$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json) Hash identifier: b8w8fFrq6AhpCBJgIzh31BtzJlSIsxX/ZCJsYlNGIrg= Subject key identifier: 60:D8:B6:22:44:2D:84:CC:78:32:9C:9D:CC:5F:A5:A4:54:A8:DF:86 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019678D637573094F8A3168C8BD5A00E4545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft Manifest number: 156B Signing time: Sun 27 Apr 2025 20:00:26 +0000 Manifest this update: Sun 27 Apr 2025 20:00:26 +0000 Manifest next update: Mon 28 Apr 2025 20:00:26 +0000 Files and hashes: 1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=) 2: 1l2ArbgF3qVBDh248pT8ghQwr8g.roa (hash: YA33bykfjW3z3Yekpa5KV5s6fAvShyo0RB0/5uqiA+w=) 3: 1y9h67sjn_VjHFrVe0Z3K6XNjqA.roa (hash: 2JQPf5WO6517JYBXHWCSR7Hd0Z7lAJY8xvwRiWg3zfc=) 4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=) 5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=) 6: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=) 7: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: mj9LcVDGtzRbMgntXZ65p/9C7TzhGMKI4ldRjyJx9mg=) 8: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=) 9: PkVu03D1CRld76GED_NQa3Zviig.roa (hash: OkHPN7thUETTaMK2SKswCUlcs0r0An8Tlc/LHXOT+S8=) 10: QeO41CAcoeY5Jb6ckPmPdMtCGJ8.roa (hash: Nr1rB/vJsu0ebZqnfkywnf9dXpXohyswafUIZqT1VeU=) 11: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=) 12: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=) 13: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=) 14: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=) 15: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=) 16: YylrwMGF3qFvnaGvkmUDnZyYZ9g.roa (hash: 8q8rerl630r/DmStNSsnGkxyqlbQwETqo+P5suMsVIo=) 17: Zc32tz1ZjSWwVgQorA7lXMaw-xA.roa (hash: HRYYNy4880mDT+crSQhmT3WO1uhHjRCZk7D2GRyCL/w=) 18: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=) 19: cId8Oh2ku7xx6TmW6OIZ4A9R3SI.roa (hash: DosNmul2GOxycmJ7sNN3zGw9XmJX9NxE7he1ScFFL4k=) 20: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (hash: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=) 21: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (hash: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=) 22: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=) 23: iCU2vJ363CZpyHNUurK_dNuVXdE.roa (hash: 6PP00+RtDHO5sFS+pfDuEa6e1rb1QssNLnp4R4FRlAQ=) 24: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=) 25: nFmg1ZbaugFoP4r46DmMM1bx6Dk.roa (hash: 8HuaUsP5wd4g7g+IHer22eSFYfBXdh5/suZjeTrgNVc=) 26: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=) 27: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=) 28: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=) 29: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=) 30: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:d6:37:57:30:94:f8:a3:16:8c:8b:d5:a0:0e:45:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Apr 27 20:00:26 2025 GMT Not After : Apr 28 20:00:26 2025 GMT Subject: CN=60d8b622442d84cc78329c9dcc5fa5a454a8df86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:dd:2b:c7:ab:41:ef:ec:7d:e8:37:a4:0e: 9c:b0:d5:ba:34:3b:54:9c:42:9c:71:dd:d1:14:35: 0e:95:aa:93:40:c7:c2:d7:4a:f6:cf:5c:f9:69:ca: 7f:b2:dc:f9:83:36:6a:35:d2:2e:d2:77:bc:15:7c: cd:35:1a:51:75:aa:f6:04:64:33:7a:24:a9:04:13: ad:5a:bd:df:81:ab:ac:d3:f6:85:70:1d:3f:97:e2: 47:7b:84:9a:2e:ae:bf:a0:d5:28:94:4d:b0:c5:33: 69:bc:09:f6:43:34:7e:57:83:08:6f:e6:35:f3:d3: 14:1b:68:f0:fd:de:0b:af:e4:26:18:9c:8d:65:78: 20:1c:59:86:e1:6a:3c:07:bb:4b:75:49:e8:12:4c: 90:80:e6:7c:36:23:c4:dd:d4:73:17:aa:4d:07:93: a1:fb:07:9b:13:7f:f3:41:f1:0b:0a:f4:91:1e:a1: f7:72:95:e4:d7:65:a8:00:67:0a:c0:83:a8:d6:fa: 7c:90:80:37:78:2b:32:08:64:7e:94:25:2e:88:e5: 46:02:bf:6b:a0:6e:f0:16:21:ba:54:4c:4a:82:ec: af:d5:05:10:37:2b:8b:ef:23:fc:3e:0f:ce:2c:95: e3:2f:69:b7:83:d4:a8:66:f0:6a:9e:b6:67:f5:22: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D8:B6:22:44:2D:84:CC:78:32:9C:9D:CC:5F:A5:A4:54:A8:DF:86 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:39:c0:44:3c:82:61:08:c8:fe:16:c7:31:57:f1:e9:1d:8e: c6:4e:87:4f:8d:f0:08:74:0c:86:d9:ae:d5:e8:e9:a3:e0:ac: 1b:e5:6b:2d:22:27:d5:9f:46:ae:d1:19:0c:9b:98:3e:2e:55: 92:e1:9d:12:f8:43:7a:1d:dd:6e:a7:f4:68:88:7c:98:dc:82: b7:98:ce:bb:5b:c7:98:ac:ca:ce:d9:c6:29:c9:ac:cd:20:d7: 94:2e:45:ce:6b:cd:84:45:0e:7a:7f:a8:cb:82:65:84:d9:25: 76:9e:af:88:5f:0a:ca:a5:43:0e:e2:a1:35:c0:83:1c:a0:65: 11:40:2b:55:0f:ca:ae:c2:f8:b7:88:ca:70:12:54:95:8d:b1: 64:a8:e7:83:b3:14:3c:0e:ac:55:72:68:48:fa:33:bc:1b:2e: 63:4b:aa:a5:c8:21:ef:db:d3:f3:f3:a4:60:1d:3f:cb:31:d2: c9:00:3d:17:f0:bc:6c:a0:f8:70:81:06:d8:cc:9f:40:38:35: 0f:08:cb:4a:be:b2:8a:53:9d:5f:c8:cf:53:d8:e0:db:03:37: 7f:91:c9:12:e7:39:54:e8:57:1e:fb:66:33:76:9d:8a:1a:7b: 8f:89:4d:12:8f:7e:f2:c8:5f:74:41:34:57:fa:4b:e7:af:dc: 43:46:4e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ41jdXMJT4oxaMi9WgDkVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUwNDI3MjAwMDI2WhcNMjUwNDI4MjAwMDI2WjAzMTEwLwYDVQQD Eyg2MGQ4YjYyMjQ0MmQ4NGNjNzgzMjljOWRjYzVmYTVhNDU0YThkZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPdK8erQe/sfeg3pA6csNW6NDtU nEKccd3RFDUOlaqTQMfC10r2z1z5acp/stz5gzZqNdIu0ne8FXzNNRpRdar2BGQz eiSpBBOtWr3fgaus0/aFcB0/l+JHe4SaLq6/oNUolE2wxTNpvAn2QzR+V4MIb+Y1 89MUG2jw/d4Lr+QmGJyNZXggHFmG4Wo8B7tLdUnoEkyQgOZ8NiPE3dRzF6pNB5Oh +webE3/zQfELCvSRHqH3cpXk12WoAGcKwIOo1vp8kIA3eCsyCGR+lCUuiOVGAr9r oG7wFiG6VExKguyv1QUQNyuL7yP8Pg/OLJXjL2m3g9SoZvBqnrZn9SKbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDYtiJELYTMeDKcncxfpaRUqN+GMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjnARDyC YQjI/hbHMVfx6R2Oxk6HT43wCHQMhtmu1ejpo+CsG+VrLSIn1Z9GrtEZDJuYPi5V kuGdEvhDeh3dbqf0aIh8mNyCt5jOu1vHmKzKztnGKcmszSDXlC5FzmvNhEUOen+o y4JlhNkldp6viF8KyqVDDuKhNcCDHKBlEUArVQ/KrsL4t4jKcBJUlY2xZKjng7MU PA6sVXJoSPozvBsuY0uqpcgh79vT8/OkYB0/yzHSyQA9F/C8bKD4cIEG2MyfQDg1 DwjLSr6yilOdX8jPU9jg2wM3f5HJEuc5VOhXHvtmM3adihp7j4lNEo9+8shfdEE0 V/pL56/cQ0ZOPw== -----END CERTIFICATE-----Generated at Sun Apr 27 23:14:46 2025 by rpki-client