$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: Jb6Sw8iuxrg2YfVLyWHCac32n7f/zSoNu5564QSxgik= Subject key identifier: C8:94:AB:1A:9B:A3:8D:E6:76:A1:69:16:42:2D:ED:DC:CC:7B:6E:01 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 01976D3E69DFF82DC183E8A6FBB48F29F707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 15A2 Signing time: Sat 14 Jun 2025 07:01:36 +0000 Manifest this update: Sat 14 Jun 2025 07:01:36 +0000 Manifest next update: Sun 15 Jun 2025 07:01:36 +0000 Files and hashes: 1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=) 2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=) 3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=) 4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=) 5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=) 6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=) 7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=) 8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=) 9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=) 10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=) 11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=) 12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=) 13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: j2IPKcM6DIfIl3TPXOd74JrgXsqH8JM3Hphw+5gBQK4=) 14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=) 15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=) 16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=) 17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=) 18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=) 19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=) 20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=) 21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:3e:69:df:f8:2d:c1:83:e8:a6:fb:b4:8f:29:f7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jun 14 07:01:36 2025 GMT Not After : Jun 15 07:01:36 2025 GMT Subject: CN=c894ab1a9ba38de676a16916422deddccc7b6e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b5:45:f0:80:28:02:e6:0d:07:45:81:3a:49: f0:21:fc:6b:87:34:5c:3a:72:21:82:71:a2:f8:8a: 9f:0d:ea:5c:a2:7f:82:d5:66:0d:1d:b3:3d:c2:6b: 39:79:c8:87:5d:07:76:35:fb:0e:d9:c7:fe:b7:e7: a4:be:ed:37:a7:99:fd:6e:6e:86:70:a0:e2:00:7b: 15:d5:54:ab:d0:81:e3:a8:ec:66:c6:88:66:bd:06: b2:42:e2:5a:dd:f0:3e:f5:e3:9e:61:e3:f5:05:c0: 36:75:10:0e:8d:df:08:5a:47:08:6e:fb:5a:6c:51: 52:09:89:0a:28:21:1c:93:e4:30:e6:14:85:d9:c4: 7a:63:a4:69:eb:30:07:92:b5:97:fa:69:f1:9b:74: a7:ea:b8:11:26:50:81:5e:31:13:ee:73:58:39:52: b0:33:b6:03:0c:0f:eb:c8:1c:4f:55:85:95:15:f7: cb:1f:a9:74:1a:90:9a:a7:ee:ed:8a:a6:8a:31:3c: 2d:56:21:d8:2a:d9:be:d0:33:43:a7:26:02:a1:ae: d9:58:2d:7e:e3:fa:39:59:b5:95:63:a0:b9:f5:ed: f7:23:dc:e1:93:a5:32:89:c9:9d:12:1b:fc:01:39: 0c:c9:4a:4e:38:ad:98:eb:06:97:a7:ff:b3:5f:c9: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:94:AB:1A:9B:A3:8D:E6:76:A1:69:16:42:2D:ED:DC:CC:7B:6E:01 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:0f:fb:ba:64:a5:44:38:37:2b:6d:3c:59:20:9a:01:73:7c: 4c:c1:69:12:16:9d:01:7f:0f:e7:51:98:44:a0:c6:0c:c8:05: 5d:9d:b9:3f:11:6f:85:34:2a:88:65:78:a1:2d:00:c0:d4:f5: c2:aa:4c:6a:11:9d:d3:60:cb:73:54:f7:c3:a0:08:11:e2:95: a0:20:87:ac:ca:0b:b3:6c:04:fb:da:e7:d5:71:0a:91:b5:1a: ad:f6:a7:e9:af:07:3b:65:a8:e5:7b:43:fd:94:7e:b0:f5:60: 93:46:f5:4d:f0:b5:17:10:6e:5f:2a:c3:84:bf:0b:90:0c:59: 4a:6d:83:fd:8b:5b:b5:7d:75:5e:66:58:31:fb:53:42:a0:c9: 1d:f4:4a:9d:2a:ba:0a:6e:67:52:06:54:34:78:9b:8c:4a:e0: 2d:1c:6b:bf:e9:0a:97:55:a9:09:bb:55:cc:5c:9e:cc:2a:ec: f8:7d:70:4f:9e:ea:58:94:15:2f:b4:b3:13:d8:27:c7:77:d3: 17:77:50:d7:c7:4a:31:f9:56:f5:e2:bf:fe:e5:bd:a6:85:4e: a9:8c:c4:23:58:3a:58:87:9b:d8:bb:99:a5:b8:05:a8:1d:de: ca:54:6c:aa:c9:c4:33:00:d9:0c:93:0a:3a:ba:d0:da:e6:82: c2:76:2d:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtPmnf+C3Bg+im+7SPKfcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUwNjE0MDcwMTM2WhcNMjUwNjE1MDcwMTM2WjAzMTEwLwYDVQQD EyhjODk0YWIxYTliYTM4ZGU2NzZhMTY5MTY0MjJkZWRkY2NjN2I2ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bVF8IAoAuYNB0WBOknwIfxrhzRc OnIhgnGi+IqfDepcon+C1WYNHbM9wms5eciHXQd2NfsO2cf+t+ekvu03p5n9bm6G cKDiAHsV1VSr0IHjqOxmxohmvQayQuJa3fA+9eOeYeP1BcA2dRAOjd8IWkcIbvta bFFSCYkKKCEck+Qw5hSF2cR6Y6Rp6zAHkrWX+mnxm3Sn6rgRJlCBXjET7nNYOVKw M7YDDA/ryBxPVYWVFffLH6l0GpCap+7tiqaKMTwtViHYKtm+0DNDpyYCoa7ZWC1+ 4/o5WbWVY6C59e33I9zhk6UyicmdEhv8ATkMyUpOOK2Y6waXp/+zX8mnQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiUqxqbo43mdqFpFkIt7dzMe24BMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3A/7umSl RDg3K208WSCaAXN8TMFpEhadAX8P51GYRKDGDMgFXZ25PxFvhTQqiGV4oS0AwNT1 wqpMahGd02DLc1T3w6AIEeKVoCCHrMoLs2wE+9rn1XEKkbUarfan6a8HO2Wo5XtD /ZR+sPVgk0b1TfC1FxBuXyrDhL8LkAxZSm2D/YtbtX11XmZYMftTQqDJHfRKnSq6 Cm5nUgZUNHibjErgLRxrv+kKl1WpCbtVzFyezCrs+H1wT57qWJQVL7SzE9gnx3fT F3dQ18dKMflW9eK//uW9poVOqYzEI1g6WIeb2LuZpbgFqB3eylRsqsnEMwDZDJMK OrrQ2uaCwnYtig== -----END CERTIFICATE-----Generated at Sat Jun 14 11:18:11 2025 by rpki-client