$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: dVhs0OXX2mRSj/uS4HZzPyMWq+OXNx/kp/5eU2KqbAs= Subject key identifier: 05:75:49:A5:37:1D:94:17:80:08:D5:0A:A7:8A:81:43:D2:F6:2A:01 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 01983D97AF85EA77F1A48D9A02B2B92C9115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 160B Signing time: Thu 24 Jul 2025 18:00:07 +0000 Manifest this update: Thu 24 Jul 2025 18:00:07 +0000 Manifest next update: Fri 25 Jul 2025 18:00:07 +0000 Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=) 2: DtvMeLGkxpzSQ89krjZ9_dl4pY4.roa (hash: +oEq5TGd14PKyTdQnk2cv0dkWZbc1YE6INGNs+tsIg0=) 3: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=) 4: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=) 5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=) 6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=) 7: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: T0txGcsfD18W2sI5dQGmXsRXlOoLWc+uu4YmvtbWs8w=) 8: UM40IJoMbmC2E6_NVNk7myz37CE.roa (hash: ho6wywXgZcMzdgmZ/BHVUcsSpC5snRTwoXFhr5WOwMg=) 9: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=) 10: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=) 11: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 14:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3d:97:af:85:ea:77:f1:a4:8d:9a:02:b2:b9:2c:91:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jul 24 18:00:07 2025 GMT Not After : Jul 25 18:00:07 2025 GMT Subject: CN=057549a5371d94178008d50aa78a8143d2f62a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:19:a6:a4:62:ae:f0:fc:b3:1c:24:b7:8f: 88:c6:2e:f0:cf:c6:c6:98:b6:17:5b:37:d4:5d:75: 53:8b:a3:84:88:5c:cc:de:ac:9b:2e:6a:fe:81:b8: ae:ef:f6:91:bc:97:68:a8:16:41:88:a0:cc:4e:e6: a0:8d:11:05:5a:80:43:52:9e:e0:51:c8:3f:d5:3c: 95:e5:67:18:73:11:d8:f3:73:3f:8c:08:cf:df:c9: 0b:79:fb:99:96:d7:0a:f4:ad:f2:24:c7:bb:8e:bb: 33:83:fc:5f:a0:36:ef:71:fe:38:49:22:20:ec:10: 4d:8e:da:82:18:58:76:db:ce:ea:ad:1b:55:a3:c6: 46:0b:b2:d7:a0:40:fa:a9:8a:f2:04:a8:89:4c:d6: 0a:7e:46:91:2e:76:a8:ea:3f:41:e3:0b:f3:5c:e0: 09:f9:a2:a5:a4:b7:ef:18:01:c8:10:77:28:54:61: 57:28:66:b3:49:64:1a:79:39:9c:cb:7f:69:f7:31: 12:de:87:3f:9e:20:52:0b:a6:12:ea:e9:1a:6b:42: 8e:d2:89:04:7a:c2:38:c5:84:88:83:5e:c4:39:ac: 49:09:91:27:90:8c:b3:6d:04:17:b4:a7:d4:b2:2f: a6:fd:6a:72:57:14:af:05:ed:7d:8a:f3:31:a1:81: 41:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:49:A5:37:1D:94:17:80:08:D5:0A:A7:8A:81:43:D2:F6:2A:01 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e9:6e:d5:c4:24:79:d6:94:77:f2:4c:de:67:a3:66:08:ca: 5e:3a:c5:af:2b:c0:7d:b2:9d:81:db:7b:c8:e2:7a:e7:82:99: 98:55:3e:5d:66:9f:6e:a8:1d:14:18:40:d4:de:74:30:5e:37: 62:7e:3c:cb:2d:99:31:85:68:7b:c2:14:82:0e:7c:47:73:aa: 19:39:2a:23:d5:d2:c4:62:6d:db:a7:aa:e4:cd:27:35:cf:c9: ed:d5:b2:5f:e3:09:93:b6:63:34:37:5a:3e:b9:49:13:8e:e8: 61:df:23:90:16:4c:e1:2d:68:2a:74:0d:b3:a1:10:51:48:ae: f9:9a:90:df:f4:0e:dd:8f:4d:0e:04:84:2f:02:2e:e5:72:65: ad:e3:24:a0:8b:4c:37:52:9a:3e:f3:ae:9e:fe:4a:4a:f0:f4: db:26:58:60:81:19:f0:10:ee:4c:a3:86:5e:6e:eb:5f:d4:66: 42:21:e6:9f:4e:3b:62:59:90:9b:16:65:f3:9b:e3:fe:66:2a: 69:1e:59:42:20:4f:35:56:87:2e:c3:61:7c:a5:11:e6:04:01: 82:e3:8e:f8:f9:f4:05:1d:03:c4:10:52:1b:0e:63:a6:fa:7f: e2:99:6d:b4:69:0a:d6:a9:11:46:34:c3:70:37:b9:cc:bc:fc: 13:45:e4:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg9l6+F6nfxpI2aArK5LJEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjUwNzI0MTgwMDA3WhcNMjUwNzI1MTgwMDA3WjAzMTEwLwYDVQQD EygwNTc1NDlhNTM3MWQ5NDE3ODAwOGQ1MGFhNzhhODE0M2QyZjYyYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SIZpqRirvD8sxwkt4+Ixi7wz8bG mLYXWzfUXXVTi6OEiFzM3qybLmr+gbiu7/aRvJdoqBZBiKDMTuagjREFWoBDUp7g Ucg/1TyV5WcYcxHY83M/jAjP38kLefuZltcK9K3yJMe7jrszg/xfoDbvcf44SSIg 7BBNjtqCGFh2287qrRtVo8ZGC7LXoED6qYryBKiJTNYKfkaRLnao6j9B4wvzXOAJ +aKlpLfvGAHIEHcoVGFXKGazSWQaeTmcy39p9zES3oc/niBSC6YS6ukaa0KO0okE esI4xYSIg17EOaxJCZEnkIyzbQQXtKfUsi+m/WpyVxSvBe19ivMxoYFBJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAV1SaU3HZQXgAjVCqeKgUPS9ioBMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOlu1cQk edaUd/JM3mejZgjKXjrFryvAfbKdgdt7yOJ654KZmFU+XWafbqgdFBhA1N50MF43 Yn48yy2ZMYVoe8IUgg58R3OqGTkqI9XSxGJt26eq5M0nNc/J7dWyX+MJk7ZjNDda PrlJE47oYd8jkBZM4S1oKnQNs6EQUUiu+ZqQ3/QO3Y9NDgSELwIu5XJlreMkoItM N1KaPvOunv5KSvD02yZYYIEZ8BDuTKOGXm7rX9RmQiHmn047YlmQmxZl85vj/mYq aR5ZQiBPNVaHLsNhfKUR5gQBguOO+Pn0BR0DxBBSGw5jpvp/4plttGkK1qkRRjTD cDe5zLz8E0Xkjw== -----END CERTIFICATE-----Generated at Thu Jul 24 23:13:21 2025 by rpki-client