$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft File: TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json) Hash identifier: FxsrWcgn3khWvm3gQsCsyfsAWOzI/O51/4BysBR00rE= Subject key identifier: 73:65:3F:70:98:8D:B1:FA:53:89:EE:07:61:F9:CD:85:77:1E:CA:1B Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 0196729D52DE362BE3A86C8247E30D94BC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft Manifest number: 1518 Signing time: Sat 26 Apr 2025 15:00:35 +0000 Manifest this update: Sat 26 Apr 2025 15:00:35 +0000 Manifest next update: Sun 27 Apr 2025 15:00:35 +0000 Files and hashes: 1: 5ihFdcr9l-tc7rukSnsuZYO-sCc.roa (hash: jVp/K4TFXHukJ6ToifAvqgLYscP9U1YkYRjyQ/vS7rs=) 2: 6yNeqI6cfHc3f4rCblxx3TjO0eA.roa (hash: gtLbnA120/ol5rBCSdNOOaWzTA+gt7YvBjty1F7J0T4=) 3: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (hash: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=) 4: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (hash: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=) 5: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (hash: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=) 6: HFBEdH3RlWYpvPeNgp6xKhpodko.roa (hash: JH1fjI/K5jNqNFebQu9ct1cPojHEsM6BVZLaKE0xEso=) 7: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: povizhsTTWLug2xtwVJktd4/kVw0sHiPHDaZO4Ccj0k=) 8: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (hash: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=) 9: ehged3mZieiEQPKX6YV4LMY94IA.roa (hash: 7eCOyiKG9ZW1g+yYlD3ivpQA1oY2V4uQMAsWpNV5czU=) 10: isgHEY3DLcIdH7fzaoi9hSSweWI.roa (hash: UYsZ1nus3c+5ErOsOKu1wsJtYaH8MiA2+iXpl5haTe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:52:de:36:2b:e3:a8:6c:82:47:e3:0d:94:bc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Apr 26 15:00:35 2025 GMT Not After : Apr 27 15:00:35 2025 GMT Subject: CN=73653f70988db1fa5389ee0761f9cd85771eca1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:d2:27:2f:a8:64:6a:6f:f6:6d:de:1a:c3: 17:65:e3:bb:93:f9:a5:65:81:33:44:16:55:63:da: 69:e7:4b:c3:40:49:29:9f:0e:31:9f:b0:62:b5:ef: 01:7c:34:c0:2d:31:c2:c2:43:d3:21:9c:22:bc:1e: e3:55:e7:f1:ac:45:03:aa:1c:17:8b:9c:ac:9c:18: 11:10:07:69:33:44:91:1a:dd:47:b3:0e:97:fa:38: 7a:20:c4:e0:70:2f:ed:d2:5d:36:18:38:d2:b5:a9: 04:b5:0b:42:30:94:77:8a:bb:b4:bc:d5:1f:77:4e: 4a:12:b6:26:fb:e6:40:6b:2b:fa:c5:95:38:c9:88: 8f:dd:18:e5:94:9b:58:42:94:cc:43:93:00:24:d3: 95:f5:69:e1:d7:8b:58:c5:07:46:a2:aa:95:74:d0: f1:5c:7f:d0:1d:3d:40:d5:bb:75:06:0e:c0:71:a6: 3f:3f:fa:66:4f:cf:4e:54:bc:cb:db:39:94:a5:e8: cb:bd:de:06:99:cf:6d:c3:6a:90:0a:01:9f:c9:59: 5c:89:af:3d:88:bc:90:50:4e:b7:d0:bb:69:96:ea: b4:79:37:06:51:98:b1:d4:b3:f0:fd:72:a2:f5:26: 8f:aa:eb:e5:dc:5f:03:2d:f2:49:8e:22:94:8a:02: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:3F:70:98:8D:B1:FA:53:89:EE:07:61:F9:CD:85:77:1E:CA:1B X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4b:8b:9a:b2:1f:1c:66:26:9e:d9:19:02:3d:ea:3a:cd:de: 09:c0:a8:f5:da:0d:92:39:86:07:76:ae:e1:e5:36:e6:76:15: 4a:4c:87:96:91:e6:49:b5:78:aa:cc:60:76:e2:95:4e:2b:ef: e9:9c:7b:5b:83:ef:40:38:4f:05:e6:c3:bb:34:8d:aa:a7:03: 9d:ab:67:35:60:5f:90:d2:b1:d9:cb:8d:97:85:8a:ce:27:dd: 5b:93:41:3b:e7:e6:42:e1:69:98:a4:b8:57:aa:e7:c1:16:d6: cd:7b:3d:fa:07:eb:76:5b:80:3c:59:8f:7e:dd:d4:6a:35:37: bb:20:28:21:90:6d:32:7f:df:5f:31:52:9f:54:b4:48:25:92: a3:53:60:60:87:05:3a:ca:3a:ce:a2:41:a7:a3:df:04:7b:60: 84:bd:33:24:9d:ef:59:fd:80:b5:1b:14:17:d0:50:6c:fa:74: 52:c7:fd:2b:fe:8e:97:ac:ed:5d:12:97:02:e2:55:1a:70:c5: 46:6b:f3:e5:a5:6e:c0:00:13:b0:5c:0d:11:e8:00:0f:10:61: 78:7d:47:96:c7:fd:51:b0:c1:39:14:e4:c6:01:57:98:57:94: c1:d8:75:fb:bb:8a:8e:a3:fd:9b:62:b5:85:7a:e7:3b:af:16: 2b:60:3a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynVLeNivjqGyCR+MNlLxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjUwNDI2MTUwMDM1WhcNMjUwNDI3MTUwMDM1WjAzMTEwLwYDVQQD Eyg3MzY1M2Y3MDk4OGRiMWZhNTM4OWVlMDc2MWY5Y2Q4NTc3MWVjYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPHSJy+oZGpv9m3eGsMXZeO7k/ml ZYEzRBZVY9pp50vDQEkpnw4xn7Bite8BfDTALTHCwkPTIZwivB7jVefxrEUDqhwX i5ysnBgREAdpM0SRGt1Hsw6X+jh6IMTgcC/t0l02GDjStakEtQtCMJR3iru0vNUf d05KErYm++ZAayv6xZU4yYiP3RjllJtYQpTMQ5MAJNOV9Wnh14tYxQdGoqqVdNDx XH/QHT1A1bt1Bg7AcaY/P/pmT89OVLzL2zmUpejLvd4Gmc9tw2qQCgGfyVlcia89 iLyQUE630Ltpluq0eTcGUZix1LPw/XKi9SaPquvl3F8DLfJJjiKUigLOcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNlP3CYjbH6U4nuB2H5zYV3HsobMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEuLmrIf HGYmntkZAj3qOs3eCcCo9doNkjmGB3au4eU25nYVSkyHlpHmSbV4qsxgduKVTivv 6Zx7W4PvQDhPBebDuzSNqqcDnatnNWBfkNKx2cuNl4WKzifdW5NBO+fmQuFpmKS4 V6rnwRbWzXs9+gfrdluAPFmPft3UajU3uyAoIZBtMn/fXzFSn1S0SCWSo1NgYIcF Oso6zqJBp6PfBHtghL0zJJ3vWf2AtRsUF9BQbPp0Usf9K/6Ol6ztXRKXAuJVGnDF Rmvz5aVuwAATsFwNEegADxBheH1Hlsf9UbDBORTkxgFXmFeUwdh1+7uKjqP9m2K1 hXrnO68WK2A6Yg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:01:50 2025 by rpki-client