$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: 9KDOCl37UpqYv5gyFxFreN0iCsgBzGlwT274MLSL1YM= Subject key identifier: C6:C1:E7:57:38:40:A4:A5:38:CA:06:17:D7:5B:0A:63:7B:19:A1:4B Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019610FC5BE8E5CA2AB6690B96DB7109B398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 14FC Signing time: Mon 07 Apr 2025 16:01:36 +0000 Manifest this update: Mon 07 Apr 2025 16:01:36 +0000 Manifest next update: Tue 08 Apr 2025 16:01:36 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 3: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 4: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 5: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 6: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 7: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 8: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: rfWZQrcMqqAwyDaKJAtEu0zPQfRZpQxgOMG2td62m04=) 9: WbWclEjJKi9mR3DryK5x-S3Xkl0.roa (hash: 1eFaQNtQW2m0UTZGPNrJUkahNCdOhwXNsr6+Ov6pcN0=) 10: dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa (hash: 1WfupiRmFEmztIrNKS3WB7U7Ynb+bd22AiDH6YDrXfE=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 14:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:10:fc:5b:e8:e5:ca:2a:b6:69:0b:96:db:71:09:b3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Apr 7 16:01:36 2025 GMT Not After : Apr 8 16:01:36 2025 GMT Subject: CN=c6c1e7573840a4a538ca0617d75b0a637b19a14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:79:04:51:38:c3:ae:ea:6c:5a:4e:bd:07: 3f:9c:66:d3:21:18:2c:57:de:77:ae:22:bb:b4:61: 57:98:3e:38:95:9e:59:d5:ab:78:b4:5e:12:9d:bb: 6a:b4:36:11:80:8d:f8:71:e1:80:71:da:1a:53:9d: 4e:97:38:9d:c0:0f:1e:f5:2d:1a:59:58:62:c3:a9: 92:f8:4e:81:03:7c:a9:68:7d:12:00:d2:2e:b4:ee: 9c:5c:dd:d7:1b:83:00:9c:54:fd:cc:06:ef:3e:35: ae:c6:19:77:c9:17:2b:e1:9e:c9:6c:cf:0e:86:81: 40:b1:5b:e8:0c:6d:b7:f5:03:28:7e:ef:92:f2:67: 37:21:5e:15:f7:11:6b:de:32:ed:b7:1b:f4:b1:6a: 8e:e1:1c:91:5f:49:78:2c:3f:07:d9:ab:e0:04:98: b5:58:fb:03:2a:67:64:84:71:7f:5c:0d:09:16:8b: b8:ad:e1:ff:ad:c6:d5:87:e3:1d:e7:e4:9a:44:64: 5a:a4:79:ab:ef:76:7f:23:e6:3c:2c:6b:5c:95:6c: 6e:11:c7:18:33:48:d0:68:79:6c:36:45:1f:7b:a1: 70:ce:21:7d:f0:f6:3a:b1:ab:83:c5:5a:8a:f8:c4: 05:2a:e3:11:aa:9f:65:6c:94:6f:3b:dd:df:30:e5: 36:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C1:E7:57:38:40:A4:A5:38:CA:06:17:D7:5B:0A:63:7B:19:A1:4B X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:94:0b:bb:0f:5f:d2:83:73:0b:64:5b:d1:f7:f8:b0:16:e8: 71:2e:39:41:41:8e:18:51:c2:be:d5:c3:eb:87:a6:dd:96:68: a8:6a:d0:1f:b1:ec:3b:9b:dc:cd:aa:b6:ab:44:82:93:00:71: 5e:b8:3b:da:64:bd:f0:6c:e0:31:d6:da:20:b0:e4:cb:a6:2f: 67:05:47:66:f7:ac:91:61:49:f4:86:3f:fe:4d:ae:e8:16:f5: b8:59:c1:a4:67:d6:e1:fe:28:63:f0:6f:64:11:50:89:b0:df: a9:1e:80:99:85:9f:48:4a:7d:aa:67:6e:39:70:55:0b:01:d3: 2c:f6:5c:7d:3f:d9:09:e0:1b:f2:fb:d1:56:05:2c:16:1d:e6: a7:17:97:c6:8b:21:30:09:e5:31:e9:90:45:cd:3c:1c:d5:8f: c2:26:de:25:b1:f3:28:0d:a7:1f:11:eb:f4:14:3a:a7:a3:22: 19:42:62:b0:4e:1e:66:34:09:65:74:db:18:a2:70:b8:82:ab: e4:77:4c:7a:1a:9f:9a:ba:03:21:83:c3:6a:11:ba:f8:1f:8c: af:7b:35:c4:e3:b1:fe:cd:44:74:55:77:c6:9f:af:f0:ef:9b: 40:87:cc:92:90:ef:2c:1e:06:8c:8b:46:68:94:b9:9d:f4:a8: 27:ae:e3:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYQ/Fvo5coqtmkLlttxCbOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUwNDA3MTYwMTM2WhcNMjUwNDA4MTYwMTM2WjAzMTEwLwYDVQQD EyhjNmMxZTc1NzM4NDBhNGE1MzhjYTA2MTdkNzViMGE2MzdiMTlhMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpB5BFE4w67qbFpOvQc/nGbTIRgs V953riK7tGFXmD44lZ5Z1at4tF4SnbtqtDYRgI34ceGAcdoaU51OlzidwA8e9S0a WVhiw6mS+E6BA3ypaH0SANIutO6cXN3XG4MAnFT9zAbvPjWuxhl3yRcr4Z7JbM8O hoFAsVvoDG239QMofu+S8mc3IV4V9xFr3jLttxv0sWqO4RyRX0l4LD8H2avgBJi1 WPsDKmdkhHF/XA0JFou4reH/rcbVh+Md5+SaRGRapHmr73Z/I+Y8LGtclWxuEccY M0jQaHlsNkUfe6FwziF98PY6sauDxVqK+MQFKuMRqp9lbJRvO93fMOU2rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbB51c4QKSlOMoGF9dbCmN7GaFLMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZQLuw9f 0oNzC2Rb0ff4sBbocS45QUGOGFHCvtXD64em3ZZoqGrQH7HsO5vczaq2q0SCkwBx Xrg72mS98GzgMdbaILDky6YvZwVHZveskWFJ9IY//k2u6Bb1uFnBpGfW4f4oY/Bv ZBFQibDfqR6AmYWfSEp9qmduOXBVCwHTLPZcfT/ZCeAb8vvRVgUsFh3mpxeXxosh MAnlMemQRc08HNWPwibeJbHzKA2nHxHr9BQ6p6MiGUJisE4eZjQJZXTbGKJwuIKr 5HdMehqfmroDIYPDahG6+B+Mr3s1xOOx/s1EdFV3xp+v8O+bQIfMkpDvLB4GjItG aJS5nfSoJ67jHQ== -----END CERTIFICATE-----Generated at Mon Apr 7 17:59:39 2025 by rpki-client