$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: AKZyH6PVs274jVT8qZHO2k114O21CDb0p9z3OMbEZZg= Subject key identifier: 02:FD:E4:F9:F1:A9:CA:58:B2:2B:6B:16:1C:77:EE:A2:F0:59:09:D7 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 0196764312E59AD4E7CACF24DF30C0CA4249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1515 Signing time: Sun 27 Apr 2025 08:00:29 +0000 Manifest this update: Sun 27 Apr 2025 08:00:29 +0000 Manifest next update: Mon 28 Apr 2025 08:00:29 +0000 Files and hashes: 1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=) 2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: iOKUJgnDki2Zf+ZHOU38chNH/tVc/UI8+T6CML+JTFA=) 3: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 4: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 5: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 6: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 7: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 8: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=) 9: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 10: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:43:12:e5:9a:d4:e7:ca:cf:24:df:30:c0:ca:42:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Apr 27 08:00:29 2025 GMT Not After : Apr 28 08:00:29 2025 GMT Subject: CN=02fde4f9f1a9ca58b22b6b161c77eea2f05909d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:19:d0:b7:8e:13:38:3a:86:0c:bd:45:e7: 95:99:81:05:67:17:4a:d3:d5:34:78:d0:79:e3:71: 64:83:7a:23:3f:d6:cc:92:d0:69:0d:1e:e1:0c:80: 48:47:ad:76:c9:17:26:8f:cc:f5:d4:68:7a:53:52: 1c:bf:7c:0f:c7:36:1d:ca:e0:72:d0:39:82:46:fd: 51:48:99:97:65:3d:1b:63:41:1d:e2:e3:5c:93:5a: d6:fc:0e:74:26:2c:4e:01:5b:df:33:cf:16:1d:75: f9:56:77:23:dc:25:37:d0:00:c0:b3:82:b3:3d:23: 2b:24:51:83:75:db:ef:f9:0f:77:f5:45:07:93:e1: 7a:3d:78:05:8a:0c:c9:51:f1:a3:c8:5d:ad:9d:84: 61:62:3d:9e:4d:da:bf:a6:53:1a:57:69:f7:1a:0a: fe:ec:13:1d:bb:6c:f9:7b:0a:9e:17:a5:08:35:ac: 83:f1:dd:3b:0b:c9:2c:b8:28:21:28:12:9a:43:f6: e6:18:44:8a:fd:b9:87:56:cd:d2:c3:d3:74:e2:82: d2:c5:fc:2d:3a:30:74:fa:73:0b:2c:31:b5:90:c1: d2:25:3b:95:9f:22:87:a9:cb:f4:1a:78:cd:99:c3: 7a:19:e2:7c:af:fb:2a:b9:e4:f4:f8:2d:05:b1:e7: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FD:E4:F9:F1:A9:CA:58:B2:2B:6B:16:1C:77:EE:A2:F0:59:09:D7 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:80:54:be:53:d7:ff:c2:6d:26:14:e0:37:52:39:9d:9a:a0: 13:ae:d4:5b:82:9d:97:eb:b6:54:69:36:3a:a3:1f:a8:8d:73: 9e:cd:59:88:e5:2f:8b:b4:1a:e2:07:ef:7a:f0:cf:a7:eb:1a: a1:a2:e5:b7:90:25:64:fb:0c:f8:ec:17:56:83:43:b6:4f:77: 11:2c:80:b4:f0:57:15:e7:ca:5d:c0:ac:bc:e2:19:fe:3f:c0: 05:a1:15:e3:91:cf:61:b7:d7:2c:84:90:c5:9a:1e:d7:19:e4: cc:31:7b:86:05:4d:66:dc:d6:aa:0c:de:e8:17:76:e8:60:a3: a5:ef:62:10:b3:49:49:7a:ab:e0:1c:d0:b2:93:8f:14:76:3d: 14:ba:88:db:6d:44:c0:c4:28:a3:bd:49:b5:9f:76:ab:04:19: 3d:e2:59:85:61:6d:80:35:d7:fb:e8:80:bb:07:db:fd:a9:61: 68:74:85:02:a2:de:1d:49:ba:b0:9d:5e:13:e4:28:6d:77:22: 5b:d2:d8:52:cb:8d:9d:c4:05:9f:35:fe:44:58:60:2d:1a:02: cb:55:7a:ac:19:96:ba:a9:98:1b:af:c7:46:ca:46:ba:39:ea: 32:a7:4c:67:4a:9a:b4:11:aa:19:43:1d:3b:06:86:dc:fd:a4: 7a:16:44:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2QxLlmtTnys8k3zDAykJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUwNDI3MDgwMDI5WhcNMjUwNDI4MDgwMDI5WjAzMTEwLwYDVQQD EygwMmZkZTRmOWYxYTljYTU4YjIyYjZiMTYxYzc3ZWVhMmYwNTkwOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYUZ0LeOEzg6hgy9ReeVmYEFZxdK 09U0eNB543Fkg3ojP9bMktBpDR7hDIBIR612yRcmj8z11Gh6U1Icv3wPxzYdyuBy 0DmCRv1RSJmXZT0bY0Ed4uNck1rW/A50JixOAVvfM88WHXX5Vncj3CU30ADAs4Kz PSMrJFGDddvv+Q939UUHk+F6PXgFigzJUfGjyF2tnYRhYj2eTdq/plMaV2n3Ggr+ 7BMdu2z5ewqeF6UINayD8d07C8ksuCghKBKaQ/bmGESK/bmHVs3Sw9N04oLSxfwt OjB0+nMLLDG1kMHSJTuVnyKHqcv0GnjNmcN6GeJ8r/squeT0+C0FsednHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL95PnxqcpYsitrFhx37qLwWQnXMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooBUvlPX /8JtJhTgN1I5nZqgE67UW4Kdl+u2VGk2OqMfqI1zns1ZiOUvi7Qa4gfvevDPp+sa oaLlt5AlZPsM+OwXVoNDtk93ESyAtPBXFefKXcCsvOIZ/j/ABaEV45HPYbfXLISQ xZoe1xnkzDF7hgVNZtzWqgze6Bd26GCjpe9iELNJSXqr4BzQspOPFHY9FLqI221E wMQoo71JtZ92qwQZPeJZhWFtgDXX++iAuwfb/alhaHSFAqLeHUm6sJ1eE+QobXci W9LYUsuNncQFnzX+RFhgLRoCy1V6rBmWuqmYG6/HRspGujnqMqdMZ0qatBGqGUMd OwaG3P2kehZE7A== -----END CERTIFICATE-----Generated at Sun Apr 27 12:06:06 2025 by rpki-client