$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: FzRlDS7Vz+c/TAT8zAx1sYRYXufpHUfrz7OjydMx5vs= Subject key identifier: 16:D6:2C:83:E5:43:E7:C8:10:D1:E8:BA:1D:D4:25:BF:32:91:70:09 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 0196722FF27DCC634EA8AF2C438C79ADED62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 10A0 Signing time: Sat 26 Apr 2025 13:01:06 +0000 Manifest this update: Sat 26 Apr 2025 13:01:06 +0000 Manifest next update: Sun 27 Apr 2025 13:01:06 +0000 Files and hashes: 1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 2: 46Z7waoyHHEbsxxpvd3eWc3FesM.roa (hash: RGAVqkABD1kUGcHWFc3ExxqIEMWKWCZccVOCiAVauPA=) 3: 7EWEqRw8RoS0w7RjmP6d3h3BbNg.roa (hash: vEThkmGM+/L+dTFRCTNlorDLU8NBYGnhWNxVYjPgD5c=) 4: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 5: AfCHtr4Fmn6C6K-xDZnJGPxVWbY.roa (hash: cWC+zuyAXxZC7IptFtTdds4QT4Tg0RxQSuYTFEhWDp4=) 6: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: z+vDDOPQvbVRBWBKDD6Re1hEnbqLD01mYGDYrPtmE1Q=) 7: Jo5pcIjwfG6nQSLFHP6kQnNRmnU.roa (hash: EkaSnISMfc8+JhAdcRRsLW9pFDfixNkEvnL06KOf3So=) 8: K26CHbWIdVhV9ZIS1wE5mr28rb0.roa (hash: +uSx+oQPM9JSjxAKGNmQEHxTCMdtnlF8PKSOcjGnM28=) 9: KfCvMigrEbxD64-Qz3DHEgil5iE.roa (hash: ktCv93PTBPP9rqpE8WUFRMLdnSG878YbS7s8ku8OuAY=) 10: N2e1KwpBdyrR37kUp0a7fUH7zN8.roa (hash: JBgmHvoo9+VvXNhQsnYMPfpkAAYuKk4YvwJXglBCh0o=) 11: SYAztygjVndcEsjCgTeE2vVxOUM.roa (hash: I2w/JubkqWLuJeW2HSMvnAsuZneCQlRCYeKw1LkGXr4=) 12: XGOuHgklPAXFF9PgAhcplLrpo5E.roa (hash: Pv9wp2//FIn+5bdveKZPF+ZeW5gxmAnJZ0pNFRghqZU=) 13: azVzt2JXnQwUAEmKpDgZix9oQ1A.roa (hash: 95TvfhwPanOHF+KV/PXqLCTF79WK1h15RFbvM+WKdfQ=) 14: bBlKC54OHXhbJTLkoeCOC_iXi58.roa (hash: rydEwe9Oj75Yurpk+mfXpfq5E39u03A4S1WXDwVr8so=) 15: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 16: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 17: eVrGw7hI0glJq7pXSKd7cFjvOOg.roa (hash: SZffzRaRPYbBzwR2bcZ03C7C26H8PMxiQFQ86nqo4RE=) 18: taLXMLMK44pCaud8dCDMf0lZQUU.roa (hash: wLcPZj9UkIw+6HIzBJC4FaEO8gnn6u2Gz08Z19sRZIU=) 19: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) 20: yM5CLi9XK2yH-oyDEjS2WaOQOAc.roa (hash: YQCLrHs0bfdXW8OGr643mhnjzpJDOEACn1ych1yGrnQ=) 21: yYlPdOxEQ-DkkikOUokHzYUMfCw.roa (hash: AgZ8YHYCCPtKRU/kCp/4/N0G8XCw377PsVS8HQ2MJ6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:f2:7d:cc:63:4e:a8:af:2c:43:8c:79:ad:ed:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Apr 26 13:01:06 2025 GMT Not After : Apr 27 13:01:06 2025 GMT Subject: CN=16d62c83e543e7c810d1e8ba1dd425bf32917009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:bc:b7:8e:b3:48:d0:39:b8:23:0d:35:32: 02:0d:97:eb:00:f0:8e:06:c2:5d:94:df:c0:b9:a2: 3b:4c:6f:c9:ca:4f:60:ce:6a:71:63:d9:38:58:15: 51:68:8d:0e:24:a2:0d:32:66:85:f4:6e:a6:82:79: 4f:41:9c:a1:7d:b7:1d:03:21:0d:6d:00:fb:2a:2f: 68:a8:5d:ca:e2:a3:bc:60:b8:44:a7:68:13:e2:b9: 58:05:a8:cc:30:5f:a4:44:11:72:a8:14:65:4c:1d: 47:51:be:ad:33:41:9c:37:57:dd:a5:bf:16:99:23: f5:ec:d1:e4:7f:8f:35:b4:b6:21:50:ad:2c:11:d9: af:cc:f8:73:10:ca:cc:8f:d2:2e:e9:0a:9f:3d:f1: a7:b7:87:b2:e8:2a:20:67:9e:41:26:39:17:3c:d3: ff:40:50:e0:35:77:ea:2e:ef:15:e1:76:3e:df:a9: 54:ac:1f:90:07:96:a5:b9:64:88:7d:78:93:f5:1b: e3:92:aa:77:07:6d:81:0a:6a:22:01:69:4f:1a:b9: 49:ee:b4:43:52:79:4c:ed:9e:0b:7e:fa:63:85:4d: c1:73:4a:e4:f7:bc:39:8a:0e:29:0e:9f:35:7d:ab: 54:cf:86:fe:37:4e:67:76:91:2d:8c:20:c9:38:4a: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D6:2C:83:E5:43:E7:C8:10:D1:E8:BA:1D:D4:25:BF:32:91:70:09 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:09:85:ca:03:dd:ee:6e:39:ef:6e:10:4f:19:86:e4:2d:16: 8a:29:00:a6:ff:ea:d4:81:89:eb:f5:9f:ec:a5:54:74:f9:3b: 05:e9:c7:d3:b0:bc:07:59:4a:c6:16:fc:6b:b2:34:2c:08:95: 43:60:4e:35:fb:10:30:54:6e:74:82:1b:80:bf:ca:6c:13:ea: 7c:2d:66:0c:ef:fd:52:15:9e:e7:17:54:0d:5b:82:c7:35:d4: 5a:54:4f:fe:e0:f4:c1:f9:a3:f4:b3:48:ed:c1:a5:4c:03:e8: f4:88:1e:36:c6:32:1e:f3:79:b4:1f:27:49:40:17:b7:ad:8c: 2c:e3:5e:81:90:83:ca:04:f0:bc:ec:f9:d6:8c:4a:82:70:c9: 29:9c:6d:3d:b4:94:17:ad:ed:9f:c4:c4:6c:56:43:5f:76:5b: ee:a7:3c:36:fa:32:39:40:b0:eb:97:28:5e:34:8e:9e:d3:f0: 93:2d:63:28:93:7f:39:98:7e:14:b6:31:81:96:72:69:d5:0e: 69:32:ec:60:8d:76:7e:3c:9a:f1:4d:e2:d8:a9:82:78:e5:6b: 85:e4:b9:66:cd:01:1b:22:ca:db:81:bc:57:3c:0a:d6:9c:06: 72:3b:45:f2:fa:c5:79:35:37:e1:4d:5e:18:0a:d6:ea:cf:e3: 66:f1:62:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyL/J9zGNOqK8sQ4x5re1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUwNDI2MTMwMTA2WhcNMjUwNDI3MTMwMTA2WjAzMTEwLwYDVQQD EygxNmQ2MmM4M2U1NDNlN2M4MTBkMWU4YmExZGQ0MjViZjMyOTE3MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dG8t46zSNA5uCMNNTICDZfrAPCO BsJdlN/AuaI7TG/Jyk9gzmpxY9k4WBVRaI0OJKINMmaF9G6mgnlPQZyhfbcdAyEN bQD7Ki9oqF3K4qO8YLhEp2gT4rlYBajMMF+kRBFyqBRlTB1HUb6tM0GcN1fdpb8W mSP17NHkf481tLYhUK0sEdmvzPhzEMrMj9Iu6QqfPfGnt4ey6CogZ55BJjkXPNP/ QFDgNXfqLu8V4XY+36lUrB+QB5aluWSIfXiT9Rvjkqp3B22BCmoiAWlPGrlJ7rRD UnlM7Z4LfvpjhU3Bc0rk97w5ig4pDp81fatUz4b+N05ndpEtjCDJOEqHBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbWLIPlQ+fIENHouh3UJb8ykXAJMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwmFygPd 7m45724QTxmG5C0WiikApv/q1IGJ6/Wf7KVUdPk7BenH07C8B1lKxhb8a7I0LAiV Q2BONfsQMFRudIIbgL/KbBPqfC1mDO/9UhWe5xdUDVuCxzXUWlRP/uD0wfmj9LNI 7cGlTAPo9IgeNsYyHvN5tB8nSUAXt62MLONegZCDygTwvOz51oxKgnDJKZxtPbSU F63tn8TEbFZDX3Zb7qc8NvoyOUCw65coXjSOntPwky1jKJN/OZh+FLYxgZZyadUO aTLsYI12fjya8U3i2KmCeOVrheS5Zs0BGyLK24G8VzwK1pwGcjtF8vrFeTU34U1e GArW6s/jZvFi0g== -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:16 2025 by rpki-client