$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: B2cr6k9+h/YZmiIOrZIHCKnOhIPZa49raW/FQJp8j7k= Subject key identifier: 6A:AF:CC:D1:12:6A:24:A2:93:75:13:38:ED:CC:29:85:FD:93:82:BE Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019875D01E0EF4E96FCF4E8CC07D9DDDC61D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 162B Signing time: Mon 04 Aug 2025 16:00:30 +0000 Manifest this update: Mon 04 Aug 2025 16:00:30 +0000 Manifest next update: Tue 05 Aug 2025 16:00:30 +0000 Files and hashes: 1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=) 2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=) 3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=) 4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=) 5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=) 6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=) 7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=) 8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=) 9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=) 10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=) 11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=) 12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=) 13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: SZvsfhXRnFS1zK9QHdmVozDo8M66aXF2/DjrY3flOI4=) 14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=) 15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=) 16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=) 17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=) 18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=) 19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=) 20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=) 21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:d0:1e:0e:f4:e9:6f:cf:4e:8c:c0:7d:9d:dd:c6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Aug 4 16:00:30 2025 GMT Not After : Aug 5 16:00:30 2025 GMT Subject: CN=6aafccd1126a24a293751338edcc2985fd9382be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:7a:e0:26:a2:e9:f9:fc:96:93:48:7d:df: 44:e0:3a:c9:92:51:9f:a7:25:72:35:ff:91:23:11: 25:6d:05:3d:4b:b2:91:ae:8c:4d:f4:7a:df:99:cb: 57:82:04:c3:de:ca:0f:ee:e8:e0:5f:3a:fc:69:24: 08:ac:6e:04:f6:47:b2:83:7c:83:3b:77:16:a3:87: 9d:42:36:b1:b9:c6:16:6a:15:4f:43:e2:29:a5:f0: c6:85:ca:be:9e:5a:63:f5:63:1e:36:e5:4d:fb:e8: 60:66:b4:b2:0e:ee:2e:87:00:28:f6:7a:18:5f:3e: 92:31:a4:d2:0b:c9:1f:37:30:67:9f:96:ee:84:68: 11:7b:9e:e2:9e:8d:c5:8e:63:8c:09:bf:b6:d4:83: 66:95:6c:d8:bf:68:d5:a9:6e:2b:db:d0:28:ca:f0: d6:32:c4:3c:20:cb:53:4f:64:e7:52:ef:f0:b5:c8: 88:b6:c0:02:7a:97:1f:15:f2:3f:b6:20:8d:a6:30: 72:7d:e7:7f:cb:43:9e:a8:65:13:3f:88:67:08:19: 69:17:93:6f:9b:12:29:6e:10:5c:a1:b8:d9:04:72: e7:5d:ab:cb:b5:66:b4:3d:24:cd:43:50:f3:6f:1d: ef:55:51:e6:74:ec:20:94:de:0a:92:09:0c:26:f6: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AF:CC:D1:12:6A:24:A2:93:75:13:38:ED:CC:29:85:FD:93:82:BE X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:be:a5:08:61:7f:e8:ed:6f:77:dd:d7:e8:aa:de:79:6a:fb: 35:6b:a2:b0:86:f2:33:6d:2c:d6:57:04:ea:82:7f:fb:2f:df: f0:35:e6:d5:49:5b:32:40:9d:b3:34:ab:ef:0a:b1:38:4a:60: 3b:7d:ea:df:78:d2:17:a4:0b:ce:60:d2:54:1a:02:77:ae:22: fc:de:3e:2c:92:a3:b9:68:3c:e1:40:59:ac:e1:e0:17:5c:a4: b6:78:d2:e9:f4:e0:20:a8:56:b9:d9:bf:ae:9f:5b:55:a7:ad: 9b:8d:15:a8:d7:7a:17:79:79:b9:05:5d:2e:76:0d:3b:1b:3d: 92:28:36:b0:12:9b:13:06:9a:11:fc:55:7e:59:6f:59:fb:d9: 76:ee:31:c1:f2:bc:d3:35:66:76:e0:b8:2f:d1:16:e0:6c:40: 87:d1:7d:d3:66:bd:f7:9f:5c:61:04:4f:c3:b8:4f:62:e0:6b: 65:c3:96:de:30:e0:4d:39:35:60:ed:7b:d8:2d:c8:f5:00:d5: cf:86:26:d9:95:56:33:81:83:8e:36:e3:56:b8:53:6d:f7:d9: 46:db:3e:8b:3c:a2:fd:df:34:50:d0:7a:9f:0f:80:3a:59:fc: c2:51:c5:e6:e2:14:25:70:ce:d5:5a:13:e4:05:a0:ae:9e:6b: eb:9e:1a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh10B4O9Olvz06MwH2d3cYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUwODA0MTYwMDMwWhcNMjUwODA1MTYwMDMwWjAzMTEwLwYDVQQD Eyg2YWFmY2NkMTEyNmEyNGEyOTM3NTEzMzhlZGNjMjk4NWZkOTM4MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFN64Cai6fn8lpNIfd9E4DrJklGf pyVyNf+RIxElbQU9S7KRroxN9HrfmctXggTD3soP7ujgXzr8aSQIrG4E9keyg3yD O3cWo4edQjaxucYWahVPQ+IppfDGhcq+nlpj9WMeNuVN++hgZrSyDu4uhwAo9noY Xz6SMaTSC8kfNzBnn5buhGgRe57ino3FjmOMCb+21INmlWzYv2jVqW4r29AoyvDW MsQ8IMtTT2TnUu/wtciItsACepcfFfI/tiCNpjByfed/y0OeqGUTP4hnCBlpF5Nv mxIpbhBcobjZBHLnXavLtWa0PSTNQ1Dzbx3vVVHmdOwglN4KkgkMJvYzQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqvzNESaiSik3UTOO3MKYX9k4K+MB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA376lCGF/ 6O1vd93X6KreeWr7NWuisIbyM20s1lcE6oJ/+y/f8DXm1UlbMkCdszSr7wqxOEpg O33q33jSF6QLzmDSVBoCd64i/N4+LJKjuWg84UBZrOHgF1yktnjS6fTgIKhWudm/ rp9bVaetm40VqNd6F3l5uQVdLnYNOxs9kig2sBKbEwaaEfxVfllvWfvZdu4xwfK8 0zVmduC4L9EW4GxAh9F902a9959cYQRPw7hPYuBrZcOW3jDgTTk1YO172C3I9QDV z4Ym2ZVWM4GDjjbjVrhTbffZRts+izyi/d80UNB6nw+AOln8wlHF5uIUJXDO1VoT 5AWgrp5r654aqQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:19 2025 by rpki-client