$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: pLoYPGZYH8ClL7SYtBg+sxQN85j1Tb88WUTyHRqKdq4= Subject key identifier: 49:73:BE:CE:C7:78:25:6F:0F:D1:68:18:D2:40:28:2A:E2:12:73:79 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 0196BFDC5A774A635D71C9C3DAD3CBF32716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 149E Signing time: Sun 11 May 2025 15:00:11 +0000 Manifest this update: Sun 11 May 2025 15:00:11 +0000 Manifest next update: Mon 12 May 2025 15:00:11 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: grJkfoo8nVNUcrYCofTc9o/u1owy7lS3DPcsDmnAdy8=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 15:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:dc:5a:77:4a:63:5d:71:c9:c3:da:d3:cb:f3:27:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: May 11 15:00:11 2025 GMT Not After : May 12 15:00:11 2025 GMT Subject: CN=4973becec778256f0fd16818d240282ae2127379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:46:5f:17:f5:8e:b3:07:1a:7d:01:0e:ca: 30:22:8b:d5:3f:b2:ae:02:90:58:55:c6:e2:8a:c5: e8:b9:c5:4e:78:9d:b6:bb:40:11:3c:b0:24:cd:53: ba:f7:41:12:d5:dc:c7:13:e6:39:f4:5f:12:ee:cd: 0e:0a:dc:69:5b:73:ca:a1:b0:89:e8:00:70:2b:62: 14:2b:8c:25:3d:4f:45:23:9c:74:29:3d:2a:fe:87: 9f:b8:c8:45:f3:8a:64:67:27:56:0f:73:97:7e:d1: 82:05:5d:47:a4:04:28:f1:36:55:2c:c4:56:15:56: 14:d7:43:0d:c1:33:90:dc:87:07:55:e7:f7:5f:c7: 89:ce:b5:52:59:05:85:cd:dd:56:94:3f:98:a4:86: 12:f9:ac:f7:f5:56:4a:58:5e:75:36:13:9a:9b:f9: 97:79:2d:84:ca:8b:c5:ed:80:07:21:04:42:69:a6: b8:81:26:19:2d:62:2c:65:15:0e:57:16:be:06:d4: 0d:bb:f4:58:3e:8d:dc:1d:79:73:52:8e:97:fe:8c: 84:b5:73:f5:d9:8d:c4:95:3f:cf:90:0e:3b:49:e9: 26:8b:53:bb:0e:1d:e3:2a:a2:5e:68:7b:2f:6f:b1: aa:53:78:71:2c:0b:39:77:13:07:3c:b0:78:73:32: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:BE:CE:C7:78:25:6F:0F:D1:68:18:D2:40:28:2A:E2:12:73:79 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:d0:93:58:ce:d5:29:c4:58:b0:84:15:f7:49:01:81:53:d9: 25:34:56:15:0f:73:a5:28:3e:84:e0:64:60:4c:81:8a:48:e2: 3a:c1:0c:af:af:40:2a:7a:6e:ab:e4:8f:48:2f:a2:c0:dc:ac: d9:4c:f2:57:ce:b3:1c:81:17:32:34:fd:e0:9c:f0:17:3e:e2: 96:de:76:c4:4f:a8:71:a4:ef:45:85:c2:dd:bb:52:d9:6e:d6: 8b:82:b4:d4:7a:31:45:8e:e8:67:8e:0b:57:12:42:97:b6:0d: 81:3b:20:34:8a:cc:ba:2c:11:36:38:cd:bf:ff:b7:4c:a0:43: d7:50:c4:a2:b4:a7:62:d9:82:35:df:00:f9:3f:93:c9:59:c2: b6:82:ea:e7:b1:e4:3d:1a:ad:dc:e0:05:f2:30:9f:67:ed:20: ad:59:e5:f7:63:3e:02:2f:56:e3:66:52:1b:b8:5d:36:50:08: 4d:b8:27:0d:75:9f:d5:41:9d:ab:a4:3b:ce:dc:c7:75:8d:14: e7:ad:4f:9c:d4:16:56:ef:cc:c9:8d:31:df:d0:b4:11:fd:b0: c0:04:ac:b0:32:eb:b5:8a:fc:fd:df:8a:fc:1e:45:9e:ad:67: f7:2c:a9:09:45:07:95:f6:70:fd:d5:9d:f5:08:f3:63:0d:d6: 4d:06:12:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/3Fp3SmNdccnD2tPL8ycWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUwNTExMTUwMDExWhcNMjUwNTEyMTUwMDExWjAzMTEwLwYDVQQD Eyg0OTczYmVjZWM3NzgyNTZmMGZkMTY4MThkMjQwMjgyYWUyMTI3Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHRGXxf1jrMHGn0BDsowIovVP7Ku ApBYVcbiisXoucVOeJ22u0ARPLAkzVO690ES1dzHE+Y59F8S7s0OCtxpW3PKobCJ 6ABwK2IUK4wlPU9FI5x0KT0q/oefuMhF84pkZydWD3OXftGCBV1HpAQo8TZVLMRW FVYU10MNwTOQ3IcHVef3X8eJzrVSWQWFzd1WlD+YpIYS+az39VZKWF51NhOam/mX eS2EyovF7YAHIQRCaaa4gSYZLWIsZRUOVxa+BtQNu/RYPo3cHXlzUo6X/oyEtXP1 2Y3ElT/PkA47Sekmi1O7Dh3jKqJeaHsvb7GqU3hxLAs5dxMHPLB4czJngQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElzvs7HeCVvD9FoGNJAKCriEnN5MB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAytCTWM7V KcRYsIQV90kBgVPZJTRWFQ9zpSg+hOBkYEyBikjiOsEMr69AKnpuq+SPSC+iwNys 2UzyV86zHIEXMjT94JzwFz7ilt52xE+ocaTvRYXC3btS2W7Wi4K01HoxRY7oZ44L VxJCl7YNgTsgNIrMuiwRNjjNv/+3TKBD11DEorSnYtmCNd8A+T+TyVnCtoLq57Hk PRqt3OAF8jCfZ+0grVnl92M+Ai9W42ZSG7hdNlAITbgnDXWf1UGdq6Q7ztzHdY0U 561PnNQWVu/MyY0x39C0Ef2wwASssDLrtYr8/d+K/B5Fnq1n9yypCUUHlfZw/dWd 9QjzYw3WTQYSJw== -----END CERTIFICATE-----Generated at Sun May 11 18:52:13 2025 by rpki-client