$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: 9SL0AyukWtkKVNvPLtoTHcrYG9Ym/+VjAsb493Fezoo= Subject key identifier: 90:64:B8:54:1B:0A:46:41:89:4F:38:B5:16:EC:9F:82:93:3C:0A:38 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 01974B1F6845458F7B926BD1944C6E81D777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 158D Signing time: Sat 07 Jun 2025 16:00:38 +0000 Manifest this update: Sat 07 Jun 2025 16:00:38 +0000 Manifest next update: Sun 08 Jun 2025 16:00:38 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: ELder04tNbbgntelOzAhfHduEJQ.roa (hash: EYr754S/llaOJHTStE73M5DFVVB9J1YVjraoxE/z0DE=) 4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 8: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: KRVrozJ/7v9fN+iqWpgkcsevs7lO8ToTMp0M8P9WDE4=) 11: xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa (hash: rI1CEkrztn+BRMtnvWNccs01rdhwia4WvS8p6nZL0z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:1f:68:45:45:8f:7b:92:6b:d1:94:4c:6e:81:d7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jun 7 16:00:38 2025 GMT Not After : Jun 8 16:00:38 2025 GMT Subject: CN=9064b8541b0a4641894f38b516ec9f82933c0a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2f:27:72:30:42:f3:0b:3b:85:9a:b7:5e:08: 37:6f:cc:ca:7b:da:6f:78:36:24:2e:46:0f:8f:2b: 71:46:53:a7:8b:78:32:78:96:32:9d:b8:e1:04:5e: c0:c8:ef:ca:58:00:84:91:d2:d1:5d:ea:a5:cc:89: ff:80:ab:fb:18:46:cc:cf:2e:4f:2a:f5:62:d8:06: 39:f4:4d:d3:0c:a4:fa:3f:f6:68:d9:1a:6e:10:f9: 76:c5:c1:10:07:c5:dd:c5:32:fe:bb:fc:77:f3:db: f5:1b:ea:c5:89:2b:13:a9:e9:d6:ad:f5:54:1d:1e: cf:25:51:19:c0:4d:aa:61:5b:ee:47:47:e6:96:f2: c5:fd:31:d0:bf:93:6a:92:5f:b9:7c:9b:82:7c:6a: 72:51:3d:86:43:d5:21:17:fc:cd:d5:b3:e5:dd:ed: e7:54:87:51:ed:03:2d:a6:9c:45:9d:f2:d3:ad:ba: 93:64:6a:7f:ec:99:3d:80:04:dc:2c:c7:f8:bc:75: 77:5a:67:3d:ef:af:3b:ea:a8:c7:6b:a1:95:46:e9: db:1b:12:29:1e:ed:b2:08:02:0b:fa:16:3e:b1:49: ae:a2:29:13:46:7e:16:e1:3c:97:c9:fc:7c:4d:1d: b5:03:d3:1f:26:8a:7a:cf:d9:ef:64:ba:dc:b2:6f: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:64:B8:54:1B:0A:46:41:89:4F:38:B5:16:EC:9F:82:93:3C:0A:38 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:66:14:3c:a0:5e:d1:bf:57:44:69:4c:5c:85:9d:8b:42:89: 8d:e4:fc:c2:b9:7b:97:a5:0b:0a:92:eb:ad:bd:16:36:02:65: c2:b3:fd:bc:ee:d9:06:8f:be:e4:eb:fa:08:7b:7b:1e:be:6b: de:79:ca:0e:d6:b8:57:7d:7f:e6:97:49:96:2b:c3:58:18:d8: 4f:1b:fe:3b:09:c2:f0:41:99:d5:0c:ad:f3:53:be:79:58:36: f1:26:37:1b:de:95:fb:6d:9a:2c:9c:f7:27:b4:4d:f2:02:81: 15:5b:42:0f:0a:17:31:47:88:cf:08:b8:58:1d:2d:12:34:c1: 6b:36:05:b6:c7:db:22:42:94:32:bc:d1:02:d5:71:cd:ac:af: 17:ac:db:b4:4f:4a:3b:7b:fa:ab:f9:98:b5:03:d8:42:29:2d: 83:08:03:06:37:cc:bf:53:61:d5:63:08:9e:29:97:63:a3:6d: 69:5a:86:7b:ee:f4:37:1f:fe:6f:45:04:5b:a2:a2:a4:53:1d: 78:a8:f9:4a:5c:54:9e:9b:12:54:84:e1:ff:c2:81:4c:c9:7c: 85:35:b6:d8:63:b5:ba:ba:20:a3:3e:c4:1b:90:92:6f:b3:69: dc:24:0a:69:55:be:62:6c:c2:f7:3c:90:d7:25:66:87:9c:87: 1c:a4:87:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLH2hFRY97kmvRlExugdd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwNjA3MTYwMDM4WhcNMjUwNjA4MTYwMDM4WjAzMTEwLwYDVQQD Eyg5MDY0Yjg1NDFiMGE0NjQxODk0ZjM4YjUxNmVjOWY4MjkzM2MwYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky8ncjBC8ws7hZq3Xgg3b8zKe9pv eDYkLkYPjytxRlOni3gyeJYynbjhBF7AyO/KWACEkdLRXeqlzIn/gKv7GEbMzy5P KvVi2AY59E3TDKT6P/Zo2RpuEPl2xcEQB8XdxTL+u/x389v1G+rFiSsTqenWrfVU HR7PJVEZwE2qYVvuR0fmlvLF/THQv5Nqkl+5fJuCfGpyUT2GQ9UhF/zN1bPl3e3n VIdR7QMtppxFnfLTrbqTZGp/7Jk9gATcLMf4vHV3Wmc976876qjHa6GVRunbGxIp Hu2yCAIL+hY+sUmuoikTRn4W4TyXyfx8TR21A9MfJop6z9nvZLrcsm8WtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBkuFQbCkZBiU84tRbsn4KTPAo4MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmYUPKBe 0b9XRGlMXIWdi0KJjeT8wrl7l6ULCpLrrb0WNgJlwrP9vO7ZBo++5Ov6CHt7Hr5r 3nnKDta4V31/5pdJlivDWBjYTxv+OwnC8EGZ1Qyt81O+eVg28SY3G96V+22aLJz3 J7RN8gKBFVtCDwoXMUeIzwi4WB0tEjTBazYFtsfbIkKUMrzRAtVxzayvF6zbtE9K O3v6q/mYtQPYQiktgwgDBjfMv1Nh1WMInimXY6NtaVqGe+70Nx/+b0UEW6KipFMd eKj5SlxUnpsSVITh/8KBTMl8hTW22GO1urogoz7EG5CSb7Np3CQKaVW+YmzC9zyQ 1yVmh5yHHKSHug== -----END CERTIFICATE-----Generated at Sat Jun 7 23:05:40 2025 by rpki-client