$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: cv0thEbHmX+dpZJq4WVYIknrhi1FzwtHlxPZqIk5lnU= Subject key identifier: 9C:3B:44:8B:EE:DD:70:E0:6C:76:00:C5:84:A3:A9:88:30:6B:AC:E9 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 01973CF6BD69222C20CD2BC044A1F57EB867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 12AC Signing time: Wed 04 Jun 2025 22:01:32 +0000 Manifest this update: Wed 04 Jun 2025 22:01:32 +0000 Manifest next update: Thu 05 Jun 2025 22:01:32 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: Bv8uUVi19zly0tPlURCsEMNlL/0JH1M6U85HVbdf7Vg=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:f6:bd:69:22:2c:20:cd:2b:c0:44:a1:f5:7e:b8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Jun 4 22:01:32 2025 GMT Not After : Jun 5 22:01:32 2025 GMT Subject: CN=9c3b448beedd70e06c7600c584a3a988306bace9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:1a:9d:7b:9f:2d:74:79:91:a8:af:b0:37: 11:12:6b:6a:e0:52:c7:66:9f:b7:9e:71:53:1b:ff: f0:f6:c1:23:b7:33:95:cb:dd:cd:b1:48:d3:5f:a9: 14:fd:f7:b0:ab:e6:f7:c9:27:53:24:1f:93:a0:d4: bc:73:9f:e2:24:88:48:ed:93:45:53:81:e0:40:c9: 88:e3:31:24:58:c3:b5:7d:f8:26:b5:55:56:bc:38: c8:28:c6:5b:51:f3:c1:f8:ee:2d:67:b6:3d:04:3a: 2c:32:e7:9b:3d:22:09:99:17:f3:62:3e:2e:02:ce: 31:a2:f3:dc:7e:0d:b5:07:00:96:d4:81:e8:8f:70: 06:d2:ca:a4:a8:19:db:95:75:32:4b:da:db:82:27: fd:4e:f3:2d:89:24:ae:5c:df:1f:52:fc:55:8d:39: f5:9c:7a:66:cf:63:5c:b1:d7:a9:76:e8:db:80:f0: a5:7d:e4:f4:7f:84:c2:89:34:3a:0c:6c:47:af:c7: 68:6f:9e:40:f4:55:d8:26:1a:f7:20:7a:a7:2e:ad: 68:00:2a:0b:ef:8a:a7:5e:60:b2:2b:24:bd:d1:14: 3f:ae:3d:e1:7b:a4:f7:fb:70:a1:2c:fe:a8:d3:43: 08:d3:81:72:cc:e9:91:d4:37:b6:0c:c6:c8:48:46: 37:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:44:8B:EE:DD:70:E0:6C:76:00:C5:84:A3:A9:88:30:6B:AC:E9 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d6:2a:36:e1:57:db:f1:f4:d8:e0:7e:43:26:09:23:1e:3d: 7a:64:04:6f:5e:f5:ee:9f:51:ac:4d:67:6b:d0:74:ee:bc:d7: 7a:9b:35:f1:ff:d7:f1:81:6a:bf:4f:ef:24:ca:a0:7b:ba:06: 3e:7a:50:de:b9:96:ab:53:56:99:a9:4f:4b:05:29:c6:f2:93: dd:25:db:e4:0e:1b:1c:d9:f8:75:8c:f6:56:06:e6:76:28:81: 16:03:0a:d4:38:a9:c8:76:e3:45:cf:11:84:d6:9c:dd:2b:1b: f5:52:29:e7:20:48:3f:6b:61:36:c7:4d:a0:79:e9:f9:a6:ef: 36:50:c6:18:4a:a3:fc:b9:b3:f1:d0:65:07:01:e4:7c:ee:58: 75:4d:29:3b:71:3c:ce:4c:f2:b0:69:9d:90:f6:18:47:a5:fb: 8a:59:22:aa:51:ae:a6:b9:cb:70:67:f9:c3:75:e8:e8:60:13: 38:8a:34:a7:a8:7f:1d:f5:ab:0c:58:ec:56:2c:e3:73:c1:c3: e5:65:02:b7:05:80:93:9c:6b:06:c1:26:57:84:51:63:a4:21: 65:1b:f1:a3:3e:d4:7b:57:8e:bc:6f:63:34:ef:35:2e:98:d3: ff:59:26:06:e1:d7:82:5f:12:5c:93:e8:06:3e:bc:4d:12:95: 52:80:96:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc89r1pIiwgzSvARKH1frhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUwNjA0MjIwMTMyWhcNMjUwNjA1MjIwMTMyWjAzMTEwLwYDVQQD Eyg5YzNiNDQ4YmVlZGQ3MGUwNmM3NjAwYzU4NGEzYTk4ODMwNmJhY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGUanXufLXR5kaivsDcREmtq4FLH Zp+3nnFTG//w9sEjtzOVy93NsUjTX6kU/fewq+b3ySdTJB+ToNS8c5/iJIhI7ZNF U4HgQMmI4zEkWMO1ffgmtVVWvDjIKMZbUfPB+O4tZ7Y9BDosMuebPSIJmRfzYj4u As4xovPcfg21BwCW1IHoj3AG0sqkqBnblXUyS9rbgif9TvMtiSSuXN8fUvxVjTn1 nHpmz2NcsdepdujbgPClfeT0f4TCiTQ6DGxHr8dob55A9FXYJhr3IHqnLq1oACoL 74qnXmCyKyS90RQ/rj3he6T3+3ChLP6o00MI04FyzOmR1De2DMbISEY3vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw7RIvu3XDgbHYAxYSjqYgwa6zpMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdYqNuFX 2/H02OB+QyYJIx49emQEb1717p9RrE1na9B07rzXeps18f/X8YFqv0/vJMqge7oG PnpQ3rmWq1NWmalPSwUpxvKT3SXb5A4bHNn4dYz2VgbmdiiBFgMK1DipyHbjRc8R hNac3Ssb9VIp5yBIP2thNsdNoHnp+abvNlDGGEqj/Lmz8dBlBwHkfO5YdU0pO3E8 zkzysGmdkPYYR6X7ilkiqlGuprnLcGf5w3Xo6GATOIo0p6h/HfWrDFjsVizjc8HD 5WUCtwWAk5xrBsEmV4RRY6QhZRvxoz7Ue1eOvG9jNO81LpjT/1kmBuHXgl8SXJPo Bj68TRKVUoCWBg== -----END CERTIFICATE-----Generated at Thu Jun 5 00:18:04 2025 by rpki-client