$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: iJ6CxJjKiaOl/gqeNfGq2tLjrQKuX3VPOli31PnWU7Q= Subject key identifier: F6:3B:1A:7D:EE:67:48:BF:03:65:6E:B3:C6:73:E7:BB:67:A1:5A:A3 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 0196748B5DFC669E80F1F5DA6321D81C24F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 1477 Signing time: Sun 27 Apr 2025 00:00:12 +0000 Manifest this update: Sun 27 Apr 2025 00:00:12 +0000 Manifest next update: Mon 28 Apr 2025 00:00:12 +0000 Files and hashes: 1: 9ioTTouwDAdjti2UptXcOCsh1Po.roa (hash: XfQ02KBk81Ha8U23R9wuoKXx9mN0uM0n5PPDDr+U6Iw=) 2: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: IV/DPOi3ngotlX/zWgB6UEiyV7lcXslbulZu26FiSp8=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8b:5d:fc:66:9e:80:f1:f5:da:63:21:d8:1c:24:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Apr 27 00:00:12 2025 GMT Not After : Apr 28 00:00:12 2025 GMT Subject: CN=f63b1a7dee6748bf03656eb3c673e7bb67a15aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:ca:71:7e:d0:30:4c:c3:71:0a:ee:b6:b1: 5f:6c:b8:7d:68:59:71:70:f7:1a:e3:7a:6a:cd:c3: 1a:4a:1c:07:02:83:f2:3f:3b:99:a8:8b:ad:86:bc: 81:31:95:c6:7f:18:8b:33:e8:25:0d:dd:7f:5f:55: 13:cb:58:c9:b1:bc:ba:08:f4:ba:9d:36:ee:c6:23: 5e:3a:8e:68:5c:8c:66:f0:c5:3a:04:2e:84:a1:f5: 6f:b4:6e:77:58:98:93:71:30:3f:64:77:72:df:f5: de:96:06:a4:c5:8a:d3:5a:44:92:34:f5:a7:5b:67: c0:10:b8:81:23:fa:6f:75:52:be:ba:74:54:fe:72: 07:de:5d:73:a5:d4:c0:c3:13:bb:42:bb:02:b3:c3: e9:e1:5b:45:49:02:7f:ce:47:93:60:67:5e:53:21: 50:10:ce:e4:68:fc:d0:05:8f:89:0d:38:49:06:21: bb:9e:b4:2b:39:7e:12:c9:73:e7:aa:0d:ab:40:3d: 36:e6:c0:e9:b5:c1:43:c1:55:43:23:a8:3d:81:5b: 52:7c:79:70:07:9d:84:97:60:21:fe:17:3d:00:6d: 59:1d:55:e3:50:21:25:54:d8:18:44:f5:71:3b:0f: 05:67:d6:07:05:24:7c:70:93:49:6a:a9:22:66:93: b5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:1A:7D:EE:67:48:BF:03:65:6E:B3:C6:73:E7:BB:67:A1:5A:A3 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a0:5c:80:ed:cc:7e:01:17:ca:e7:56:7a:10:b9:02:4a:c5: 48:34:e9:4b:f4:cc:f7:e0:dc:a4:65:42:9f:23:cc:9d:f9:47: 8a:45:a1:be:20:c4:36:4d:36:86:b6:d3:72:d9:d9:cb:9a:e3: 1d:c6:b1:37:7e:5e:6b:f8:ed:dc:fa:1a:be:13:76:45:5f:fb: 2b:aa:17:ba:41:be:81:8e:a6:e4:eb:c8:62:ac:22:b5:a9:24: 92:4a:0d:b2:68:1e:ad:e9:c2:a8:ed:b6:77:59:a0:60:45:31: dc:f8:07:ea:be:db:de:80:ba:5a:6d:9c:98:cb:ff:e7:42:96: 8c:6a:3d:5f:6e:b4:85:83:d4:5d:90:e7:c0:bc:02:b5:e3:be: a2:37:7b:29:12:0c:77:88:20:37:78:fd:7a:31:c6:12:01:05: 11:0f:ed:45:b5:3e:7a:9b:fc:6d:73:05:e5:e6:dd:0c:d7:d7: 66:1d:65:9b:aa:9e:87:c0:d3:66:db:ae:53:08:0b:b3:f3:31: 1c:5c:28:23:5d:fe:29:55:7a:ba:bc:0a:87:3c:c6:08:af:bb: 1e:54:3d:e0:c4:b8:66:ab:8a:bc:cd:6b:ea:86:8e:14:6b:bf: d0:e1:7b:15:81:d2:80:e8:28:39:6c:2d:ab:08:f7:40:f6:0e: 49:57:9c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0i138Zp6A8fXaYyHYHCT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUwNDI3MDAwMDEyWhcNMjUwNDI4MDAwMDEyWjAzMTEwLwYDVQQD EyhmNjNiMWE3ZGVlNjc0OGJmMDM2NTZlYjNjNjczZTdiYjY3YTE1YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomjKcX7QMEzDcQrutrFfbLh9aFlx cPca43pqzcMaShwHAoPyPzuZqIuthryBMZXGfxiLM+glDd1/X1UTy1jJsby6CPS6 nTbuxiNeOo5oXIxm8MU6BC6EofVvtG53WJiTcTA/ZHdy3/XelgakxYrTWkSSNPWn W2fAELiBI/pvdVK+unRU/nIH3l1zpdTAwxO7QrsCs8Pp4VtFSQJ/zkeTYGdeUyFQ EM7kaPzQBY+JDThJBiG7nrQrOX4SyXPnqg2rQD025sDptcFDwVVDI6g9gVtSfHlw B52El2Ah/hc9AG1ZHVXjUCElVNgYRPVxOw8FZ9YHBSR8cJNJaqkiZpO1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY7Gn3uZ0i/A2Vus8Zz57tnoVqjMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaBcgO3M fgEXyudWehC5AkrFSDTpS/TM9+DcpGVCnyPMnflHikWhviDENk02hrbTctnZy5rj HcaxN35ea/jt3PoavhN2RV/7K6oXukG+gY6m5OvIYqwitakkkkoNsmgerenCqO22 d1mgYEUx3PgH6r7b3oC6Wm2cmMv/50KWjGo9X260hYPUXZDnwLwCteO+ojd7KRIM d4ggN3j9ejHGEgEFEQ/tRbU+epv8bXMF5ebdDNfXZh1lm6qeh8DTZtuuUwgLs/Mx HFwoI13+KVV6urwKhzzGCK+7HlQ94MS4ZquKvM1r6oaOFGu/0OF7FYHSgOgoOWwt qwj3QPYOSVecQQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:27 2025 by rpki-client