$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: oxlObQ/IQYQhMyrIOTxyXO43g9tQArPl5+PNOst3aEI= Subject key identifier: 7C:0E:AD:30:00:DB:E4:0E:C6:23:50:6E:A9:91:AA:DB:97:A1:E6:77 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 0198733DA20E0C33F8E3938D151F25689D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 1627 Signing time: Mon 04 Aug 2025 04:01:15 +0000 Manifest this update: Mon 04 Aug 2025 04:01:15 +0000 Manifest next update: Tue 05 Aug 2025 04:01:15 +0000 Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=) 2: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=) 3: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=) 4: KscvLVMtZmBkxarHMZjKvBgfLfk.roa (hash: LHSFj6xYYHfALWFv5ULF2z+mFPohWH8M77+ifjvdIiM=) 5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=) 6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=) 7: T5IqxO0s3d3X9Y1GttHlSthoJkA.roa (hash: jGjUBiUWn1NYJl7CNkq/qe+4X44OgJIbeG2hNg3nO48=) 8: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: lzdD8iZRd1i7ssJQ6/BRfU/Qi31s7th2AI3rcTe5IQA=) 9: UM40IJoMbmC2E6_NVNk7myz37CE.roa (hash: ho6wywXgZcMzdgmZ/BHVUcsSpC5snRTwoXFhr5WOwMg=) 10: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=) 11: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=) 12: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:3d:a2:0e:0c:33:f8:e3:93:8d:15:1f:25:68:9d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Aug 4 04:01:15 2025 GMT Not After : Aug 5 04:01:15 2025 GMT Subject: CN=7c0ead3000dbe40ec623506ea991aadb97a1e677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:d5:ad:44:e1:61:40:cc:1e:5f:ab:ad:06: 72:9a:46:70:f9:7d:08:ed:23:b6:04:95:c1:58:07: 9d:38:46:f0:04:40:68:ff:45:d5:0d:b4:94:2a:7a: 39:34:02:46:a4:c9:eb:d7:8e:9e:e7:15:98:fd:6f: 6c:6b:c8:eb:60:7b:49:80:cc:27:2c:40:3e:df:2c: ea:ba:b0:04:96:98:c5:f5:6c:3b:aa:b6:0a:d6:2d: 93:47:13:b3:f9:16:bd:9a:a7:5b:21:f9:1d:c4:dc: 42:b3:48:78:9d:5b:c5:a7:a0:9c:55:c6:30:fa:6a: 8f:be:01:60:72:62:8e:dd:fc:09:d7:cb:0a:85:97: ca:b5:c5:81:d2:62:6e:42:9f:07:6f:31:2d:ba:b9: 5d:45:52:41:99:92:33:8b:ef:b2:0c:31:08:30:4d: 3d:af:80:fe:5f:9f:b1:0e:84:d3:f1:c1:d8:21:6c: 4a:a2:d1:6f:8f:f6:e3:91:ea:83:5f:cf:d6:1b:b8: 1c:1a:0d:7c:cf:8b:27:e9:14:da:5f:fe:68:88:d2: 74:0d:1c:f7:84:1b:99:04:29:df:7b:33:a7:4e:3f: 39:b0:fe:f7:15:29:f2:70:18:5b:40:47:aa:e0:30: 7d:60:a8:c6:f5:06:b5:6e:21:f5:2d:09:06:cf:3b: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0E:AD:30:00:DB:E4:0E:C6:23:50:6E:A9:91:AA:DB:97:A1:E6:77 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8e:ad:25:23:2e:4a:62:cd:21:d1:df:4f:70:ef:3a:0b:80: 56:6c:be:7b:ca:ef:a4:73:da:20:78:5a:44:f9:af:cc:b7:7f: b0:6c:67:5e:58:bd:6d:1c:fd:17:a7:6b:ff:39:e9:f5:f0:08: d8:dc:ba:43:80:90:06:29:f6:fc:c2:9f:2a:52:ba:3a:16:9f: 70:42:b0:5b:bf:d9:79:3d:bf:42:db:84:d6:0b:49:0f:8b:d8: 1a:18:a9:1d:9b:8a:7e:7e:52:67:05:ae:91:cb:5a:d6:09:aa: 99:25:7a:a7:a6:52:c5:1b:33:13:89:97:55:af:40:4c:96:a5: 3b:11:43:f9:0e:30:41:91:0f:a0:50:7d:87:8e:80:2f:88:2d: e6:ed:7c:68:43:16:4c:4c:df:99:a6:d4:76:0d:5e:6c:ee:51: 63:a8:4f:f5:71:b7:64:b1:7e:4e:08:f0:7d:7a:b9:1d:fc:4a: 03:69:72:d9:21:90:88:a0:89:14:30:9b:63:86:cd:81:f2:6f: 2f:b6:fd:c4:ae:4f:31:0f:a3:5d:9f:53:74:b9:41:8d:b4:88: f9:c1:1e:81:f1:f1:27:be:88:3b:0e:c5:fc:0b:a2:75:b9:45: be:81:3b:df:6a:f2:d1:9a:bc:3b:36:b8:93:f4:2b:c1:6f:05: ec:b3:97:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzPaIODDP445ONFR8laJ0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjUwODA0MDQwMTE1WhcNMjUwODA1MDQwMTE1WjAzMTEwLwYDVQQD Eyg3YzBlYWQzMDAwZGJlNDBlYzYyMzUwNmVhOTkxYWFkYjk3YTFlNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3VrUThYUDMHl+rrQZymkZw+X0I 7SO2BJXBWAedOEbwBEBo/0XVDbSUKno5NAJGpMnr146e5xWY/W9sa8jrYHtJgMwn LEA+3yzqurAElpjF9Ww7qrYK1i2TRxOz+Ra9mqdbIfkdxNxCs0h4nVvFp6CcVcYw +mqPvgFgcmKO3fwJ18sKhZfKtcWB0mJuQp8HbzEturldRVJBmZIzi++yDDEIME09 r4D+X5+xDoTT8cHYIWxKotFvj/bjkeqDX8/WG7gcGg18z4sn6RTaX/5oiNJ0DRz3 hBuZBCnfezOnTj85sP73FSnycBhbQEeq4DB9YKjG9Qa1biH1LQkGzztHfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwOrTAA2+QOxiNQbqmRqtuXoeZ3MB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI6tJSMu SmLNIdHfT3DvOguAVmy+e8rvpHPaIHhaRPmvzLd/sGxnXli9bRz9F6dr/znp9fAI 2Ny6Q4CQBin2/MKfKlK6OhafcEKwW7/ZeT2/QtuE1gtJD4vYGhipHZuKfn5SZwWu kcta1gmqmSV6p6ZSxRszE4mXVa9ATJalOxFD+Q4wQZEPoFB9h46AL4gt5u18aEMW TEzfmabUdg1ebO5RY6hP9XG3ZLF+TgjwfXq5HfxKA2ly2SGQiKCJFDCbY4bNgfJv L7b9xK5PMQ+jXZ9TdLlBjbSI+cEegfHxJ76IOw7F/AuidblFvoE732ry0Zq8Oza4 k/QrwW8F7LOXKA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:14 2025 by rpki-client