9:5b:5f:c7:eb:29:dc: a4:49:b0:1e:7d:9a:7d:13:e5:c9:60:6b:75:cc:38: 69:55:02:f7:dc:aa:d4:fd:8a:c9:3d:a1:a2:66:52: de:c2:16:fe:68:2c:4d:da:57:fa:be:39:d7:39:42: 5b:2b:19:8e:92:cd:63:14:fb:ff:0b:1f:6b:0a:25: 93:ee:00:53:11:f8:92:03:ec:f8:aa:bd:79:27:e8: cd:98:b5:81:27:85:42:4f:70:e5:55:83:c5:83:dd: fe:6d:2b:03:19:e0:2c:d0:d9:9b:f3:f9:a5:01:d5: 7c:b4:e6:c9:91:ef:d3:c2:6d:ef:4e:5c:df:8c:7c: ac:8a:0b:14:6d:69:73:4b:5d:41:a4:b4:36:0b:3c: 49:e4:54:29:5f:cb:a3:21:97:bf:25:84:b5:3c:0a: c1:44:f9:52:21:8a:96:54:4c:e5:f7:7e:61:35:37: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:59:77:FD:A2:59:D5:90:4F:90:CD:12:1B:9E:2D:A9:16:D2:71:25 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f7:e0:6f:2a:2f:99:8a:25:f2:e2:8e:77:fb:42:a7:a5:70: b6:d0:c9:4f:f9:49:5d:70:48:72:c9:83:6f:79:60:78:76:bb: 9a:88:36:40:6d:d4:49:47:65:1d:b8:d4:f2:8f:aa:63:88:4f: 7c:6a:4b:e6:09:02:80:31:29:c2:69:34:de:f4:b5:4d:e5:d6: 1c:82:23:10:5d:c0:28:9b:e4:51:dd:4d:41:aa:9b:4e:3f:f4: dd:85:fb:b5:ff:5a:31:f5:cc:7d:de:d7:15:fe:62:29:22:ab: c1:e0:ab:8a:37:0c:1b:da:86:71:1a:c1:6a:8e:c7:30:40:de: 2e:43:d9:95:3b:0e:ba:61:81:10:30:fa:81:00:cb:19:13:a7: 94:a6:68:57:75:1a:7e:3b:ac:f0:26:f4:a3:0c:fe:6d:3b:83: 77:a1:1d:b9:8a:75:2d:89:76:c9:aa:d2:6b:db:6d:e6:98:72: d6:b4:15:85:d6:9f:89:d0:c1:b7:4c:7f:3d:38:6b:8f:f9:c6: a1:33:90:e8:7a:99:8c:aa:c0:f8:30:eb:56:29:9f:3e:55:9f: e6:c9:a4:c7:cd:d2:67:1f:37:49:84:c0:d5:eb:d3:18:5a:45: b9:94:e4:ba:1a:e1:d5:5d:b1:76:ca:39:75:3d:5a:ca:fd:a8: 5a:c9:e8:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYUav5GxFE0R/oIPBb1wODcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjUwNDA4MDgwMTE4WhcNMjUwNDA5MDgwMTE4WjAzMTEwLwYDVQQD EyhjNDU5NzdmZGEyNTlkNTkwNGY5MGNkMTIxYjllMmRhOTE2ZDI3MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJb50Xp+7ZYcHCRpK/s5VHNBqfc4 kKFkV7xkS8XKmh5g1WYNOlBlWSBUfTRCYSRhVmP8+8C/TTcIIH6CdkLYtnKIJP/w tUt7/p/ooqlR7lRx6clbX8frKdykSbAefZp9E+XJYGt1zDhpVQL33KrU/YrJPaGi ZlLewhb+aCxN2lf6vjnXOUJbKxmOks1jFPv/Cx9rCiWT7gBTEfiSA+z4qr15J+jN mLWBJ4VCT3DlVYPFg93+bSsDGeAs0Nmb8/mlAdV8tObJke/Twm3vTlzfjHysigsU bWlzS11BpLQ2CzxJ5FQpX8ujIZe/JYS1PArBRPlSIYqWVEzl935hNTcXvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRZd/2iWdWQT5DNEhueLakW0nElMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/fgbyov mYol8uKOd/tCp6VwttDJT/lJXXBIcsmDb3lgeHa7mog2QG3USUdlHbjU8o+qY4hP fGpL5gkCgDEpwmk03vS1TeXWHIIjEF3AKJvkUd1NQaqbTj/03YX7tf9aMfXMfd7X Ff5iKSKrweCrijcMG9qGcRrBao7HMEDeLkPZlTsOumGBEDD6gQDLGROnlKZoV3Ua fjus8Cb0owz+bTuDd6EduYp1LYl2yarSa9tt5phy1rQVhdafidDBt0x/PThrj/nG oTOQ6HqZjKrA+DDrVimfPlWf5smkx83SZx83SYTA1evTGFpFuZTkuhrh1V2xdso5 dT1ayv2oWsnodQ== -----END CERTIFICATE-----Generated at Tue Apr 8 09:28:25 2025 by rpki-client