$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: qVjw26cvU6O7fmMPIIufHZ1dpJhy1gntXQ79HtgfDq0= Subject key identifier: 32:F4:4E:35:34:B7:26:65:D5:09:47:57:B3:1B:E4:DB:32:72:1D:28 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 01991D2F3A688F5FC3EB2C9BD0E88EB7049D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 15B1 Signing time: Sat 06 Sep 2025 04:00:58 +0000 Manifest this update: Sat 06 Sep 2025 04:00:58 +0000 Manifest next update: Sun 07 Sep 2025 04:00:58 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 5: JCqujfTGMs0CXH7Tcl7wXUJG7rk.roa (hash: EOjAhyUB1/yJybUbQZT8krxAn/rD2CzV6whjFRdiiOs=) 6: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 7: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: h7KXViYuVNBfI0id9jGSM3/92XdoExtB/dtqbCE2Jhg=) 9: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 10: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (hash: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=) 11: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 12: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 13: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 14: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:2f:3a:68:8f:5f:c3:eb:2c:9b:d0:e8:8e:b7:04:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Sep 6 04:00:58 2025 GMT Not After : Sep 7 04:00:58 2025 GMT Subject: CN=32f44e3534b72665d5094757b31be4db32721d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:8d:89:4f:70:5e:99:96:22:95:59:0e:61: 44:08:aa:47:ea:15:47:70:ae:c8:91:85:ba:75:00: 4e:a4:91:67:c9:07:96:57:7a:a6:6b:b4:b5:ff:b1: 73:93:4d:e5:b5:3d:6d:7a:e2:ba:ff:4e:08:6d:3d: f3:d9:a3:df:de:c6:ef:79:e5:83:6a:01:a6:80:a7: 5e:38:e9:eb:88:c5:22:da:0b:1b:ea:c8:b5:cd:3b: a3:af:f9:c9:2c:c5:bb:2a:20:75:31:d6:53:70:9a: cd:38:a6:92:8b:ea:4b:3b:0e:11:b8:2e:5d:0f:cb: 37:44:33:4d:f6:42:99:d2:a2:18:23:e2:c2:f3:c5: 41:86:1f:d4:3b:7a:11:83:20:bc:c1:df:f9:a7:66: ce:e4:7f:b7:5f:b5:9c:2d:02:00:a4:bc:0d:a5:e1: f1:c0:95:3a:30:98:39:2e:99:93:61:5a:f0:4b:11: 3f:3c:bb:96:1c:55:10:89:5f:88:ca:02:79:1b:a2: f1:9f:1e:9f:7e:da:fe:1d:81:1b:a5:34:03:e9:ed: bd:46:a2:8c:de:7c:06:79:cd:92:13:0d:af:f0:42: c8:e6:9b:87:f7:72:77:01:72:e2:0d:67:a3:2b:1b: 03:6c:9c:ab:1b:95:53:a8:8b:af:2c:5a:1b:e5:47: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F4:4E:35:34:B7:26:65:D5:09:47:57:B3:1B:E4:DB:32:72:1D:28 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:40:21:e0:0d:51:99:e8:3b:d2:bb:96:85:60:a2:a0:10:50: 97:3c:4f:3c:cb:59:46:5c:56:75:1e:f4:94:31:0d:c1:e1:8a: fd:90:0a:37:18:94:d4:ed:9e:0b:13:eb:e6:6f:40:be:81:10: b4:9e:63:3c:0d:cb:7f:22:bf:27:09:af:0b:b4:e5:92:d3:9d: 92:94:db:c6:08:55:e4:70:b5:fa:fe:c4:1d:8e:e2:27:75:15: d8:85:86:05:eb:83:e1:9f:d2:c1:80:a5:da:c1:1d:f1:c2:06: 9a:43:98:b8:c7:87:12:4e:28:df:d4:10:72:92:02:7f:ee:fb: 5c:82:f0:85:f9:3c:35:67:25:09:1f:6e:4f:19:e0:2e:1a:85: 2c:eb:21:7b:97:52:4d:48:79:bb:94:1c:29:10:2b:73:4f:02: 64:8c:a4:95:81:b4:bd:f7:f3:47:27:f9:34:77:99:f8:6f:9a: b1:b8:69:44:7b:72:87:9b:0e:c1:a9:f5:a9:92:2a:1d:54:e5: 1b:27:3b:44:04:35:3d:e3:ec:59:9e:a9:f3:10:40:e8:6a:f1: 94:28:4a:cf:51:1c:e2:64:bc:87:3e:31:cf:0f:d6:85:c4:f6: 5c:ac:34:f8:de:d7:ad:9d:ba:aa:0f:78:b7:73:b9:3b:9b:5f: c6:ce:b8:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkdLzpoj1/D6yyb0OiOtwSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwOTA2MDQwMDU4WhcNMjUwOTA3MDQwMDU4WjAzMTEwLwYDVQQD EygzMmY0NGUzNTM0YjcyNjY1ZDUwOTQ3NTdiMzFiZTRkYjMyNzIxZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld6NiU9wXpmWIpVZDmFECKpH6hVH cK7IkYW6dQBOpJFnyQeWV3qma7S1/7Fzk03ltT1teuK6/04IbT3z2aPf3sbveeWD agGmgKdeOOnriMUi2gsb6si1zTujr/nJLMW7KiB1MdZTcJrNOKaSi+pLOw4RuC5d D8s3RDNN9kKZ0qIYI+LC88VBhh/UO3oRgyC8wd/5p2bO5H+3X7WcLQIApLwNpeHx wJU6MJg5LpmTYVrwSxE/PLuWHFUQiV+IygJ5G6Lxnx6fftr+HYEbpTQD6e29RqKM 3nwGec2SEw2v8ELI5puH93J3AXLiDWejKxsDbJyrG5VTqIuvLFob5Ud/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL0TjU0tyZl1QlHV7Mb5Nsych0oMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0Ah4A1R meg70ruWhWCioBBQlzxPPMtZRlxWdR70lDENweGK/ZAKNxiU1O2eCxPr5m9AvoEQ tJ5jPA3LfyK/JwmvC7TlktOdkpTbxghV5HC1+v7EHY7iJ3UV2IWGBeuD4Z/SwYCl 2sEd8cIGmkOYuMeHEk4o39QQcpICf+77XILwhfk8NWclCR9uTxngLhqFLOshe5dS TUh5u5QcKRArc08CZIyklYG0vffzRyf5NHeZ+G+asbhpRHtyh5sOwan1qZIqHVTl Gyc7RAQ1PePsWZ6p8xBA6GrxlChKz1Ec4mS8hz4xzw/WhcT2XKw0+N7XrZ26qg94 t3O5O5tfxs64fQ== -----END CERTIFICATE-----Generated at Sat Sep 6 11:45:54 2025 by rpki-client