$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: KAcVJ8XAdj/GN0d47U8pMdom6IKqmRKwqotnxefarBk= Subject key identifier: 14:BA:DE:CB:63:E4:FE:66:F7:EA:36:4A:AE:5F:57:44:E5:D1:69:5B Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01965C156410A22E934672D6B360BD6C0A47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 150B Signing time: Tue 22 Apr 2025 06:00:27 +0000 Manifest this update: Tue 22 Apr 2025 06:00:27 +0000 Manifest next update: Wed 23 Apr 2025 06:00:27 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 9: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 10: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: is1md9N1njfrZ30NBTZCI3HkpYG9J0sNjZ/sLgm7tZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Apr 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5c:15:64:10:a2:2e:93:46:72:d6:b3:60:bd:6c:0a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Apr 22 06:00:27 2025 GMT Not After : Apr 23 06:00:27 2025 GMT Subject: CN=14badecb63e4fe66f7ea364aae5f5744e5d1695b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:e2:61:f9:0d:81:60:11:c1:74:62:e0:e8: 0a:de:0c:f4:14:d1:ed:ec:c1:70:75:d4:d4:94:16: a3:89:2e:7f:48:22:28:16:44:90:78:2c:b2:e5:c3: a1:5b:a3:bf:6d:82:1f:91:fc:6e:9c:67:01:f5:fc: e0:75:49:89:90:d6:f0:74:a5:ff:5c:e5:b4:fb:73: fe:56:0c:4d:75:6b:f8:e8:fe:36:19:de:6c:0d:a7: a3:4c:22:dd:2e:aa:ae:86:c2:50:72:6e:27:d1:33: be:50:f1:c2:52:0b:43:83:12:c7:bd:fe:aa:21:98: 03:95:b1:db:45:fa:88:d5:db:9e:5b:03:97:01:93: 5b:f9:2b:e8:85:f2:3f:a5:30:75:ea:b0:12:c9:61: 4e:0a:1a:c3:6b:52:db:12:6b:1e:39:a3:0e:8e:09: 82:37:3c:5c:85:39:e1:49:25:fb:4a:3f:b4:43:47: da:eb:30:57:4e:b2:fa:ea:20:0a:99:13:b3:fc:97: 39:f9:0e:57:b6:97:27:c4:08:ac:6e:79:2e:a4:60: ce:53:63:a7:d8:f8:1b:c8:e1:d7:28:f6:63:62:1f: 43:8a:78:8b:b6:b7:35:61:f0:3a:e3:f3:d2:bb:72: 64:64:bb:73:19:99:85:b0:37:7d:24:20:9d:eb:e3: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BA:DE:CB:63:E4:FE:66:F7:EA:36:4A:AE:5F:57:44:E5:D1:69:5B X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c0:1e:6b:8d:2a:91:49:c6:ed:55:11:f3:fc:ed:f3:56:bc: 2b:26:03:83:20:62:52:05:3b:fa:6d:47:b4:1f:62:4c:0f:64: a9:c2:81:8b:c3:f5:f0:c9:a6:c7:6b:53:13:32:85:48:01:90: 07:93:3b:48:79:28:58:99:44:69:33:17:b9:9b:8e:44:97:09: 65:7a:4f:3f:fa:d6:23:dc:15:ae:05:40:b1:7e:5d:f3:da:ae: 94:5b:29:03:ad:8b:fa:57:a1:29:11:6e:2d:cf:77:32:84:a0: ce:24:86:9e:7a:91:19:6b:43:f5:10:83:08:a2:7a:da:08:23: 3c:84:88:fc:be:6a:cf:57:3e:ff:10:e1:b3:1e:c2:e3:27:8b: 00:85:e3:87:28:12:88:1c:e9:a3:bf:50:2c:2f:db:c0:1a:20: 74:d0:d5:65:c1:fa:59:b2:c6:da:92:d2:42:4d:d5:94:61:0c: cd:32:b3:ae:4a:3e:aa:83:6c:88:3d:b8:a6:c3:bd:f9:33:72: b8:44:6e:3d:09:27:ce:53:32:5b:f0:fc:46:88:d3:00:62:81: 11:9f:d9:33:b6:5a:e5:3a:06:14:f4:3f:9c:66:f4:cb:a8:b8: 1c:83:87:b4:c0:7f:ac:f4:69:e6:e6:39:e3:8b:42:48:30:24: 17:fa:85:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZcFWQQoi6TRnLWs2C9bApHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwNDIyMDYwMDI3WhcNMjUwNDIzMDYwMDI3WjAzMTEwLwYDVQQD EygxNGJhZGVjYjYzZTRmZTY2ZjdlYTM2NGFhZTVmNTc0NGU1ZDE2OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4PiYfkNgWARwXRi4OgK3gz0FNHt 7MFwddTUlBajiS5/SCIoFkSQeCyy5cOhW6O/bYIfkfxunGcB9fzgdUmJkNbwdKX/ XOW0+3P+VgxNdWv46P42Gd5sDaejTCLdLqquhsJQcm4n0TO+UPHCUgtDgxLHvf6q IZgDlbHbRfqI1dueWwOXAZNb+SvohfI/pTB16rASyWFOChrDa1LbEmseOaMOjgmC NzxchTnhSSX7Sj+0Q0fa6zBXTrL66iAKmROz/Jc5+Q5XtpcnxAisbnkupGDOU2On 2PgbyOHXKPZjYh9DiniLtrc1YfA64/PSu3JkZLtzGZmFsDd9JCCd6+PmbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS63stj5P5m9+o2Sq5fV0Tl0WlbMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcAea40q kUnG7VUR8/zt81a8KyYDgyBiUgU7+m1HtB9iTA9kqcKBi8P18Mmmx2tTEzKFSAGQ B5M7SHkoWJlEaTMXuZuORJcJZXpPP/rWI9wVrgVAsX5d89qulFspA62L+lehKRFu Lc93MoSgziSGnnqRGWtD9RCDCKJ62ggjPISI/L5qz1c+/xDhsx7C4yeLAIXjhygS iBzpo79QLC/bwBogdNDVZcH6WbLG2pLSQk3VlGEMzTKzrko+qoNsiD24psO9+TNy uERuPQknzlMyW/D8RojTAGKBEZ/ZM7Za5ToGFPQ/nGb0y6i4HIOHtMB/rPRp5uY5 44tCSDAkF/qFOw== -----END CERTIFICATE-----Generated at Tue Apr 22 15:34:16 2025 by rpki-client