$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json) Hash identifier: b6d1e117mh9O4aaU4b66Fk/CA/5vwiQ0OUVuvpesu8E= Subject key identifier: B8:F3:EF:21:1A:09:98:E3:F9:32:E8:6E:EA:CF:D2:23:BF:5F:83:28 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 0196A01A7580DE85AD89462EACFC9184CD01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft Manifest number: 1267 Signing time: Mon 05 May 2025 11:00:10 +0000 Manifest this update: Mon 05 May 2025 11:00:10 +0000 Manifest next update: Tue 06 May 2025 11:00:10 +0000 Files and hashes: 1: 5brKbRBtOvHFjh0oXn8r8X9Yoww.roa (hash: ACQA/vy+zy4fT5JbE8/TavE1wLY971r5N9JADwPEgrU=) 2: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (hash: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=) 3: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: oARdUkirS45xjfJv9itDKcC/xo/9baCGt2KMZd86VvI=) 4: DOQPFseUooqpRadfc9Jx4JU6a5w.roa (hash: XAqWMnzc6s03+/9ahgtWZZS99wqgCO9uHPxIAengots=) 5: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (hash: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=) 6: KQ6n4tDni3AIbl89TiA9LShR5J4.roa (hash: eJSTrL5nCsUccTE0LUUEIBRIdvXEaKFzbIAwyimw6Ls=) 7: OrF2xG8avuxGrpmOXZN3cT6uOd4.roa (hash: 6sBq02Bpl0iKdz4R0G8yzMetYTxfTK9ZttAM0+HPHcY=) 8: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (hash: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=) 9: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (hash: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=) 10: Zd2TIy3J3EGY8gRTx2VctwWafNA.roa (hash: jSPU+Ktlv17KDLnxr4WS4KGPoqym5KTNrXt7UU3beYs=) 11: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (hash: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=) 12: mr-HNjr6kVeCJqK27hiMeoGu7wo.roa (hash: 2cCwRolIlWawdY4pJgJJRXgW9VztAAcC6pZFSIFR/7s=) 13: zkX0tVSTFsoyaxd_5uUsOhnJd-4.roa (hash: +7/YlZRCmdBXU3YPbp3jELJ7uYVAAvsXumfUvYl8oRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a0:1a:75:80:de:85:ad:89:46:2e:ac:fc:91:84:cd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: May 5 11:00:10 2025 GMT Not After : May 6 11:00:10 2025 GMT Subject: CN=b8f3ef211a0998e3f932e86eeacfd223bf5f8328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:8d:21:3d:1a:68:60:5d:d0:be:b8:a8:d7: 26:97:e8:27:a4:e2:96:c3:3e:3d:c5:c7:53:30:c1: 7a:9a:c1:4c:f0:90:6b:81:be:4a:24:c4:1e:44:ec: 47:3e:12:21:0f:d5:47:b1:5c:1d:64:52:41:bd:7e: c7:3c:cd:32:67:d7:58:16:f8:e3:a0:0d:b2:57:c9: 58:a2:63:09:ae:9b:3f:70:b4:76:f2:0f:6e:89:17: 1f:ca:88:b6:22:22:95:49:d8:a5:7c:b1:5b:2b:c7: 93:2e:24:15:3e:c4:e9:98:5d:56:73:dc:53:3f:a8: 40:35:ed:6b:84:6c:2d:5b:2e:9f:da:b1:63:05:ee: 3a:ed:f0:48:68:55:f3:ec:ae:ec:f2:eb:83:40:63: 12:23:68:cf:ee:e7:48:cf:74:f6:93:66:74:91:d1: 48:d6:47:c8:a2:21:85:64:25:ae:3e:ac:3a:d7:a7: 7f:3a:d0:6a:aa:5c:2b:95:fc:88:b1:b1:81:60:9c: 3f:96:e6:5b:81:3c:d6:30:3c:a4:6b:6e:67:3b:fb: 45:92:98:a7:b3:1b:02:74:b9:bd:ea:24:6e:be:69: 6f:28:e4:e6:b9:cf:79:e5:8a:e2:9a:93:ee:27:5c: eb:5d:d6:fe:89:78:e6:8a:49:6e:54:99:47:84:5b: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F3:EF:21:1A:09:98:E3:F9:32:E8:6E:EA:CF:D2:23:BF:5F:83:28 X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:82:f2:0c:c4:be:5d:05:70:7e:b5:fd:dc:2c:93:44:b1:7b: 26:bb:82:36:7a:98:93:0c:80:aa:99:0e:e2:ca:34:e6:4e:09: 99:24:7a:b7:0a:31:73:11:00:77:37:11:67:59:cd:78:3e:4d: 04:b1:50:95:7c:f1:85:e2:44:73:c9:9e:83:74:e3:10:e1:91: 2c:e8:3f:45:9b:a6:2c:86:be:2d:17:4a:62:9f:28:c4:1e:b6: a4:de:c3:d5:6a:5a:83:5d:c2:dd:ce:5f:67:0f:2f:42:23:25: 47:11:82:0d:7f:bc:a9:00:84:22:5d:40:82:27:8b:c3:8f:84: b4:c7:d4:8a:d0:af:d5:4c:90:ff:c4:ea:47:10:6f:47:91:ba: fe:2b:9b:e2:7c:0c:10:18:60:1d:e0:90:cd:2d:4c:59:aa:18: d4:6b:1e:27:bb:80:5b:f2:c0:ba:1d:88:91:1a:f3:fb:17:d4: dc:69:9f:1e:a1:29:9b:d4:61:04:d4:81:e1:e7:d0:96:c9:ad: af:d4:66:5d:1f:6c:90:e1:b8:8a:bf:a5:97:98:d6:92:ee:ec: ef:c2:2a:a2:f5:bf:06:6e:2d:24:bc:3e:39:2d:bf:7f:36:3a: 7c:f9:82:7e:28:55:f6:34:5f:f3:93:fd:2d:b0:4d:6e:e1:a4: a8:f6:78:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZagGnWA3oWtiUYurPyRhM0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjUwNTA1MTEwMDEwWhcNMjUwNTA2MTEwMDEwWjAzMTEwLwYDVQQD EyhiOGYzZWYyMTFhMDk5OGUzZjkzMmU4NmVlYWNmZDIyM2JmNWY4MzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm6NIT0aaGBd0L64qNcml+gnpOKW wz49xcdTMMF6msFM8JBrgb5KJMQeROxHPhIhD9VHsVwdZFJBvX7HPM0yZ9dYFvjj oA2yV8lYomMJrps/cLR28g9uiRcfyoi2IiKVSdilfLFbK8eTLiQVPsTpmF1Wc9xT P6hANe1rhGwtWy6f2rFjBe467fBIaFXz7K7s8uuDQGMSI2jP7udIz3T2k2Z0kdFI 1kfIoiGFZCWuPqw616d/OtBqqlwrlfyIsbGBYJw/luZbgTzWMDyka25nO/tFkpin sxsCdLm96iRuvmlvKOTmuc955YrimpPuJ1zrXdb+iXjmikluVJlHhFuUpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjz7yEaCZjj+TLoburP0iO/X4MoMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4LyDMS+ XQVwfrX93CyTRLF7JruCNnqYkwyAqpkO4so05k4JmSR6twoxcxEAdzcRZ1nNeD5N BLFQlXzxheJEc8meg3TjEOGRLOg/RZumLIa+LRdKYp8oxB62pN7D1Wpag13C3c5f Zw8vQiMlRxGCDX+8qQCEIl1AgieLw4+EtMfUitCv1UyQ/8TqRxBvR5G6/iub4nwM EBhgHeCQzS1MWaoY1GseJ7uAW/LAuh2IkRrz+xfU3GmfHqEpm9RhBNSB4efQlsmt r9RmXR9skOG4ir+ll5jWku7s78IqovW/Bm4tJLw+OS2/fzY6fPmCfihV9jRf85P9 LbBNbuGkqPZ4nA== -----END CERTIFICATE-----Generated at Mon May 5 16:02:20 2025 by rpki-client