$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: TwI0ZgL3ZEHAEITOySr9qjGOUaTWoP3mdMuEIN4tL4c= Subject key identifier: B2:28:D7:5E:A9:70:E4:6E:10:12:9C:63:ED:49:9B:BB:D5:8B:5E:C2 Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 01960AC35579AC58DE61DE8E0C966E321C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0AE8 Signing time: Sun 06 Apr 2025 11:01:35 +0000 Manifest this update: Sun 06 Apr 2025 11:01:35 +0000 Manifest next update: Mon 07 Apr 2025 11:01:35 +0000 Files and hashes: 1: 1-uJi1EoQ8JN25Kce17nNqq77GaQ.roa (hash: RupUOxGdri6PWDYtu5n40Qgd2BA9j7G7QB/M2ca35RY=) 2: 3X5B_z_CHT9YiArtKHYnEy7SS1U.roa (hash: tIWfVACal3ac9CgPfVZfL2hoiDFlKQiV1Zl+vw5e/Tk=) 3: A1HcUdVA2YZl11c4VMOwYxBYFec.roa (hash: hzMWvK0fIGDttPI0bMAflMJsnQBzz3sLRKNlUtcrb1s=) 4: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 5: U5K4nZt5GwpnTogWsCIrDUe5GNA.roa (hash: Cp/pfeYsX04ai67Upci8F8qQXIjwLAutixRq9H+gCok=) 6: hN7zKkOexRQZr-KvvxJ68RRBR88.roa (hash: 83LMiX+7xkSI2TZz6xMtRRpAT0AOqOI9dFyBzIQNyH4=) 7: iXWAZqYhCPWt2FCRhFpWi90a8xE.roa (hash: 10HcpXgcB4xsYGxwfmpmcFF4/9Sr6T+0Er4n+NyAHxs=) 8: lCAntpV3Puug9eCtgagQuIkxOkk.roa (hash: Dfdd9Vbsr3JXtzS/5wXqKvxVfHrr1H8kKXKW+IQNi8s=) 9: mkmzSBfTmh1927TwjKRzkGSilpo.roa (hash: ZpaUb66empT2T5gziJ4fvdd/emyVETapR7pDi9FUco0=) 10: nnCUhVImeKVSSHsPJ4bQMntIe0k.roa (hash: y/vliRYcabvic0DNd0VxC9usOOdHfTvNAxGNCa7L498=) 11: tOO0wCCsZhrYKFKLclwQAV9CkIw.roa (hash: /3PfNmjuHcOP5UraiPVT5/6ZtktLgHQ5qzLXjqG4ztk=) 12: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: AzR0jrATiNIABP0sssKaagm8A3QNMaMDa8jWDpdH+Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:c3:55:79:ac:58:de:61:de:8e:0c:96:6e:32:1c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: Apr 6 11:01:35 2025 GMT Not After : Apr 7 11:01:35 2025 GMT Subject: CN=b228d75ea970e46e10129c63ed499bbbd58b5ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:70:c9:7f:e5:30:c3:56:61:ed:d8:3e:81: c1:9c:e6:0b:dc:3e:e9:ba:c5:1e:29:3d:80:8a:13: 3b:fe:6a:37:49:ca:f3:7a:32:b9:71:b6:e4:d9:9a: 23:12:f5:95:2b:a7:c9:1f:e7:ce:16:cd:8b:ab:97: ad:c2:20:50:88:3d:b6:37:5c:68:84:6f:ce:33:73: 24:05:58:ae:34:48:ab:fc:52:84:e8:5e:ff:2d:0b: 42:06:bb:a1:96:22:36:b2:d7:1e:7c:4c:79:33:3b: 8f:be:f6:e3:0d:9c:c5:66:80:9a:92:b3:46:73:8f: 92:3d:34:65:26:f3:4a:a1:e5:b3:02:5b:e4:ca:b5: a7:3c:a6:f0:76:9b:c0:d6:b8:ae:ec:4b:df:ea:62: 36:18:6a:c6:dc:83:f0:49:58:0a:22:5d:61:3b:de: 11:21:23:c3:55:e0:0c:b5:f1:ea:39:ed:0d:5c:8f: 3b:59:42:e2:d0:c3:c0:ec:09:49:29:97:ab:0b:7d: aa:be:ac:9d:89:d3:b1:45:3d:da:3a:ee:97:eb:5d: 41:dc:ce:06:69:b2:3a:bc:22:91:60:7a:f0:e0:a9: a6:4d:04:57:15:fb:a6:bf:0d:9b:1e:fd:f9:e0:c5: 71:65:fa:69:8b:40:ee:0b:ca:ac:f0:13:a0:1a:f0: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:D7:5E:A9:70:E4:6E:10:12:9C:63:ED:49:9B:BB:D5:8B:5E:C2 X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c0:b7:41:97:cc:d3:b1:43:e6:9c:65:b5:52:50:fc:20:6f: d9:63:7f:1b:e4:19:5a:3b:bc:c4:d2:0b:34:2e:05:e6:0d:e1: 27:8e:3e:62:ef:bb:e6:9c:d5:6c:66:88:6f:c0:24:79:ab:06: e9:a9:52:f5:3c:84:c2:80:13:f9:10:c8:4a:fe:7d:ec:2f:11: 2e:52:a6:cb:17:85:f4:6c:df:ea:22:35:1d:06:20:82:de:7e: f1:76:b8:8f:6d:a9:f4:c3:ed:a0:1c:b6:f3:26:f4:b8:94:51: ee:29:08:ce:39:d9:5f:cd:3a:2e:ea:5b:95:1c:87:ea:2a:3e: 30:cb:ca:65:b6:df:79:37:0d:7d:a2:a9:28:34:37:47:c6:6b: 14:27:29:41:46:05:63:03:1f:4c:e9:c9:b9:ac:c5:a9:40:57: a3:36:a4:84:17:55:78:45:11:30:42:6e:b0:ad:c1:05:a5:e4: 21:98:9c:cf:1e:b4:09:e1:f3:f6:b5:8a:56:d0:ec:98:e0:b4: fd:40:e9:f8:20:f3:f6:d9:15:71:65:a8:ea:43:a9:e4:80:3c: df:f3:8f:02:c4:43:5e:37:9f:45:4f:4b:82:8f:7f:0c:2b:16: ae:a1:2e:9e:f1:f9:6f:ec:92:dd:5a:c2:7b:26:43:19:28:38: 28:ed:a5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKw1V5rFjeYd6ODJZuMhycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUwNDA2MTEwMTM1WhcNMjUwNDA3MTEwMTM1WjAzMTEwLwYDVQQD EyhiMjI4ZDc1ZWE5NzBlNDZlMTAxMjljNjNlZDQ5OWJiYmQ1OGI1ZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFxwyX/lMMNWYe3YPoHBnOYL3D7p usUeKT2AihM7/mo3ScrzejK5cbbk2ZojEvWVK6fJH+fOFs2Lq5etwiBQiD22N1xo hG/OM3MkBViuNEir/FKE6F7/LQtCBruhliI2stcefEx5MzuPvvbjDZzFZoCakrNG c4+SPTRlJvNKoeWzAlvkyrWnPKbwdpvA1riu7Evf6mI2GGrG3IPwSVgKIl1hO94R ISPDVeAMtfHqOe0NXI87WULi0MPA7AlJKZerC32qvqydidOxRT3aOu6X611B3M4G abI6vCKRYHrw4KmmTQRXFfumvw2bHv354MVxZfppi0DuC8qs8BOgGvDwjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIo116pcORuEBKcY+1Jm7vVi17CMB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcC3QZfM 07FD5pxltVJQ/CBv2WN/G+QZWju8xNILNC4F5g3hJ44+Yu+75pzVbGaIb8AkeasG 6alS9TyEwoAT+RDISv597C8RLlKmyxeF9Gzf6iI1HQYggt5+8Xa4j22p9MPtoBy2 8yb0uJRR7ikIzjnZX806LupblRyH6io+MMvKZbbfeTcNfaKpKDQ3R8ZrFCcpQUYF YwMfTOnJuazFqUBXozakhBdVeEURMEJusK3BBaXkIZiczx60CeHz9rWKVtDsmOC0 /UDp+CDz9tkVcWWo6kOp5IA83/OPAsRDXjefRU9Lgo9/DCsWrqEunvH5b+yS3VrC eyZDGSg4KO2lcg== -----END CERTIFICATE-----Generated at Sun Apr 6 14:46:51 2025 by rpki-client