$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: ySXmGlpG9tPwsEF1vLQysbpNY9PtbqoPnJQAoKzpeIQ= Subject key identifier: 8A:E9:2F:BB:AE:0E:2A:63:55:37:17:42:AD:F4:45:61:9F:0A:B8:8D Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019673AFE5A93E91D7AC2197E1A4C47F9C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 1236 Signing time: Sat 26 Apr 2025 20:00:29 +0000 Manifest this update: Sat 26 Apr 2025 20:00:29 +0000 Manifest next update: Sun 27 Apr 2025 20:00:29 +0000 Files and hashes: 1: 7gLBp0seupB3smWAi_oF18iZRGE.roa (hash: uNlzGqHQooJbP3MKzJQmy02N65RCgyqmWWJhnnmBz3k=) 2: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 3: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 8: qxv97i_u-oPbXERls-AuUJ-ehN0.roa (hash: 3CpmmFrGAOZMYO7PvcVF3IlSxwWNYbKDyVw/pp4ZIZ0=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: g9BQihYN6CPH4jXA7ebFn1F4AqDVIm7+cG/EEajUuHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:af:e5:a9:3e:91:d7:ac:21:97:e1:a4:c4:7f:9c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Apr 26 20:00:29 2025 GMT Not After : Apr 27 20:00:29 2025 GMT Subject: CN=8ae92fbbae0e2a6355371742adf445619f0ab88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:fd:7d:d6:f3:ba:59:7b:d1:b9:d1:3e:50: cb:7e:73:f1:5a:0f:be:b9:4c:93:4f:a2:17:6a:2b: 8d:54:80:93:28:6b:6d:44:51:1b:0a:7c:da:00:f7: 97:42:fa:b9:4c:be:8b:ff:4c:cf:6c:63:f0:8f:b4: c9:03:16:16:69:e2:fa:88:ba:d3:94:30:e4:25:e5: 8b:4c:56:83:2c:53:42:dd:20:7b:1a:d1:c7:a5:0b: 41:bb:eb:eb:b3:dc:a8:d1:1e:ac:6b:01:3d:be:42: 7c:3b:87:4e:d2:b8:39:76:d2:51:68:5d:fa:96:57: 7a:71:d1:e6:47:ba:08:3a:bf:2c:45:73:f3:6f:6c: 54:da:34:a4:47:ed:c7:dc:58:48:30:59:7b:51:d0: 6d:47:4c:4f:3f:38:aa:2e:6e:65:01:a6:69:97:95: de:b6:f5:83:a6:ba:c0:9f:a7:5a:97:8f:06:07:31: a2:5b:54:ad:1e:14:54:08:9e:4a:0e:8a:f8:29:67: 37:57:f8:c6:53:b3:db:ca:93:43:33:96:c1:7b:be: 28:99:67:cd:d4:25:7c:97:98:31:fc:1d:5f:45:04: 9a:6d:58:64:5f:4f:dc:29:07:0e:7b:96:29:9d:77: ab:9f:12:9b:e7:04:98:e3:94:67:85:d3:81:cd:a7: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:2F:BB:AE:0E:2A:63:55:37:17:42:AD:F4:45:61:9F:0A:B8:8D X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4d:a3:be:d0:b5:89:7d:ad:d7:b4:f6:8b:4c:ab:6d:b0:9a: ab:68:8b:ed:98:cb:4c:5e:96:31:da:fb:2c:f4:28:27:27:1c: 5b:9a:ee:d2:e1:f6:f6:a8:1a:2c:af:f8:c0:e8:04:2c:52:29: 02:89:de:21:83:ee:34:da:15:50:89:61:dd:e8:72:0b:4e:b0: 54:9b:a2:12:c0:36:5f:4b:a2:a1:f8:18:bd:a5:c7:17:1f:39: f4:a4:0e:0e:c9:0e:d9:bf:0a:0a:f4:90:20:b9:c0:fe:76:5b: 3b:f7:8d:14:a4:fd:3d:6b:21:59:c8:d4:d2:81:de:d3:93:19: f4:89:84:d9:a2:5f:0a:b6:a1:d3:24:e4:57:e6:af:0e:66:d3: 2c:e4:b4:62:d1:68:0c:e8:b3:5c:de:05:e9:a3:86:35:b5:bd: 3e:5c:a1:91:c8:c2:8c:e2:be:7d:49:38:e9:2c:a9:82:02:65: 4f:c8:f1:ed:4d:56:91:3d:99:7a:83:45:95:35:3a:c6:4d:af: 57:e7:27:fa:b0:d8:e2:8b:6f:fb:23:2c:d4:26:fe:1f:08:c7: cb:a9:6a:c5:77:d6:b9:9b:f6:f2:30:30:16:8b:17:68:cf:dc: ee:94:e7:22:22:67:aa:2e:7e:1b:e6:fb:3b:61:f4:16:cd:57: 59:2e:c8:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzr+WpPpHXrCGX4aTEf5w4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUwNDI2MjAwMDI5WhcNMjUwNDI3MjAwMDI5WjAzMTEwLwYDVQQD Eyg4YWU5MmZiYmFlMGUyYTYzNTUzNzE3NDJhZGY0NDU2MTlmMGFiODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKD9fdbzull70bnRPlDLfnPxWg++ uUyTT6IXaiuNVICTKGttRFEbCnzaAPeXQvq5TL6L/0zPbGPwj7TJAxYWaeL6iLrT lDDkJeWLTFaDLFNC3SB7GtHHpQtBu+vrs9yo0R6sawE9vkJ8O4dO0rg5dtJRaF36 lld6cdHmR7oIOr8sRXPzb2xU2jSkR+3H3FhIMFl7UdBtR0xPPziqLm5lAaZpl5Xe tvWDprrAn6dal48GBzGiW1StHhRUCJ5KDor4KWc3V/jGU7PbypNDM5bBe74omWfN 1CV8l5gx/B1fRQSabVhkX0/cKQcOe5YpnXernxKb5wSY45RnhdOBzacxCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrpL7uuDipjVTcXQq30RWGfCriNMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk2jvtC1 iX2t17T2i0yrbbCaq2iL7ZjLTF6WMdr7LPQoJyccW5ru0uH29qgaLK/4wOgELFIp AoneIYPuNNoVUIlh3ehyC06wVJuiEsA2X0uiofgYvaXHFx859KQODskO2b8KCvSQ ILnA/nZbO/eNFKT9PWshWcjU0oHe05MZ9ImE2aJfCrah0yTkV+avDmbTLOS0YtFo DOizXN4F6aOGNbW9PlyhkcjCjOK+fUk46SypggJlT8jx7U1WkT2ZeoNFlTU6xk2v V+cn+rDY4otv+yMs1Cb+HwjHy6lqxXfWuZv28jAwFosXaM/c7pTnIiJnqi5+G+b7 O2H0Fs1XWS7I6Q== -----END CERTIFICATE-----Generated at Sun Apr 27 05:36:35 2025 by rpki-client