$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: /Fm8bFTHquFuKOUR9+fj+N1cJ52SZKDxylOUKb3DJi8= Subject key identifier: 74:D7:E9:39:FE:28:A0:7E:0B:DE:D8:4C:30:F5:DA:C7:D4:A7:5A:61 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019781A033DA141167C4EC29D23F538B82BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 15A3 Signing time: Wed 18 Jun 2025 06:00:49 +0000 Manifest this update: Wed 18 Jun 2025 06:00:49 +0000 Manifest next update: Thu 19 Jun 2025 06:00:49 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 9: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 10: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: Wj5mQ+A5h2VuikoDjXchJ3lZkdpqjq5QvyUzbkUfS0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:81:a0:33:da:14:11:67:c4:ec:29:d2:3f:53:8b:82:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jun 18 06:00:49 2025 GMT Not After : Jun 19 06:00:49 2025 GMT Subject: CN=74d7e939fe28a07e0bded84c30f5dac7d4a75a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:59:a1:11:8f:06:e7:ec:a0:d9:2d:a9:33: e2:f7:6e:ca:fb:09:b4:7b:f6:96:05:f1:58:26:0d: d9:9e:d3:ec:35:93:38:40:a0:6a:04:45:d8:62:e6: ee:3c:3b:56:76:36:8e:3c:df:ff:5c:7b:b0:5e:ba: 24:07:11:a3:28:48:7d:26:0a:b4:6e:c3:44:ca:4d: 32:64:3b:a5:ba:d6:d9:e0:f3:69:f1:15:22:40:c6: 4b:a7:ea:02:08:f6:50:43:ed:31:33:93:cf:ec:e4: b4:aa:1b:f1:85:68:ba:28:76:2f:e4:0e:45:3b:8a: cd:46:0a:6e:14:d5:56:2c:bf:56:0d:fc:d0:e8:20: f0:61:77:d3:3d:07:44:82:88:9c:04:9f:5b:42:03: ea:d9:da:7e:6f:04:74:69:b2:24:85:83:26:e5:e9: f6:21:6c:7b:b1:b9:9c:c2:25:63:83:72:77:7c:13: 67:87:96:33:a4:9c:0f:71:b3:cc:9f:37:7a:64:2a: 77:9a:32:a7:0a:58:30:b2:e4:c3:b7:57:90:99:2a: ad:4e:50:1f:03:e8:0a:20:b1:a6:53:89:0a:40:4c: 23:e2:9a:2c:31:f8:d9:21:9b:b0:e5:43:29:02:7c: 30:4c:1b:60:03:e4:a1:b5:7b:24:84:f8:7b:bb:0a: 16:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D7:E9:39:FE:28:A0:7E:0B:DE:D8:4C:30:F5:DA:C7:D4:A7:5A:61 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:25:48:75:c7:80:13:91:80:7b:7b:c4:77:0b:74:a8:43:ab: b7:2d:fa:f7:26:7b:16:69:1d:ad:33:f9:45:c3:9a:54:db:12: 93:af:c2:64:8a:76:99:0f:25:64:63:f7:d2:c6:e6:ba:dc:0b: 2c:9e:39:19:cf:00:3e:3c:11:52:3d:84:3c:7e:20:98:a6:16: 97:ab:cc:b2:c5:7a:40:61:1e:e4:d7:00:72:c6:70:80:80:f8: d3:6f:d9:dc:8a:1f:b7:08:0e:bb:2f:59:56:7a:24:9d:2d:2c: 23:e0:1d:89:fe:3b:8f:a8:ab:19:91:9d:fe:7c:a7:26:a6:27: 1d:53:1c:85:e3:a0:1a:49:0e:98:af:be:59:bf:27:dd:9c:fc: 62:5d:26:a4:48:a0:63:89:80:e4:9e:2c:ca:fb:d2:f1:7e:5d: 47:2e:5d:23:1e:c7:15:ae:77:0a:09:f8:4f:b4:4e:5b:4b:d5: a6:5a:20:05:4f:48:cb:61:23:f8:6c:52:e2:38:2c:c8:45:09: a5:e7:09:30:49:ab:41:ba:9d:70:83:a4:98:69:75:7f:6c:22: e1:0b:60:3e:c6:97:b4:23:2a:1d:a4:8a:f8:5d:b8:fa:13:5e: c6:1e:9e:31:69:65:60:b3:40:86:8c:76:86:8a:ae:41:f8:cc: cc:0c:35:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeBoDPaFBFnxOwp0j9Ti4K/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwNjE4MDYwMDQ5WhcNMjUwNjE5MDYwMDQ5WjAzMTEwLwYDVQQD Eyg3NGQ3ZTkzOWZlMjhhMDdlMGJkZWQ4NGMzMGY1ZGFjN2Q0YTc1YTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsndZoRGPBufsoNktqTPi927K+wm0 e/aWBfFYJg3ZntPsNZM4QKBqBEXYYubuPDtWdjaOPN//XHuwXrokBxGjKEh9Jgq0 bsNEyk0yZDulutbZ4PNp8RUiQMZLp+oCCPZQQ+0xM5PP7OS0qhvxhWi6KHYv5A5F O4rNRgpuFNVWLL9WDfzQ6CDwYXfTPQdEgoicBJ9bQgPq2dp+bwR0abIkhYMm5en2 IWx7sbmcwiVjg3J3fBNnh5YzpJwPcbPMnzd6ZCp3mjKnClgwsuTDt1eQmSqtTlAf A+gKILGmU4kKQEwj4posMfjZIZuw5UMpAnwwTBtgA+ShtXskhPh7uwoW5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTX6Tn+KKB+C97YTDD12sfUp1phMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyVIdceA E5GAe3vEdwt0qEOrty369yZ7FmkdrTP5RcOaVNsSk6/CZIp2mQ8lZGP30sbmutwL LJ45Gc8APjwRUj2EPH4gmKYWl6vMssV6QGEe5NcAcsZwgID402/Z3IoftwgOuy9Z VnoknS0sI+Adif47j6irGZGd/nynJqYnHVMcheOgGkkOmK++Wb8n3Zz8Yl0mpEig Y4mA5J4syvvS8X5dRy5dIx7HFa53Cgn4T7ROW0vVplogBU9Iy2Ej+GxS4jgsyEUJ pecJMEmrQbqdcIOkmGl1f2wi4QtgPsaXtCMqHaSK+F24+hNexh6eMWllYLNAhox2 hoquQfjMzAw1uA== -----END CERTIFICATE-----Generated at Wed Jun 18 13:20:22 2025 by rpki-client