$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: MhU8K40MbVsqJ6G7auCZgIXRe8Rl5cBssML0+KR6Yfs= Subject key identifier: FC:BA:C2:64:6B:8E:C6:E0:8F:67:C4:32:DF:0D:A6:32:0D:1C:31:22 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019833B9290B026F54C07A8E8AF0566C9AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1532 Signing time: Tue 22 Jul 2025 20:00:29 +0000 Manifest this update: Tue 22 Jul 2025 20:00:29 +0000 Manifest next update: Wed 23 Jul 2025 20:00:29 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 5: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=) 6: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: G0yhv4QJenlLadn21SXUSYBf+oUWIkFRlBMMjXZnbHM=) 8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 9: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=) 10: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 11: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 12: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:33:b9:29:0b:02:6f:54:c0:7a:8e:8a:f0:56:6c:9a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jul 22 20:00:29 2025 GMT Not After : Jul 23 20:00:29 2025 GMT Subject: CN=fcbac2646b8ec6e08f67c432df0da6320d1c3122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:27:d4:98:c9:4d:f1:23:c1:4a:93:0a:85: 53:d3:16:e9:4d:3e:a5:bc:e4:e8:89:3b:fa:7c:7e: 92:c4:3c:38:17:9e:2f:54:bf:13:47:8b:6c:17:c7: 3c:5f:23:7c:75:6b:4f:7c:7b:e9:99:2e:e3:9b:ec: e0:a7:8f:b7:5d:3e:01:c7:ed:82:dc:0a:3c:f2:29: ec:b5:f1:23:61:ab:3d:96:ef:86:a4:43:4e:a4:ab: bc:30:6c:c6:f2:1a:ff:49:b9:9d:d2:1c:16:4c:ef: c8:02:00:5a:8e:96:d8:5f:34:46:2b:18:8a:1e:e9: 78:b5:56:28:79:a3:b2:43:1c:df:98:33:8d:b3:29: d8:59:b1:2e:3d:33:20:51:9c:ff:92:c8:54:7a:a0: 71:67:01:76:0d:62:91:a8:fd:f9:b7:0a:1d:5b:53: 19:26:5b:5a:88:ef:f7:84:37:25:bf:03:e2:06:b3: 18:ed:1f:0c:38:18:5e:7b:c2:ed:85:09:58:70:8c: 88:68:68:1e:23:22:52:58:d0:c5:d0:cd:81:f9:12: da:f8:b4:e4:37:82:ac:1a:69:c6:26:21:82:66:cc: 87:0e:8e:e9:52:04:f5:3c:06:f1:7b:76:55:9f:cd: 48:67:11:77:93:51:4d:7a:9b:1c:7e:3c:47:b3:72: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BA:C2:64:6B:8E:C6:E0:8F:67:C4:32:DF:0D:A6:32:0D:1C:31:22 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:07:95:d4:9e:54:a8:27:b5:cb:d4:4c:37:a1:08:fc:4d:06: 30:ea:2f:90:dd:42:20:79:23:2f:67:f7:e3:6c:66:98:2c:99: 17:31:d2:2d:c3:cb:96:28:ff:cb:50:61:ab:fd:3d:b7:7d:6c: 41:ae:60:7e:8e:98:66:3c:c3:96:3b:26:77:19:6d:66:ce:f9: 7a:b8:ba:b8:a3:28:5a:cc:b7:61:42:df:6c:cc:28:a4:9d:57: 43:4e:1f:95:82:ee:a5:9f:54:36:e8:37:6b:46:f6:0c:a5:a5: 09:77:0e:2b:ea:49:e2:89:77:9e:08:93:69:34:f7:a3:b7:3c: 01:37:aa:9f:df:b6:26:ba:3f:a0:22:92:ca:0b:0c:ca:90:8a: dd:fe:de:8a:41:c1:ac:bb:93:c5:3f:86:05:3b:ad:c7:eb:8e: a1:87:1b:4d:a6:9c:1d:3a:cd:56:1f:d3:79:28:e1:1b:c4:47: f6:46:3f:5b:f2:2a:61:8c:97:18:68:c9:c3:b8:21:ad:86:03: 53:73:e5:73:26:1c:86:57:69:3c:7d:b1:ef:01:2e:69:f5:72: 0a:d5:56:73:ab:31:9f:00:54:6b:7b:86:16:2f:bc:ae:2a:29: 33:48:99:38:97:b2:42:00:fe:ff:9f:82:60:38:14:15:9b:50: 93:17:a4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgzuSkLAm9UwHqOivBWbJr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwNzIyMjAwMDI5WhcNMjUwNzIzMjAwMDI5WjAzMTEwLwYDVQQD EyhmY2JhYzI2NDZiOGVjNmUwOGY2N2M0MzJkZjBkYTYzMjBkMWMzMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4n1JjJTfEjwUqTCoVT0xbpTT6l vOToiTv6fH6SxDw4F54vVL8TR4tsF8c8XyN8dWtPfHvpmS7jm+zgp4+3XT4Bx+2C 3Ao88instfEjYas9lu+GpENOpKu8MGzG8hr/Sbmd0hwWTO/IAgBajpbYXzRGKxiK Hul4tVYoeaOyQxzfmDONsynYWbEuPTMgUZz/kshUeqBxZwF2DWKRqP35twodW1MZ JltaiO/3hDclvwPiBrMY7R8MOBhee8LthQlYcIyIaGgeIyJSWNDF0M2B+RLa+LTk N4KsGmnGJiGCZsyHDo7pUgT1PAbxe3ZVn81IZxF3k1FNepscfjxHs3K3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy6wmRrjsbgj2fEMt8NpjINHDEiMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQeV1J5U qCe1y9RMN6EI/E0GMOovkN1CIHkjL2f342xmmCyZFzHSLcPLlij/y1Bhq/09t31s Qa5gfo6YZjzDljsmdxltZs75eri6uKMoWsy3YULfbMwopJ1XQ04flYLupZ9UNug3 a0b2DKWlCXcOK+pJ4ol3ngiTaTT3o7c8ATeqn9+2Jro/oCKSygsMypCK3f7eikHB rLuTxT+GBTutx+uOoYcbTaacHTrNVh/TeSjhG8RH9kY/W/IqYYyXGGjJw7ghrYYD U3PlcyYchldpPH2x7wEuafVyCtVWc6sxnwBUa3uGFi+8riopM0iZOJeyQgD+/5+C YDgUFZtQkxekuw== -----END CERTIFICATE-----Generated at Wed Jul 23 06:02:19 2025 by rpki-client