$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: R0eVhmSUBXokrpVLoSnE/bp05mneT5H9WWRXVM7lUcg= Subject key identifier: 80:AE:BE:E2:8C:C1:58:94:2B:B3:7B:13:BA:CF:B3:B3:8D:5A:7D:A8 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019768BC00133E927AB2D65495A09018DACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 14C8 Signing time: Fri 13 Jun 2025 10:00:40 +0000 Manifest this update: Fri 13 Jun 2025 10:00:40 +0000 Manifest next update: Sat 14 Jun 2025 10:00:40 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=) 5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 6: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: LXsLFjU2V2uO0lZXxBJRV82ATNAd7EnQyHaY4222poE=) 7: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 8: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=) 9: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 10: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 11: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bc:00:13:3e:92:7a:b2:d6:54:95:a0:90:18:da:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jun 13 10:00:40 2025 GMT Not After : Jun 14 10:00:40 2025 GMT Subject: CN=80aebee28cc158942bb37b13bacfb3b38d5a7da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:77:26:c9:48:ce:84:cc:e3:6d:6c:15:c5: 5f:3d:cc:4c:1a:74:61:83:3c:b7:d5:12:b3:1b:bf: 55:7a:3b:2e:9c:55:b0:62:07:a7:51:65:18:6a:31: 2e:d4:ba:b0:a7:1f:21:28:93:f0:75:61:c9:f4:f3: 24:68:42:b9:e4:c4:76:56:4c:64:9f:7c:b6:39:35: 71:a9:a8:85:77:86:82:9c:b9:90:68:a8:e0:55:93: 14:c4:3c:59:42:c8:6e:f8:31:fe:18:5f:4d:72:93: 9b:93:37:33:ac:0b:c3:be:25:5f:17:c9:97:11:35: 63:47:03:93:23:4e:43:25:77:91:17:de:8f:e9:97: 56:23:ab:d4:87:e4:5f:f8:75:98:77:2f:53:06:a3: 33:7f:65:09:2a:66:be:fd:d4:e0:fd:d9:ff:7a:01: 38:16:81:9a:2f:f7:91:e9:9f:82:7c:b1:cb:7f:c5: 3f:9b:77:48:2b:6f:38:87:05:54:68:4e:45:5a:2d: f9:15:d2:4a:8d:01:aa:45:20:c4:f4:fd:47:ea:11: a7:a3:71:3b:a2:cc:bc:b5:cc:42:79:38:8e:31:15: 43:4c:b2:73:0f:9d:27:ad:56:02:c8:fa:0d:8c:8d: 5e:23:44:3e:1a:96:0a:41:06:2e:3c:a5:37:2c:3c: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AE:BE:E2:8C:C1:58:94:2B:B3:7B:13:BA:CF:B3:B3:8D:5A:7D:A8 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b0:71:b5:16:ab:45:81:0b:7e:80:a1:57:e0:0e:ca:32:69: 69:f0:5c:38:38:b8:b6:2a:8c:2f:97:79:0c:f1:9d:93:5d:f4: 42:fe:8e:ba:13:c1:0a:32:3f:fe:53:75:f4:86:1a:4b:aa:d2: b6:e8:c7:00:f1:0f:7c:b0:c2:e1:30:bd:bb:46:12:eb:74:ef: 52:47:13:8d:35:9d:cd:40:a6:cb:52:3d:95:11:a2:bb:b2:6e: 05:85:0e:f4:1a:68:21:56:f8:4b:26:0a:ec:7d:69:db:9d:be: ed:fc:ed:c1:4d:48:b1:bd:de:b4:21:39:c7:f2:61:10:66:a9: ca:e2:c7:84:5a:f6:38:10:53:23:59:e2:22:7d:e1:8e:fb:50: 14:c6:15:ed:32:56:f5:c6:3a:31:6f:13:ef:9a:c7:29:a9:e0: fc:51:ed:9d:5b:a1:dd:cb:2b:f9:da:b7:f8:5a:45:80:56:20: 97:28:57:d4:21:83:70:8b:bd:b5:d3:02:ca:7d:80:ac:43:c3: b6:dd:14:ca:df:29:34:40:cd:1b:82:f9:cb:79:4b:ae:78:a0: 4c:c4:5c:10:d9:5c:44:91:69:cd:1a:23:48:82:42:66:bb:a5: f2:26:d7:15:99:5d:e5:b1:e3:1d:56:5e:4f:5c:17:93:0a:39: 00:88:08:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdovAATPpJ6stZUlaCQGNrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwNjEzMTAwMDQwWhcNMjUwNjE0MTAwMDQwWjAzMTEwLwYDVQQD Eyg4MGFlYmVlMjhjYzE1ODk0MmJiMzdiMTNiYWNmYjNiMzhkNWE3ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou13JslIzoTM421sFcVfPcxMGnRh gzy31RKzG79VejsunFWwYgenUWUYajEu1Lqwpx8hKJPwdWHJ9PMkaEK55MR2Vkxk n3y2OTVxqaiFd4aCnLmQaKjgVZMUxDxZQshu+DH+GF9NcpObkzczrAvDviVfF8mX ETVjRwOTI05DJXeRF96P6ZdWI6vUh+Rf+HWYdy9TBqMzf2UJKma+/dTg/dn/egE4 FoGaL/eR6Z+CfLHLf8U/m3dIK284hwVUaE5FWi35FdJKjQGqRSDE9P1H6hGno3E7 osy8tcxCeTiOMRVDTLJzD50nrVYCyPoNjI1eI0Q+GpYKQQYuPKU3LDyryQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICuvuKMwViUK7N7E7rPs7ONWn2oMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLBxtRar RYELfoChV+AOyjJpafBcODi4tiqML5d5DPGdk130Qv6OuhPBCjI//lN19IYaS6rS tujHAPEPfLDC4TC9u0YS63TvUkcTjTWdzUCmy1I9lRGiu7JuBYUO9BpoIVb4SyYK 7H1p252+7fztwU1Isb3etCE5x/JhEGapyuLHhFr2OBBTI1niIn3hjvtQFMYV7TJW 9cY6MW8T75rHKang/FHtnVuh3csr+dq3+FpFgFYglyhX1CGDcIu9tdMCyn2ArEPD tt0Uyt8pNEDNG4L5y3lLrnigTMRcENlcRJFpzRojSIJCZrul8ibXFZld5bHjHVZe T1wXkwo5AIgI1Q== -----END CERTIFICATE-----Generated at Fri Jun 13 18:58:52 2025 by rpki-client