$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: QVnF8s0PeAK/3DKAiN2za8aRtV3Ls2Vh+DZuP7FVaBQ= Subject key identifier: 4F:2A:2C:A6:B2:6D:D5:AE:51:60:08:E4:AC:6B:58:59:E0:FF:18:96 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01974F6A73AB830BA112A29409E99E9FC7D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1589 Signing time: Sun 08 Jun 2025 12:01:05 +0000 Manifest this update: Sun 08 Jun 2025 12:01:05 +0000 Manifest next update: Mon 09 Jun 2025 12:01:05 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 9: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 10: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: EBy+SB7uoiHhqEnAaFqVKkoNCCsjnF543ctGmnqSuxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 11:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4f:6a:73:ab:83:0b:a1:12:a2:94:09:e9:9e:9f:c7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jun 8 12:01:05 2025 GMT Not After : Jun 9 12:01:05 2025 GMT Subject: CN=4f2a2ca6b26dd5ae516008e4ac6b5859e0ff1896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:da:d2:2a:1c:4d:0a:ee:d0:a9:96:08:7c: 9a:ed:02:7c:4b:16:ac:f3:82:ff:04:3c:13:5f:5e: 93:74:a5:e9:dd:45:97:70:95:db:cb:ba:f3:0d:53: 8b:1c:d7:1d:56:57:c8:07:36:a8:8a:70:99:06:5e: 39:11:31:b5:85:60:1b:1b:79:b8:69:c8:a1:d3:2f: bf:c1:af:50:c7:d3:fc:80:20:7b:87:37:c2:5c:a5: 23:aa:58:52:78:25:d9:78:f0:af:e3:02:f5:11:c2: 87:b6:42:2c:d3:3a:c6:38:af:2e:0e:73:71:42:22: 2c:7b:a7:55:47:3c:c7:93:25:b2:2b:0a:84:24:b7: bd:98:08:16:9a:c3:e4:75:0b:3f:eb:10:3e:ed:53: f3:c3:d6:55:23:af:9d:5a:90:82:e0:5b:a7:76:30: 39:81:d2:52:cb:c6:1f:e9:23:69:da:75:c3:7d:dd: 7b:9d:74:5a:54:8d:4f:5c:90:06:91:75:c2:e9:c5: d6:4a:81:88:f9:a1:c5:43:4b:a7:be:18:c2:11:75: b8:4f:3c:24:ef:b1:48:e8:e4:f9:c9:c2:08:01:90: fe:54:86:18:49:3c:5d:43:46:08:00:2d:cc:47:03: f8:ef:58:2a:28:f5:49:4f:ed:94:f9:ad:41:c3:1b: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:2C:A6:B2:6D:D5:AE:51:60:08:E4:AC:6B:58:59:E0:FF:18:96 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:96:9a:68:6f:47:48:a7:9b:30:23:22:f6:12:ee:43:39:7e: e7:10:72:02:7d:24:ce:ab:cb:26:e5:eb:83:0f:65:28:ec:0a: d6:0e:b7:0a:4d:8e:a6:8f:f1:c2:36:a4:eb:5f:b5:79:27:0a: af:dd:ca:2b:b5:56:69:c6:26:af:83:cf:92:8e:c0:54:99:5f: 69:a5:71:a5:29:13:93:8f:22:18:28:b5:6d:7b:0e:14:4f:1a: d0:8e:d3:bb:dc:77:8b:79:0f:03:7d:49:c6:4f:47:23:cb:e2: c9:f7:62:b4:ac:18:65:e6:ab:7b:98:ad:04:ee:64:8b:09:18: 21:d1:50:b8:40:19:1f:9b:94:e6:f8:50:75:b6:6f:76:45:d8: 4e:c7:19:9a:39:e8:43:05:77:7e:40:2c:5b:fc:53:fb:5c:33: 02:67:2f:9f:b6:1f:cb:45:a5:d7:e5:e0:44:6f:52:f3:ca:e5: 2b:88:bd:d5:86:06:69:5e:84:a3:bb:dc:56:b2:b4:c0:e0:42: af:2d:b9:21:dc:4d:53:68:e9:b2:42:fe:f5:e7:9e:52:d9:a6: 93:ca:10:0a:b1:86:9d:b3:9b:96:c3:e4:c0:2e:aa:85:0b:9d: 12:0f:ae:7b:e4:3c:01:fe:f3:74:9b:67:40:0f:f9:e7:95:d6: 27:70:91:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdPanOrgwuhEqKUCemen8fYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwNjA4MTIwMTA1WhcNMjUwNjA5MTIwMTA1WjAzMTEwLwYDVQQD Eyg0ZjJhMmNhNmIyNmRkNWFlNTE2MDA4ZTRhYzZiNTg1OWUwZmYxODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFfa0iocTQru0KmWCHya7QJ8Sxas 84L/BDwTX16TdKXp3UWXcJXby7rzDVOLHNcdVlfIBzaoinCZBl45ETG1hWAbG3m4 acih0y+/wa9Qx9P8gCB7hzfCXKUjqlhSeCXZePCv4wL1EcKHtkIs0zrGOK8uDnNx QiIse6dVRzzHkyWyKwqEJLe9mAgWmsPkdQs/6xA+7VPzw9ZVI6+dWpCC4FundjA5 gdJSy8Yf6SNp2nXDfd17nXRaVI1PXJAGkXXC6cXWSoGI+aHFQ0unvhjCEXW4Tzwk 77FI6OT5ycIIAZD+VIYYSTxdQ0YIAC3MRwP471gqKPVJT+2U+a1Bwxt+TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8qLKaybdWuUWAI5KxrWFng/xiWMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZaaaG9H SKebMCMi9hLuQzl+5xByAn0kzqvLJuXrgw9lKOwK1g63Ck2Opo/xwjak61+1eScK r93KK7VWacYmr4PPko7AVJlfaaVxpSkTk48iGCi1bXsOFE8a0I7Tu9x3i3kPA31J xk9HI8viyfditKwYZeare5itBO5kiwkYIdFQuEAZH5uU5vhQdbZvdkXYTscZmjno QwV3fkAsW/xT+1wzAmcvn7Yfy0Wl1+XgRG9S88rlK4i91YYGaV6Eo7vcVrK0wOBC ry25IdxNU2jpskL+9eeeUtmmk8oQCrGGnbOblsPkwC6qhQudEg+ue+Q8Af7zdJtn QA/555XWJ3CR/A== -----END CERTIFICATE-----Generated at Sun Jun 8 17:53:26 2025 by rpki-client