$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: jh9z1vysDkSqKRitKOwiV8YuwYTDOvdsGUX3rHXGOCo= Subject key identifier: 43:6B:23:77:FE:30:AB:84:03:50:9C:AA:81:80:93:27:21:08:D2:45 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 0196372D0670DF14F2303003F3059F2E3394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 14FE Signing time: Tue 15 Apr 2025 02:00:19 +0000 Manifest this update: Tue 15 Apr 2025 02:00:19 +0000 Manifest next update: Wed 16 Apr 2025 02:00:19 +0000 Files and hashes: 1: 1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa (hash: EOxsCadON2KcZNrQxz29cfWR8eSAuCeFKTgS66ed6p8=) 2: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=) 3: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=) 4: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=) 5: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=) 6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=) 7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=) 8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=) 9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=) 10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=) 11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=) 12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=) 13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: /JmBmtiP1rVu3khf3hVBavWKVwpgxTTzPixMC0vXncE=) 14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=) 15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=) 16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=) 17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=) 18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=) 19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=) 20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:37:2d:06:70:df:14:f2:30:30:03:f3:05:9f:2e:33:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Apr 15 02:00:19 2025 GMT Not After : Apr 16 02:00:19 2025 GMT Subject: CN=436b2377fe30ab8403509caa818093272108d245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:59:74:01:0d:a1:08:a6:b9:ce:a5:0e:1d: 95:43:a4:41:39:ef:bc:55:ca:41:11:3d:65:67:66: de:a8:2f:c3:89:f8:f9:63:ac:55:80:3b:ad:fa:73: ed:19:46:27:12:7e:0d:38:fd:67:fc:7a:ee:ca:2f: e3:9d:32:8b:96:c9:02:1a:3a:29:64:56:38:0c:da: 44:95:4e:07:00:e0:1b:82:c6:de:68:94:d0:0a:d9: 59:0d:53:05:a2:9d:40:a9:ab:66:92:4d:a0:28:84: ba:99:92:26:a9:10:88:64:1e:91:dd:f2:4d:97:81: 7a:95:95:35:fe:e7:ca:c4:bf:b8:08:bc:a0:1c:26: a1:3d:1f:f6:30:57:d3:4e:1e:38:1b:17:62:44:6a: a0:38:56:d9:03:25:9b:4a:90:eb:b4:f1:f9:c4:03: 3e:80:84:c6:f1:83:68:bd:b3:a4:8b:56:28:fc:f3: 58:03:28:48:36:1c:f0:26:f0:97:3a:7e:af:a5:c8: a4:b9:2b:97:0c:2a:f8:bc:76:6d:41:89:a7:72:b3: b8:0f:99:2d:3d:1a:06:c8:af:b5:c7:86:7c:a6:75: 7b:7a:bd:4c:09:8d:de:8f:5c:61:13:4c:1d:b6:8d: db:f8:2e:c7:74:d3:57:04:d7:61:cb:40:f9:df:ee: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:23:77:FE:30:AB:84:03:50:9C:AA:81:80:93:27:21:08:D2:45 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:70:c5:0e:46:b6:85:f9:93:f8:c6:2f:e4:ff:35:0b:91:99: 4c:49:c3:51:78:26:d6:5f:3b:ec:42:fa:fd:09:7d:d7:51:9f: 18:b0:f7:b3:6d:33:4c:06:1c:b7:d7:8e:55:6a:ee:d7:65:eb: c3:d1:19:73:33:7c:8f:09:63:36:1e:04:df:52:68:b3:bb:2c: 40:f3:2b:8c:8e:48:44:2a:e5:57:9a:26:cd:90:b5:51:cf:a0: 35:15:a6:05:e8:c0:44:2f:49:79:3c:9b:f5:55:bf:fb:f7:d5: 29:71:c0:33:d9:a9:ae:aa:f1:93:13:cf:e4:f3:5d:cd:d7:77: 54:04:27:b9:e9:34:d3:c4:5f:04:52:96:22:33:40:6a:20:01: fb:e5:0e:eb:9c:26:3d:5e:ce:39:53:b6:fb:44:20:a0:19:f1: e6:34:fb:3b:45:2f:a0:3f:0a:6a:85:14:0b:fd:93:8a:48:b0: d0:00:0a:72:96:1e:c2:13:10:65:5c:43:a2:6b:76:10:16:bf: 96:f2:2b:79:da:23:8b:22:94:19:e5:91:e3:0d:3c:f6:ee:b9: ea:a2:7d:00:f1:85:a4:ea:c0:ba:95:c1:cb:67:4d:56:7d:b0: 8b:c3:64:e1:7f:20:c1:06:1b:c2:26:f5:60:41:cf:ec:ab:bf: 2d:2e:e9:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY3LQZw3xTyMDAD8wWfLjOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUwNDE1MDIwMDE5WhcNMjUwNDE2MDIwMDE5WjAzMTEwLwYDVQQD Eyg0MzZiMjM3N2ZlMzBhYjg0MDM1MDljYWE4MTgwOTMyNzIxMDhkMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQdZdAENoQimuc6lDh2VQ6RBOe+8 VcpBET1lZ2beqC/Difj5Y6xVgDut+nPtGUYnEn4NOP1n/Hruyi/jnTKLlskCGjop ZFY4DNpElU4HAOAbgsbeaJTQCtlZDVMFop1Aqatmkk2gKIS6mZImqRCIZB6R3fJN l4F6lZU1/ufKxL+4CLygHCahPR/2MFfTTh44GxdiRGqgOFbZAyWbSpDrtPH5xAM+ gITG8YNovbOki1Yo/PNYAyhINhzwJvCXOn6vpcikuSuXDCr4vHZtQYmncrO4D5kt PRoGyK+1x4Z8pnV7er1MCY3ej1xhE0wdto3b+C7HdNNXBNdhy0D53+7c/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENrI3f+MKuEA1CcqoGAkychCNJFMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3DFDka2 hfmT+MYv5P81C5GZTEnDUXgm1l877EL6/Ql911GfGLD3s20zTAYct9eOVWru12Xr w9EZczN8jwljNh4E31Jos7ssQPMrjI5IRCrlV5omzZC1Uc+gNRWmBejARC9JeTyb 9VW/+/fVKXHAM9mprqrxkxPP5PNdzdd3VAQnuek008RfBFKWIjNAaiAB++UO65wm PV7OOVO2+0QgoBnx5jT7O0UvoD8KaoUUC/2Tikiw0AAKcpYewhMQZVxDomt2EBa/ lvIredojiyKUGeWR4w089u656qJ9APGFpOrAupXBy2dNVn2wi8Nk4X8gwQYbwib1 YEHP7Ku/LS7pPg== -----END CERTIFICATE-----Generated at Tue Apr 15 12:36:11 2025 by rpki-client