$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: WGyQA7y1PVE9qeT1fAfjUz1gPnBxspObSSJqD39GSJg= Subject key identifier: 46:AD:A1:55:98:17:04:28:E4:D6:40:DD:D8:B3:EF:71:FD:D8:18:AA Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 0196A2ADDEF46003B8989E4C79E5DD9161EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 152C Signing time: Mon 05 May 2025 23:00:25 +0000 Manifest this update: Mon 05 May 2025 23:00:25 +0000 Manifest next update: Tue 06 May 2025 23:00:25 +0000 Files and hashes: 1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=) 2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: UGviOia2DovPlxScJ7fkv1BLPhdJORdL+OFyUBOmkO0=) 3: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 4: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 5: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 6: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 7: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 8: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=) 9: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 10: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a2:ad:de:f4:60:03:b8:98:9e:4c:79:e5:dd:91:61:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: May 5 23:00:25 2025 GMT Not After : May 6 23:00:25 2025 GMT Subject: CN=46ada15598170428e4d640ddd8b3ef71fdd818aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:35:c5:44:99:99:e7:b6:0b:8c:14:ec:8f: f3:f8:3c:44:0d:f9:d2:0a:cb:08:ae:f7:4d:ee:27: 4b:1c:b1:a2:72:f0:22:ab:9c:d1:ee:21:9a:bc:4d: c4:14:5d:d5:b7:97:48:ef:d0:a1:5a:b6:90:70:f4: 75:8d:c4:51:a6:9f:08:a1:43:08:7f:fa:4c:de:82: e6:3b:9b:a6:ce:ba:df:96:ca:a4:38:05:9d:e8:b5: fe:88:11:19:84:d5:26:5d:13:4e:91:3f:b4:2a:8a: 41:bf:2e:30:60:ad:17:8f:27:5e:c0:a1:4f:37:be: 90:11:2a:b2:b4:62:4b:84:5b:e1:d4:eb:7c:89:bb: c4:fb:e7:88:f0:be:25:ea:f8:ac:93:d8:84:95:b6: 40:e4:7c:26:ef:38:a9:72:8b:ec:88:5b:f8:e5:1f: 0a:dd:fe:09:0c:db:5b:83:e9:70:3a:a3:fc:37:30: 04:58:04:8c:f3:1b:b0:db:6e:36:59:6f:45:fb:33: 7a:97:48:ab:ab:fd:e6:85:9d:fc:a4:b4:50:d7:d4: b4:95:55:0a:98:47:5a:dd:c0:ab:bf:d3:1a:6a:8e: 1a:a5:d3:12:50:ea:de:84:f0:12:cb:e8:58:3e:96: f5:d3:15:5c:9e:ac:0c:22:5f:8c:11:04:65:24:61: 44:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AD:A1:55:98:17:04:28:E4:D6:40:DD:D8:B3:EF:71:FD:D8:18:AA X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:90:1c:81:b0:9f:3e:e3:36:01:4f:0f:a7:d4:2a:7e:20:42: e8:ae:99:bb:e0:82:fe:3b:8e:8d:08:2c:fb:39:80:00:b0:e5: 79:b1:15:90:c4:f7:a6:2d:bb:02:31:27:c6:a2:fa:a5:26:34: dc:17:a9:87:d7:91:06:ea:d6:76:a5:d5:93:bd:43:ee:f7:d5: 02:96:f9:45:6e:b0:ec:46:d7:8a:99:f2:16:54:cc:3d:27:5a: 28:99:50:3c:7d:f8:d4:73:81:f4:f9:49:1b:5f:07:bd:9f:53: 7e:17:a7:33:b5:33:27:94:42:bc:fb:40:88:82:bb:3e:6f:80: d0:86:34:d3:28:67:da:35:7a:85:f1:51:b9:a9:84:64:3c:7c: 92:6f:50:0c:d8:49:cd:b8:05:88:fe:37:70:fa:c9:0a:06:a1: 21:8c:42:65:55:93:60:fc:18:d1:99:68:9c:26:27:48:53:a3: be:37:63:de:59:15:96:84:9c:d3:fc:24:25:ef:d4:00:80:f1: 87:6a:ed:80:d8:74:0a:7b:8d:08:f1:0e:4c:4a:73:66:fb:34: 64:af:06:8c:5d:f6:fb:0b:b5:f0:b3:52:6c:4d:49:b9:4b:38: b0:1d:f5:20:93:46:7a:12:61:de:77:bd:da:ec:f4:ac:49:4f: b7:82:e7:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaird70YAO4mJ5MeeXdkWHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwNTA1MjMwMDI1WhcNMjUwNTA2MjMwMDI1WjAzMTEwLwYDVQQD Eyg0NmFkYTE1NTk4MTcwNDI4ZTRkNjQwZGRkOGIzZWY3MWZkZDgxOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdw1xUSZmee2C4wU7I/z+DxEDfnS CssIrvdN7idLHLGicvAiq5zR7iGavE3EFF3Vt5dI79ChWraQcPR1jcRRpp8IoUMI f/pM3oLmO5umzrrflsqkOAWd6LX+iBEZhNUmXRNOkT+0KopBvy4wYK0XjydewKFP N76QESqytGJLhFvh1Ot8ibvE++eI8L4l6visk9iElbZA5Hwm7zipcovsiFv45R8K 3f4JDNtbg+lwOqP8NzAEWASM8xuw2242WW9F+zN6l0irq/3mhZ38pLRQ19S0lVUK mEda3cCrv9Maao4apdMSUOrehPASy+hYPpb10xVcnqwMIl+MEQRlJGFEQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEatoVWYFwQo5NZA3diz73H92BiqMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZAcgbCf PuM2AU8Pp9QqfiBC6K6Zu+CC/juOjQgs+zmAALDlebEVkMT3pi27AjEnxqL6pSY0 3Beph9eRBurWdqXVk71D7vfVApb5RW6w7EbXipnyFlTMPSdaKJlQPH341HOB9PlJ G18HvZ9TfhenM7UzJ5RCvPtAiIK7Pm+A0IY00yhn2jV6hfFRuamEZDx8km9QDNhJ zbgFiP43cPrJCgahIYxCZVWTYPwY0ZlonCYnSFOjvjdj3lkVloSc0/wkJe/UAIDx h2rtgNh0CnuNCPEOTEpzZvs0ZK8GjF32+wu18LNSbE1JuUs4sB31IJNGehJh3ne9 2uz0rElPt4LniA== -----END CERTIFICATE-----Generated at Tue May 6 04:11:12 2025 by rpki-client