$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft File: w_tAOiQYg-WPztUtOdgOq9Urs28.mft (raw, json) Hash identifier: SIR5F0F5ir7c1uzN01dLYs839l1gKjUvfRtsgCiBhHQ= Subject key identifier: F0:BD:26:08:66:02:C6:C5:28:F2:93:B7:54:38:F3:C5:9B:C1:16:89 Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f Certificate serial: 0196BC3754A55DFE495F9907B6EECC9A95E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft Manifest number: 123E Signing time: Sat 10 May 2025 22:01:04 +0000 Manifest this update: Sat 10 May 2025 22:01:04 +0000 Manifest next update: Sun 11 May 2025 22:01:04 +0000 Files and hashes: 1: 0O9x83-lbjQhQ0H0QNL4onc5rtE.roa (hash: gCcafB1+mESKS3BVJYDajJPvasqf2Tc5KeBGiyOT4to=) 2: 1-jdIlT59ATtnye0obz3ukqOdzSw.roa (hash: WZteN0hvbeOfkaazAFqc4a1Hb3S3n64JbzhuBh5/71o=) 3: 2Gso70Bxi4cBy_WodKxdmUIwtcI.roa (hash: /C593JYHyt/Js1dmu1EsZBHQvb2UcIHLzg2ko4L4lPo=) 4: 8DzD2uq5lN_KH_22IY31T_I5eUA.roa (hash: YwlgZskvfXHSFdpGYunNlSWojU8CZ8UtlqZ7vcZMWHk=) 5: H6DguWyAKB8u-XwiA-wSbFWSyyM.roa (hash: HhyM4zbUFZiPEk4/CITr/Hv8a8wBk7oLKs2GIwW2o7U=) 6: KntaM8lbcY4c01Dw4SaSSX2lodw.roa (hash: cLp1SD6XtpquL0QHMFnM+17dWoMSgXrVeFdbvQlKhQM=) 7: Phmx9blLQ7v5rgeNAupIAeVATYQ.roa (hash: ql8UKx0lpekuzUNBWqBQ1mqh/lL/DJd1b7ik/nG/cD4=) 8: ePoIjSzwu99M4WhvEDpbXSDvvQo.roa (hash: R96ob6c+Fl2Ot6tWCC9JDy+m8b6W3TjrV6Ao1DPqb1c=) 9: qQnpsIyhfC_30_02N13kTh1MqLQ.roa (hash: MbMug/0ttDrSz8GeinJuhxQXXHeOISrtY8I3Yes9Trc=) 10: w_tAOiQYg-WPztUtOdgOq9Urs28.crl (hash: z1lvKUfI8asG3RGkzFSjTBFDuQPt2ml/DKEvknRZN7c=) 11: yODzbE0zP6j_JHKYXWAzphsQNA8.roa (hash: VWJD33neAhmMaiHQw/4mg0RmMd404ON+a4BHqIO3tqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bc:37:54:a5:5d:fe:49:5f:99:07:b6:ee:cc:9a:95:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f Validity Not Before: May 10 22:01:04 2025 GMT Not After : May 11 22:01:04 2025 GMT Subject: CN=f0bd26086602c6c528f293b75438f3c59bc11689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:4d:20:bd:57:e2:b3:b5:ef:07:12:e8:2c: 2b:cc:b9:e1:c5:17:a6:4e:92:92:a5:de:0f:4a:4f: d1:9b:4b:29:6c:bc:12:46:43:74:c5:3d:9e:42:4b: 2c:f3:97:5a:a8:a9:dc:f9:49:74:eb:26:f4:3f:90: 81:a7:f7:05:45:29:34:3f:a2:d1:b1:af:25:fa:4c: 69:5b:6a:4d:59:07:a9:ff:e2:18:b8:4c:08:ad:ce: b8:61:8f:4c:5d:ef:5b:6e:b5:85:09:f4:30:90:07: 4f:9c:93:e7:15:a9:4e:16:2c:19:8c:66:6e:d6:95: 07:57:3d:44:6b:7d:84:89:4e:25:6c:8c:db:06:b6: 4f:18:6c:17:8f:e6:76:de:c9:a3:02:5a:2f:4a:bf: a1:de:d9:a7:50:e8:f7:f8:0a:51:b7:80:f9:5a:db: fc:2a:db:b0:fc:e2:3c:1e:c5:42:f9:51:3d:ca:49: fe:36:f6:89:d7:29:20:37:9f:58:b0:1c:e3:cb:c3: 2e:a7:07:8d:b4:b8:9f:35:69:8e:fa:d0:09:e1:c3: 35:ef:7e:fb:de:8b:a8:fa:ca:bf:f5:59:2c:77:5d: 4e:30:96:fa:66:ad:40:5c:e9:a5:ae:d7:39:72:c0: 03:3f:1c:30:2a:5b:55:4e:5c:27:65:d8:35:eb:50: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:26:08:66:02:C6:C5:28:F2:93:B7:54:38:F3:C5:9B:C1:16:89 X509v3 Authority Key Identifier: keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:81:03:27:bd:42:4c:6a:27:7b:57:41:26:02:15:70:f6:62: 46:62:b8:38:19:dc:76:c0:ad:3b:c8:78:91:c0:f6:e6:f0:59: 23:99:33:73:ca:c9:c8:e3:74:48:47:79:66:90:96:49:86:23: 0e:ea:80:b3:40:35:69:d1:a5:dc:9e:96:04:87:61:b8:c3:d5: 98:73:5c:7b:52:cf:75:43:3d:a5:90:cd:b8:37:8c:e3:d7:66: 19:fa:38:4f:dc:a0:60:6b:3b:f9:a7:dc:04:fe:ca:bb:00:cb: cc:66:45:51:b8:5c:3d:1f:51:4a:84:1b:a1:41:0a:37:7f:dd: 99:40:eb:6b:2c:6c:2d:47:e0:6b:d3:33:3c:ee:ff:19:db:4a: d6:a0:12:04:9f:c6:5c:f5:ca:fa:86:32:69:db:ed:ec:c6:12: 48:81:97:08:a7:90:d1:ff:fa:28:9c:59:de:88:12:74:3e:55: fd:7b:3a:c9:fe:2a:17:3a:ae:3b:a2:d2:e4:95:ec:2c:b9:9e: 91:bd:ae:8c:f1:0e:ed:3e:7e:fb:41:ca:dc:5b:c6:e9:6f:e1: b8:36:e1:56:32:bc:f0:39:eb:99:fe:3d:d1:cc:08:f1:d4:9a: 01:80:42:b4:21:2a:b7:7a:1c:b0:f4:2c:91:51:8c:e6:dc:bd: d5:52:9f:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa8N1SlXf5JX5kHtu7MmpXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy YmIzNmYwHhcNMjUwNTEwMjIwMTA0WhcNMjUwNTExMjIwMTA0WjAzMTEwLwYDVQQD EyhmMGJkMjYwODY2MDJjNmM1MjhmMjkzYjc1NDM4ZjNjNTliYzExNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u5NIL1X4rO17wcS6CwrzLnhxRem TpKSpd4PSk/Rm0spbLwSRkN0xT2eQkss85daqKnc+Ul06yb0P5CBp/cFRSk0P6LR sa8l+kxpW2pNWQep/+IYuEwIrc64YY9MXe9bbrWFCfQwkAdPnJPnFalOFiwZjGZu 1pUHVz1Ea32EiU4lbIzbBrZPGGwXj+Z23smjAlovSr+h3tmnUOj3+ApRt4D5Wtv8 Ktuw/OI8HsVC+VE9ykn+NvaJ1ykgN59YsBzjy8MupweNtLifNWmO+tAJ4cM17377 3ouo+sq/9Vksd11OMJb6Zq1AXOmlrtc5csADPxwwKltVTlwnZdg161DIjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPC9JghmAsbFKPKTt1Q488WbwRaJMB8GA1UdIwQY MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt YTlhNzc5MDI2ZjBhLzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIEDJ71C TGone1dBJgIVcPZiRmK4OBncdsCtO8h4kcD25vBZI5kzc8rJyON0SEd5ZpCWSYYj DuqAs0A1adGl3J6WBIdhuMPVmHNce1LPdUM9pZDNuDeM49dmGfo4T9ygYGs7+afc BP7KuwDLzGZFUbhcPR9RSoQboUEKN3/dmUDrayxsLUfga9MzPO7/GdtK1qASBJ/G XPXK+oYyadvt7MYSSIGXCKeQ0f/6KJxZ3ogSdD5V/Xs6yf4qFzquO6LS5JXsLLme kb2ujPEO7T5++0HK3FvG6W/huDbhVjK88Dnrmf490cwI8dSaAYBCtCEqt3ocsPQs kVGM5ty91VKfoA== -----END CERTIFICATE-----Generated at Sun May 11 01:18:03 2025 by rpki-client