$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: RsknZtQHvw/nMK73hMXqZQFNOumMPNJD+o0ZnHCukBE= Subject key identifier: 7A:19:A6:D9:69:C1:C3:E7:F2:FC:8C:30:85:50:6D:0E:8F:7E:9F:7D Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019747E7BD304DCE37B1C8B06B43A676E011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 14B7 Signing time: Sat 07 Jun 2025 01:00:58 +0000 Manifest this update: Sat 07 Jun 2025 01:00:58 +0000 Manifest next update: Sun 08 Jun 2025 01:00:58 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=) 5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 6: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: ny+sweMazVC8BoiwL0r96yvjyO+u7NiFCDtMpNLPYs8=) 7: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 8: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=) 9: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 10: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 11: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:bd:30:4d:ce:37:b1:c8:b0:6b:43:a6:76:e0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jun 7 01:00:58 2025 GMT Not After : Jun 8 01:00:58 2025 GMT Subject: CN=7a19a6d969c1c3e7f2fc8c3085506d0e8f7e9f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:2c:18:84:69:7f:2a:b3:04:5a:49:80:0b: 03:2d:47:8f:b3:ec:40:e8:d0:65:18:82:e4:eb:48: 74:22:f2:cd:d0:3d:5c:e6:63:04:18:86:40:26:f7: a3:c1:4f:56:1f:fb:8f:0b:ca:9b:42:00:42:f2:17: 72:79:61:b0:1b:e0:89:2b:3d:29:2c:a4:bd:50:e4: 3d:9d:69:22:7a:01:45:9c:fe:f5:8d:4b:3b:36:68: 7d:41:bf:1e:3f:9a:d0:c1:5d:42:eb:5c:d7:f5:09: a5:20:4d:dc:e1:de:f1:8b:7e:f7:06:57:c2:89:7c: 4e:4c:8c:5e:92:cd:fc:03:e9:43:7e:35:ed:75:99: 6e:5f:a8:77:03:84:59:ce:03:47:94:31:e2:b6:f2: e2:60:d6:b3:1d:03:d1:be:9b:0f:38:53:21:b9:30: 8b:23:9f:81:34:03:db:52:11:3a:8e:0b:7c:f2:a8: db:8a:2f:fa:4e:9c:98:d3:a2:4a:94:0e:2e:6b:73: 63:58:94:b4:ef:b4:28:0f:f3:bc:0a:8a:bc:5a:7f: fe:eb:fd:fb:f5:3a:13:f0:9e:57:98:37:8c:26:c9: 52:88:39:6c:6a:2d:52:f7:71:38:d5:95:30:15:9c: 6c:db:28:86:eb:88:56:fc:ca:3c:11:2f:d1:d9:ae: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:19:A6:D9:69:C1:C3:E7:F2:FC:8C:30:85:50:6D:0E:8F:7E:9F:7D X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:dc:77:ee:f6:6e:0b:9d:e8:be:87:4d:9e:5e:a9:3b:40:59: 06:d6:a8:f6:de:ec:91:2b:10:a6:77:bc:ea:a7:94:1b:66:1d: 63:d1:9c:5f:bd:e0:8f:77:08:09:67:9c:fa:89:6f:82:15:87: 25:f2:17:1a:11:82:fe:f7:20:d6:27:68:4c:3b:17:0e:c9:a0: 79:b1:73:a0:cc:62:5b:46:bf:86:7a:4d:29:e3:06:a9:a6:85: b1:c8:35:d3:68:1f:4c:94:83:4b:7c:e4:8f:f4:41:00:d7:24: 80:73:b7:08:64:31:30:7d:56:65:a4:67:29:4f:df:b0:88:7e: 5f:f7:4d:35:6a:ed:68:1d:86:51:03:25:e2:84:cf:bf:82:e5: 28:60:49:be:9b:9d:58:3d:6a:e4:44:ba:e1:8d:74:bf:bc:f7: 53:5c:fd:bd:2c:dd:2a:ce:b5:6e:d0:52:11:21:c9:8f:30:82: d6:1d:3b:c0:28:39:26:35:40:27:2e:20:25:c3:33:73:6e:71: 6e:f6:26:0a:9d:90:7c:f4:d6:b4:fa:26:80:cf:0d:49:74:04: a7:29:31:c8:c1:02:fb:5f:82:dc:5a:fa:ba:87:e7:86:bc:f1: 2d:94:e8:12:27:70:d3:fb:72:12:18:84:13:2c:e8:f8:bc:60: b9:eb:8b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH570wTc43sciwa0OmduARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwNjA3MDEwMDU4WhcNMjUwNjA4MDEwMDU4WjAzMTEwLwYDVQQD Eyg3YTE5YTZkOTY5YzFjM2U3ZjJmYzhjMzA4NTUwNmQwZThmN2U5ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC0sGIRpfyqzBFpJgAsDLUePs+xA 6NBlGILk60h0IvLN0D1c5mMEGIZAJvejwU9WH/uPC8qbQgBC8hdyeWGwG+CJKz0p LKS9UOQ9nWkiegFFnP71jUs7Nmh9Qb8eP5rQwV1C61zX9QmlIE3c4d7xi373BlfC iXxOTIxeks38A+lDfjXtdZluX6h3A4RZzgNHlDHitvLiYNazHQPRvpsPOFMhuTCL I5+BNAPbUhE6jgt88qjbii/6TpyY06JKlA4ua3NjWJS077QoD/O8Coq8Wn/+6/37 9ToT8J5XmDeMJslSiDlsai1S93E41ZUwFZxs2yiG64hW/Mo8ES/R2a7TRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoZptlpwcPn8vyMMIVQbQ6Pfp99MB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNx37vZu C53ovodNnl6pO0BZBtao9t7skSsQpne86qeUG2YdY9GcX73gj3cICWec+olvghWH JfIXGhGC/vcg1idoTDsXDsmgebFzoMxiW0a/hnpNKeMGqaaFscg102gfTJSDS3zk j/RBANckgHO3CGQxMH1WZaRnKU/fsIh+X/dNNWrtaB2GUQMl4oTPv4LlKGBJvpud WD1q5ES64Y10v7z3U1z9vSzdKs61btBSESHJjzCC1h07wCg5JjVAJy4gJcMzc25x bvYmCp2QfPTWtPomgM8NSXQEpykxyMEC+1+C3Fr6uofnhrzxLZToEidw0/tyEhiE Eyzo+LxgueuLrA== -----END CERTIFICATE-----Generated at Sat Jun 7 11:33:18 2025 by rpki-client