$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: 6AN4ip9ZI1F7G4ntKfWHjVEXeOO4YhuZReUtTkZN1mA= Subject key identifier: 3A:6F:CA:DA:72:F4:C2:02:DB:03:59:A9:8F:35:51:0F:A9:CA:1E:8E Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019671C1FBDDAAA9E44F3E23A4B2EF516B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 0B13 Signing time: Sat 26 Apr 2025 11:01:00 +0000 Manifest this update: Sat 26 Apr 2025 11:01:00 +0000 Manifest next update: Sun 27 Apr 2025 11:01:00 +0000 Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: 9mrv3Ck8nTbVt6dSw59EE0OxMeFhsvd43wGgC2/mfd0=) 2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=) 3: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=) 4: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=) 5: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=) 6: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=) 7: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=) 8: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=) 9: ek7JCPCS41NeXK6-BL1kWJMswuo.roa (hash: rhIkMhLc1Llh35BWqPoGtUcJlgy1f4TdKGKjnLruEnc=) 10: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=) 11: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=) 12: l2sQI2kIfw7Qk5M-1_S91gHcxwg.roa (hash: ChOC3F775GRHKD1BnL2UZEcRcy5R5qW/aHDpTQ0+OAg=) 13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=) 14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c1:fb:dd:aa:a9:e4:4f:3e:23:a4:b2:ef:51:6b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Apr 26 11:01:00 2025 GMT Not After : Apr 27 11:01:00 2025 GMT Subject: CN=3a6fcada72f4c202db0359a98f35510fa9ca1e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:66:3c:6a:be:16:cd:ab:31:cb:6b:ac:7e: 59:48:33:2d:be:34:0a:38:6f:41:7d:7b:4b:2f:d5: ce:13:50:23:c4:5e:98:fb:92:c1:56:c9:cc:30:10: c1:40:59:e0:a8:38:6e:4b:91:b5:57:c9:df:19:e4: de:7b:22:13:60:7e:f3:39:1b:1c:6c:c1:95:bd:b7: 4a:56:db:35:77:9f:39:31:8f:93:eb:85:dc:f8:b0: b6:ef:64:a6:c9:c2:98:63:6d:e0:a9:6f:1f:9b:6e: e6:04:53:b6:35:ef:74:0c:54:f4:6e:f0:7b:46:3f: d7:a9:0e:89:3b:8c:15:ba:e7:f3:53:12:ff:e3:5d: f3:e0:28:71:33:fd:ce:cc:fa:12:5d:00:6e:3f:d7: c7:f7:fc:1d:08:44:d9:f1:41:4e:22:ab:64:43:74: b0:22:8f:42:22:73:59:6e:6b:76:a0:ab:9c:0a:de: 3d:73:f2:67:0c:51:51:a9:94:ed:28:59:df:66:d1: 4e:00:83:4a:fe:b3:7e:ce:e2:65:a4:37:81:da:2d: 00:02:11:67:a2:19:f9:04:14:3f:d5:23:f9:72:cd: c0:92:f6:f8:ab:02:ae:46:e4:9e:5e:8d:00:42:2f: 7f:21:3b:36:75:93:67:68:6a:ca:1b:8e:a3:ec:e0: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:CA:DA:72:F4:C2:02:DB:03:59:A9:8F:35:51:0F:A9:CA:1E:8E X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:73:2f:be:e1:cc:e8:b0:ed:61:27:30:40:81:e5:db:fe:dc: 5f:87:94:df:85:2f:55:7f:18:e4:8e:32:2a:b1:bb:7f:47:c1: d0:73:c6:61:3c:a6:8e:7d:80:dd:29:ba:a6:5b:86:b7:fa:6a: f7:fb:72:cd:b0:16:bb:c1:93:d8:f9:49:07:9b:53:5f:76:99: 74:71:f5:f5:b5:55:0f:0d:27:fc:24:76:6f:d4:eb:16:b9:6a: fb:ea:a1:97:9d:b2:d2:d0:40:48:c4:c1:41:83:24:40:39:78: d6:0f:5a:a4:9b:fe:28:41:e5:9e:48:d2:14:ef:ec:0f:08:65: fa:47:6b:ee:e1:49:4c:dd:d5:24:6e:eb:10:be:91:04:30:a4: eb:4b:35:79:34:e3:48:17:01:c1:17:1d:f0:f2:50:56:cb:06: c2:e9:4f:18:95:76:20:2e:84:9c:bf:36:e1:54:95:ca:98:be: bf:89:dd:53:b2:cc:c9:2d:8f:78:ee:b9:82:16:7a:87:23:a5: 14:59:53:3f:59:ab:9c:f7:bb:48:16:da:95:0c:2d:8a:8b:7d: 97:3c:ca:be:fd:b5:fd:9e:c4:00:c2:6e:10:ea:d4:bd:15:ed: c8:2d:a9:47:29:1d:31:d5:60:de:06:22:db:b9:e8:2a:7c:28: e7:5f:cd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwfvdqqnkTz4jpLLvUWt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjUwNDI2MTEwMTAwWhcNMjUwNDI3MTEwMTAwWjAzMTEwLwYDVQQD EygzYTZmY2FkYTcyZjRjMjAyZGIwMzU5YTk4ZjM1NTEwZmE5Y2ExZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf5mPGq+Fs2rMctrrH5ZSDMtvjQK OG9BfXtLL9XOE1AjxF6Y+5LBVsnMMBDBQFngqDhuS5G1V8nfGeTeeyITYH7zORsc bMGVvbdKVts1d585MY+T64Xc+LC272SmycKYY23gqW8fm27mBFO2Ne90DFT0bvB7 Rj/XqQ6JO4wVuufzUxL/413z4ChxM/3OzPoSXQBuP9fH9/wdCETZ8UFOIqtkQ3Sw Io9CInNZbmt2oKucCt49c/JnDFFRqZTtKFnfZtFOAINK/rN+zuJlpDeB2i0AAhFn ohn5BBQ/1SP5cs3Akvb4qwKuRuSeXo0AQi9/ITs2dZNnaGrKG46j7OAEcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpvytpy9MIC2wNZqY81UQ+pyh6OMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHMvvuHM 6LDtYScwQIHl2/7cX4eU34UvVX8Y5I4yKrG7f0fB0HPGYTymjn2A3Sm6pluGt/pq 9/tyzbAWu8GT2PlJB5tTX3aZdHH19bVVDw0n/CR2b9TrFrlq++qhl52y0tBASMTB QYMkQDl41g9apJv+KEHlnkjSFO/sDwhl+kdr7uFJTN3VJG7rEL6RBDCk60s1eTTj SBcBwRcd8PJQVssGwulPGJV2IC6EnL824VSVypi+v4ndU7LMyS2PeO65ghZ6hyOl FFlTP1mrnPe7SBbalQwtiot9lzzKvv21/Z7EAMJuEOrUvRXtyC2pRykdMdVg3gYi 27noKnwo51/N/Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:50:32 2025 by rpki-client