$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: sGaqdE3ipcB5pcgA5KG3aVx0FnpF7KYbycM7UHJS1z4= Subject key identifier: BB:B5:C0:C9:AF:B2:E3:4E:69:09:15:89:11:E1:B8:62:FD:B1:18:A9 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 01974630040EAC25D009538F1E2E0A482F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0B81 Signing time: Fri 06 Jun 2025 17:00:41 +0000 Manifest this update: Fri 06 Jun 2025 17:00:41 +0000 Manifest next update: Sat 07 Jun 2025 17:00:41 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: AS0krPQsVx5Tm+n1vnk421rRzjFMAmNGVW5Y1wGvc2Y=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 4: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 5: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 6: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 7: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 8: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 9: ek7JCPCS41NeXK6-BL1kWJMswuo.roa (hash: rhIkMhLc1Llh35BWqPoGtUcJlgy1f4TdKGKjnLruEnc=) 10: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 11: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 12: l2sQI2kIfw7Qk5M-1_S91gHcxwg.roa (hash: ChOC3F775GRHKD1BnL2UZEcRcy5R5qW/aHDpTQ0+OAg=) 13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:30:04:0e:ac:25:d0:09:53:8f:1e:2e:0a:48:2f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jun 6 17:00:41 2025 GMT Not After : Jun 7 17:00:41 2025 GMT Subject: CN=bbb5c0c9afb2e34e6909158911e1b862fdb118a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:84:5f:32:dd:6e:61:f1:fe:d3:99:32:94: fe:13:c1:cc:7d:c0:fe:6e:92:7e:7f:a8:25:c5:6c: 75:4b:a3:b9:18:0b:85:ec:7a:d9:ae:b6:6f:c6:03: 06:0f:47:35:37:82:41:81:a3:17:b3:e3:0e:d3:9a: 24:7c:c1:00:3d:f5:03:12:17:e3:b0:dd:0e:d4:96: 90:cb:fd:a6:b4:72:90:59:4c:9d:76:f4:08:3d:47: 93:9c:ff:a1:dc:21:59:7e:56:78:2d:72:7c:6b:06: 11:f1:0c:ca:e0:d7:41:ef:9b:54:49:26:20:ce:99: c7:9f:5f:c8:ac:a3:17:14:8c:0d:17:23:32:9f:de: 73:ff:6e:30:8e:c0:a4:b1:75:60:8f:1c:54:da:51: 7d:44:d4:65:d9:7e:2b:5c:67:95:43:94:87:07:d6: 33:39:6a:ea:63:2a:ff:45:d8:7a:a7:39:fa:83:53: ec:22:7b:a9:8a:08:70:0e:de:f9:32:3d:94:fd:2c: 38:3a:78:e9:18:33:23:bd:87:e4:a0:ab:ae:ab:69: ee:5c:83:f0:a4:03:42:17:f5:12:2c:7f:84:2c:c9: 5b:72:bc:bb:10:bc:bf:a5:cd:e9:d2:7b:7a:a5:93: 4d:c4:42:47:31:cf:cf:fe:90:3e:68:72:f9:e5:5e: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:C0:C9:AF:B2:E3:4E:69:09:15:89:11:E1:B8:62:FD:B1:18:A9 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a1:37:49:60:4d:96:bc:16:e3:26:6a:a7:05:e7:e7:63:94: 4b:18:c9:63:cb:26:41:cb:34:80:d8:57:eb:cf:9c:76:aa:8c: e4:6b:9a:38:bd:71:be:eb:41:83:c2:aa:26:4c:99:0b:ee:00: 08:1e:07:de:47:39:c8:f3:72:3f:c6:47:78:49:0a:f4:28:71: 55:d9:80:38:1f:85:1f:f3:0f:9a:da:81:f8:79:30:fa:ee:2e: f9:25:d2:25:b9:4f:31:db:69:ba:ca:6d:5d:f1:0b:80:c9:87: 87:95:42:d0:4d:a0:0c:c0:d6:4b:8b:5a:61:81:1c:ab:b0:4e: 74:27:1b:a2:f4:d8:22:92:3a:96:c8:cc:96:75:4d:fa:d8:df: 79:d9:4d:4e:7f:f4:06:f0:a9:7a:39:49:95:47:44:98:c6:08: 8c:ad:42:50:b2:ab:fb:c6:a5:b7:06:14:62:f5:53:cc:49:3d: 73:31:ea:1d:58:17:7c:4a:5b:7d:9d:ed:33:0c:d7:79:22:dd: 21:80:db:8b:cf:2a:74:4a:e9:e5:b1:20:63:e6:d8:2f:de:f9: 91:c5:69:6b:7a:74:c8:c7:1d:26:e8:a3:d1:37:3a:4b:24:fa: 60:a7:47:32:06:0f:0c:23:5d:e2:8e:29:be:f3:6e:86:5d:b6: 27:59:39:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGMAQOrCXQCVOPHi4KSC+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNjA2MTcwMDQxWhcNMjUwNjA3MTcwMDQxWjAzMTEwLwYDVQQD EyhiYmI1YzBjOWFmYjJlMzRlNjkwOTE1ODkxMWUxYjg2MmZkYjExOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+EXzLdbmHx/tOZMpT+E8HMfcD+ bpJ+f6glxWx1S6O5GAuF7HrZrrZvxgMGD0c1N4JBgaMXs+MO05okfMEAPfUDEhfj sN0O1JaQy/2mtHKQWUyddvQIPUeTnP+h3CFZflZ4LXJ8awYR8QzK4NdB75tUSSYg zpnHn1/IrKMXFIwNFyMyn95z/24wjsCksXVgjxxU2lF9RNRl2X4rXGeVQ5SHB9Yz OWrqYyr/Rdh6pzn6g1PsInupighwDt75Mj2U/Sw4OnjpGDMjvYfkoKuuq2nuXIPw pANCF/USLH+ELMlbcry7ELy/pc3p0nt6pZNNxEJHMc/P/pA+aHL55V6u/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu1wMmvsuNOaQkViRHhuGL9sRipMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaE3SWBN lrwW4yZqpwXn52OUSxjJY8smQcs0gNhX68+cdqqM5GuaOL1xvutBg8KqJkyZC+4A CB4H3kc5yPNyP8ZHeEkK9ChxVdmAOB+FH/MPmtqB+Hkw+u4u+SXSJblPMdtpuspt XfELgMmHh5VC0E2gDMDWS4taYYEcq7BOdCcbovTYIpI6lsjMlnVN+tjfedlNTn/0 BvCpejlJlUdEmMYIjK1CULKr+8altwYUYvVTzEk9czHqHVgXfEpbfZ3tMwzXeSLd IYDbi88qdErp5bEgY+bYL975kcVpa3p0yMcdJuij0Tc6SyT6YKdHMgYPDCNd4o4p vvNuhl22J1k5qw== -----END CERTIFICATE-----Generated at Fri Jun 6 20:54:15 2025 by rpki-client