$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft File: TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json) Hash identifier: tZpy1+C0KP7v8Y8ObdM73yxjQFdOwzJWpZ0xxtXjbNk= Subject key identifier: D3:E9:2D:9E:E9:A1:D4:19:D9:1A:88:77:D3:10:18:D0:8C:10:E7:BB Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 01982ECA160933BE8690E00CF3CEFFE77C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft Manifest number: 15FE Signing time: Mon 21 Jul 2025 21:00:52 +0000 Manifest this update: Mon 21 Jul 2025 21:00:52 +0000 Manifest next update: Tue 22 Jul 2025 21:00:52 +0000 Files and hashes: 1: 5ihFdcr9l-tc7rukSnsuZYO-sCc.roa (hash: jVp/K4TFXHukJ6ToifAvqgLYscP9U1YkYRjyQ/vS7rs=) 2: 6yNeqI6cfHc3f4rCblxx3TjO0eA.roa (hash: gtLbnA120/ol5rBCSdNOOaWzTA+gt7YvBjty1F7J0T4=) 3: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (hash: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=) 4: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (hash: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=) 5: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (hash: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=) 6: HFBEdH3RlWYpvPeNgp6xKhpodko.roa (hash: JH1fjI/K5jNqNFebQu9ct1cPojHEsM6BVZLaKE0xEso=) 7: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: 9MoO1UfvUwN1032RNnyIDtbH9t3c3pR05A4B1QkWpeM=) 8: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (hash: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=) 9: ehged3mZieiEQPKX6YV4LMY94IA.roa (hash: 7eCOyiKG9ZW1g+yYlD3ivpQA1oY2V4uQMAsWpNV5czU=) 10: isgHEY3DLcIdH7fzaoi9hSSweWI.roa (hash: UYsZ1nus3c+5ErOsOKu1wsJtYaH8MiA2+iXpl5haTe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2e:ca:16:09:33:be:86:90:e0:0c:f3:ce:ff:e7:7c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jul 21 21:00:52 2025 GMT Not After : Jul 22 21:00:52 2025 GMT Subject: CN=d3e92d9ee9a1d419d91a8877d31018d08c10e7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:17:5c:fe:90:d4:fe:14:da:56:65:dc:83: 36:ac:73:1f:35:99:24:3d:e2:db:a3:3f:ee:17:9d: 2a:0a:0b:21:66:19:4f:b9:67:72:8f:0b:dc:bf:32: fb:b0:98:c0:21:34:84:66:b0:6b:dd:6a:f3:d7:aa: 28:17:73:59:fa:2b:52:de:c5:cb:f6:66:ce:60:db: a7:35:9b:65:34:fb:96:7f:ba:51:f2:dc:df:fd:b4: 7b:8e:0f:49:00:ab:6a:95:94:fb:a2:35:c3:dc:35: c8:ba:13:c1:d5:01:dc:8a:5c:fb:31:58:b1:af:fe: 77:23:c9:c5:22:a4:a5:a6:3f:16:2f:6e:37:a9:48: fa:4f:24:bd:d3:d4:80:f7:13:44:db:62:9b:74:ec: 92:0e:69:d4:cf:0e:07:a1:ed:92:2c:ab:b2:12:cd: 60:88:3a:0e:fe:7b:a8:32:bf:b6:0a:41:d6:ea:bd: 09:8d:6e:c4:73:36:cd:71:aa:8c:3c:97:16:da:7a: 9b:9b:9a:01:d5:50:88:22:3f:0f:da:c6:5e:4e:83: 2b:83:21:4f:36:4a:24:dc:7c:da:d2:a3:82:4f:49: 3d:a9:9a:43:eb:e3:8f:15:9e:11:69:45:76:3a:3e: f7:be:24:a4:95:0e:d4:e2:51:6a:b1:88:95:53:94: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:2D:9E:E9:A1:D4:19:D9:1A:88:77:D3:10:18:D0:8C:10:E7:BB X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3a:94:8d:d1:89:25:ff:30:ca:8f:49:df:46:3a:5a:fd:01: 3b:da:ed:c8:45:f9:1b:18:3e:ca:e2:bc:88:e3:f5:12:3f:ad: 37:52:54:23:b7:65:aa:e9:db:ac:4b:6a:61:82:d3:76:99:f0: ae:32:59:b1:00:5e:93:76:e8:a4:d3:62:73:e5:13:c9:4e:03: 62:0d:05:7c:58:4f:96:70:bd:9e:a3:a5:a0:37:c2:30:67:6b: df:a6:11:39:1d:3c:47:de:9a:fd:d6:c0:c6:91:86:52:f1:a7: 32:87:c0:d6:d3:52:cb:ee:94:c5:79:4d:5d:43:6d:4a:5c:de: 40:cc:6d:e6:a0:92:f3:9f:b7:05:9f:ce:47:34:5a:9c:02:58: 17:7e:62:0e:6f:e7:af:f7:d6:39:53:4f:01:b8:fb:63:60:e5: c4:79:63:48:4b:7d:a8:8d:ab:0c:5a:36:c5:14:38:4a:38:70: 56:45:da:c1:7e:d4:4a:79:93:a8:7e:d0:13:93:a1:c1:7d:09: 0e:69:ec:12:06:70:6b:fd:aa:b7:f8:7a:c9:c7:1a:86:63:65: 58:93:f1:02:1d:a5:e9:1a:63:47:7e:de:4e:26:56:6a:1a:36: c6:31:a2:e6:52:46:27:ec:43:8a:77:71:3a:3c:c3:51:f7:66: 45:20:dd:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZguyhYJM76GkOAM887/53xlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjUwNzIxMjEwMDUyWhcNMjUwNzIyMjEwMDUyWjAzMTEwLwYDVQQD EyhkM2U5MmQ5ZWU5YTFkNDE5ZDkxYTg4NzdkMzEwMThkMDhjMTBlN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/MXXP6Q1P4U2lZl3IM2rHMfNZkk PeLboz/uF50qCgshZhlPuWdyjwvcvzL7sJjAITSEZrBr3Wrz16ooF3NZ+itS3sXL 9mbOYNunNZtlNPuWf7pR8tzf/bR7jg9JAKtqlZT7ojXD3DXIuhPB1QHcilz7MVix r/53I8nFIqSlpj8WL243qUj6TyS909SA9xNE22KbdOySDmnUzw4Hoe2SLKuyEs1g iDoO/nuoMr+2CkHW6r0JjW7EczbNcaqMPJcW2nqbm5oB1VCIIj8P2sZeToMrgyFP Nkok3Hza0qOCT0k9qZpD6+OPFZ4RaUV2Oj73viSklQ7U4lFqsYiVU5TZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPpLZ7podQZ2RqId9MQGNCMEOe7MB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDqUjdGJ Jf8wyo9J30Y6Wv0BO9rtyEX5Gxg+yuK8iOP1Ej+tN1JUI7dlqunbrEtqYYLTdpnw rjJZsQBek3bopNNic+UTyU4DYg0FfFhPlnC9nqOloDfCMGdr36YROR08R96a/dbA xpGGUvGnMofA1tNSy+6UxXlNXUNtSlzeQMxt5qCS85+3BZ/ORzRanAJYF35iDm/n r/fWOVNPAbj7Y2DlxHljSEt9qI2rDFo2xRQ4SjhwVkXawX7USnmTqH7QE5OhwX0J DmnsEgZwa/2qt/h6yccahmNlWJPxAh2l6RpjR37eTiZWaho2xjGi5lJGJ+xDindx OjzDUfdmRSDdlg== -----END CERTIFICATE-----Generated at Mon Jul 21 23:19:12 2025 by rpki-client