$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft File: w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json) Hash identifier: z4FJFFB8R/xjchwza6n2UV0/xpegxEvli/WWYi0T8BA= Subject key identifier: 2D:1E:98:75:E8:EE:71:12:85:DB:46:D4:F5:63:9D:3B:3D:49:10:46 Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 0196138FEE7E506F913D168D854131614540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft Manifest number: 1504 Signing time: Tue 08 Apr 2025 04:02:01 +0000 Manifest this update: Tue 08 Apr 2025 04:02:01 +0000 Manifest next update: Wed 09 Apr 2025 04:02:01 +0000 Files and hashes: 1: 1-xQ2A-voFc496nscIZVVisqrEOU.roa (hash: Bx53C7ad+VIQubS6rdt+VkfhYstF1PdeXxBWiHpjhtY=) 2: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=) 3: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=) 4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=) 5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=) 6: NCJsjpTQWxI0n5NAackGxmLU8Ko.roa (hash: 6TfkgUsG2HVnXozc83DWJO6FnPYzO18qDayvSPxdcok=) 7: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=) 8: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=) 9: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=) 10: eYFazceKNNmIP1mtu6fPXIzkBqA.roa (hash: ealQkKP+Zj4z/HLyKyAp9AEhBEoxDIR+FIl/SDFnG+o=) 11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=) 12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=) 13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=) 14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=) 15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=) 16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=) 17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: JvXYARi4NliMnIcfpoz7BPKqPFGI9/Blk9eZiiOpsus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:13:8f:ee:7e:50:6f:91:3d:16:8d:85:41:31:61:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Apr 8 04:02:01 2025 GMT Not After : Apr 9 04:02:01 2025 GMT Subject: CN=2d1e9875e8ee711285db46d4f5639d3b3d491046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:59:09:cd:e4:e5:71:c2:66:66:cf:9b:77: 81:c7:d4:48:8c:0b:48:01:47:3a:29:89:10:dc:6b: de:ba:7b:7c:58:af:62:24:43:23:b9:8f:62:fd:d5: 27:e7:92:2e:5b:0c:c6:4c:84:82:e2:e2:69:0b:39: 18:0f:74:3e:df:59:a4:7c:4f:2a:7e:8e:f6:55:5e: 9f:4f:08:6d:74:7f:71:b8:83:15:e8:8d:14:43:b6: ca:b6:1b:c1:6c:12:e7:a4:60:a5:3a:b7:b4:12:6e: de:79:cd:8a:36:c9:82:7a:5f:6d:4e:ff:e5:39:2b: 28:0b:cd:79:9f:b7:21:45:d9:c6:2f:fd:87:34:aa: 2f:65:f1:7a:1c:b4:94:f4:86:dc:51:31:c9:43:45: 27:80:a9:c0:ec:a0:6c:80:d8:d2:78:a8:7a:b9:b1: eb:f2:be:0b:a3:ca:f6:bd:5e:b1:64:d1:f6:24:cd: de:cc:81:f5:a2:c2:ee:e5:d5:20:92:99:ec:da:8b: 75:86:72:a9:1e:60:74:bf:01:59:4b:95:1c:1a:bd: a9:ca:a8:bd:96:24:f2:00:bc:6a:d5:8e:43:12:0b: 28:ff:b6:d3:35:96:4f:bb:95:e1:69:fa:45:67:af: 0f:08:a1:9a:f1:b1:b0:13:58:16:54:b8:c8:68:0d: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1E:98:75:E8:EE:71:12:85:DB:46:D4:F5:63:9D:3B:3D:49:10:46 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9b:20:05:fd:d8:49:34:82:93:12:09:51:f7:18:d8:12:31: 3e:70:e7:ee:87:49:b6:b9:df:0b:44:15:3a:6f:c0:54:68:29: 1a:46:ed:54:04:f8:12:f6:39:2d:96:0b:d5:64:1d:8f:a3:eb: 98:39:94:06:66:fc:11:a8:22:42:e7:78:b4:a9:8e:30:31:ae: 48:af:aa:d0:b0:19:66:b0:7b:76:00:54:64:12:43:49:ee:03: 48:bb:b7:c6:08:a7:b2:56:79:fc:04:53:ab:5e:74:c4:e4:c9: cd:12:01:bb:8c:9d:24:11:64:36:b4:42:40:ef:d2:1c:db:f0: 63:42:6e:23:24:d3:5a:3c:28:49:1a:e5:d5:a3:7b:5a:3c:3b: da:31:98:c0:61:a3:92:33:c5:be:2a:df:67:82:70:88:97:a4: 9c:e4:8c:35:b5:0f:db:a8:ca:e9:53:bd:b7:e5:41:b8:e4:2a: 9d:cb:17:ba:e5:54:d9:f9:77:2a:2d:83:42:02:8a:20:53:82: 86:e2:0b:6a:dc:1d:4c:56:57:e5:51:a0:ad:99:37:a2:b1:7e: 1c:bf:8c:75:e9:69:a6:14:d9:1a:2a:08:60:dc:ee:c3:35:63: 1d:ca:04:83:67:44:47:bd:5b:df:d9:1c:27:b1:43:aa:ee:c6: 30:25:4a:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYTj+5+UG+RPRaNhUExYUVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjUwNDA4MDQwMjAxWhcNMjUwNDA5MDQwMjAxWjAzMTEwLwYDVQQD EygyZDFlOTg3NWU4ZWU3MTEyODVkYjQ2ZDRmNTYzOWQzYjNkNDkxMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gBZCc3k5XHCZmbPm3eBx9RIjAtI AUc6KYkQ3Gveunt8WK9iJEMjuY9i/dUn55IuWwzGTISC4uJpCzkYD3Q+31mkfE8q fo72VV6fTwhtdH9xuIMV6I0UQ7bKthvBbBLnpGClOre0Em7eec2KNsmCel9tTv/l OSsoC815n7chRdnGL/2HNKovZfF6HLSU9IbcUTHJQ0UngKnA7KBsgNjSeKh6ubHr 8r4Lo8r2vV6xZNH2JM3ezIH1osLu5dUgkpns2ot1hnKpHmB0vwFZS5UcGr2pyqi9 liTyALxq1Y5DEgso/7bTNZZPu5XhafpFZ68PCKGa8bGwE1gWVLjIaA1oJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0emHXo7nEShdtG1PVjnTs9SRBGMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5sgBf3Y STSCkxIJUfcY2BIxPnDn7odJtrnfC0QVOm/AVGgpGkbtVAT4EvY5LZYL1WQdj6Pr mDmUBmb8EagiQud4tKmOMDGuSK+q0LAZZrB7dgBUZBJDSe4DSLu3xginslZ5/ART q150xOTJzRIBu4ydJBFkNrRCQO/SHNvwY0JuIyTTWjwoSRrl1aN7Wjw72jGYwGGj kjPFvirfZ4JwiJeknOSMNbUP26jK6VO9t+VBuOQqncsXuuVU2fl3Ki2DQgKKIFOC huILatwdTFZX5VGgrZk3orF+HL+MdelpphTZGioIYNzuwzVjHcoEg2dER71b39kc J7FDqu7GMCVKuQ== -----END CERTIFICATE-----Generated at Tue Apr 8 11:30:07 2025 by rpki-client