$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: Z8iZNIhGUqSlUDRmSfcBNWJpXbFcgQyud1KwpdofWwI= Subject key identifier: 11:28:56:05:FB:82:62:B1:E8:2F:5B:6F:A7:D7:79:BB:20:D5:FD:FD Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019931FF3998CD78A4E9F4DE4F449D9D079F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 168C Signing time: Wed 10 Sep 2025 05:00:33 +0000 Manifest this update: Wed 10 Sep 2025 05:00:33 +0000 Manifest next update: Thu 11 Sep 2025 05:00:33 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 3: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 4: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 5: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: WaA1h+n09NQKxeD6ec6/bMZu0PWuJNgFW/84/OIqX14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:ff:39:98:cd:78:a4:e9:f4:de:4f:44:9d:9d:07:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Sep 10 05:00:33 2025 GMT Not After : Sep 11 05:00:33 2025 GMT Subject: CN=11285605fb8262b1e82f5b6fa7d779bb20d5fdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:d3:5b:19:7c:e1:44:c2:98:cc:33:2b:ef: 0e:06:74:5e:d7:8a:74:ea:b9:a8:82:fc:99:a6:0c: 02:e8:10:f3:ac:4a:5d:77:00:ac:de:0f:ae:f3:8e: f6:51:22:ed:a8:cc:4c:4b:79:77:ef:7a:59:40:ba: 69:f2:dc:66:f2:79:ca:05:c3:ac:29:3f:2d:c1:2c: e9:72:6a:ac:09:e1:c5:25:08:e3:f9:72:5b:c8:e2: 97:52:16:92:d8:98:be:05:cb:d6:3f:2e:7e:11:2a: b6:55:49:7e:ac:4e:8e:ed:b7:ed:f5:4b:b3:c0:af: 88:21:c7:ed:2e:77:03:30:95:cc:81:ea:7a:62:2f: ae:cd:bc:fa:02:78:51:8c:95:4f:44:9d:d7:8e:b0: 72:54:d6:37:3b:e9:5d:a5:88:4e:b7:82:c2:a9:72: 39:2e:6a:92:5d:e2:5c:92:b1:e3:b8:e3:78:e6:23: a7:7a:1a:26:9e:51:6b:0e:2c:fc:60:d7:f7:b6:5a: b9:a5:20:d7:63:a8:ac:5b:1f:87:63:5d:1c:25:53: 3e:50:56:0b:67:12:82:19:2b:0a:ac:a9:f9:5c:53: 59:48:ef:dd:a9:9c:79:a2:44:ed:31:41:f6:c1:d9: 69:f2:8e:77:11:2b:2e:6b:86:77:f2:28:d8:9d:55: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:28:56:05:FB:82:62:B1:E8:2F:5B:6F:A7:D7:79:BB:20:D5:FD:FD X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:db:f4:cb:08:fb:f3:6f:a1:50:ff:1b:54:fd:1a:8b:83:c8: 5d:2e:38:92:9b:e6:47:57:bb:f1:b1:83:3e:24:f3:24:cf:02: c2:05:56:b4:75:ca:20:c0:94:20:9b:f7:6c:b6:15:b7:ae:07: b0:42:d2:f9:7b:83:f1:9d:3b:1e:a0:81:8d:b4:9c:84:71:ad: 04:a8:13:9c:4a:cd:96:5a:46:1d:e8:f7:39:65:06:a1:e1:a0: 87:5d:23:34:f3:ad:98:d5:1d:b3:06:f2:ca:9e:b7:26:ac:9a: 37:1e:19:67:8c:f4:72:a7:21:5e:13:6f:ae:10:7a:ac:ef:c9: fc:8e:e5:8e:db:74:3b:0d:07:6f:0e:16:9a:c1:6c:27:78:c3: 8b:2c:9e:32:b9:19:39:50:6f:58:9a:a3:f5:50:64:d3:3b:fe: 93:40:84:dd:e5:56:f8:f5:b2:80:97:79:38:e1:a5:82:11:f8: b9:a4:10:de:e7:39:a9:8e:12:2c:6c:aa:7e:7b:b9:d6:af:05: f7:20:87:05:bc:c3:cb:aa:4d:3b:d5:5a:a5:d6:68:96:90:17: 50:b4:b2:ce:56:bc:4d:75:b6:96:7f:37:40:02:13:41:77:75: 84:b8:0d:c9:44:c3:a4:92:e4:6d:f2:6a:21:e7:f7:1c:8e:85: e3:5c:08:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkx/zmYzXik6fTeT0SdnQefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUwOTEwMDUwMDMzWhcNMjUwOTExMDUwMDMzWjAzMTEwLwYDVQQD EygxMTI4NTYwNWZiODI2MmIxZTgyZjViNmZhN2Q3NzliYjIwZDVmZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD7TWxl84UTCmMwzK+8OBnRe14p0 6rmogvyZpgwC6BDzrEpddwCs3g+u8472USLtqMxMS3l373pZQLpp8txm8nnKBcOs KT8twSzpcmqsCeHFJQjj+XJbyOKXUhaS2Ji+BcvWPy5+ESq2VUl+rE6O7bft9Uuz wK+IIcftLncDMJXMgep6Yi+uzbz6AnhRjJVPRJ3XjrByVNY3O+ldpYhOt4LCqXI5 LmqSXeJckrHjuON45iOnehomnlFrDiz8YNf3tlq5pSDXY6isWx+HY10cJVM+UFYL ZxKCGSsKrKn5XFNZSO/dqZx5okTtMUH2wdlp8o53ESsua4Z38ijYnVWpowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEoVgX7gmKx6C9bb6fXebsg1f39MB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9v0ywj7 82+hUP8bVP0ai4PIXS44kpvmR1e78bGDPiTzJM8CwgVWtHXKIMCUIJv3bLYVt64H sELS+XuD8Z07HqCBjbSchHGtBKgTnErNllpGHej3OWUGoeGgh10jNPOtmNUdswby yp63JqyaNx4ZZ4z0cqchXhNvrhB6rO/J/I7ljtt0Ow0Hbw4WmsFsJ3jDiyyeMrkZ OVBvWJqj9VBk0zv+k0CE3eVW+PWygJd5OOGlghH4uaQQ3uc5qY4SLGyqfnu51q8F 9yCHBbzDy6pNO9VapdZolpAXULSyzla8TXW2ln83QAITQXd1hLgNyUTDpJLkbfJq Ief3HI6F41wIZQ== -----END CERTIFICATE-----Generated at Wed Sep 10 12:00:08 2025 by rpki-client