$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: p8/cYLUT20jdJdNntAWI339fh+fxTDlkE9fJfgeifnI= Subject key identifier: 75:AF:0D:0A:5D:47:12:48:CF:DA:D7:A5:6A:95:CA:5C:F2:E6:2D:74 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019923A0CFC9A2846643F79582F320DD9F1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 168F Signing time: Sun 07 Sep 2025 10:02:45 +0000 Manifest this update: Sun 07 Sep 2025 10:02:45 +0000 Manifest next update: Mon 08 Sep 2025 10:02:45 +0000 Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=) 2: 6p9AkcbnlE4Z8IbJhSYYYojDJrg.roa (hash: SKcAYEFRxxbeCI1HsQW06reRx+d5nEWDWPFTqTMItNM=) 3: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=) 4: IZrh2fKkBSEsZhHZW1V-vS3SOsU.roa (hash: Bu6uRwEYKgZWKKUFSCHxc6kWVnShkzj76gtymj7qNwg=) 5: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=) 6: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=) 7: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=) 8: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: cCe3u/e8RixCpV1LhcD8t2F9sEr3nbbDtAMziXC+6SQ=) 9: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=) 10: qkm-dGrO1KB7zPSYZkfbAOZu2Jk.roa (hash: 4nzLJ3+1Nxzwd/rO/ckXGrhnSOi7MDSoWC6fmMd5N2o=) 11: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=) 12: u-uXh8WZWOS9uWtRFI-rTtX1S9A.roa (hash: kDD2Qmq25WjJ3/Vhs1pz7/0NseMdnFHogi9MbnP9L+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:a0:cf:c9:a2:84:66:43:f7:95:82:f3:20:dd:9f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Sep 7 10:02:45 2025 GMT Not After : Sep 8 10:02:45 2025 GMT Subject: CN=75af0d0a5d471248cfdad7a56a95ca5cf2e62d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:38:44:da:7c:3d:2f:ed:ee:7b:e2:a4:86: 52:d9:25:e1:33:ce:ff:59:5f:2f:88:74:9b:b7:d9: 12:95:7d:ec:a9:ce:a2:5c:aa:5d:b4:a1:4f:85:90: 95:75:5d:38:fe:f4:b6:85:c0:91:68:6a:38:44:eb: 36:9e:9b:40:4c:65:e7:2f:0b:18:00:17:d9:bf:24: 6c:a9:f2:bc:d9:e1:76:15:98:7d:7a:84:be:af:67: 52:a7:04:85:35:c0:31:5b:af:c8:99:54:36:1c:5d: 4e:b2:68:b2:b2:55:20:30:ad:eb:7c:08:0b:ba:88: 1f:31:9a:50:62:87:10:5f:75:46:f0:5d:24:6c:eb: 22:ec:24:f0:c2:5d:73:a7:f8:69:36:f8:ce:00:97: c2:8c:b9:25:ea:56:db:7c:3c:c4:5f:95:49:5f:13: a3:0d:78:50:4b:aa:75:d8:29:7c:6b:0d:61:a9:ae: 1a:80:72:ae:88:31:1d:0d:37:17:5e:ff:f6:0e:5f: ce:19:26:27:86:a9:05:05:2d:e4:30:a7:19:24:7b: 8d:25:7e:05:ec:ec:02:aa:c9:2c:dd:48:96:4f:d5: 78:e4:59:dd:7e:9e:91:ad:57:1f:1d:7e:2a:e2:f8: b1:e8:17:67:6a:c5:64:6b:9f:d5:dc:08:0f:d4:f8: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:0D:0A:5D:47:12:48:CF:DA:D7:A5:6A:95:CA:5C:F2:E6:2D:74 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:34:e7:53:f8:6c:8c:2b:45:c8:71:b8:d7:0d:fa:a8:c6:4d: 1d:f4:b5:70:91:e0:34:27:93:e2:99:d2:3b:8e:5d:1c:c0:e4: f2:df:4c:13:8a:6c:5f:41:de:0a:c5:8e:52:64:0d:0b:3f:e9: d0:de:95:15:43:1c:ce:f1:e3:80:00:2b:71:2b:67:67:10:c6: 57:e0:53:57:79:e3:d4:2b:69:bb:b8:24:d2:de:9c:21:b6:6a: 8e:93:ca:08:d4:40:ca:0b:ca:1a:5f:d2:b9:0d:3c:a2:99:c0: ae:f5:dc:99:b0:e6:ea:36:8b:04:98:2a:39:9e:29:9e:8f:ec: 2b:f6:4f:ff:aa:16:15:3b:9c:99:31:8a:7a:2b:07:61:b5:e9: cf:c8:2f:4d:c1:22:44:7c:e5:5f:c2:84:c3:1d:fe:2d:e3:5b: 3c:11:a2:e0:7e:e1:12:70:e3:f2:bd:90:f6:28:50:37:e5:f9: 1b:97:d0:32:13:97:66:d1:56:04:7f:65:3b:41:7a:0f:e6:55: eb:55:2d:a7:1e:17:c5:78:60:66:4e:82:43:59:50:f8:9d:71: e4:70:84:d9:70:ae:39:ef:62:27:89:b2:ba:1a:15:33:2f:b0: b8:b3:9d:b9:b9:63:fb:9f:fb:cc:25:73:4e:08:55:c1:e9:e3: 72:b6:17:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjoM/JooRmQ/eVgvMg3Z8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjUwOTA3MTAwMjQ1WhcNMjUwOTA4MTAwMjQ1WjAzMTEwLwYDVQQD Eyg3NWFmMGQwYTVkNDcxMjQ4Y2ZkYWQ3YTU2YTk1Y2E1Y2YyZTYyZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmc4RNp8PS/t7nvipIZS2SXhM87/ WV8viHSbt9kSlX3sqc6iXKpdtKFPhZCVdV04/vS2hcCRaGo4ROs2nptATGXnLwsY ABfZvyRsqfK82eF2FZh9eoS+r2dSpwSFNcAxW6/ImVQ2HF1OsmiyslUgMK3rfAgL uogfMZpQYocQX3VG8F0kbOsi7CTwwl1zp/hpNvjOAJfCjLkl6lbbfDzEX5VJXxOj DXhQS6p12Cl8aw1hqa4agHKuiDEdDTcXXv/2Dl/OGSYnhqkFBS3kMKcZJHuNJX4F 7OwCqsks3UiWT9V45Fndfp6RrVcfHX4q4vix6BdnasVka5/V3AgP1PjjlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWvDQpdRxJIz9rXpWqVylzy5i10MB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDTnU/hs jCtFyHG41w36qMZNHfS1cJHgNCeT4pnSO45dHMDk8t9ME4psX0HeCsWOUmQNCz/p 0N6VFUMczvHjgAArcStnZxDGV+BTV3nj1Ctpu7gk0t6cIbZqjpPKCNRAygvKGl/S uQ08opnArvXcmbDm6jaLBJgqOZ4pno/sK/ZP/6oWFTucmTGKeisHYbXpz8gvTcEi RHzlX8KEwx3+LeNbPBGi4H7hEnDj8r2Q9ihQN+X5G5fQMhOXZtFWBH9lO0F6D+ZV 61Utpx4XxXhgZk6CQ1lQ+J1x5HCE2XCuOe9iJ4myuhoVMy+wuLOdublj+5/7zCVz TghVwenjcrYXYQ== -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:27 2025 by rpki-client