$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json) Hash identifier: WWS1zaH44a7jnKJ8k3mrLsd01Cx+pg+MrVhrp+7iEco= Subject key identifier: EF:DE:A1:1D:5E:BC:E9:1C:37:E3:11:1D:70:BB:78:DE:E8:E2:42:C7 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 0196B85A32DA172FF21D32D2FFD5F96A6A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft Manifest number: 02E4 Signing time: Sat 10 May 2025 04:00:41 +0000 Manifest this update: Sat 10 May 2025 04:00:41 +0000 Manifest next update: Sun 11 May 2025 04:00:41 +0000 Files and hashes: 1: 0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa (hash: JocbkBfhJXWTWCaW/Z+fAOKSZnVwMquu1mYz5s3f9M8=) 2: 1-sXlT3E8V0jDUCM-Ybkr4a6wLlo.roa (hash: CvuY/DdFSGhFi/vthGK/0x8yOd1SW50ze7RG7bTscdY=) 3: 8I731pLlO7OZA-KP6_7Tyd0X0p8.roa (hash: AgOQfpoBY8oNnSKqmzrHEGGLFBw8XUwNyYW1y0VgcFQ=) 4: 9InzsTm0J0FJh6_deGjqmJNOCu0.roa (hash: KQ5YYXT2pBjEDCmfW0eKzjN8cGKuVKrKtN3pdmXsi9U=) 5: BI1_IYMcz04ApdAcr2QAYo1Gijc.roa (hash: L+zD+W35uF9Uwlx9BIqDCzEBqTULiJDb8lRlDdA0EUg=) 6: CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa (hash: iqLlew5M42CsnChkC0+xYaVtbHLoz5KoE02bFqOtl7c=) 7: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: xF63jIS5zqq0OGC0GMg7HdrZWlnpAPodbNC48zSDVi0=) 8: OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa (hash: atIx3Wbrqp85enT4nB4Os6srsGzi8BmryGvRtf7uqOE=) 9: P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa (hash: cHgFrkOyvHYjzh8XPdArtRphykJDW+VkpmQUgpfqLMY=) 10: QMiTm2-yiJDC2oOCB78-T7uhy68.roa (hash: ulPDJeSyn/J0aOHbAtmPLp6M9W5etSSNT8E799B3xEE=) 11: QsCDFSI-l5JC6to_qrNHYHmqg7g.roa (hash: BEriwV3dh0T3KvwWaeXKWclUm0zROlAOzgw+CVY7q0Q=) 12: U8FQsy0_ygrjfzDfPCuVUPjhxFI.roa (hash: VMdtwa4FkFy7nwi/xmcQtKtxXBN5sTN7YZIqy4ryF34=) 13: YeWW1PCTf3K6IXfWsiPqRL1xngw.roa (hash: eB/pknTzW+YV8hh7dZBIuVdC4d8+EHVKJgeJu2HkTYg=) 14: ZdiJyoo-l9tkMe9J769OhHUhgMY.roa (hash: AHUi1asCEzcucu2jHRjdz9eQqbhd55OH2AnByHrwu+A=) 15: a1UPsQjeoFgrASQvINSJJ7_1FEI.roa (hash: IUZiF8ty9Ran6Rx7Q+49/A+HVghw43cz7NyFFJcOacw=) 16: amm4UyE6_-2iIfziflS9OWcpi0I.roa (hash: qVhQHcCInjhG6Z1KYAKADs9ZxRsv3Qktzh0alZXqoKY=) 17: bxqRKqA4ZCz-HC5KXbkRpv1VjKY.roa (hash: 1IZMZI5YlnRhnfeBN3K+N1PwHEVvMMcDuqlDUtvJ1nU=) 18: emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa (hash: MGI6nqZElzquCZDFYtpLzQpeiVV6b7oAzJY8DVMAi04=) 19: sxNoWpD05QIoi_m8uc_lksfhDKU.roa (hash: wKcDV3z8mFiezwypjA2UNeuoXxV0RwLF2Q6N6uhTmzY=) 20: wFjr7ivDDEhOQrSM9UUePfjq6BM.roa (hash: hoiviRTlIUkKH3GW9AA2j6niz2qq5NnhMhKDwUCKYys=) 21: wkr3-E_-aqAccu5Xsw4WQFstKqc.roa (hash: Ail0xJvQX43faYT+R1FOFCGtCYp7xWL/Q1iaLeJmFoI=) 22: zrIx3F0bpchF38MY3NuMGU_mTx4.roa (hash: xQI4JeS8+tVg+pnfphMJ24bPIXjxEWvAFGvnAUjv++0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:5a:32:da:17:2f:f2:1d:32:d2:ff:d5:f9:6a:6a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: May 10 04:00:41 2025 GMT Not After : May 11 04:00:41 2025 GMT Subject: CN=efdea11d5ebce91c37e3111d70bb78dee8e242c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:61:ab:ba:f5:93:03:f2:8b:d8:eb:5c:a2: c3:19:f2:4c:e5:f1:09:54:f1:8a:df:81:da:a9:bb: 9b:fb:3f:86:70:1c:bd:a1:58:6d:ff:cc:65:83:c8: f6:65:87:d9:c5:a6:e1:bb:86:41:04:22:24:ac:89: 3e:b6:d6:dd:75:2e:45:d6:72:96:d9:92:e3:ac:bf: ec:8a:13:7f:f3:00:5e:bb:43:dc:bb:cf:e7:34:d8: 7f:30:f1:71:25:c6:c6:b3:55:79:07:75:8c:90:dc: cc:7b:07:55:8b:75:63:75:55:21:9a:c7:f9:cd:f6: f2:6b:c3:e7:a7:62:d3:8b:4c:f6:a8:8c:9c:d4:0a: f2:ba:92:1e:c3:dc:e0:24:0f:9e:92:f1:40:ed:fb: cd:5b:5a:33:8e:f6:25:17:cd:e8:41:f1:b8:a9:c2: ab:10:f1:4e:3c:6a:3a:08:fb:7f:a6:e9:88:db:6c: b8:bb:69:56:8c:4d:71:8c:17:7c:5a:5e:f6:f2:da: a6:f6:39:40:65:47:fe:07:a1:8d:ff:fb:c6:5f:71: f5:21:97:9b:96:57:e3:57:8a:cb:ef:3a:2d:f0:f8: 8e:4e:89:17:da:e6:db:cb:54:80:fc:d5:fd:61:26: 9f:95:fe:a3:5d:7c:e1:7b:30:0a:b2:c5:a7:e5:59: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:A1:1D:5E:BC:E9:1C:37:E3:11:1D:70:BB:78:DE:E8:E2:42:C7 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:dc:89:03:03:f2:41:99:6c:5e:a3:68:c3:2b:a2:34:7e:29: 25:19:8c:4d:a0:7b:6b:e0:a6:b1:c6:5d:35:3e:16:e9:28:5a: 4d:3a:7a:e0:62:97:7c:72:51:a9:f7:d4:48:50:90:8c:e5:78: ba:00:2b:e4:3d:04:c4:5a:a3:54:ee:d1:80:26:df:04:d9:59: 3e:d6:58:6d:95:28:ed:80:76:a6:e3:89:26:13:0f:fd:f2:3a: 54:51:ed:2c:b7:12:08:a7:01:9b:0a:73:f7:11:4e:c8:d6:bd: 6f:4a:ef:fd:25:c9:fb:0b:0a:b1:da:b3:3f:3f:fa:49:b4:52: 39:65:95:56:68:24:56:24:51:92:35:d8:9c:5b:ed:40:10:58: 12:2e:30:92:65:66:4e:39:29:bb:85:59:79:87:7c:27:53:7c: 6c:26:c2:37:34:e8:4f:0e:85:44:01:01:d8:f3:9f:1b:7e:f5: 88:1b:f3:38:e2:a9:3c:40:32:17:3c:d2:eb:38:f0:5e:2d:c9: 78:dd:9d:57:3b:de:ec:0a:6f:6e:11:86:3d:75:0c:22:3a:f6: 8d:2c:37:e8:90:f0:93:b2:0f:12:2e:9d:86:1c:21:43:ea:95: 52:c3:88:00:f5:81:8d:ac:15:8d:3a:35:1e:b0:16:51:16:d3: 4d:bc:a5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4WjLaFy/yHTLS/9X5amqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjUwNTEwMDQwMDQxWhcNMjUwNTExMDQwMDQxWjAzMTEwLwYDVQQD EyhlZmRlYTExZDVlYmNlOTFjMzdlMzExMWQ3MGJiNzhkZWU4ZTI0MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN9hq7r1kwPyi9jrXKLDGfJM5fEJ VPGK34Haqbub+z+GcBy9oVht/8xlg8j2ZYfZxabhu4ZBBCIkrIk+ttbddS5F1nKW 2ZLjrL/sihN/8wBeu0Pcu8/nNNh/MPFxJcbGs1V5B3WMkNzMewdVi3VjdVUhmsf5 zfbya8Pnp2LTi0z2qIyc1AryupIew9zgJA+ekvFA7fvNW1ozjvYlF83oQfG4qcKr EPFOPGo6CPt/pumI22y4u2lWjE1xjBd8Wl728tqm9jlAZUf+B6GN//vGX3H1IZeb llfjV4rL7zot8PiOTokX2ubby1SA/NX9YSaflf6jXXzhezAKssWn5VkG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/eoR1evOkcN+MRHXC7eN7o4kLHMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNyJAwPy QZlsXqNowyuiNH4pJRmMTaB7a+CmscZdNT4W6ShaTTp64GKXfHJRqffUSFCQjOV4 ugAr5D0ExFqjVO7RgCbfBNlZPtZYbZUo7YB2puOJJhMP/fI6VFHtLLcSCKcBmwpz 9xFOyNa9b0rv/SXJ+wsKsdqzPz/6SbRSOWWVVmgkViRRkjXYnFvtQBBYEi4wkmVm Tjkpu4VZeYd8J1N8bCbCNzToTw6FRAEB2POfG371iBvzOOKpPEAyFzzS6zjwXi3J eN2dVzve7ApvbhGGPXUMIjr2jSw36JDwk7IPEi6dhhwhQ+qVUsOIAPWBjawVjTo1 HrAWURbTTbyllQ== -----END CERTIFICATE-----Generated at Sat May 10 06:38:00 2025 by rpki-client