$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft File: w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json) Hash identifier: NRgLezHbmrA9HNKj05klgcanAQ1tlUSWaCOG9/5b3mM= Subject key identifier: AF:AA:F0:49:40:A5:43:18:87:65:8E:D1:FF:17:57:3F:5D:EB:1F:F2 Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Certificate serial: 0196A7D4B9FBDDA8DFD26D9A230027652DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft Manifest number: 0B49 Signing time: Tue 06 May 2025 23:00:58 +0000 Manifest this update: Tue 06 May 2025 23:00:58 +0000 Manifest next update: Wed 07 May 2025 23:00:58 +0000 Files and hashes: 1: 3X5B_z_CHT9YiArtKHYnEy7SS1U.roa (hash: tIWfVACal3ac9CgPfVZfL2hoiDFlKQiV1Zl+vw5e/Tk=) 2: 9B3oIFGiY8sz4Yr70vZGMy1E1cM.roa (hash: tCq0Vmn2+JW6GCrr+VO1JikMdVS8aAJkba6PLu5z4q0=) 3: FAFrlUopptmau95ECgggoFnFW5E.roa (hash: NfxJQzGh5WVV+nVV4aUJw0ze6uWzSGCJtfvUSOxHVIM=) 4: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=) 5: V1aZ2Oir-YcaB5W8puap9OnyFPQ.roa (hash: XdFwxTjLyYZVnoi+MEQpeRDm1NgmqNfkbqmwpKoG77E=) 6: f-hXathyAvRN2ld-uSSE-vjwvew.roa (hash: 48UobrIHEUtM4KgYc61yXNFSUSaIokWVah91EZhf+Gk=) 7: fwidfOE9wLJVHvxvqo5WJpziTPQ.roa (hash: IACsOvvmqe0JcAwbYBZ0v3eyApUMtt8c8HlehAuYS/w=) 8: hN7zKkOexRQZr-KvvxJ68RRBR88.roa (hash: 83LMiX+7xkSI2TZz6xMtRRpAT0AOqOI9dFyBzIQNyH4=) 9: mkmzSBfTmh1927TwjKRzkGSilpo.roa (hash: ZpaUb66empT2T5gziJ4fvdd/emyVETapR7pDi9FUco0=) 10: nKfPm9spmtPM1fSPgIuF3RMxFCc.roa (hash: kRYSTEG94arj56oJo4kcSXsSabSa24f6TX9uvXrKqxE=) 11: nnCUhVImeKVSSHsPJ4bQMntIe0k.roa (hash: y/vliRYcabvic0DNd0VxC9usOOdHfTvNAxGNCa7L498=) 12: onUpvp2eOcQTulUwC5YOYeY8lJs.roa (hash: 8louP+hvp9qC9hZoR1YbgH+oKr8dxR60G/3uHXuTDIM=) 13: qHjRyI_syvpq7VXPCdqhN1kkh6w.roa (hash: gAmry4qMuz8BF4gHC1KD5lh+OIx99upbjuSefv8H7lU=) 14: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: s/e4D9WlFOppuC4YPfkJkmRrJn6ded12PSKO1InTpzA=) 15: zphJ0IbfKePN2J_27ENvEzdmmJA.roa (hash: IvEyICGQzLoNSquXxrsCz9iYgnRJ2xhrnMfbex1EUjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a7:d4:b9:fb:dd:a8:df:d2:6d:9a:23:00:27:65:2d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be Validity Not Before: May 6 23:00:58 2025 GMT Not After : May 7 23:00:58 2025 GMT Subject: CN=afaaf04940a5431887658ed1ff17573f5deb1ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:0a:16:a3:66:97:e5:e3:78:3a:8d:ae:91: c8:b8:c9:7a:c7:79:c4:33:c6:18:ca:1b:e7:fe:38: 58:5d:48:28:fa:23:81:5f:92:c7:78:eb:3a:97:1e: eb:50:e3:fe:98:6f:35:69:54:8e:9b:af:db:8f:9e: d4:3e:6d:f6:5d:4f:c0:3e:e8:58:61:ca:4c:20:f8: 59:d0:7a:0a:3a:65:5f:6f:e7:d6:bc:c9:9b:b6:c6: 76:52:38:3b:f1:de:06:c3:44:17:2f:6e:5e:96:d7: fa:90:25:a1:64:59:96:d1:8c:91:82:fa:84:a4:94: 5b:34:ae:92:5b:9b:fd:1a:ae:58:bd:84:9b:6c:fe: ea:7a:13:0c:e3:73:ff:6d:38:3b:28:36:7a:5b:fa: 57:15:70:80:01:3e:f5:1d:d9:96:68:a7:2e:43:41: 5f:3f:87:52:66:17:5e:74:87:4b:88:36:21:89:33: c8:64:fc:63:e0:54:66:ed:92:5d:2d:b4:d0:d6:8f: 4b:81:f1:f4:06:47:32:29:64:e3:db:ab:12:83:72: e2:bd:a1:43:6b:9c:81:54:c1:f8:bd:4c:42:3a:6b: 68:6e:10:f0:b4:f2:60:7b:b4:87:a2:e2:9b:19:86: 58:ec:c9:e9:17:f8:c6:6c:c5:d1:2d:71:26:9e:14: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AA:F0:49:40:A5:43:18:87:65:8E:D1:FF:17:57:3F:5D:EB:1F:F2 X509v3 Authority Key Identifier: keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cb:4b:b8:fc:cd:b2:40:b9:10:56:2a:51:0c:20:28:11:7f: d1:88:cd:33:cd:32:d4:aa:cb:09:3e:85:46:7a:b8:28:58:de: 78:a1:c3:d5:0d:bb:fc:7e:ee:e1:fa:e5:3a:ad:73:8a:6d:6d: 3e:92:c6:5a:78:6f:8a:42:d0:07:9a:f6:db:37:e1:6a:d1:87: bd:76:e2:f5:dd:5b:b1:30:7b:50:8a:0d:b5:f0:4b:37:e4:c3: 26:29:a5:fa:ab:1b:a9:ed:96:bd:02:f0:1a:5c:0d:91:dc:1c: 9e:d6:fe:a8:44:d3:d3:f2:8f:9c:e9:a7:90:cf:c8:32:d4:57: 90:a6:04:21:18:ef:d8:b1:d1:46:3c:04:b5:24:94:09:02:8b: 48:c0:f0:0e:88:38:e4:bf:ce:34:b4:9b:28:3a:a4:c5:de:a0: 70:7a:16:1c:c0:45:19:b1:f6:b2:43:f5:ab:d8:0a:a8:d4:5a: 09:3f:bf:07:cb:0f:55:b3:56:9e:51:75:13:0f:ec:88:06:fe: f0:15:21:4b:cd:7b:80:9b:da:b9:88:fe:f5:a2:54:81:60:23: 0c:ec:39:9f:4d:a5:42:10:d3:98:c4:e1:9e:4e:1e:01:0a:89: 25:dc:a2:88:67:26:0d:94:9a:f8:8a:2f:b8:16:75:1a:42:f4: 04:26:b0:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZan1Ln73ajf0m2aIwAnZS3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl N2IwYmUwHhcNMjUwNTA2MjMwMDU4WhcNMjUwNTA3MjMwMDU4WjAzMTEwLwYDVQQD EyhhZmFhZjA0OTQwYTU0MzE4ODc2NThlZDFmZjE3NTczZjVkZWIxZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW4KFqNml+XjeDqNrpHIuMl6x3nE M8YYyhvn/jhYXUgo+iOBX5LHeOs6lx7rUOP+mG81aVSOm6/bj57UPm32XU/APuhY YcpMIPhZ0HoKOmVfb+fWvMmbtsZ2Ujg78d4Gw0QXL25eltf6kCWhZFmW0YyRgvqE pJRbNK6SW5v9Gq5YvYSbbP7qehMM43P/bTg7KDZ6W/pXFXCAAT71HdmWaKcuQ0Ff P4dSZhdedIdLiDYhiTPIZPxj4FRm7ZJdLbTQ1o9LgfH0BkcyKWTj26sSg3LivaFD a5yBVMH4vUxCOmtobhDwtPJge7SHouKbGYZY7MnpF/jGbMXRLXEmnhRxVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+q8ElApUMYh2WO0f8XVz9d6x/yMB8GA1UdIwQY MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt NDFiYjIxYWMyODAxLzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMtLuPzN skC5EFYqUQwgKBF/0YjNM80y1KrLCT6FRnq4KFjeeKHD1Q27/H7u4frlOq1zim1t PpLGWnhvikLQB5r22zfhatGHvXbi9d1bsTB7UIoNtfBLN+TDJiml+qsbqe2WvQLw GlwNkdwcntb+qETT0/KPnOmnkM/IMtRXkKYEIRjv2LHRRjwEtSSUCQKLSMDwDog4 5L/ONLSbKDqkxd6gcHoWHMBFGbH2skP1q9gKqNRaCT+/B8sPVbNWnlF1Ew/siAb+ 8BUhS817gJvauYj+9aJUgWAjDOw5n02lQhDTmMThnk4eAQqJJdyiiGcmDZSa+Iov uBZ1GkL0BCawew== -----END CERTIFICATE-----Generated at Wed May 7 04:17:57 2025 by rpki-client