$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: nBk8TTG2axvSlDzkXK1yiW0zSa9Ui6b0t5e/mgfjE8s= Subject key identifier: 9D:52:D2:44:26:F7:06:58:A8:AE:20:48:F4:4B:42:FB:7B:63:48:5E Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019872CFB5A76D553646FE99C90835607C99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1555 Signing time: Mon 04 Aug 2025 02:01:11 +0000 Manifest this update: Mon 04 Aug 2025 02:01:11 +0000 Manifest next update: Tue 05 Aug 2025 02:01:11 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 6: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: OF1ZIiHhC7EKHaLJ0xDqzlU/48e34qEP6zSRmImIQ1Q=) 8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 9: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (hash: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=) 10: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=) 11: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 12: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 13: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:b5:a7:6d:55:36:46:fe:99:c9:08:35:60:7c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Aug 4 02:01:11 2025 GMT Not After : Aug 5 02:01:11 2025 GMT Subject: CN=9d52d24426f70658a8ae2048f44b42fb7b63485e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:26:f1:39:7f:e9:32:11:92:97:df:34:65: f8:5f:19:de:da:a7:d5:70:5d:7f:e4:2f:78:a8:5c: dc:48:9d:29:10:d0:ba:29:34:97:d0:84:9e:30:11: 5c:4a:75:7b:b5:a2:d0:ef:72:4b:4d:18:21:d0:6a: 0c:db:36:67:e2:c9:9f:df:90:47:d0:27:ef:71:b0: 24:7b:9a:4c:02:97:ec:46:e0:41:af:78:4b:58:3a: df:a5:d3:4d:21:ba:58:cd:e1:89:8c:98:83:48:24: fd:90:42:42:f3:a4:cb:40:40:b8:9d:d7:fa:ba:b0: 4b:cb:64:d9:2b:75:03:f3:63:84:be:fe:78:e5:02: 28:ea:df:74:bb:aa:e6:10:db:4c:fc:b1:11:9f:c5: 39:1f:df:4f:ca:63:56:33:de:2a:8c:9e:12:08:4e: 8c:fc:4a:de:9c:e0:df:f5:2a:88:eb:9d:6b:0c:70: d1:a3:72:a0:a9:3a:94:37:77:2a:81:f3:0f:4b:d5: f7:ea:b0:cf:18:93:47:8d:5e:56:b6:10:ce:b7:53: ce:ea:70:1d:63:0c:2c:fd:f3:08:b1:41:2a:f4:0d: 30:74:04:49:7a:9f:b2:26:39:27:6c:32:18:55:05: 7c:7a:42:7c:f3:6c:26:3b:1e:7e:20:ec:1e:21:1c: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:52:D2:44:26:F7:06:58:A8:AE:20:48:F4:4B:42:FB:7B:63:48:5E X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e1:d1:24:02:fc:be:cf:8b:cf:12:54:4c:51:06:18:3d:09: c6:e7:5b:e1:2d:3c:3d:d5:8e:be:38:4f:98:a5:a1:3d:af:f5: 78:1b:4e:2b:c3:74:b6:a3:65:6e:e1:79:82:86:6c:88:ac:68: 2b:96:c2:07:2f:86:fe:50:5b:27:f4:3d:4e:42:5a:36:f4:3a: 05:f3:be:3d:bb:9d:f8:3e:b9:3b:a6:16:2d:5c:be:60:25:85: 78:1c:4c:fb:5d:ae:dc:16:48:67:2a:f1:08:35:9e:30:09:41: 0c:8b:f2:d8:b8:ac:99:19:bb:5c:45:e7:08:13:13:77:32:8b: 3c:58:fb:13:97:0d:14:e8:d9:72:02:41:a4:10:2f:72:5f:ed: 75:e3:d7:53:13:1a:64:1e:83:3a:de:68:57:35:a6:81:97:89: fd:87:05:f5:ba:9e:9e:38:6b:2b:52:8a:88:43:26:28:34:d3: 5a:ca:92:d2:14:da:fd:b2:21:4c:60:dd:8a:79:3b:ba:39:3e: 21:57:61:c0:29:41:2d:ce:69:8a:ee:a2:e3:85:d5:41:19:a9: af:0b:af:73:2b:fb:a7:47:19:df:3f:df:8a:8c:a8:45:82:f8: d9:d1:92:ff:f3:f2:0d:0b:af:b0:60:31:56:0a:52:56:12:52: 40:4a:8d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz7WnbVU2Rv6ZyQg1YHyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwODA0MDIwMTExWhcNMjUwODA1MDIwMTExWjAzMTEwLwYDVQQD Eyg5ZDUyZDI0NDI2ZjcwNjU4YThhZTIwNDhmNDRiNDJmYjdiNjM0ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8cm8Tl/6TIRkpffNGX4Xxne2qfV cF1/5C94qFzcSJ0pENC6KTSX0ISeMBFcSnV7taLQ73JLTRgh0GoM2zZn4smf35BH 0CfvcbAke5pMApfsRuBBr3hLWDrfpdNNIbpYzeGJjJiDSCT9kEJC86TLQEC4ndf6 urBLy2TZK3UD82OEvv545QIo6t90u6rmENtM/LERn8U5H99PymNWM94qjJ4SCE6M /ErenODf9SqI651rDHDRo3KgqTqUN3cqgfMPS9X36rDPGJNHjV5WthDOt1PO6nAd Ywws/fMIsUEq9A0wdARJep+yJjknbDIYVQV8ekJ882wmOx5+IOweIRyLcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1S0kQm9wZYqK4gSPRLQvt7Y0heMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquHRJAL8 vs+LzxJUTFEGGD0Jxudb4S08PdWOvjhPmKWhPa/1eBtOK8N0tqNlbuF5goZsiKxo K5bCBy+G/lBbJ/Q9TkJaNvQ6BfO+Pbud+D65O6YWLVy+YCWFeBxM+12u3BZIZyrx CDWeMAlBDIvy2LismRm7XEXnCBMTdzKLPFj7E5cNFOjZcgJBpBAvcl/tdePXUxMa ZB6DOt5oVzWmgZeJ/YcF9bqenjhrK1KKiEMmKDTTWsqS0hTa/bIhTGDdink7ujk+ IVdhwClBLc5piu6i44XVQRmprwuvcyv7p0cZ3z/fioyoRYL42dGS//PyDQuvsGAx VgpSVhJSQEqNKw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:04:19 2025 by rpki-client