$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: N2qLvYmFVPICVIfKxeA0p1uDljQ5XOHwB2tjvjjEtfs= Subject key identifier: FE:A9:9D:06:DF:10:07:0A:B4:A3:6D:31:5D:59:79:C9:BC:38:16:86 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 0196BE9367668F0B73BA36F65A2D95A4EF10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0EA7 Signing time: Sun 11 May 2025 09:00:53 +0000 Manifest this update: Sun 11 May 2025 09:00:53 +0000 Manifest next update: Mon 12 May 2025 09:00:53 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=) 5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: tAczpJxbcwY4dnzuWNrJc+nxdJKIJf0Zf+HHoVQLyR8=) 17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:93:67:66:8f:0b:73:ba:36:f6:5a:2d:95:a4:ef:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: May 11 09:00:53 2025 GMT Not After : May 12 09:00:53 2025 GMT Subject: CN=fea99d06df10070ab4a36d315d5979c9bc381686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:54:e4:6c:1a:b7:e0:1d:30:0a:23:6f:4a: 78:86:87:16:86:a2:b1:bc:7d:44:3b:cc:0a:58:c3: f6:a7:34:e6:f8:7e:0e:7b:c3:27:1e:53:e6:bc:55: 26:31:b9:d4:7b:5d:b1:a5:23:f6:9c:a4:94:97:68: 99:50:cb:09:6d:cb:08:07:d3:37:fe:76:2d:73:c1: 29:c5:a6:7d:a4:7a:e8:f6:08:f9:4a:d2:17:6a:b3: c6:45:4e:f5:31:ec:5a:43:4c:f0:b7:89:32:47:75: 99:af:c3:c4:14:92:74:3c:55:6e:bc:49:db:fd:ca: e6:69:ae:4d:ca:8d:3f:5d:45:91:35:fc:6c:0b:e4: f3:1a:31:37:d6:92:da:ca:83:ac:f2:c8:28:a7:3f: 25:fd:b4:7b:e5:f4:7f:49:f8:7c:35:c7:ec:c4:2b: c3:05:0d:b7:65:53:30:b6:44:c2:c4:76:6c:8a:b9: 10:3c:3f:12:83:f3:b7:f0:2b:84:9f:89:d0:41:d1: f8:ac:b0:0c:78:cf:75:55:9b:12:29:a8:42:7d:82: 45:84:c6:f1:a5:bd:65:ee:aa:57:90:2e:ce:f7:df: 9c:0b:20:56:6a:46:5b:c2:9e:91:72:0f:ce:be:16: 2e:40:da:1b:ac:b6:42:71:10:f9:44:ea:29:fe:b0: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:9D:06:DF:10:07:0A:B4:A3:6D:31:5D:59:79:C9:BC:38:16:86 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4d:83:5e:59:58:74:79:63:52:70:de:ad:8f:1d:6b:74:70: 92:a3:71:ff:a0:04:94:bf:3e:02:e9:ce:57:f9:a2:a2:bc:7c: 12:a8:8a:79:80:da:8a:02:9b:58:cb:19:e9:cd:11:f8:f6:b3: 28:f1:16:b7:6d:ed:db:a6:32:69:d1:08:5f:e3:d9:87:aa:7d: 77:06:4c:81:98:4b:b9:98:6e:67:be:1b:77:6a:2e:f0:34:dd: 75:4a:0b:6a:85:5d:48:85:69:5c:c8:0f:34:2f:19:ac:0f:49: 4d:c9:76:aa:03:26:f8:23:f1:f5:98:2a:9b:d4:3b:1a:83:36: 8a:28:06:f1:e5:f6:bd:ce:79:e4:6a:aa:9b:b9:a5:cc:d7:38: 59:68:83:72:1d:04:2d:1b:3f:21:34:98:89:8f:93:e6:50:86: 23:79:dd:60:74:2c:2d:a9:7d:ca:0d:cb:a6:06:f7:ea:c0:45: d5:c7:1f:c4:ba:28:0a:53:60:31:cb:bc:52:45:c9:b4:2f:8b: ce:02:ef:06:c6:1c:36:69:39:78:02:d4:e3:6d:94:9d:76:00: 49:fb:7c:a6:7b:39:23:fc:61:9c:1d:7d:41:17:86:bb:41:8d: 6c:45:6e:6b:8d:52:6d:42:f4:aa:3e:08:b7:76:51:5f:11:0a: a4:6f:74:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+k2dmjwtzujb2Wi2VpO8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwNTExMDkwMDUzWhcNMjUwNTEyMDkwMDUzWjAzMTEwLwYDVQQD EyhmZWE5OWQwNmRmMTAwNzBhYjRhMzZkMzE1ZDU5NzljOWJjMzgxNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqpU5Gwat+AdMAojb0p4hocWhqKx vH1EO8wKWMP2pzTm+H4Oe8MnHlPmvFUmMbnUe12xpSP2nKSUl2iZUMsJbcsIB9M3 /nYtc8EpxaZ9pHro9gj5StIXarPGRU71MexaQ0zwt4kyR3WZr8PEFJJ0PFVuvEnb /crmaa5Nyo0/XUWRNfxsC+TzGjE31pLayoOs8sgopz8l/bR75fR/Sfh8NcfsxCvD BQ23ZVMwtkTCxHZsirkQPD8Sg/O38CuEn4nQQdH4rLAMeM91VZsSKahCfYJFhMbx pb1l7qpXkC7O99+cCyBWakZbwp6Rcg/OvhYuQNobrLZCcRD5ROop/rA2pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6pnQbfEAcKtKNtMV1Zecm8OBaGMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE2DXllY dHljUnDerY8da3RwkqNx/6AElL8+AunOV/miorx8EqiKeYDaigKbWMsZ6c0R+Paz KPEWt23t26YyadEIX+PZh6p9dwZMgZhLuZhuZ74bd2ou8DTddUoLaoVdSIVpXMgP NC8ZrA9JTcl2qgMm+CPx9Zgqm9Q7GoM2iigG8eX2vc555Gqqm7mlzNc4WWiDch0E LRs/ITSYiY+T5lCGI3ndYHQsLal9yg3Lpgb36sBF1ccfxLooClNgMcu8UkXJtC+L zgLvBsYcNmk5eALU422UnXYASft8pns5I/xhnB19QReGu0GNbEVua41SbUL0qj4I t3ZRXxEKpG90Ww== -----END CERTIFICATE-----Generated at Sun May 11 16:00:00 2025 by rpki-client