$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: 8idT5R4XNFxeUIaDSx/h0CwMYJKeFh+X79lNGmE62Hk= Subject key identifier: 92:8F:00:F1:BC:2B:EE:32:95:40:4A:31:57:7D:4E:F6:B7:79:F8:4F Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 0196022E49EF98B42B7A92A99A016C594CAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 1207 Signing time: Fri 04 Apr 2025 19:01:50 +0000 Manifest this update: Fri 04 Apr 2025 19:01:50 +0000 Manifest next update: Sat 05 Apr 2025 19:01:50 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: UBh8VoEYapHsEXi+Lrpze/mDf6mSC3LWfg22IH+oUYY=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: lLs0En-PiwBfifuxTc3Sy8rCLkM.roa (hash: jx3OTZl4aGxwjOIxFgmOXxLonxn+2Yh7K8U7Wt+0LlI=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:2e:49:ef:98:b4:2b:7a:92:a9:9a:01:6c:59:4c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Apr 4 19:01:50 2025 GMT Not After : Apr 5 19:01:50 2025 GMT Subject: CN=928f00f1bc2bee3295404a31577d4ef6b779f84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:30:39:27:c4:4a:49:17:7a:db:45:47:f9:c1: 97:0c:4c:a6:4e:11:17:08:bc:32:12:c3:11:73:4d: f4:ed:51:2d:52:7c:bf:36:db:01:51:81:b7:2c:18: 54:25:97:8d:7a:60:9e:f1:a5:4f:79:14:21:0e:57: 67:8b:cb:71:df:ab:7b:35:d6:3c:2d:3f:9a:50:3b: b7:d0:97:53:94:be:40:67:8c:5a:50:e7:7e:f8:86: 90:6d:4c:21:9a:2c:73:62:87:91:d5:73:3b:e3:79: 60:0a:54:dd:d8:ff:18:dc:ec:87:5c:78:66:10:83: 7a:09:e7:27:93:ab:b6:30:c7:50:d4:5c:ba:73:c9: f8:78:1e:d6:e4:16:1b:66:79:b3:1a:75:5b:21:8f: 72:d5:0e:3c:ac:08:59:43:27:79:61:c9:dd:bf:d4: 3b:51:38:57:c2:7e:e7:c2:40:31:69:86:f8:36:6e: 1e:ca:39:f1:14:c7:bb:7a:e6:d7:6e:b3:81:8b:cb: 14:ee:2c:f1:66:85:ea:2c:a0:54:54:1f:64:68:99: 13:7b:b5:e2:8b:7a:27:bf:57:25:87:3d:a7:af:5b: 93:0f:8a:51:e4:55:87:f5:3e:50:96:02:00:ed:49: 7e:6d:b1:90:9c:0e:0c:fd:46:c7:6b:cb:be:54:ab: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:00:F1:BC:2B:EE:32:95:40:4A:31:57:7D:4E:F6:B7:79:F8:4F X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:7c:eb:42:d5:ea:48:8b:f8:9b:1f:d7:53:26:de:9d:bb: a3:6c:ee:ab:f1:51:47:18:84:dc:94:83:76:bb:c4:44:93:75: 1d:10:bc:ae:6a:74:31:9c:15:2c:4b:b6:6e:21:5a:62:83:af: d1:2a:23:26:49:03:90:c6:fc:2f:f1:95:5f:34:94:7a:62:f1: 1b:1d:83:ed:7a:f6:2d:9c:97:e4:9e:97:f1:6c:4d:63:46:13: 06:00:4e:29:0d:6b:22:c1:85:27:db:d4:a7:5f:d7:09:5e:0c: 77:5b:36:13:1e:1c:0a:cd:e2:5f:62:9f:98:24:d7:d2:5b:69: d2:df:56:f5:de:b6:cd:5c:a6:67:83:69:1c:45:88:be:2b:33: da:8b:8e:b7:61:e3:39:be:6e:80:ad:0b:71:a4:6e:22:2b:13: 2c:f5:85:4d:bc:14:1c:a3:d5:ac:2b:a5:73:a4:c6:f4:d4:af: 8c:8d:6a:ba:78:4c:d9:03:3b:37:98:99:d7:df:b2:79:76:a0: 53:f0:c5:f5:6b:0b:c8:e1:38:08:c5:0c:7c:b0:da:3f:cf:51: 2e:e4:0f:6c:73:27:0d:8b:49:79:42:7e:59:cd:d1:f1:6c:f2: 19:fd:51:4a:d0:9d:55:af:74:74:77:bf:39:22:db:c2:84:fc: 7a:de:04:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYCLknvmLQrepKpmgFsWUyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUwNDA0MTkwMTUwWhcNMjUwNDA1MTkwMTUwWjAzMTEwLwYDVQQD Eyg5MjhmMDBmMWJjMmJlZTMyOTU0MDRhMzE1NzdkNGVmNmI3NzlmODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jA5J8RKSRd620VH+cGXDEymThEX CLwyEsMRc0307VEtUny/NtsBUYG3LBhUJZeNemCe8aVPeRQhDldni8tx36t7NdY8 LT+aUDu30JdTlL5AZ4xaUOd++IaQbUwhmixzYoeR1XM743lgClTd2P8Y3OyHXHhm EIN6Cecnk6u2MMdQ1Fy6c8n4eB7W5BYbZnmzGnVbIY9y1Q48rAhZQyd5Ycndv9Q7 UThXwn7nwkAxaYb4Nm4eyjnxFMe7eubXbrOBi8sU7izxZoXqLKBUVB9kaJkTe7Xi i3onv1clhz2nr1uTD4pR5FWH9T5QlgIA7Ul+bbGQnA4M/UbHa8u+VKvnzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKPAPG8K+4ylUBKMVd9Tva3efhPMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+N860LV 6kiL+Jsf11Mm3p27o2zuq/FRRxiE3JSDdrvERJN1HRC8rmp0MZwVLEu2biFaYoOv 0SojJkkDkMb8L/GVXzSUemLxGx2D7Xr2LZyX5J6X8WxNY0YTBgBOKQ1rIsGFJ9vU p1/XCV4Md1s2Ex4cCs3iX2KfmCTX0ltp0t9W9d62zVymZ4NpHEWIvisz2ouOt2Hj Ob5ugK0LcaRuIisTLPWFTbwUHKPVrCulc6TG9NSvjI1qunhM2QM7N5iZ19+yeXag U/DF9WsLyOE4CMUMfLDaP89RLuQPbHMnDYtJeUJ+Wc3R8WzyGf1RStCdVa90dHe/ OSLbwoT8et4EsQ== -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:51 2025 by rpki-client