$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: 1vzCzu0cjxgPJhweEPP4MYIbpNwesiYgJWIykhl+SIg= Subject key identifier: 53:E3:6A:8E:2B:D5:2C:C4:BE:F0:1D:09:2B:AD:51:A7:78:10:1B:97 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 01976F2C88EC9B2D09DA01E2F2D86A2D41A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 159F Signing time: Sat 14 Jun 2025 16:01:18 +0000 Manifest this update: Sat 14 Jun 2025 16:01:18 +0000 Manifest next update: Sun 15 Jun 2025 16:01:18 +0000 Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=) 2: GkzUiQjxAwqkp5Z39cxt3GUWIng.roa (hash: vLNapJVPwIEWIsnPkWMH8DeeJJAdXd67gcOUXS+rDWA=) 3: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=) 4: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=) 5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=) 6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=) 7: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: nq1ALjjhBMhjudtsS+xZi7eYrdkvsa06iHAylja5zmE=) 8: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=) 9: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=) 10: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:2c:88:ec:9b:2d:09:da:01:e2:f2:d8:6a:2d:41:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jun 14 16:01:18 2025 GMT Not After : Jun 15 16:01:18 2025 GMT Subject: CN=53e36a8e2bd52cc4bef01d092bad51a778101b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:47:ad:38:a5:c6:cc:2e:c9:bc:74:f8:9d: 35:c4:18:6e:24:a0:1b:3d:a3:e2:2a:40:62:e2:18: 1f:52:3b:40:1b:03:a5:84:6b:ca:4d:f1:26:a2:8a: fe:ed:bf:19:e9:5b:4d:17:5d:26:63:4e:dd:64:e7: fe:21:e7:33:35:ae:09:ba:4a:bb:20:bb:5f:ab:e9: 9f:cb:e6:50:00:01:9f:98:e3:dc:04:1c:11:2a:54: 1d:fb:a8:b8:43:e3:5f:3a:2b:e8:7e:07:1d:a9:e0: f4:59:37:a1:95:08:c3:c0:b2:c8:26:2f:ce:08:23: b6:72:67:11:76:2b:c7:ff:fe:fe:f6:a1:8c:13:1e: 2d:60:08:98:e8:39:09:c0:2e:0b:3e:e0:25:f6:6b: 7d:99:82:f0:aa:e7:fe:dd:c6:14:5c:55:79:ec:c4: e7:76:ff:78:10:39:92:72:75:48:aa:24:bf:b6:e8: b5:16:84:60:7d:5d:ce:91:38:c0:5e:ba:83:48:5a: 53:ff:d2:b8:60:a6:0b:a3:11:88:08:98:ad:c2:53: 81:24:66:59:6d:a5:d4:6b:0a:ba:dc:96:d2:1a:62: 64:18:60:20:28:af:fe:ce:d1:f3:4c:9d:58:0e:b9: 29:5d:63:c4:19:27:9e:08:1b:d7:2e:bc:27:7b:10: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E3:6A:8E:2B:D5:2C:C4:BE:F0:1D:09:2B:AD:51:A7:78:10:1B:97 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:12:3e:90:a0:11:44:d0:ff:0e:f5:ab:5a:57:64:85:57:16: d6:bb:54:b7:85:7b:80:88:a8:eb:bb:97:dc:33:40:b3:88:ec: 23:22:0e:b6:f8:76:db:06:27:57:c9:48:70:1a:90:c0:62:4e: 2a:e9:62:a1:39:76:b7:d4:f9:cc:f4:f1:b2:ea:c7:3e:5e:bf: f0:8b:df:4b:87:1e:e7:d5:97:49:f4:30:91:64:5a:59:e3:c4: 6e:e5:cc:42:4b:46:7e:b7:27:6f:32:44:ce:68:4e:c4:ed:b2: cc:d4:18:a1:10:fa:47:a7:53:5a:52:e1:8e:f1:28:b0:ad:07: ba:70:ed:cd:cc:61:5c:6d:7b:b0:51:05:7b:3a:c3:73:16:84: a0:4e:5a:96:95:3a:3d:b0:f3:b5:6c:e1:74:d2:90:53:62:26: 6d:10:b8:0c:fc:a4:b9:37:93:2a:79:93:ac:89:20:41:55:e0: f9:87:90:f0:1d:d6:35:ef:67:10:74:0f:cf:1e:6f:06:88:73: f8:dc:83:98:73:fb:6b:49:f4:61:fb:99:07:4a:dd:a6:aa:af: e6:f5:96:39:82:5f:7d:a8:65:25:c0:fc:8a:94:bd:9a:10:64: 2a:ed:e4:86:ba:83:63:49:db:80:fd:52:85:55:55:69:f2:38: 11:d0:bf:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvLIjsmy0J2gHi8thqLUGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjUwNjE0MTYwMTE4WhcNMjUwNjE1MTYwMTE4WjAzMTEwLwYDVQQD Eyg1M2UzNmE4ZTJiZDUyY2M0YmVmMDFkMDkyYmFkNTFhNzc4MTAxYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryxHrTilxswuybx0+J01xBhuJKAb PaPiKkBi4hgfUjtAGwOlhGvKTfEmoor+7b8Z6VtNF10mY07dZOf+IeczNa4Jukq7 ILtfq+mfy+ZQAAGfmOPcBBwRKlQd+6i4Q+NfOivofgcdqeD0WTehlQjDwLLIJi/O CCO2cmcRdivH//7+9qGMEx4tYAiY6DkJwC4LPuAl9mt9mYLwquf+3cYUXFV57MTn dv94EDmScnVIqiS/tui1FoRgfV3OkTjAXrqDSFpT/9K4YKYLoxGICJitwlOBJGZZ baXUawq63JbSGmJkGGAgKK/+ztHzTJ1YDrkpXWPEGSeeCBvXLrwnexBstQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPjao4r1SzEvvAdCSutUad4EBuXMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRI+kKAR RND/DvWrWldkhVcW1rtUt4V7gIio67uX3DNAs4jsIyIOtvh22wYnV8lIcBqQwGJO KulioTl2t9T5zPTxsurHPl6/8IvfS4ce59WXSfQwkWRaWePEbuXMQktGfrcnbzJE zmhOxO2yzNQYoRD6R6dTWlLhjvEosK0HunDtzcxhXG17sFEFezrDcxaEoE5alpU6 PbDztWzhdNKQU2ImbRC4DPykuTeTKnmTrIkgQVXg+YeQ8B3WNe9nEHQPzx5vBohz +NyDmHP7a0n0YfuZB0rdpqqv5vWWOYJffahlJcD8ipS9mhBkKu3khrqDY0nbgP1S hVVVafI4EdC/jQ== -----END CERTIFICATE-----Generated at Sun Jun 15 00:00:33 2025 by rpki-client