$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json) Hash identifier: k1zWthAwNtsjJ/eTno+JZhyxF9ZntwfvaZhWeilnz0k= Subject key identifier: 08:7C:AB:3F:E3:F4:1B:C3:A6:A4:E2:AB:A2:54:D2:2E:C4:32:01:3F Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 0196C45E6C0724EDCF0481F1889223214317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft Manifest number: 1665 Signing time: Mon 12 May 2025 12:00:44 +0000 Manifest this update: Mon 12 May 2025 12:00:44 +0000 Manifest next update: Tue 13 May 2025 12:00:44 +0000 Files and hashes: 1: 0_FDf3DlAABqqJiRg1vq-Vce1rM.roa (hash: WZVVSVX8Nx5izNsMwSh1W9KwxXyKF5fjEDNlSQHa/b4=) 2: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=) 3: 1-OleeNWiFkbAJB0cUTzM2QfiVag.roa (hash: QoPQCr0a3Gb6g5JqGieVa4XFRIbDnqnFsde5DsSi8Is=) 4: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=) 5: 4peFkTT6ranzEgINLjQOtSVsY_A.roa (hash: 2i7UduEwqSyLgmnHSAjVrHfIBjINeWAlY4ZYKw5oeNU=) 6: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=) 7: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=) 8: CGcxtmWeCpvy-hws3eRHzilM_U8.roa (hash: jBVl4vxGiFiecF4Ya3SdDsWeuPXdCCfCm0o+ggirOFY=) 9: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=) 10: Do610frDxofc_GIwlM0_-BIBi58.roa (hash: 2fSLFdraUb7r/St9XyxC3w/gDUXK6jtGxtd4pLLXBT4=) 11: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=) 12: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=) 13: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=) 14: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=) 15: Ojh3JtseG6wODFn31ipqC0n9fs4.roa (hash: V3AD5XF03SRAPzSkwGk/OwLxtTWoSykuDscr75xOfT4=) 16: OxvFaONKoxCOrutDpukgqJ3nW28.roa (hash: dLzb+IBamoEUiaEEA1Z/yikvFEJhXOcTvLAmddRrWJ0=) 17: PtTVzUOwY8mkRkDqqOGagTLCipk.roa (hash: Qc6uiKgKoY1QxyUyWxCB3toQGV7PGNgXSiXBkaJ/QpI=) 18: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (hash: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=) 19: YncmmCVbHfc8yNpLIWm9uOVXAt4.roa (hash: qO2gIQaee1JIm40R1DGdhcPp0ebkFcTPiyGLFZw8p7A=) 20: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=) 21: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=) 22: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=) 23: h4lmHtZmc-e8tzOKOXHK6w0H9vo.roa (hash: RNI+7dl19mmJ+6ZDRRtmz8YHjJqtvZ2Bexxp/E4LF/Y=) 24: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (hash: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=) 25: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=) 26: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=) 27: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=) 28: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (hash: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=) 29: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=) 30: uI-XAngekBy-y_fEkUp8IBMMQBM.roa (hash: wcz2lk0sgJKwTKH+ZqTJXICWw3XfoeTeYdhXJJGljN0=) 31: uZW0Hpw2N23PdRj-GS-t4TVyHhU.roa (hash: wxhJlzBnXGlaVOYKUcRmBiT9gU3+on/juFXaoNCdgzE=) 32: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: Y5r8exKacBXDDz3n5gVyTTK5n1esuy24sgpwkuzQ5PA=) 33: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=) 34: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c4:5e:6c:07:24:ed:cf:04:81:f1:88:92:23:21:43:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: May 12 12:00:44 2025 GMT Not After : May 13 12:00:44 2025 GMT Subject: CN=087cab3fe3f41bc3a6a4e2aba254d22ec432013f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0c:c2:33:59:f9:44:2f:ca:12:d5:ea:64:e0: e3:86:cc:ef:7a:bd:3f:1a:43:6b:6c:bc:9c:6e:fd: ea:ce:cc:fb:05:2e:91:29:bf:98:b1:54:f9:9b:97: 23:45:92:80:b1:b8:d8:fa:c8:02:c3:47:41:c6:d5: 75:02:ac:f2:3b:88:1e:8b:33:ac:ba:d3:99:fc:6b: 5a:0e:a8:36:5c:1e:06:83:13:db:bd:1a:c0:38:a5: 8e:a3:9a:1d:77:89:f4:d8:26:86:90:78:33:33:bd: 5f:0b:05:31:ed:fe:1e:3b:ce:f5:1c:ce:90:03:c6: 21:62:60:87:da:48:1b:de:96:53:bc:be:e9:4d:0e: b6:40:38:06:7c:8c:f7:21:7d:90:1c:04:28:48:c1: ac:0c:7e:c0:75:eb:13:0d:42:05:3d:9e:ff:b5:41: ca:ee:0e:9a:e9:1b:cb:10:85:ee:2e:15:eb:b9:3c: 9f:46:ee:7f:9e:33:5b:f8:78:b3:09:9a:35:21:b4: cc:93:3d:f4:56:26:57:4c:18:5f:05:ab:4c:71:01: d3:42:95:96:f7:d4:2e:53:6f:e6:4f:33:8b:e8:a6: 8c:d4:64:8a:58:5e:13:09:9e:4a:e1:60:29:b9:0f: bc:6f:95:e3:b0:97:c9:57:fb:5a:55:50:dc:f2:69: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:AB:3F:E3:F4:1B:C3:A6:A4:E2:AB:A2:54:D2:2E:C4:32:01:3F X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:db:d2:27:49:67:60:93:d6:8b:71:f5:8a:39:f0:6d:9a:40: b7:bf:4d:f4:ae:12:c8:26:2f:29:b3:2b:36:01:fb:48:ec:53: ad:55:e1:a3:c5:8e:d5:59:a8:07:77:d8:f8:85:64:c1:f3:2e: d9:0b:74:1c:45:88:f8:90:b5:a7:b1:ec:10:ec:0e:d9:a4:b0: 7f:45:8d:82:ca:14:4b:6b:9f:93:0f:1c:fd:75:06:96:91:0e: 12:95:b5:00:b9:5a:f0:6a:a3:b6:db:62:0d:63:7a:c0:8b:72: b6:c4:53:e7:0e:69:e2:ac:db:95:9a:a7:be:d0:49:e6:63:cf: 70:78:57:2f:53:87:69:14:50:d3:dc:68:21:17:0b:15:d5:9f: cf:99:bc:5f:ad:c8:e9:ba:25:7b:a8:15:5f:d7:bc:85:05:94: 47:6c:59:89:10:81:aa:1a:6c:20:25:8a:26:ce:53:cf:5e:75: 19:26:65:7b:10:8b:0c:a2:5b:a6:30:2d:3d:07:16:f5:83:e7: 9d:67:21:89:31:57:11:dc:6b:6a:17:51:0d:e6:9c:11:3b:27: 57:22:42:64:3d:36:d6:58:f8:15:bf:58:cb:42:e5:4b:21:2f: ae:12:4b:e3:ca:c8:cb:4e:2b:a8:73:7d:36:d8:81:87:d3:bb: d8:3e:2c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbEXmwHJO3PBIHxiJIjIUMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUwNTEyMTIwMDQ0WhcNMjUwNTEzMTIwMDQ0WjAzMTEwLwYDVQQD EygwODdjYWIzZmUzZjQxYmMzYTZhNGUyYWJhMjU0ZDIyZWM0MzIwMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wzCM1n5RC/KEtXqZODjhszver0/ GkNrbLycbv3qzsz7BS6RKb+YsVT5m5cjRZKAsbjY+sgCw0dBxtV1AqzyO4geizOs utOZ/GtaDqg2XB4GgxPbvRrAOKWOo5odd4n02CaGkHgzM71fCwUx7f4eO871HM6Q A8YhYmCH2kgb3pZTvL7pTQ62QDgGfIz3IX2QHAQoSMGsDH7AdesTDUIFPZ7/tUHK 7g6a6RvLEIXuLhXruTyfRu5/njNb+HizCZo1IbTMkz30ViZXTBhfBatMcQHTQpWW 99QuU2/mTzOL6KaM1GSKWF4TCZ5K4WApuQ+8b5XjsJfJV/taVVDc8mkCgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh8qz/j9BvDpqTiq6JU0i7EMgE/MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9vSJ0ln YJPWi3H1ijnwbZpAt79N9K4SyCYvKbMrNgH7SOxTrVXho8WO1VmoB3fY+IVkwfMu 2Qt0HEWI+JC1p7HsEOwO2aSwf0WNgsoUS2ufkw8c/XUGlpEOEpW1ALla8Gqjttti DWN6wItytsRT5w5p4qzblZqnvtBJ5mPPcHhXL1OHaRRQ09xoIRcLFdWfz5m8X63I 6bole6gVX9e8hQWUR2xZiRCBqhpsICWKJs5Tz151GSZlexCLDKJbpjAtPQcW9YPn nWchiTFXEdxrahdRDeacETsnVyJCZD021lj4Fb9Yy0LlSyEvrhJL48rIy04rqHN9 NtiBh9O72D4sAA== -----END CERTIFICATE-----Generated at Mon May 12 18:31:31 2025 by rpki-client