$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: TsrBpXz9ViwMp4HgQ+s17jVgjHYs0m68BaCUWAlniLw= Subject key identifier: A1:49:1B:C2:9E:C7:81:8E:A0:EE:AF:FD:F5:EA:64:9E:70:4C:C9:AF Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 0196BF00A832ED02E6F75DCA103B80A07930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0B3B Signing time: Sun 11 May 2025 11:00:13 +0000 Manifest this update: Sun 11 May 2025 11:00:13 +0000 Manifest next update: Mon 12 May 2025 11:00:13 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: hqCdauZpoKcrTX+eX79i9/IHLEVUOHvQRlXCgyNWe3M=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 4: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 5: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 6: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 7: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 8: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 9: ek7JCPCS41NeXK6-BL1kWJMswuo.roa (hash: rhIkMhLc1Llh35BWqPoGtUcJlgy1f4TdKGKjnLruEnc=) 10: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 11: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 12: l2sQI2kIfw7Qk5M-1_S91gHcxwg.roa (hash: ChOC3F775GRHKD1BnL2UZEcRcy5R5qW/aHDpTQ0+OAg=) 13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:00:a8:32:ed:02:e6:f7:5d:ca:10:3b:80:a0:79:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: May 11 11:00:13 2025 GMT Not After : May 12 11:00:13 2025 GMT Subject: CN=a1491bc29ec7818ea0eeaffdf5ea649e704cc9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:05:43:4b:87:06:22:1f:1e:0b:d4:e1:cf: 7d:ac:97:28:be:7e:ce:9a:a5:7f:0a:f4:c3:52:d0: 74:dd:1b:f5:02:2e:2b:07:7c:b5:5c:6d:94:6d:0b: 65:be:6c:9b:f3:12:61:92:f3:f4:a9:c8:4d:18:e6: 85:e5:0e:06:c7:55:24:84:6a:29:17:15:04:42:7e: 95:34:9b:38:eb:2f:7b:6a:db:d7:d6:db:48:49:24: 77:93:b2:88:73:d7:38:e2:24:0d:58:24:85:16:a4: 52:9c:5a:b1:2d:05:3d:ff:95:27:3c:f9:c5:36:5d: d0:d4:cf:2f:e6:b6:dd:d3:56:d2:89:37:03:de:91: ac:ed:aa:7b:20:f7:c3:8e:fd:63:36:24:ce:cb:19: e7:e8:33:d5:05:4a:af:ce:f9:f8:eb:90:4c:fe:62: 89:f3:b3:03:69:9b:9c:0f:29:ae:d2:c3:bf:3c:9c: f5:e6:25:bb:a5:ee:47:8c:5b:ff:05:ce:4f:87:8b: 31:b1:91:5a:08:e6:b1:a4:64:1b:3f:04:67:c3:78: 63:08:a4:77:32:eb:94:cd:c8:4b:17:e1:90:58:97: ae:e0:7e:a6:66:9f:9b:a2:d5:68:2e:e7:58:01:af: 9c:71:e4:78:55:d5:06:f5:2d:a1:c6:b0:fd:43:74: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:1B:C2:9E:C7:81:8E:A0:EE:AF:FD:F5:EA:64:9E:70:4C:C9:AF X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e9:f5:74:43:9f:31:57:5d:0d:78:1c:8f:19:3e:0c:d4:82: d4:dc:f5:f4:d0:ac:de:01:b8:27:f7:72:74:c5:ba:7e:e9:6b: 03:56:9a:b3:d3:2f:ef:f0:45:17:a9:54:97:bd:48:6f:b2:3d: da:85:d1:dc:87:41:f2:d1:3c:31:04:24:06:a3:aa:f1:47:ef: 00:a7:f8:2f:45:ed:77:cc:60:79:d8:6a:c0:07:2f:71:c5:9b: a7:28:fa:f9:20:94:88:a9:24:49:79:0d:e3:9b:6a:c6:22:4f: 99:c4:13:20:bb:84:78:b9:24:a4:1f:ae:6c:1f:0c:64:63:3a: 85:63:bb:a7:5b:0c:ee:0a:eb:10:a9:77:c0:50:7c:2e:64:69: 72:4c:2c:f0:db:dc:a0:77:53:d3:67:8f:45:53:d0:49:ad:dc: 1c:5e:0c:0e:1d:19:51:a6:3e:ed:74:79:54:26:75:24:d1:1d: 88:82:50:c7:2c:b8:8b:3d:e8:02:ae:12:71:44:ff:c1:c8:74: c8:f7:0d:d9:22:58:30:cc:23:9b:e1:da:90:49:f3:97:c2:15: 11:12:2e:2c:1d:56:7b:c7:2d:f0:0c:47:89:bd:8c:c7:fe:a6: 2a:96:f5:e4:1f:71:07:68:c2:85:f0:03:93:87:59:48:dc:51: a3:43:75:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/AKgy7QLm913KEDuAoHkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNTExMTEwMDEzWhcNMjUwNTEyMTEwMDEzWjAzMTEwLwYDVQQD EyhhMTQ5MWJjMjllYzc4MThlYTBlZWFmZmRmNWVhNjQ5ZTcwNGNjOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FsFQ0uHBiIfHgvU4c99rJcovn7O mqV/CvTDUtB03Rv1Ai4rB3y1XG2UbQtlvmyb8xJhkvP0qchNGOaF5Q4Gx1UkhGop FxUEQn6VNJs46y97atvX1ttISSR3k7KIc9c44iQNWCSFFqRSnFqxLQU9/5UnPPnF Nl3Q1M8v5rbd01bSiTcD3pGs7ap7IPfDjv1jNiTOyxnn6DPVBUqvzvn465BM/mKJ 87MDaZucDymu0sO/PJz15iW7pe5HjFv/Bc5Ph4sxsZFaCOaxpGQbPwRnw3hjCKR3 MuuUzchLF+GQWJeu4H6mZp+botVoLudYAa+cceR4VdUG9S2hxrD9Q3QxXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFJG8Kex4GOoO6v/fXqZJ5wTMmvMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAun1dEOf MVddDXgcjxk+DNSC1Nz19NCs3gG4J/dydMW6fulrA1aas9Mv7/BFF6lUl71Ib7I9 2oXR3IdB8tE8MQQkBqOq8UfvAKf4L0Xtd8xgedhqwAcvccWbpyj6+SCUiKkkSXkN 45tqxiJPmcQTILuEeLkkpB+ubB8MZGM6hWO7p1sM7grrEKl3wFB8LmRpckws8Nvc oHdT02ePRVPQSa3cHF4MDh0ZUaY+7XR5VCZ1JNEdiIJQxyy4iz3oAq4ScUT/wch0 yPcN2SJYMMwjm+HakEnzl8IVERIuLB1We8ct8AxHib2Mx/6mKpb15B9xB2jChfAD k4dZSNxRo0N1gQ== -----END CERTIFICATE-----Generated at Sun May 11 16:46:07 2025 by rpki-client