$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: gNVpPyRTbwsuM0hZOpQ7WswfjqS/cV+Qg6oAn7kLVnU= Subject key identifier: 68:45:9D:E0:FA:0C:C0:40:6C:EB:32:6E:D5:76:20:10:DE:17:34:21 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 0197C5A6133AD859041AEFFBFF024BB94D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 15CF Signing time: Tue 01 Jul 2025 11:01:24 +0000 Manifest this update: Tue 01 Jul 2025 11:01:24 +0000 Manifest next update: Wed 02 Jul 2025 11:01:24 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: 57saHwwtMFtKDHtko2YaGKrGjJo.roa (hash: tuKl3wIrDMzULngL+WH+D2haKacyphB+9VZ5+FTHHpM=) 3: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 4: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 5: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: BbsZX6Uf+Onmsb6CCACtXlifdvyxyAHmwEpiXXpOcXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c5:a6:13:3a:d8:59:04:1a:ef:fb:ff:02:4b:b9:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jul 1 11:01:24 2025 GMT Not After : Jul 2 11:01:24 2025 GMT Subject: CN=68459de0fa0cc0406ceb326ed5762010de173421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:f3:8b:b6:08:f6:9a:98:c9:51:a2:32:79: 0b:fb:43:26:86:cd:db:02:0d:ec:d1:c1:48:8f:d6: cf:ee:8e:28:3e:5b:a1:d2:9d:a8:7c:f8:1d:64:d9: d0:65:3a:d6:91:60:50:b6:41:35:72:7d:13:1b:6c: 39:1f:3b:4a:85:56:92:77:8a:4d:a6:e9:6f:2a:72: 58:4b:6a:2a:b8:8e:ee:d2:8c:bc:d8:f3:02:99:02: 86:6c:9e:45:eb:52:07:df:1a:9b:a9:d1:23:c0:46: 17:f5:92:46:f1:74:44:54:81:34:d1:65:e3:30:8c: 65:42:ab:e9:e0:88:21:1c:d2:f5:00:75:99:aa:1e: b2:9a:ba:fa:5f:c6:26:39:fa:18:a5:d6:e3:2f:fd: 98:a9:da:36:29:df:05:e4:88:96:ae:03:65:a3:34: 4a:59:49:70:b3:b3:e0:c3:bc:20:f1:10:75:c7:2b: d2:8c:4b:dd:7a:f0:94:26:96:80:f8:8e:ab:67:af: 0d:ee:46:2e:8f:3d:ef:2c:24:0c:7f:5e:55:a1:aa: 4a:3f:a7:4b:d8:54:c0:1f:f0:d6:71:c7:f6:a4:93: 05:83:8d:a5:d4:79:6f:fa:86:36:d6:44:97:91:1a: 85:46:c9:70:d4:ae:5e:c6:dc:4f:59:59:ed:b5:eb: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:45:9D:E0:FA:0C:C0:40:6C:EB:32:6E:D5:76:20:10:DE:17:34:21 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d1:4a:a9:2c:30:fb:a2:57:60:0c:2a:cf:cf:fb:6d:23:bc: 75:5d:c9:da:f8:52:86:bb:93:36:f8:0b:de:18:c1:2d:77:e8: 3a:6a:7f:31:4c:03:78:88:d4:3c:15:92:3d:dc:dd:c8:2e:e9: 6b:dd:08:e6:63:99:aa:77:21:80:53:e3:13:dc:93:d1:56:2f: c3:f8:65:27:63:5e:14:ae:f9:5a:e8:b1:c7:f4:62:b7:0f:2c: 18:7b:b7:19:48:1d:fb:7b:6d:e2:ba:b0:d9:cc:27:ba:eb:10: 6a:b5:d6:56:c9:c0:5f:36:37:1b:fb:22:57:45:82:31:e8:f8: ba:99:c6:34:9e:c3:4f:0c:29:a1:5e:92:61:72:17:25:78:8d: 62:95:93:c4:27:43:57:f8:25:56:53:12:55:a4:ab:6c:be:07: c0:1e:97:40:6b:c4:dd:f2:d0:78:43:8b:5e:fd:9d:64:1b:32: fd:4f:b7:21:5f:99:fb:a0:c8:d3:55:41:36:f6:a9:e4:cc:6c: 93:b6:c6:7f:09:0e:79:a9:07:34:1f:23:73:7c:93:98:34:90: ea:da:79:fe:f2:83:90:22:ec:fb:e8:d3:fc:7e:ae:ad:f3:34: 98:46:f0:d7:e9:a8:92:d9:3f:9b:5e:07:87:f2:7e:7c:9a:af: 16:55:c9:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfFphM62FkEGu/7/wJLuU14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUwNzAxMTEwMTI0WhcNMjUwNzAyMTEwMTI0WjAzMTEwLwYDVQQD Eyg2ODQ1OWRlMGZhMGNjMDQwNmNlYjMyNmVkNTc2MjAxMGRlMTczNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ/zi7YI9pqYyVGiMnkL+0Mmhs3b Ag3s0cFIj9bP7o4oPluh0p2ofPgdZNnQZTrWkWBQtkE1cn0TG2w5HztKhVaSd4pN pulvKnJYS2oquI7u0oy82PMCmQKGbJ5F61IH3xqbqdEjwEYX9ZJG8XREVIE00WXj MIxlQqvp4IghHNL1AHWZqh6ymrr6X8YmOfoYpdbjL/2Yqdo2Kd8F5IiWrgNlozRK WUlws7Pgw7wg8RB1xyvSjEvdevCUJpaA+I6rZ68N7kYujz3vLCQMf15VoapKP6dL 2FTAH/DWccf2pJMFg42l1Hlv+oY21kSXkRqFRslw1K5extxPWVntteuQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhFneD6DMBAbOsybtV2IBDeFzQhMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdFKqSww +6JXYAwqz8/7bSO8dV3J2vhShruTNvgL3hjBLXfoOmp/MUwDeIjUPBWSPdzdyC7p a90I5mOZqnchgFPjE9yT0VYvw/hlJ2NeFK75Wuixx/Ritw8sGHu3GUgd+3tt4rqw 2cwnuusQarXWVsnAXzY3G/siV0WCMej4upnGNJ7DTwwpoV6SYXIXJXiNYpWTxCdD V/glVlMSVaSrbL4HwB6XQGvE3fLQeEOLXv2dZBsy/U+3IV+Z+6DI01VBNvap5Mxs k7bGfwkOeakHNB8jc3yTmDSQ6tp5/vKDkCLs++jT/H6urfM0mEbw1+moktk/m14H h/J+fJqvFlXJdQ== -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:42 2025 by rpki-client