$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: 03T8KtVdJxEYRn2dhggEyIevAsnDB/M1YactwfYCGEY= Subject key identifier: EB:FD:4E:51:43:20:73:D9:DE:0D:39:A3:C1:2C:DB:EE:1B:69:EF:4E Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 01976C61B637530DC65588A98EFF01E0891D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 15BF Signing time: Sat 14 Jun 2025 03:00:32 +0000 Manifest this update: Sat 14 Jun 2025 03:00:32 +0000 Manifest next update: Sun 15 Jun 2025 03:00:32 +0000 Files and hashes: 1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=) 2: DMu0CRg6kU40ulv6UeUceUeLmAg.roa (hash: G0oKxDjCVkHsKYcHUkTYYLJl4+Ed9cBLda+tBTwobuI=) 3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=) 4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=) 5: MoOd3UbtCS1jCqfk4Eq1ESLwwHA.roa (hash: IUTY6Kac0RWR6KocRHT3FV3q0t8rT1+uiwnGYkc7UDc=) 6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=) 7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=) 8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=) 9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=) 10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: xQcWdiUprgDKgFJZC/FkCe5KQJbQs5wyf0yTU1gYMp4=) 11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=) 12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=) 13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=) 14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=) 15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=) 16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=) 17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:61:b6:37:53:0d:c6:55:88:a9:8e:ff:01:e0:89:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jun 14 03:00:32 2025 GMT Not After : Jun 15 03:00:32 2025 GMT Subject: CN=ebfd4e51432073d9de0d39a3c12cdbee1b69ef4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:e7:f2:11:43:93:5e:f9:59:bb:37:94:f1: 84:57:bc:19:3d:35:bf:d2:df:1f:36:1c:3b:52:7e: ef:f4:c0:81:e2:2f:3f:0f:2a:3b:d4:4c:7c:db:ad: 2b:4f:dc:7d:1f:53:47:95:51:ee:ec:f9:58:9f:19: 5e:8a:3f:f5:e9:98:fc:8b:5a:aa:88:d5:6a:c4:a5: f1:63:83:2c:90:25:b8:28:21:60:7e:dd:e1:a4:56: 59:3b:70:63:b0:ab:f9:7f:76:a9:4b:91:fa:6b:02: 3f:6d:c2:09:ee:ee:3c:1c:b9:ad:75:df:8d:ff:f6: af:01:8e:16:7e:aa:43:63:34:a4:05:90:1e:43:e7: 57:4e:be:e4:a3:bd:b5:05:43:3c:50:16:07:8b:39: 56:5b:78:f2:d0:2f:49:c1:53:8f:db:24:30:e1:3f: 96:21:b1:0a:ab:ba:1e:d2:d1:74:5b:23:b5:34:d3: 7c:17:49:1c:35:5b:f7:d2:ed:0f:ed:86:b8:2c:a1: c5:85:09:d1:0a:72:d1:1c:df:09:e7:f6:db:a2:90: c9:83:f4:56:5d:65:b2:68:de:b7:0e:67:44:01:72: 98:e0:59:b3:fa:c9:14:d0:d8:20:48:f1:ad:f0:d6: df:13:bb:c1:31:a2:af:a3:c9:7a:99:b8:e4:cd:1b: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FD:4E:51:43:20:73:D9:DE:0D:39:A3:C1:2C:DB:EE:1B:69:EF:4E X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:68:52:2a:80:ff:ff:d0:6a:b0:9a:11:8e:c5:e8:d3:a2:18: 65:d0:b1:81:80:0d:a6:49:aa:91:8d:67:5a:8f:72:49:1e:ec: b3:10:66:18:17:45:aa:7f:47:15:e7:9d:5e:90:ba:3c:15:5f: 61:4e:3b:fe:6c:d9:5f:95:71:14:0c:df:12:fc:13:49:99:87: c5:5e:55:5c:c9:18:eb:fa:0a:39:cf:61:b2:82:93:04:28:bc: 2d:f9:b9:fd:54:36:0f:46:6b:8a:38:aa:38:ba:1e:39:ce:df: f8:66:bf:ba:39:9a:25:69:d7:02:a1:87:4f:c5:f1:4f:54:3e: ec:6a:4e:f0:ca:50:e1:40:1b:6a:19:60:3e:a2:20:43:38:d6: f6:b7:dc:19:5f:6d:b4:9d:13:ae:96:7b:15:78:d5:53:c9:20: 31:44:0d:f0:9a:0a:a1:17:94:ed:58:a4:73:cd:1f:29:aa:03: fa:03:f5:fa:c7:5f:d8:cd:1b:45:01:af:a3:46:bb:1b:c6:6a: 38:c8:e2:3e:f8:89:7f:03:55:4d:f9:e2:cb:24:78:3a:d3:ee: e5:27:14:fa:cf:e7:f7:7a:01:ae:85:f1:3a:00:04:c2:d5:84: be:d8:47:bb:b1:ef:e7:e5:1f:09:fe:f9:ef:82:49:7d:e7:42: bb:33:5e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsYbY3Uw3GVYipjv8B4IkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjUwNjE0MDMwMDMyWhcNMjUwNjE1MDMwMDMyWjAzMTEwLwYDVQQD EyhlYmZkNGU1MTQzMjA3M2Q5ZGUwZDM5YTNjMTJjZGJlZTFiNjllZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dTn8hFDk175Wbs3lPGEV7wZPTW/ 0t8fNhw7Un7v9MCB4i8/Dyo71Ex8260rT9x9H1NHlVHu7PlYnxleij/16Zj8i1qq iNVqxKXxY4MskCW4KCFgft3hpFZZO3BjsKv5f3apS5H6awI/bcIJ7u48HLmtdd+N //avAY4WfqpDYzSkBZAeQ+dXTr7ko721BUM8UBYHizlWW3jy0C9JwVOP2yQw4T+W IbEKq7oe0tF0WyO1NNN8F0kcNVv30u0P7Ya4LKHFhQnRCnLRHN8J5/bbopDJg/RW XWWyaN63DmdEAXKY4Fmz+skU0NggSPGt8NbfE7vBMaKvo8l6mbjkzRuw+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv9TlFDIHPZ3g05o8Es2+4bae9OMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWhSKoD/ /9BqsJoRjsXo06IYZdCxgYANpkmqkY1nWo9ySR7ssxBmGBdFqn9HFeedXpC6PBVf YU47/mzZX5VxFAzfEvwTSZmHxV5VXMkY6/oKOc9hsoKTBCi8Lfm5/VQ2D0Zrijiq OLoeOc7f+Ga/ujmaJWnXAqGHT8XxT1Q+7GpO8MpQ4UAbahlgPqIgQzjW9rfcGV9t tJ0TrpZ7FXjVU8kgMUQN8JoKoReU7Vikc80fKaoD+gP1+sdf2M0bRQGvo0a7G8Zq OMjiPviJfwNVTfniyyR4OtPu5ScU+s/n93oBroXxOgAEwtWEvthHu7Hv5+UfCf75 74JJfedCuzNeew== -----END CERTIFICATE-----Generated at Sat Jun 14 12:07:51 2025 by rpki-client