$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json) Hash identifier: YCK7DjheA7aoCu4IOzXZZjBWo4ElrPBDFz4icWaRsU8= Subject key identifier: 38:2C:8F:D3:5C:62:A1:33:4A:7B:EB:39:28:59:88:5C:E9:37:73:7D Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019929A143D15BFE556B44A7613B2D976D72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft Manifest number: 1688 Signing time: Mon 08 Sep 2025 14:00:58 +0000 Manifest this update: Mon 08 Sep 2025 14:00:58 +0000 Manifest next update: Tue 09 Sep 2025 14:00:58 +0000 Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=) 2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=) 3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=) 4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=) 5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=) 6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: Hzzmkpmhh8+HNFZb93y9+v8HWclAP5j0ZuAtpcJY1QY=) 7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=) 8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=) 9: b7oMoNLEeexBq7MIfZdfTx6xx-k.roa (hash: OSaZRd3wcs3q/SzG2reGUiR0uNvDtIWlv9sr3p7/FyU=) 10: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:29:a1:43:d1:5b:fe:55:6b:44:a7:61:3b:2d:97:6d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Sep 8 14:00:58 2025 GMT Not After : Sep 9 14:00:58 2025 GMT Subject: CN=382c8fd35c62a1334a7beb392859885ce937737d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:5e:32:54:fa:d7:69:16:55:13:66:cf:48: 04:6b:e9:bc:8d:9e:66:d0:a9:1d:23:4f:ac:e9:2d: ce:65:66:58:0d:14:c4:43:1a:7d:48:5f:9c:71:4e: c1:0c:e4:9d:9c:90:59:3b:1d:5b:9a:2a:ca:a6:67: 93:8d:19:35:ff:89:3b:1f:89:86:ef:90:d6:66:80: 45:47:4d:37:43:29:f1:a1:74:5d:26:cf:d8:b8:66: 7e:15:32:a2:69:ff:aa:da:b5:33:88:73:8b:fb:58: 0a:ef:53:02:8d:23:9d:9e:59:6a:e4:c9:1d:42:8a: cd:c0:b1:31:71:83:86:5c:7d:be:28:60:3c:28:e6: 60:64:6e:26:07:53:d7:9a:9e:a6:6c:b1:3d:0e:4a: 25:6a:87:bb:eb:d3:d6:d7:3f:3f:54:2f:c2:c8:cc: 73:67:4b:8f:b5:db:fe:8d:7a:1d:1e:1f:a1:8f:4c: f2:8f:f1:77:e4:f9:d0:83:41:40:81:48:3c:94:e1: 04:82:8c:54:22:d6:9e:bb:59:99:6c:fa:9e:78:91: 17:d6:44:e2:a1:c3:0f:a9:dc:dc:2d:4f:8c:53:81: f4:52:03:da:9d:56:98:5c:cc:13:66:ee:f3:65:d7: 3a:a5:b8:f1:c5:b3:3a:69:ba:df:cd:b2:c7:3a:42: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2C:8F:D3:5C:62:A1:33:4A:7B:EB:39:28:59:88:5C:E9:37:73:7D X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:77:dd:24:ca:f7:f7:07:80:b8:23:39:60:bb:0c:a4:c3: 56:e3:19:7a:d2:fd:bb:d2:1a:d0:77:3d:22:e6:fb:34:a5:dc: 7b:c0:c0:e2:a5:b1:4f:bf:e5:6e:56:92:c3:64:e0:45:34:ea: 3c:73:3b:55:2a:5a:ed:9e:72:7f:be:ed:7a:35:7b:2f:d7:8e: 7d:9d:44:cb:b8:b7:3c:39:e6:9a:15:25:8c:80:2d:43:83:eb: 70:a4:6e:09:3e:3a:19:1a:23:8e:fc:f0:49:49:d6:7c:01:fb: 5f:0f:33:01:d3:a1:7b:6f:15:b2:79:27:8e:55:cf:d0:18:7a: 4b:ec:f2:86:50:21:d6:94:b9:12:66:6e:46:34:99:a6:3d:1f: ee:fd:fb:35:27:5c:fc:59:90:0d:59:43:d8:3a:62:72:6e:e7: 5c:c2:6b:78:7e:07:64:a1:a7:1b:b4:1b:fe:07:e0:33:52:2f: 3b:39:c7:c6:3e:e4:25:1d:78:1b:fc:fd:9d:a1:1d:c9:f8:3e: 73:8e:5e:5d:cc:83:78:f5:a1:73:91:d6:e8:b4:ab:52:34:0b: 6b:ee:ba:30:0e:39:d6:1b:8a:de:21:df:33:4d:a7:2f:42:df: 93:3f:fc:98:47:58:67:13:6d:77:a9:f3:9e:d8:4d:3f:0f:e9: b9:d2:71:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkpoUPRW/5Va0SnYTstl21yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjUwOTA4MTQwMDU4WhcNMjUwOTA5MTQwMDU4WjAzMTEwLwYDVQQD EygzODJjOGZkMzVjNjJhMTMzNGE3YmViMzkyODU5ODg1Y2U5Mzc3MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQxeMlT612kWVRNmz0gEa+m8jZ5m 0KkdI0+s6S3OZWZYDRTEQxp9SF+ccU7BDOSdnJBZOx1bmirKpmeTjRk1/4k7H4mG 75DWZoBFR003QynxoXRdJs/YuGZ+FTKiaf+q2rUziHOL+1gK71MCjSOdnllq5Mkd QorNwLExcYOGXH2+KGA8KOZgZG4mB1PXmp6mbLE9Dkolaoe769PW1z8/VC/CyMxz Z0uPtdv+jXodHh+hj0zyj/F35PnQg0FAgUg8lOEEgoxUItaeu1mZbPqeeJEX1kTi ocMPqdzcLU+MU4H0UgPanVaYXMwTZu7zZdc6pbjxxbM6abrfzbLHOkLrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgsj9NcYqEzSnvrOShZiFzpN3N9MB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNJ33STK 9/cHgLgjOWC7DKTDVuMZetL9u9Ia0Hc9Iub7NKXce8DA4qWxT7/lblaSw2TgRTTq PHM7VSpa7Z5yf77tejV7L9eOfZ1Ey7i3PDnmmhUljIAtQ4PrcKRuCT46GRojjvzw SUnWfAH7Xw8zAdOhe28VsnknjlXP0Bh6S+zyhlAh1pS5EmZuRjSZpj0f7v37NSdc /FmQDVlD2Dpicm7nXMJreH4HZKGnG7Qb/gfgM1IvOznHxj7kJR14G/z9naEdyfg+ c45eXcyDePWhc5HW6LSrUjQLa+66MA451huK3iHfM02nL0Lfkz/8mEdYZxNtd6nz nthNPw/pudJxfg== -----END CERTIFICATE-----Generated at Mon Sep 8 19:11:02 2025 by rpki-client