$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft File: wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json) Hash identifier: GOeR6PlUKSeTkoi2qAz+ZNEhLEOq6vPWHrHmFmTli9k= Subject key identifier: C0:9C:7A:84:79:58:00:3B:45:3B:FC:40:60:CA:3F:1C:FF:99:05:9D Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 0196730B0D389382780121C5581A5BD26099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft Manifest number: 1530 Signing time: Sat 26 Apr 2025 17:00:26 +0000 Manifest this update: Sat 26 Apr 2025 17:00:26 +0000 Manifest next update: Sun 27 Apr 2025 17:00:26 +0000 Files and hashes: 1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=) 2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=) 3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=) 4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=) 5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=) 6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=) 7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=) 8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=) 9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: O3eqAwJcfONUCzYHAhchKvXATf3+MIaD51MUnrPkMXk=) 10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:0d:38:93:82:78:01:21:c5:58:1a:5b:d2:60:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Apr 26 17:00:26 2025 GMT Not After : Apr 27 17:00:26 2025 GMT Subject: CN=c09c7a847958003b453bfc4060ca3f1cff99059d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:13:24:14:0a:06:b9:bb:21:d5:df:22:96: 5f:5a:79:ec:47:4a:3f:0d:58:2c:c4:dc:c3:f5:17: 55:0d:40:fc:3b:19:14:25:be:a0:c6:cd:36:fe:78: 26:0f:48:ac:dd:6a:7b:94:db:8a:63:88:65:88:1e: 87:e3:de:b4:5d:dc:1c:5c:f6:42:cf:b0:4a:9e:55: bf:05:87:a6:5c:b3:b3:aa:b2:65:28:07:8f:58:00: ee:c0:10:84:3f:fe:e5:08:dd:0e:a1:bd:6a:c6:30: 97:07:42:6f:44:33:6d:63:da:ce:17:a7:66:9f:66: a0:86:52:47:66:34:a3:19:79:15:13:78:61:c1:0b: 77:01:d8:cb:0b:a5:e5:06:dc:c7:d0:d1:a9:ef:35: 07:01:88:a8:fd:e7:ac:c7:7f:1b:4c:08:68:22:a1: 12:c1:9d:95:26:5b:af:89:d0:82:bd:8b:30:a4:99: 40:c5:85:0c:02:ee:36:fa:29:50:70:62:8f:ca:e2: 69:fd:b3:7d:eb:49:d5:bf:c6:d6:b4:4d:35:0e:a3: fb:98:8d:b6:98:41:b1:a8:e5:52:98:84:4b:26:18: ca:3d:73:74:44:ec:20:a9:a7:1c:10:5c:a9:fc:fb: 2e:50:76:e5:8e:28:31:fd:9c:ad:4e:76:d1:9c:ec: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:7A:84:79:58:00:3B:45:3B:FC:40:60:CA:3F:1C:FF:99:05:9D X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:68:81:34:a0:5e:5e:e3:dc:29:79:ce:f1:8a:14:1d:ae:f8: 2c:79:ac:b2:1d:31:fa:e4:22:7f:7f:9e:15:e2:fc:12:a8:6b: b9:98:16:8e:76:de:a2:cf:70:20:4e:bf:72:1b:8d:0c:72:3c: 4c:1d:47:1f:05:1e:ac:32:a2:85:2b:aa:16:98:fa:7a:eb:55: 7c:82:7f:a0:95:90:fc:05:1c:35:6f:2c:6a:8a:4d:79:a5:b3: 04:d8:fd:9b:57:5f:47:02:b0:97:1d:24:2b:58:d7:a9:cc:bc: f9:03:a6:4f:e5:a7:d4:29:f8:8a:28:4c:80:a6:fe:36:1d:78: c1:c0:6a:1c:c3:96:c4:62:4a:72:e4:65:53:7a:7b:a1:0f:d2: 08:8d:f8:e2:a5:03:26:72:33:90:74:6d:3e:22:7b:6e:82:5f: 86:5b:93:0f:bb:6a:40:a1:a1:4f:bc:14:b9:2b:3c:ce:07:7f: a3:15:29:3c:3f:e5:bb:b6:f3:9d:66:d4:d3:91:23:8b:ca:dd: 25:c7:78:ad:f3:41:b2:fa:47:f7:06:df:63:bd:61:a3:3d:db: cd:39:f1:e5:47:ab:4c:a0:0e:d6:2a:05:af:5a:3e:ec:7b:83: 00:6c:e5:f6:c0:1e:ce:ec:ae:6a:b8:50:2f:ff:8d:97:03:b9: ca:42:07:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzCw04k4J4ASHFWBpb0mCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjUwNDI2MTcwMDI2WhcNMjUwNDI3MTcwMDI2WjAzMTEwLwYDVQQD EyhjMDljN2E4NDc5NTgwMDNiNDUzYmZjNDA2MGNhM2YxY2ZmOTkwNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArToTJBQKBrm7IdXfIpZfWnnsR0o/ DVgsxNzD9RdVDUD8OxkUJb6gxs02/ngmD0is3Wp7lNuKY4hliB6H4960XdwcXPZC z7BKnlW/BYemXLOzqrJlKAePWADuwBCEP/7lCN0Oob1qxjCXB0JvRDNtY9rOF6dm n2aghlJHZjSjGXkVE3hhwQt3AdjLC6XlBtzH0NGp7zUHAYio/eesx38bTAhoIqES wZ2VJluvidCCvYswpJlAxYUMAu42+ilQcGKPyuJp/bN960nVv8bWtE01DqP7mI22 mEGxqOVSmIRLJhjKPXN0ROwgqaccEFyp/PsuUHbljigx/ZytTnbRnOwUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCceoR5WAA7RTv8QGDKPxz/mQWdMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2iBNKBe XuPcKXnO8YoUHa74LHmssh0x+uQif3+eFeL8EqhruZgWjnbeos9wIE6/chuNDHI8 TB1HHwUerDKihSuqFpj6eutVfIJ/oJWQ/AUcNW8saopNeaWzBNj9m1dfRwKwlx0k K1jXqcy8+QOmT+Wn1Cn4iihMgKb+Nh14wcBqHMOWxGJKcuRlU3p7oQ/SCI344qUD JnIzkHRtPiJ7boJfhluTD7tqQKGhT7wUuSs8zgd/oxUpPD/lu7bznWbU05Eji8rd Jcd4rfNBsvpH9wbfY71hoz3bzTnx5UerTKAO1ioFr1o+7HuDAGzl9sAezuyuarhQ L/+NlwO5ykIHYA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:49:35 2025 by rpki-client