$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: nB9bijNHUgKCXK7MVhC+u36fpw0Lct2Mz1OcAfUCKu8= Subject key identifier: E0:F8:40:0B:D1:63:79:FB:C7:48:AA:41:FA:B3:C8:A9:16:7F:13:B7 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 0196A3533AEE854334932C0EB913CBF15439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 1536 Signing time: Tue 06 May 2025 02:01:02 +0000 Manifest this update: Tue 06 May 2025 02:01:02 +0000 Manifest next update: Wed 07 May 2025 02:01:02 +0000 Files and hashes: 1: 1-3XflNe0k3QXZPA5cmOmVXUVk4k.roa (hash: EOxsCadON2KcZNrQxz29cfWR8eSAuCeFKTgS66ed6p8=) 2: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=) 3: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=) 4: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=) 5: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=) 6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=) 7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=) 8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=) 9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=) 10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=) 11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=) 12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=) 13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 8WcW14IeMh+OSyQ+ZJDvRkbvVs6/EWFp/gJwZdlBhFw=) 14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=) 15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=) 16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=) 17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=) 18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=) 19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=) 20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:53:3a:ee:85:43:34:93:2c:0e:b9:13:cb:f1:54:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: May 6 02:01:02 2025 GMT Not After : May 7 02:01:02 2025 GMT Subject: CN=e0f8400bd16379fbc748aa41fab3c8a9167f13b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:d4:df:78:ea:10:68:91:81:84:2b:0d:28: 15:9e:8e:6a:74:f3:5a:22:b9:f3:37:f1:02:8a:93: b8:be:83:b7:5c:36:0b:61:11:d5:c4:88:fa:92:73: 8f:7c:c6:cc:39:a4:30:cb:50:ea:68:bb:52:1d:d9: 5d:9c:97:9e:21:6d:29:0a:06:a8:f8:01:90:c1:3b: 25:09:2c:39:64:0d:0c:e7:34:fe:b7:a0:46:fb:20: 4c:5b:6d:77:b0:ff:d2:6f:6f:16:19:b9:3f:0e:60: be:1a:4e:09:f6:5d:7f:eb:02:35:78:63:e0:0c:28: 04:33:05:c8:1c:ed:89:cc:c4:71:6e:98:b4:4c:38: e6:83:6d:8c:54:74:73:a1:b1:30:54:15:ba:cb:61: 6d:e7:ec:10:07:f3:5f:be:f5:57:17:ae:db:0c:cd: 4d:df:17:23:49:76:78:0b:c8:f3:78:cf:a4:92:70: 4f:e4:b4:d0:37:86:68:34:32:13:fb:45:54:88:01: 28:d3:77:8c:86:ed:b2:50:c8:d3:35:9c:8f:6d:73: e4:80:eb:3b:c2:8b:6c:25:67:80:4f:2d:ff:bb:65: 81:d2:58:de:c1:ac:17:32:ac:0e:71:fe:16:e9:80: 16:65:19:7d:3a:d7:68:2f:62:b3:45:52:38:08:5e: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F8:40:0B:D1:63:79:FB:C7:48:AA:41:FA:B3:C8:A9:16:7F:13:B7 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8d:9f:d0:9d:61:d2:eb:5b:60:35:4e:19:1b:32:9b:3e:40: 76:f3:0e:b5:a0:eb:14:18:02:a2:da:30:0c:4c:8e:e2:e2:f0: 61:40:6f:ac:60:37:dc:d0:7d:c5:71:7f:38:3d:82:d2:22:2e: e4:84:a4:ec:30:4d:73:94:11:d7:87:4f:94:24:25:8d:07:d8: 39:fa:35:c5:22:ee:f3:63:d4:8f:2b:7a:d2:5b:9e:05:c1:3b: 33:69:33:39:87:0c:fb:b1:15:6f:61:e7:bd:27:eb:22:7e:b4: 49:90:16:f3:ba:b0:bb:ea:9e:ee:ec:a3:ae:b5:7b:c7:a6:9a: 46:db:c4:5b:4e:49:82:2b:3d:0d:9a:d2:e1:4c:81:c0:ee:c3: f4:aa:1d:3f:6f:75:f6:18:bb:5a:82:6a:03:16:3c:fc:ba:2c: af:58:60:99:90:03:a8:39:be:06:89:ca:83:aa:f6:11:99:00: 2f:31:6e:15:89:dd:5b:af:1a:47:62:6e:12:e2:a1:b4:57:fb: 39:b5:4b:04:63:9e:bb:ba:44:d0:12:41:81:27:4f:ff:56:00: d4:45:8e:03:32:90:52:a4:f1:d2:32:28:1a:6a:eb:2f:15:b2: 35:92:22:cb:d3:5a:3b:b2:8a:81:1d:ef:d8:87:9f:9e:a1:3a: 3a:cf:28:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZajUzruhUM0kywOuRPL8VQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUwNTA2MDIwMTAyWhcNMjUwNTA3MDIwMTAyWjAzMTEwLwYDVQQD EyhlMGY4NDAwYmQxNjM3OWZiYzc0OGFhNDFmYWIzYzhhOTE2N2YxM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAbU33jqEGiRgYQrDSgVno5qdPNa IrnzN/ECipO4voO3XDYLYRHVxIj6knOPfMbMOaQwy1DqaLtSHdldnJeeIW0pCgao +AGQwTslCSw5ZA0M5zT+t6BG+yBMW213sP/Sb28WGbk/DmC+Gk4J9l1/6wI1eGPg DCgEMwXIHO2JzMRxbpi0TDjmg22MVHRzobEwVBW6y2Ft5+wQB/NfvvVXF67bDM1N 3xcjSXZ4C8jzeM+kknBP5LTQN4ZoNDIT+0VUiAEo03eMhu2yUMjTNZyPbXPkgOs7 wotsJWeATy3/u2WB0ljewawXMqwOcf4W6YAWZRl9OtdoL2KzRVI4CF5tbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD4QAvRY3n7x0iqQfqzyKkWfxO3MB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc42f0J1h 0utbYDVOGRsymz5AdvMOtaDrFBgCotowDEyO4uLwYUBvrGA33NB9xXF/OD2C0iIu 5ISk7DBNc5QR14dPlCQljQfYOfo1xSLu82PUjyt60lueBcE7M2kzOYcM+7EVb2Hn vSfrIn60SZAW87qwu+qe7uyjrrV7x6aaRtvEW05Jgis9DZrS4UyBwO7D9KodP291 9hi7WoJqAxY8/Losr1hgmZADqDm+BonKg6r2EZkALzFuFYndW68aR2JuEuKhtFf7 ObVLBGOeu7pE0BJBgSdP/1YA1EWOAzKQUqTx0jIoGmrrLxWyNZIiy9NaO7KKgR3v 2IefnqE6Os8o/w== -----END CERTIFICATE-----Generated at Tue May 6 07:35:20 2025 by rpki-client