$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: PlPOvBt+mCSzluxt1neb9Hvts6xSnOxiU3OAzJ8Zoe4= Subject key identifier: CD:6F:FD:DA:B5:2C:83:48:0F:AD:77:5A:BC:5F:23:EA:ED:08:07:95 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 0196B85A52DE57E143C92A1D640AD1AF8B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1547 Signing time: Sat 10 May 2025 04:00:49 +0000 Manifest this update: Sat 10 May 2025 04:00:49 +0000 Manifest next update: Sun 11 May 2025 04:00:49 +0000 Files and hashes: 1: 1-0URATiYn4nWMHZbWNa1y4LiAcE.roa (hash: qnoIsvmT1NGoh4R21XKrhNbrolncENGMdF/rtoG9oNM=) 2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: q0T0vCoNw/aCysObiG/VffGCVZaAKD+BeT88G0Da43o=) 3: 4u-FrWKWaho_ISyzc5VOsCnPB-Q.roa (hash: YfroGaZGo+3Y5Nuhq7M/QzCuhU+RFQDjKrM1lqbk5uM=) 4: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 5: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 6: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 7: JvZUEi7A7V388WY-38Um7sLP4iA.roa (hash: CvMgS2JS1B5/pFFOBX0cIZilf0BG410ECm9I/vEGJ5c=) 8: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 9: UWV4l3kE-brWJX9uRkRZO53lO9o.roa (hash: cAU+zNWLTTRLrd7RdQn+sxXYtefOYpWRpuIgwXau7iA=) 10: W5a7DdwJaAnEaRHZv6EO9kbudzg.roa (hash: oyakXu5rs8SXNOZxzAoWDuA9NdXgDHDVljC1e0neNkA=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa (hash: 0VHL8dNRCWtY3U9FsisIK+yIftWh4d0//02eZdVbL24=) 13: iTss4dVuEO8u2zrybey6wjkQ5CM.roa (hash: iS+Pl9gnUh0T0PMsvXCrH+rna0Q4YPkZDZcMC+K1GTQ=) 14: osgJC1j873fUuICkEREfgiPJqL4.roa (hash: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=) 15: whqum5btfebJ92EiHlAqEY1dMyI.roa (hash: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:5a:52:de:57:e1:43:c9:2a:1d:64:0a:d1:af:8b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: May 10 04:00:49 2025 GMT Not After : May 11 04:00:49 2025 GMT Subject: CN=cd6ffddab52c83480fad775abc5f23eaed080795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:57:91:e1:6a:32:e1:ba:7c:4b:35:f2:5d: 0b:18:98:8d:a3:b9:8b:eb:24:7c:7d:ad:4a:6d:9b: 92:e4:33:d6:13:ec:55:56:18:9b:18:fb:53:be:95: c5:55:7c:16:76:a3:ef:c8:7e:ec:ac:d3:84:16:de: 3f:3b:30:5b:4d:59:ad:be:d5:16:f1:79:4c:d2:06: 93:5e:e8:b0:e2:1b:02:ce:2f:27:51:f3:77:31:5a: 64:1c:e5:6e:fb:4e:35:ec:3a:ba:ec:64:81:f1:85: d8:67:57:35:b3:a5:6c:8b:ea:de:c8:56:3d:ad:40: f4:b8:7d:4a:48:62:56:7f:3b:f0:8b:bb:78:ce:36: 67:a9:31:ac:a2:05:d9:06:b1:dd:58:3b:8d:b7:ea: d6:12:97:ba:d9:64:ac:5f:2c:03:7b:f4:74:37:fe: bb:8c:d9:03:8a:5e:fb:30:88:c5:57:81:f3:d3:e7: 5d:79:6a:4c:af:67:c0:a5:45:66:1b:01:86:0d:81: c4:f0:92:09:d0:39:1d:fe:5c:6e:d6:22:e9:ed:c9: 8e:4b:1f:16:40:2e:90:5c:2f:c6:31:2c:93:ba:f0: d4:5b:4c:c8:86:e4:91:e3:b1:0e:d0:8a:58:65:8f: 28:ac:02:63:44:cd:5a:ca:1a:de:a8:7b:7b:eb:35: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6F:FD:DA:B5:2C:83:48:0F:AD:77:5A:BC:5F:23:EA:ED:08:07:95 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:99:67:fa:5c:24:96:8e:72:d2:20:a0:b7:d5:c6:22:e8:3e: 68:aa:21:c2:30:f2:57:c9:75:9c:fc:42:92:65:a1:4c:47:17: 57:44:2d:83:82:99:ab:06:29:ca:17:06:d5:3f:1e:a9:40:1d: ab:86:98:8b:ca:73:ea:41:be:05:b7:d5:9b:c0:90:1a:f3:a8: ef:e2:5f:fc:83:7d:f3:b8:da:ca:b5:53:f3:61:12:b1:5b:f7: 82:85:7e:79:37:6d:a5:83:00:e3:9b:92:24:a1:e8:5d:8e:d3: ef:94:ab:e3:95:e5:c2:2d:84:56:6d:46:46:c4:fd:53:93:bb: 7b:dd:3a:b8:d6:a6:fe:a5:49:c2:c1:08:f2:75:1f:f9:ea:62: 12:f1:61:01:8a:98:2e:2d:2d:2d:87:da:c5:19:32:02:cb:7b: a4:f8:02:0d:6e:9c:7c:90:e7:61:c0:b9:8d:86:c3:27:c4:40: 81:13:f1:97:c3:2d:a4:7d:27:50:d9:9b:1b:f6:97:a8:8c:28: 23:93:5b:4a:68:07:ff:21:d8:1f:43:51:2d:1c:d2:d3:07:67: f6:6e:0c:80:f9:af:04:64:3b:d0:2c:d5:d2:18:df:55:9d:d0: 1d:ed:5c:30:9d:7f:ed:4d:5f:a8:da:b0:d6:86:b1:a4:45:08: 41:03:43:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4WlLeV+FDySodZArRr4seMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUwNTEwMDQwMDQ5WhcNMjUwNTExMDQwMDQ5WjAzMTEwLwYDVQQD EyhjZDZmZmRkYWI1MmM4MzQ4MGZhZDc3NWFiYzVmMjNlYWVkMDgwNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm5XkeFqMuG6fEs18l0LGJiNo7mL 6yR8fa1KbZuS5DPWE+xVVhibGPtTvpXFVXwWdqPvyH7srNOEFt4/OzBbTVmtvtUW 8XlM0gaTXuiw4hsCzi8nUfN3MVpkHOVu+0417Dq67GSB8YXYZ1c1s6Vsi+reyFY9 rUD0uH1KSGJWfzvwi7t4zjZnqTGsogXZBrHdWDuNt+rWEpe62WSsXywDe/R0N/67 jNkDil77MIjFV4Hz0+ddeWpMr2fApUVmGwGGDYHE8JIJ0Dkd/lxu1iLp7cmOSx8W QC6QXC/GMSyTuvDUW0zIhuSR47EO0IpYZY8orAJjRM1ayhreqHt76zU/6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1v/dq1LINID613WrxfI+rtCAeVMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJln+lwk lo5y0iCgt9XGIug+aKohwjDyV8l1nPxCkmWhTEcXV0Qtg4KZqwYpyhcG1T8eqUAd q4aYi8pz6kG+BbfVm8CQGvOo7+Jf/IN987jayrVT82ESsVv3goV+eTdtpYMA45uS JKHoXY7T75Sr45Xlwi2EVm1GRsT9U5O7e906uNam/qVJwsEI8nUf+epiEvFhAYqY Li0tLYfaxRkyAst7pPgCDW6cfJDnYcC5jYbDJ8RAgRPxl8MtpH0nUNmbG/aXqIwo I5NbSmgH/yHYH0NRLRzS0wdn9m4MgPmvBGQ70CzV0hjfVZ3QHe1cMJ1/7U1fqNqw 1oaxpEUIQQND4Q== -----END CERTIFICATE-----Generated at Sat May 10 09:47:28 2025 by rpki-client