$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft File: wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json) Hash identifier: un3McE1c/R19V6N9EXOcDV8DAtGmhp6kiYM8jyzVT5g= Subject key identifier: D9:6B:FD:CB:99:79:56:A4:84:61:B9:8A:8A:78:74:D2:55:C9:FF:CB Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 0194BABB17C5CADC187BF26A6E2FC83547E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft Manifest number: 0D9B Signing time: Fri 31 Jan 2025 05:00:10 +0000 Manifest this update: Fri 31 Jan 2025 05:00:10 +0000 Manifest next update: Sat 01 Feb 2025 05:00:10 +0000 Files and hashes: 1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=) 2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=) 3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=) 4: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=) 5: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=) 6: HLXgW9g3LABWkFIyEESTxGOx85U.roa (hash: Jl3vie7iN8reVNinZ0G4doJvIc2+E+YXOFkhA/Y59v4=) 7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=) 8: axxp80_l2Sp4XrA6WfSxMCVdrh0.roa (hash: LR76WagEk9cVUpt3PgYLZF/GWCCsG7/kt/S0+s0d3NQ=) 9: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=) 10: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=) 11: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=) 12: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=) 13: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=) 14: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=) 15: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=) 16: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=) 17: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: zH4h/miL/uHJrESidlSWL9EqZCDM/Hnb1dXsHRIMhjQ=) 18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:17:c5:ca:dc:18:7b:f2:6a:6e:2f:c8:35:47:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 31 05:00:10 2025 GMT Not After : Feb 1 05:00:10 2025 GMT Subject: CN=d96bfdcb997956a48461b98a8a7874d255c9ffcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:db:7f:a2:b7:23:1c:55:39:83:e4:6f:5a: d9:40:c0:07:ee:45:95:09:89:2e:c5:c1:50:b2:ac: 0e:8f:58:2f:14:f4:ea:62:8e:6f:95:57:f6:95:36: e5:47:98:3c:b2:16:70:6c:be:c5:bc:d0:83:02:43: b7:55:73:a0:03:8a:6d:4b:c5:91:62:c7:95:7c:d9: a3:fb:ce:7a:8d:44:35:0f:01:18:89:bf:63:af:9d: 8c:bb:12:c2:d9:5f:7e:b1:d9:14:ff:6e:e4:bf:a1: 1c:f8:42:31:2f:bb:5e:c3:71:0c:54:94:cb:ac:2f: c9:9a:07:a3:b1:df:5e:cb:95:26:4c:b0:16:1b:2c: 35:93:4d:7f:54:a4:4f:c4:76:de:46:ea:fc:40:04: 3a:f0:d6:63:40:b9:1e:44:be:79:cf:5a:9b:3c:b5: f2:2f:47:d9:60:a3:08:b2:e2:1d:2c:9f:21:dc:d6: 1d:f5:6e:8f:72:83:f2:12:e1:e7:12:91:35:ee:25: f6:79:2d:d5:06:8c:83:a0:19:79:3f:fa:53:20:91: 5c:58:5a:8c:6f:1b:63:a9:0f:a1:dc:f5:c8:12:ef: ca:d9:91:87:b1:f0:94:ba:81:b2:94:06:0f:77:31: 00:8b:bf:83:38:d9:b9:1e:5b:ee:c3:1e:4b:d0:23: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6B:FD:CB:99:79:56:A4:84:61:B9:8A:8A:78:74:D2:55:C9:FF:CB X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:8b:73:a3:c9:b6:7d:89:4a:67:a2:46:f0:8e:34:a3:2d:ae: c9:d7:a0:12:f3:a3:3c:68:64:ee:04:23:99:9a:6f:28:20:af: 1c:a2:f5:5b:96:3e:70:c1:4a:f7:71:6e:8a:0b:35:dc:bc:c2: 99:69:52:d2:69:6d:48:68:9f:06:0a:da:e6:2c:59:77:00:8f: f2:2f:f7:17:44:f3:28:49:ae:ea:ae:a4:25:f6:6e:81:72:fe: 0f:21:50:23:fa:cf:97:aa:bf:13:40:44:5f:8b:93:0a:0e:29: 0c:f4:d3:3b:1b:50:15:a2:b3:d4:2e:de:17:ab:63:ce:f9:01: 60:f8:48:df:f1:f8:17:64:fa:c2:87:2f:fc:a9:c0:9b:e3:cc: 72:37:52:de:88:36:9d:3a:63:c2:d8:ad:b7:50:c1:82:d4:c6: 79:33:b4:44:c0:bc:cd:5a:12:a1:0c:21:f0:c3:f7:82:e4:bb: 83:3f:ad:b8:f4:d1:55:2d:12:1b:07:e6:67:86:56:57:b4:48: 48:71:36:32:b2:f0:b9:b8:f1:2e:12:55:03:19:8c:59:ce:bc: 46:ec:1a:ce:b3:23:97:12:74:91:29:09:a8:94:3c:2f:33:87: b6:04:74:1b:27:46:78:e5:92:88:43:03:c5:c3:d7:21:b8:92: c6:c6:a3:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6uxfFytwYe/Jqbi/INUfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjUwMTMxMDUwMDEwWhcNMjUwMjAxMDUwMDEwWjAzMTEwLwYDVQQD EyhkOTZiZmRjYjk5Nzk1NmE0ODQ2MWI5OGE4YTc4NzRkMjU1YzlmZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaTbf6K3IxxVOYPkb1rZQMAH7kWV CYkuxcFQsqwOj1gvFPTqYo5vlVf2lTblR5g8shZwbL7FvNCDAkO3VXOgA4ptS8WR YseVfNmj+856jUQ1DwEYib9jr52MuxLC2V9+sdkU/27kv6Ec+EIxL7tew3EMVJTL rC/Jmgejsd9ey5UmTLAWGyw1k01/VKRPxHbeRur8QAQ68NZjQLkeRL55z1qbPLXy L0fZYKMIsuIdLJ8h3NYd9W6PcoPyEuHnEpE17iX2eS3VBoyDoBl5P/pTIJFcWFqM bxtjqQ+h3PXIEu/K2ZGHsfCUuoGylAYPdzEAi7+DONm5Hlvuwx5L0CPTzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlr/cuZeVakhGG5iop4dNJVyf/LMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4tzo8m2 fYlKZ6JG8I40oy2uydegEvOjPGhk7gQjmZpvKCCvHKL1W5Y+cMFK93Fuigs13LzC mWlS0mltSGifBgra5ixZdwCP8i/3F0TzKEmu6q6kJfZugXL+DyFQI/rPl6q/E0BE X4uTCg4pDPTTOxtQFaKz1C7eF6tjzvkBYPhI3/H4F2T6wocv/KnAm+PMcjdS3og2 nTpjwtitt1DBgtTGeTO0RMC8zVoSoQwh8MP3guS7gz+tuPTRVS0SGwfmZ4ZWV7RI SHE2MrLwubjxLhJVAxmMWc68RuwazrMjlxJ0kSkJqJQ8LzOHtgR0GydGeOWSiEMD xcPXIbiSxsajuA== -----END CERTIFICATE-----Generated at Fri Jan 31 15:38:20 2025 by rpki-client on console-fra.rpki-client.org