$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: UW8kjOupbGkTNIqghvvINeqUsBSeMZ9Be/7AOftZ5B8= Subject key identifier: 0B:49:6D:66:A3:7B:C4:9B:02:3F:03:3D:E6:66:0E:9B:9B:81:D9:D7 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019673AFFC1ADC5F8E33F7F0A0D15858556D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 1522 Signing time: Sat 26 Apr 2025 20:00:35 +0000 Manifest this update: Sat 26 Apr 2025 20:00:35 +0000 Manifest next update: Sun 27 Apr 2025 20:00:35 +0000 Files and hashes: 1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: eWcICS73nFZoXS9Sv9OL6ozo6SXdeI8VBsHm0t5HdLI=) 2: 4u-FrWKWaho_ISyzc5VOsCnPB-Q.roa (hash: YfroGaZGo+3Y5Nuhq7M/QzCuhU+RFQDjKrM1lqbk5uM=) 3: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 4: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 5: E8ctuT8I25PNpJlv_YsEEXcr8pk.roa (hash: 5mqJS85psOoDSolMzRmcv/leNn2i1C/OlCJhTj3L83E=) 6: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 7: JvZUEi7A7V388WY-38Um7sLP4iA.roa (hash: CvMgS2JS1B5/pFFOBX0cIZilf0BG410ECm9I/vEGJ5c=) 8: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 9: UWV4l3kE-brWJX9uRkRZO53lO9o.roa (hash: cAU+zNWLTTRLrd7RdQn+sxXYtefOYpWRpuIgwXau7iA=) 10: W5a7DdwJaAnEaRHZv6EO9kbudzg.roa (hash: oyakXu5rs8SXNOZxzAoWDuA9NdXgDHDVljC1e0neNkA=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa (hash: 0VHL8dNRCWtY3U9FsisIK+yIftWh4d0//02eZdVbL24=) 13: iTss4dVuEO8u2zrybey6wjkQ5CM.roa (hash: iS+Pl9gnUh0T0PMsvXCrH+rna0Q4YPkZDZcMC+K1GTQ=) 14: osgJC1j873fUuICkEREfgiPJqL4.roa (hash: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=) 15: whqum5btfebJ92EiHlAqEY1dMyI.roa (hash: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:af:fc:1a:dc:5f:8e:33:f7:f0:a0:d1:58:58:55:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Apr 26 20:00:35 2025 GMT Not After : Apr 27 20:00:35 2025 GMT Subject: CN=0b496d66a37bc49b023f033de6660e9b9b81d9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8f:8a:86:3a:53:26:ae:41:69:80:2c:be:09: cf:36:5c:be:37:20:c3:5e:42:1a:62:4c:5b:74:9c: 1d:71:e8:1c:02:61:4d:59:27:ed:e5:bb:a7:1b:0e: 9d:f7:ba:f0:da:89:e5:40:b1:3e:ef:4a:4e:d2:49: 63:e6:c3:50:0e:dc:b7:33:f9:ed:74:ce:c8:94:0f: 85:6d:f7:a9:01:61:50:a3:fa:51:a2:54:be:3d:c6: 09:5b:fe:ed:2e:bc:18:f4:4e:dc:5b:e3:32:a2:a3: 6d:28:99:3e:e2:e0:70:ef:7c:d2:e7:81:22:cc:e3: 39:83:ee:2b:bf:ee:01:73:5d:f9:3d:a7:ff:6b:6f: 4b:dc:7c:fa:61:a7:d6:3c:bf:2e:fc:69:8a:48:1e: bb:f4:57:d4:2d:6b:d2:81:7d:ec:13:d9:f8:b8:65: 3b:e7:23:2c:e4:37:18:a0:1d:ff:77:0e:18:24:d3: 52:88:a5:a7:58:11:9a:cf:42:bd:59:3f:eb:1d:b2: d4:8c:c3:14:e3:78:7e:9f:5c:1c:06:60:19:40:62: 66:d5:a0:38:70:90:c0:12:f0:82:3f:66:27:aa:f3: 9a:0a:99:48:47:71:a4:4c:89:e9:79:2f:27:3a:d8: 4d:ae:5d:77:d6:47:a8:af:1a:2f:fc:23:c3:f4:05: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:6D:66:A3:7B:C4:9B:02:3F:03:3D:E6:66:0E:9B:9B:81:D9:D7 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:91:bb:33:8d:ad:73:82:4d:e9:f9:44:cc:61:51:c6:a1:93: c5:a7:f2:e4:ea:01:66:2c:f6:08:79:83:88:f9:b6:24:22:ff: 5c:a5:60:d2:cd:fc:42:00:1c:5b:57:a9:d3:40:d3:fc:ba:47: b8:53:e4:2c:65:7d:91:19:c8:d4:c0:e3:80:40:fd:bb:f3:7e: ea:99:1d:59:34:3e:c2:fb:d3:b8:0a:31:74:23:bd:2d:8a:49: 4d:b7:88:2d:1e:f6:e5:ba:28:b2:e2:07:4c:d1:0b:44:21:33: d0:f2:ff:f8:02:bf:f7:54:45:02:30:07:79:a5:5d:df:72:b3: 14:76:b7:44:18:bb:79:b4:a7:f5:a0:4e:56:0e:92:4f:1c:4d: f8:9f:cb:48:22:1f:f4:14:19:c5:b2:8c:c2:28:56:27:d5:30: ae:f3:9b:63:46:23:46:da:b0:cd:f8:c6:75:c0:f8:01:9d:89: 06:36:80:20:a2:95:3b:a7:45:90:e7:da:5e:98:0a:39:75:e2: 9a:86:d2:ab:1d:52:09:ef:6f:ad:57:25:d5:a4:b6:9e:b2:be: 45:6f:23:58:b8:ec:43:ef:e8:71:ec:a1:e6:bf:2e:45:03:38: 1e:97:3a:02:7d:55:4c:78:9f:35:6f:c0:49:f5:ba:c4:b3:2d: 8d:7d:2c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzr/wa3F+OM/fwoNFYWFVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUwNDI2MjAwMDM1WhcNMjUwNDI3MjAwMDM1WjAzMTEwLwYDVQQD EygwYjQ5NmQ2NmEzN2JjNDliMDIzZjAzM2RlNjY2MGU5YjliODFkOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/I+KhjpTJq5BaYAsvgnPNly+NyDD XkIaYkxbdJwdcegcAmFNWSft5bunGw6d97rw2onlQLE+70pO0klj5sNQDty3M/nt dM7IlA+FbfepAWFQo/pRolS+PcYJW/7tLrwY9E7cW+MyoqNtKJk+4uBw73zS54Ei zOM5g+4rv+4Bc135Paf/a29L3Hz6YafWPL8u/GmKSB679FfULWvSgX3sE9n4uGU7 5yMs5DcYoB3/dw4YJNNSiKWnWBGaz0K9WT/rHbLUjMMU43h+n1wcBmAZQGJm1aA4 cJDAEvCCP2YnqvOaCplIR3GkTInpeS8nOthNrl131keorxov/CPD9AWr9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtJbWaje8SbAj8DPeZmDpubgdnXMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5G7M42t c4JN6flEzGFRxqGTxafy5OoBZiz2CHmDiPm2JCL/XKVg0s38QgAcW1ep00DT/LpH uFPkLGV9kRnI1MDjgED9u/N+6pkdWTQ+wvvTuAoxdCO9LYpJTbeILR725boosuIH TNELRCEz0PL/+AK/91RFAjAHeaVd33KzFHa3RBi7ebSn9aBOVg6STxxN+J/LSCIf 9BQZxbKMwihWJ9UwrvObY0YjRtqwzfjGdcD4AZ2JBjaAIKKVO6dFkOfaXpgKOXXi mobSqx1SCe9vrVcl1aS2nrK+RW8jWLjsQ+/oceyh5r8uRQM4Hpc6An1VTHifNW/A SfW6xLMtjX0scQ== -----END CERTIFICATE-----Generated at Sat Apr 26 22:31:31 2025 by rpki-client