$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: DlZuwW/+Vm5/V0Y38oKpqarBESgv3MiHwrSwjI4Kemw= Subject key identifier: 29:31:45:53:E4:29:DE:FA:C4:82:1A:CA:EE:C5:AE:7E:74:39:5C:41 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01992BFD7B607A48F545413A07A334D359AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1680 Signing time: Tue 09 Sep 2025 01:00:56 +0000 Manifest this update: Tue 09 Sep 2025 01:00:56 +0000 Manifest next update: Wed 10 Sep 2025 01:00:56 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 5: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 6: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 7: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 8: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 9: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 10: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: CkHCPAq/8uK8vEOKq6/t4PLk0P6aVR+wwwLt+KqLzJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:fd:7b:60:7a:48:f5:45:41:3a:07:a3:34:d3:59:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Sep 9 01:00:56 2025 GMT Not After : Sep 10 01:00:56 2025 GMT Subject: CN=29314553e429defac4821acaeec5ae7e74395c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:e2:cb:78:6a:9d:f2:fe:62:53:98:59:c8: 39:9f:51:ca:bb:14:09:bc:4e:4d:6e:ed:7f:eb:34: 89:7a:9d:94:5a:7b:c3:cf:26:f1:84:b1:9f:e2:d7: 31:de:d4:67:53:de:8f:93:f6:52:38:30:1e:f7:a4: b0:0f:9a:e4:59:e6:c2:18:d2:84:41:74:06:a4:d5: a3:27:b3:60:2b:7e:02:89:12:e0:ae:7b:0a:e6:dd: c6:4f:82:3f:a1:8a:52:cd:8b:72:36:fa:02:dd:2e: 68:1b:b7:5f:e8:b2:1c:aa:6a:f4:8e:e6:3c:84:a5: d2:59:47:dd:49:67:00:cc:84:72:1c:6a:83:83:93: 7e:72:04:9f:15:d1:cd:ac:89:f6:23:ca:f7:ef:10: 65:71:9d:a6:a0:b8:92:94:db:d9:c3:f7:bb:1e:16: 5f:46:9f:d6:77:c3:84:11:19:3f:2e:74:61:01:4d: d0:14:64:96:ae:e0:95:59:29:c9:d5:78:85:11:ba: 35:fe:a7:98:9a:ca:47:1e:0c:7d:37:0c:2f:f2:bc: 86:af:76:15:11:cd:56:80:e5:54:6d:0f:f7:11:6a: f8:af:88:97:17:0c:7a:a0:70:78:ee:6a:71:30:f6: 5d:ad:d8:ad:dd:b1:aa:56:13:45:bb:e5:69:b5:be: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:31:45:53:E4:29:DE:FA:C4:82:1A:CA:EE:C5:AE:7E:74:39:5C:41 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f6:74:15:17:c7:d7:d6:34:d8:02:24:34:69:68:a7:8a:f3: 29:6f:cf:b9:34:96:d6:78:bc:ca:01:50:84:70:fd:bb:90:56: c8:79:a8:10:84:67:cf:a9:40:65:9f:b1:de:da:7a:4a:9b:32: 06:50:99:56:09:75:a9:d9:31:98:95:90:55:14:bb:29:06:f4: 58:9c:94:28:fc:8b:52:cc:73:84:9b:35:4d:b8:1a:e7:8e:a2: 8f:d2:3c:d4:c5:0c:51:48:3c:1b:d1:bf:63:26:2f:3b:cf:a1: e5:eb:89:1e:7d:17:83:2c:a3:54:01:ca:1f:e1:82:ce:43:99: 16:6c:db:22:a6:39:21:6a:2d:f1:ef:c4:cc:03:75:06:12:81: e7:a0:af:8d:98:02:b7:dc:0e:a4:68:a1:b0:58:9f:19:46:6c: ce:ee:03:f6:eb:54:dd:49:8e:4d:27:1c:2d:33:3a:4b:fb:26: 0d:43:3b:d8:b8:a6:16:a2:25:b9:8f:b6:37:76:03:f7:2a:73: 4c:1c:8e:54:b2:48:b8:b2:e8:dd:90:1d:b3:56:65:8d:bc:4e: f4:d2:45:5a:b0:73:aa:37:d7:93:58:89:f8:12:96:29:1f:a4: 3c:a8:db:86:c3:f4:89:7d:e3:90:fc:cd:a7:0f:a8:b0:e2:fb: 2d:b5:a0:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkr/Xtgekj1RUE6B6M001msMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwOTA5MDEwMDU2WhcNMjUwOTEwMDEwMDU2WjAzMTEwLwYDVQQD EygyOTMxNDU1M2U0MjlkZWZhYzQ4MjFhY2FlZWM1YWU3ZTc0Mzk1YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dTiy3hqnfL+YlOYWcg5n1HKuxQJ vE5Nbu1/6zSJep2UWnvDzybxhLGf4tcx3tRnU96Pk/ZSODAe96SwD5rkWebCGNKE QXQGpNWjJ7NgK34CiRLgrnsK5t3GT4I/oYpSzYtyNvoC3S5oG7df6LIcqmr0juY8 hKXSWUfdSWcAzIRyHGqDg5N+cgSfFdHNrIn2I8r37xBlcZ2moLiSlNvZw/e7HhZf Rp/Wd8OEERk/LnRhAU3QFGSWruCVWSnJ1XiFEbo1/qeYmspHHgx9Nwwv8ryGr3YV Ec1WgOVUbQ/3EWr4r4iXFwx6oHB47mpxMPZdrdit3bGqVhNFu+Vptb6gHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkxRVPkKd76xIIayu7Frn50OVxBMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/Z0FRfH 19Y02AIkNGlop4rzKW/PuTSW1ni8ygFQhHD9u5BWyHmoEIRnz6lAZZ+x3tp6Spsy BlCZVgl1qdkxmJWQVRS7KQb0WJyUKPyLUsxzhJs1Tbga546ij9I81MUMUUg8G9G/ YyYvO8+h5euJHn0XgyyjVAHKH+GCzkOZFmzbIqY5IWot8e/EzAN1BhKB56CvjZgC t9wOpGihsFifGUZszu4D9utU3UmOTSccLTM6S/smDUM72LimFqIluY+2N3YD9ypz TByOVLJIuLLo3ZAds1ZljbxO9NJFWrBzqjfXk1iJ+BKWKR+kPKjbhsP0iX3jkPzN pw+osOL7LbWg1Q== -----END CERTIFICATE-----Generated at Tue Sep 9 06:17:49 2025 by rpki-client