$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: hCuWM82OhwWw9hq0yJN3Tp6Q2IUxUEyR1bQKz+bUrAg= Subject key identifier: 79:FA:47:C3:3D:A7:BE:01:79:EC:7D:03:0A:3F:87:63:2B:97:64:89 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 0196718A5BDA8FF80BE72BA025764E42E60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1448 Signing time: Sat 26 Apr 2025 10:00:14 +0000 Manifest this update: Sat 26 Apr 2025 10:00:14 +0000 Manifest next update: Sun 27 Apr 2025 10:00:14 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=) 5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 6: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: 5LMXlVrHylB7JjKEOqQ86irpLBwdtY57sKCk7RzZAyQ=) 7: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 8: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=) 9: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 10: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 11: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:5b:da:8f:f8:0b:e7:2b:a0:25:76:4e:42:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Apr 26 10:00:14 2025 GMT Not After : Apr 27 10:00:14 2025 GMT Subject: CN=79fa47c33da7be0179ec7d030a3f87632b976489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:cd:78:72:80:c3:22:7b:be:94:4c:da:20: b0:e0:66:7b:3b:95:75:1b:27:f6:97:2e:11:cf:6e: 85:c1:cf:ff:d3:23:93:5b:e1:20:92:a1:71:44:59: b2:c0:d7:48:49:ea:95:26:23:8f:0b:a0:b0:df:2f: 51:ae:9d:aa:9b:18:47:35:78:62:da:3b:25:b7:21: 55:12:10:2d:0a:e8:d7:d5:22:4c:c6:b2:3f:e9:88: 9a:36:4b:ae:3b:ee:9c:11:5f:24:f9:b7:0f:a0:0a: b8:c4:16:74:ef:ca:16:ec:cf:9e:c6:bb:06:13:21: d0:94:0b:e7:02:cb:60:91:da:e3:03:93:e9:cd:f5: 1d:77:77:2b:72:61:98:8b:34:e8:b2:15:13:88:6d: bc:bb:f4:b7:d1:1d:cf:b5:17:aa:aa:48:89:98:46: ba:f1:ad:8c:46:cd:9f:87:94:8a:b9:4e:07:e3:0e: 1d:3a:40:ef:47:49:c8:77:c3:fc:ad:3f:3d:63:91: 1a:fc:1b:75:06:be:ab:e4:92:b9:b7:b4:c9:48:9c: 95:53:ec:a1:cc:fc:27:f7:94:cc:f7:eb:b3:ae:0d: ea:cc:8d:3b:e8:0b:93:8e:11:5c:da:4a:cf:a8:59: 67:c7:af:fd:22:c8:6e:9d:db:50:40:72:b8:83:6c: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:47:C3:3D:A7:BE:01:79:EC:7D:03:0A:3F:87:63:2B:97:64:89 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8f:dd:a2:f5:62:e4:31:d2:38:bd:38:a2:7f:c3:82:63:e1: 6a:6f:11:97:8d:58:74:a7:3b:71:b6:c9:ce:1c:0f:49:3c:38: d3:56:4d:41:20:63:d0:c9:aa:00:14:3a:cf:a0:ae:73:2e:a6: 14:d6:8f:08:29:dd:00:d6:53:95:85:2d:12:64:e2:58:e6:bd: 03:04:e4:24:af:63:85:e8:99:69:a1:f7:7d:d5:65:ed:e3:11: b0:e7:50:00:15:f2:6d:fb:04:ba:f0:32:4a:61:1b:27:36:e3: 83:b8:4d:df:9d:4e:79:68:55:ee:5b:f3:8f:42:63:e3:b3:ad: e3:4e:35:12:60:65:8b:f2:d3:1d:1d:30:19:a0:91:35:5f:70: 0e:f7:ed:d4:56:65:0d:fa:0d:7c:49:97:c7:d2:5d:e6:ca:9e: 39:87:6c:20:1d:b2:83:c6:29:fb:a6:ed:2b:8a:b8:a7:23:36: 67:dc:30:af:5f:1c:6a:44:f8:ea:2c:a1:35:74:48:e0:5d:23: 76:06:d1:3c:02:92:b7:80:66:ec:c7:24:bd:84:e2:5e:ff:74: 61:52:45:f2:c0:f2:be:01:76:43:24:da:1b:02:4a:a3:b6:da: 15:5a:77:3e:6a:14:53:29:49:ad:9a:cd:8b:ee:0b:6f:fe:6c: ab:48:59:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxilvaj/gL5yugJXZOQuYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwNDI2MTAwMDE0WhcNMjUwNDI3MTAwMDE0WjAzMTEwLwYDVQQD Eyg3OWZhNDdjMzNkYTdiZTAxNzllYzdkMDMwYTNmODc2MzJiOTc2NDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurXNeHKAwyJ7vpRM2iCw4GZ7O5V1 Gyf2ly4Rz26Fwc//0yOTW+EgkqFxRFmywNdISeqVJiOPC6Cw3y9Rrp2qmxhHNXhi 2jsltyFVEhAtCujX1SJMxrI/6YiaNkuuO+6cEV8k+bcPoAq4xBZ078oW7M+exrsG EyHQlAvnAstgkdrjA5PpzfUdd3crcmGYizToshUTiG28u/S30R3PtReqqkiJmEa6 8a2MRs2fh5SKuU4H4w4dOkDvR0nId8P8rT89Y5Ea/Bt1Br6r5JK5t7TJSJyVU+yh zPwn95TM9+uzrg3qzI076AuTjhFc2krPqFlnx6/9IshundtQQHK4g2xe1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn6R8M9p74Beex9Awo/h2Mrl2SJMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY/dovVi 5DHSOL04on/DgmPham8Rl41YdKc7cbbJzhwPSTw401ZNQSBj0MmqABQ6z6Cucy6m FNaPCCndANZTlYUtEmTiWOa9AwTkJK9jheiZaaH3fdVl7eMRsOdQABXybfsEuvAy SmEbJzbjg7hN351OeWhV7lvzj0Jj47Ot4041EmBli/LTHR0wGaCRNV9wDvft1FZl DfoNfEmXx9Jd5sqeOYdsIB2yg8Yp+6btK4q4pyM2Z9wwr18cakT46iyhNXRI4F0j dgbRPAKSt4Bm7MckvYTiXv90YVJF8sDyvgF2QyTaGwJKo7baFVp3PmoUUylJrZrN i+4Lb/5sq0hZHA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:22:20 2025 by rpki-client