$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: D2/G/UF7LwjhsTCYKbJFKGDtzQvszXPtGZlWr6heWpI= Subject key identifier: B0:9B:64:D7:EC:3F:04:8A:D9:2C:8D:FE:76:49:E5:52:43:27:0E:5B Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019745F8EDCA319665BCAAE2DEC08DA3A1FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 159C Signing time: Fri 06 Jun 2025 16:00:31 +0000 Manifest this update: Fri 06 Jun 2025 16:00:31 +0000 Manifest next update: Sat 07 Jun 2025 16:00:31 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 3: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 4: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 5: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 6: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 7: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 8: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: PZPBhtNrFUhT8cs7Rp/DoJZ/pVYFqqaH8gIvbtPxxbY=) 9: WbWclEjJKi9mR3DryK5x-S3Xkl0.roa (hash: 1eFaQNtQW2m0UTZGPNrJUkahNCdOhwXNsr6+Ov6pcN0=) 10: dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa (hash: 1WfupiRmFEmztIrNKS3WB7U7Ynb+bd22AiDH6YDrXfE=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 16:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:f8:ed:ca:31:96:65:bc:aa:e2:de:c0:8d:a3:a1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jun 6 16:00:31 2025 GMT Not After : Jun 7 16:00:31 2025 GMT Subject: CN=b09b64d7ec3f048ad92c8dfe7649e55243270e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:51:e9:e0:b3:c7:71:73:1c:2d:fa:82:6f: 2f:9c:fd:79:ad:75:0b:d7:a5:8e:d6:a3:71:23:e2: 72:29:10:b3:c8:7c:a2:74:0c:c4:60:f2:2b:30:cc: b8:07:f6:e7:55:15:69:20:f4:16:0b:b6:d7:0c:39: 4a:05:fc:b0:03:90:39:7c:73:02:59:b7:a1:95:5f: c3:bc:18:ed:8a:3d:c8:8d:ff:64:2a:5a:91:0f:39: 10:e8:b7:c2:8d:e3:38:b7:ec:9d:f5:5f:30:8a:b2: 44:df:5d:fd:9d:1f:13:90:05:8a:91:38:3e:a7:a5: cb:cd:9f:4b:87:a9:94:d2:cc:18:a1:49:31:31:48: 83:e7:9b:39:7f:45:76:f9:c6:56:b2:66:af:c1:c1: de:74:0a:de:f6:94:de:51:97:c5:72:e1:87:a9:46: d6:16:83:17:64:d0:5b:b8:2d:0a:ad:4c:5f:de:17: f1:ae:5b:a4:43:62:d9:25:7c:c0:a3:c1:75:c0:11: 5c:16:98:a2:5b:4e:e1:ba:46:e9:25:4c:9c:20:fd: 13:4f:9d:87:c1:8c:6d:4e:97:fd:5c:b6:50:c0:4f: c9:67:ed:22:b5:1f:eb:32:f3:a2:7a:bc:87:8c:b1: 3c:61:db:ab:ef:b6:a6:51:2b:ee:05:66:92:e2:98: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9B:64:D7:EC:3F:04:8A:D9:2C:8D:FE:76:49:E5:52:43:27:0E:5B X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:48:fc:09:9c:2a:cd:6b:fa:9e:ee:40:a0:e6:e7:35:6f:94: cf:88:ee:e3:7a:93:5a:30:1b:b2:1f:52:1f:4c:41:bd:1c:38: 0c:a2:dc:f0:63:fd:e2:13:d8:3b:a6:84:8e:4a:4f:25:dc:c6: df:bb:b8:ca:f9:dd:97:97:b3:98:44:cc:a8:88:60:6b:bb:32: ea:16:1b:d7:f0:5c:58:7e:72:ed:34:11:f0:8c:5f:68:ce:b2: d1:2c:da:56:7d:f9:39:f5:ff:a5:cd:ca:90:32:ef:86:cb:b8: 4c:9b:ce:25:75:88:dc:cb:c3:8f:34:71:ec:22:a7:c5:6d:dc: fd:6d:96:c3:64:b7:ea:d4:ff:72:d0:15:95:06:62:3f:47:a0: ec:f9:8d:35:5a:7d:b3:59:31:38:0a:b8:dc:e4:5f:73:d7:c2: 3c:fe:69:34:8f:21:e3:4c:ba:eb:1e:1f:53:20:71:e7:71:a2: 37:be:87:e4:e7:5a:7c:95:02:f3:da:16:00:e6:79:af:69:2e: 36:92:27:7c:4a:19:2c:ec:f7:26:b7:51:c0:98:ec:78:67:f2: 59:00:e3:43:c3:e1:26:20:ab:bf:3f:2d:a7:7c:bb:c4:77:35: 05:d9:61:7f:44:2f:7a:f6:0f:61:73:27:0b:ab:f3:46:e3:3f: c6:60:a9:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdF+O3KMZZlvKri3sCNo6H/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUwNjA2MTYwMDMxWhcNMjUwNjA3MTYwMDMxWjAzMTEwLwYDVQQD EyhiMDliNjRkN2VjM2YwNDhhZDkyYzhkZmU3NjQ5ZTU1MjQzMjcwZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNJR6eCzx3FzHC36gm8vnP15rXUL 16WO1qNxI+JyKRCzyHyidAzEYPIrMMy4B/bnVRVpIPQWC7bXDDlKBfywA5A5fHMC WbehlV/DvBjtij3Ijf9kKlqRDzkQ6LfCjeM4t+yd9V8wirJE3139nR8TkAWKkTg+ p6XLzZ9Lh6mU0swYoUkxMUiD55s5f0V2+cZWsmavwcHedAre9pTeUZfFcuGHqUbW FoMXZNBbuC0KrUxf3hfxrlukQ2LZJXzAo8F1wBFcFpiiW07hukbpJUycIP0TT52H wYxtTpf9XLZQwE/JZ+0itR/rMvOieryHjLE8Ydur77amUSvuBWaS4pjFYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCbZNfsPwSK2SyN/nZJ5VJDJw5bMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEj8CZwq zWv6nu5AoObnNW+Uz4ju43qTWjAbsh9SH0xBvRw4DKLc8GP94hPYO6aEjkpPJdzG 37u4yvndl5ezmETMqIhga7sy6hYb1/BcWH5y7TQR8IxfaM6y0SzaVn35OfX/pc3K kDLvhsu4TJvOJXWI3MvDjzRx7CKnxW3c/W2Ww2S36tT/ctAVlQZiP0eg7PmNNVp9 s1kxOAq43ORfc9fCPP5pNI8h40y66x4fUyBx53GiN76H5OdafJUC89oWAOZ5r2ku NpInfEoZLOz3JrdRwJjseGfyWQDjQ8PhJiCrvz8tp3y7xHc1Bdlhf0QvevYPYXMn C6vzRuM/xmCpMQ== -----END CERTIFICATE-----Generated at Sat Jun 7 03:05:05 2025 by rpki-client