$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: B8SqmeNlQ4udK2tjEpVRGV8b3WL/JP/1J7idpN7RkOk= Subject key identifier: 10:F8:CA:47:B5:C9:4F:4E:DE:3B:2D:0D:A3:A1:E7:21:1B:52:42:58 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019770AC36C9F34EA5897B7915581513DF97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 15A3 Signing time: Sat 14 Jun 2025 23:00:23 +0000 Manifest this update: Sat 14 Jun 2025 23:00:23 +0000 Manifest next update: Sun 15 Jun 2025 23:00:23 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: 57saHwwtMFtKDHtko2YaGKrGjJo.roa (hash: tuKl3wIrDMzULngL+WH+D2haKacyphB+9VZ5+FTHHpM=) 3: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 4: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 5: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: N4oCc/rE040i33xu5WRHu1st2IOPlia5TAqjhqM/y/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:70:ac:36:c9:f3:4e:a5:89:7b:79:15:58:15:13:df:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jun 14 23:00:23 2025 GMT Not After : Jun 15 23:00:23 2025 GMT Subject: CN=10f8ca47b5c94f4ede3b2d0da3a1e7211b524258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:74:a7:82:50:55:17:32:a1:80:1a:5c:20: 8f:69:34:d3:76:b9:8d:8f:ee:35:d8:4b:d7:e7:ef: d5:d7:f3:c5:91:c1:67:cb:b0:2e:38:9c:16:d7:94: 36:81:a8:76:67:7c:3d:f5:0a:26:fd:90:e0:5e:24: 5a:fd:1a:43:24:24:56:15:8f:d9:1e:26:34:7a:22: 0f:f9:47:33:8c:41:13:43:04:5c:35:7f:1d:a9:da: 6f:50:14:0a:90:d6:f8:98:71:fc:7a:5b:10:f7:1e: 2e:7d:26:e7:63:d1:80:96:27:13:0b:f6:3c:a6:01: 1f:58:8f:3a:ab:6c:da:9e:0b:0c:b3:63:83:f9:9f: 2b:95:44:71:8a:ee:59:09:2b:00:6d:c6:10:43:a4: e9:09:99:33:97:26:39:b5:87:6a:02:1a:5b:78:2d: 0e:6d:71:3c:1a:40:87:3c:87:bc:f7:d5:d7:b5:07: 8a:4c:03:af:16:21:37:e2:1c:0e:c6:12:c2:51:6e: 46:a7:09:d9:b0:06:04:e2:af:04:cd:a8:90:70:90: fe:4f:31:c3:32:3c:49:94:6f:23:ab:2f:a6:9d:28: 77:a3:cf:8a:3e:be:9a:89:29:1a:d3:10:87:de:ea: 0e:5c:41:cf:05:92:88:0b:d2:63:2d:5f:a6:6a:9f: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:CA:47:B5:C9:4F:4E:DE:3B:2D:0D:A3:A1:E7:21:1B:52:42:58 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e0:fd:56:73:f2:23:af:88:b3:c0:69:7b:27:1c:99:ac:1e: 34:fc:70:f3:48:ed:64:35:b2:1b:54:52:2d:68:00:e7:9b:15: ee:82:c9:5c:7a:a2:4d:4c:68:ab:49:34:3e:c6:d9:38:e3:e6: 39:4d:48:b1:5e:a8:66:1e:9c:e5:b1:93:a0:63:64:23:50:01: 62:c5:1e:76:13:b9:fb:1a:c9:ff:27:c1:0e:31:c6:a6:3c:68: 92:19:6b:e3:d6:3f:fe:24:ea:ee:04:88:43:e0:f2:5e:1b:02: 7b:cb:4b:2e:7f:44:18:d7:dd:c1:21:5d:bf:c4:13:d1:de:05: 92:bc:59:cf:55:2a:ea:6d:21:9d:e1:28:13:75:b9:c9:8f:5f: ad:c8:cd:df:cb:96:2f:07:41:b1:bc:8c:61:cd:60:66:74:a4: a6:02:91:5a:5c:5b:45:29:09:db:17:47:38:8b:51:8b:93:47: b7:d2:9a:d0:0b:0c:e3:d9:37:88:6f:4d:53:be:ff:9c:13:63: 96:a4:27:bb:53:c8:e4:cd:27:be:a4:55:0d:38:4b:31:81:7b: 81:cf:20:9e:d9:f6:7c:43:13:71:b6:e5:54:fc:fc:af:b7:40: 79:fc:36:3f:40:2e:26:91:8d:02:73:0a:ac:e5:e9:12:3f:53: 63:b3:3a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdwrDbJ806liXt5FVgVE9+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUwNjE0MjMwMDIzWhcNMjUwNjE1MjMwMDIzWjAzMTEwLwYDVQQD EygxMGY4Y2E0N2I1Yzk0ZjRlZGUzYjJkMGRhM2ExZTcyMTFiNTI0MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ90p4JQVRcyoYAaXCCPaTTTdrmN j+412EvX5+/V1/PFkcFny7AuOJwW15Q2gah2Z3w99Qom/ZDgXiRa/RpDJCRWFY/Z HiY0eiIP+UczjEETQwRcNX8dqdpvUBQKkNb4mHH8elsQ9x4ufSbnY9GAlicTC/Y8 pgEfWI86q2zangsMs2OD+Z8rlURxiu5ZCSsAbcYQQ6TpCZkzlyY5tYdqAhpbeC0O bXE8GkCHPIe899XXtQeKTAOvFiE34hwOxhLCUW5GpwnZsAYE4q8EzaiQcJD+TzHD MjxJlG8jqy+mnSh3o8+KPr6aiSka0xCH3uoOXEHPBZKIC9JjLV+map8XPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD4yke1yU9O3jstDaOh5yEbUkJYMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOD9VnPy I6+Is8BpeyccmaweNPxw80jtZDWyG1RSLWgA55sV7oLJXHqiTUxoq0k0PsbZOOPm OU1IsV6oZh6c5bGToGNkI1ABYsUedhO5+xrJ/yfBDjHGpjxokhlr49Y//iTq7gSI Q+DyXhsCe8tLLn9EGNfdwSFdv8QT0d4FkrxZz1Uq6m0hneEoE3W5yY9frcjN38uW LwdBsbyMYc1gZnSkpgKRWlxbRSkJ2xdHOItRi5NHt9Ka0AsM49k3iG9NU77/nBNj lqQnu1PI5M0nvqRVDThLMYF7gc8gntn2fEMTcbblVPz8r7dAefw2P0AuJpGNAnMK rOXpEj9TY7M6iQ== -----END CERTIFICATE-----Generated at Sun Jun 15 03:55:16 2025 by rpki-client