$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: mxmPPl86Ky+LwMm+Yi4pxtx1XhuWcA3gwi4owRjK5UQ= Subject key identifier: 12:2C:80:23:DA:D8:94:02:BC:0D:5F:1C:8E:0F:FF:E2:13:24:40:1A Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 0196B71059151559CE9BC302F4916E0A4DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1552 Signing time: Fri 09 May 2025 22:00:23 +0000 Manifest this update: Fri 09 May 2025 22:00:23 +0000 Manifest next update: Sat 10 May 2025 22:00:23 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 3: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 4: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 5: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 6: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 7: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 8: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: nbL/OzANLKSNnNgUTvz5KXr+Ytvl1pu01TageuQOawA=) 9: WbWclEjJKi9mR3DryK5x-S3Xkl0.roa (hash: 1eFaQNtQW2m0UTZGPNrJUkahNCdOhwXNsr6+Ov6pcN0=) 10: dZ0CYdoDFpyiV0PbBPCyE5kMPmg.roa (hash: 1WfupiRmFEmztIrNKS3WB7U7Ynb+bd22AiDH6YDrXfE=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:10:59:15:15:59:ce:9b:c3:02:f4:91:6e:0a:4d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: May 9 22:00:23 2025 GMT Not After : May 10 22:00:23 2025 GMT Subject: CN=122c8023dad89402bc0d5f1c8e0fffe21324401a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:70:bf:f5:d0:4c:47:fa:93:02:50:8d:5c: a0:63:d8:f5:df:12:61:5b:cc:09:d2:df:8c:0a:5f: 03:c3:36:eb:db:2e:a4:ce:67:0e:82:c6:de:a9:74: 94:89:d5:80:20:3f:6f:9a:a5:81:de:96:29:ff:46: fa:1b:a9:c3:0d:69:76:e5:08:67:98:22:8a:2e:8d: ab:e2:8e:75:e1:26:6d:85:44:15:42:45:eb:e0:07: ca:69:d3:a6:71:14:27:15:a4:cf:c3:1a:f2:14:70: e8:05:59:9d:35:31:c6:29:96:11:ee:ce:1e:a5:50: f1:ee:90:9c:2c:54:d4:80:e7:c5:05:2b:b6:2f:6b: 33:b2:30:bb:96:db:e1:7d:48:1f:b2:ba:86:1a:a5: 11:c6:c1:48:34:c9:ca:3f:b1:fc:07:97:ea:6d:a9: 5b:ae:f2:d3:ab:1e:87:00:c5:38:1d:e3:da:d3:47: 9f:d2:e8:53:42:3b:9e:ac:81:26:3c:ec:47:8a:36: e4:f5:30:91:57:a7:10:7d:30:8e:87:62:2e:ce:f9: ad:94:bf:db:09:95:38:61:bb:cd:1c:f5:6f:e8:2a: ca:56:7c:67:bc:83:f1:0d:d2:6d:9e:43:ec:40:4b: ca:0e:1e:28:57:e4:aa:e5:82:e9:a7:37:d6:72:83: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:80:23:DA:D8:94:02:BC:0D:5F:1C:8E:0F:FF:E2:13:24:40:1A X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ca:ac:8c:32:21:a7:8e:be:04:b3:c3:44:18:d6:3f:9e:e8: 7f:67:e7:e6:f9:a8:02:ef:92:96:8e:dd:a3:83:5c:d3:b2:2b: b1:1b:57:5d:f2:54:ac:11:15:21:f3:b2:bf:3f:62:6b:48:30: d7:04:22:3f:7c:9a:79:f4:f5:d5:10:61:64:83:69:5c:56:94: b8:a8:a7:a5:db:2a:4f:ee:1d:d5:78:27:1d:fe:c2:71:7d:84: 22:1b:3a:a4:d5:6d:a8:1f:be:90:16:54:7d:9e:24:19:da:c6: 48:d8:e1:35:af:f3:18:b3:20:ec:da:8c:31:20:34:35:29:fc: 0b:7b:32:a0:6a:94:75:eb:36:aa:60:9c:f5:2d:b7:ff:12:2d: b4:73:ac:f6:71:f7:04:d1:43:dd:ec:77:ef:1e:8d:bc:64:54: 50:38:3a:10:2e:af:80:97:13:75:d0:94:bd:03:00:fe:59:4e: 3c:54:3e:d3:95:29:59:58:00:46:52:7a:47:e9:79:e1:41:2c: ff:7e:5b:1e:1a:bc:d8:8b:d6:18:49:c7:6d:d0:2c:c2:07:d0: c5:a6:03:b6:4c:e5:ce:31:13:04:cf:73:78:44:a5:07:26:dd: 0e:6b:7d:c8:05:5c:c6:cd:92:ad:96:53:d2:60:2c:7c:a8:9a: ba:9f:7d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa3EFkVFVnOm8MC9JFuCk3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUwNTA5MjIwMDIzWhcNMjUwNTEwMjIwMDIzWjAzMTEwLwYDVQQD EygxMjJjODAyM2RhZDg5NDAyYmMwZDVmMWM4ZTBmZmZlMjEzMjQ0MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07pwv/XQTEf6kwJQjVygY9j13xJh W8wJ0t+MCl8Dwzbr2y6kzmcOgsbeqXSUidWAID9vmqWB3pYp/0b6G6nDDWl25Qhn mCKKLo2r4o514SZthUQVQkXr4AfKadOmcRQnFaTPwxryFHDoBVmdNTHGKZYR7s4e pVDx7pCcLFTUgOfFBSu2L2szsjC7ltvhfUgfsrqGGqURxsFINMnKP7H8B5fqbalb rvLTqx6HAMU4HePa00ef0uhTQjuerIEmPOxHijbk9TCRV6cQfTCOh2IuzvmtlL/b CZU4YbvNHPVv6CrKVnxnvIPxDdJtnkPsQEvKDh4oV+Sq5YLppzfWcoOm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIsgCPa2JQCvA1fHI4P/+ITJEAaMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8qsjDIh p46+BLPDRBjWP57of2fn5vmoAu+Slo7do4Nc07IrsRtXXfJUrBEVIfOyvz9ia0gw 1wQiP3yaefT11RBhZINpXFaUuKinpdsqT+4d1XgnHf7CcX2EIhs6pNVtqB++kBZU fZ4kGdrGSNjhNa/zGLMg7NqMMSA0NSn8C3syoGqUdes2qmCc9S23/xIttHOs9nH3 BNFD3ex37x6NvGRUUDg6EC6vgJcTddCUvQMA/llOPFQ+05UpWVgARlJ6R+l54UEs /35bHhq82IvWGEnHbdAswgfQxaYDtkzlzjETBM9zeESlBybdDmt9yAVcxs2SrZZT 0mAsfKiaup995Q== -----END CERTIFICATE-----Generated at Sat May 10 01:35:08 2025 by rpki-client