$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json) Hash identifier: jXBSONoq53KZGHFApEoiKf+aZHNhsMSMgZH1/Yq0o2M= Subject key identifier: 5A:68:42:5A:AF:E7:6E:41:C0:11:79:15:38:0E:53:CD:63:65:ED:C0 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 0196B9359CF32D2CB9A8210A544E91415677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft Manifest number: 1559 Signing time: Sat 10 May 2025 08:00:20 +0000 Manifest this update: Sat 10 May 2025 08:00:20 +0000 Manifest next update: Sun 11 May 2025 08:00:20 +0000 Files and hashes: 1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=) 2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=) 3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=) 4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=) 5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=) 6: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=) 7: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=) 8: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=) 9: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=) 10: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: 1aLiAcejsYL4DRoDF54hW4R443wAYmwsU3688RQghcs=) 11: UkLKM15tmjgBY5QWaoqfz0_8jkI.roa (hash: 8usx/pzxgiN7xwyYIJpHpe9QYcM1xrfYkkGGJbMr7E8=) 12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=) 13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=) 14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=) 15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=) 16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=) 17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=) 18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=) 19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=) 20: lIuOj0AnftPW8n1hGje2-_p95sU.roa (hash: GQvUoJQQ5KD124Ec+QFcU1fE8s5FkdB2MthVeKXOr7Y=) 21: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=) 22: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=) 23: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=) 24: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 08:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b9:35:9c:f3:2d:2c:b9:a8:21:0a:54:4e:91:41:56:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: May 10 08:00:20 2025 GMT Not After : May 11 08:00:20 2025 GMT Subject: CN=5a68425aafe76e41c0117915380e53cd6365edc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:70:df:e8:4e:30:23:86:f9:45:a5:3d:0c: ce:91:a3:3e:c8:da:c5:e7:23:d1:91:e8:3b:70:3d: 31:14:8a:d0:b3:bd:ee:1f:b3:85:df:70:dd:dc:00: 30:d1:c6:4b:16:fa:86:72:52:fe:7c:a8:67:3a:10: a2:f6:8f:5f:2f:98:43:54:95:95:17:ac:b1:67:fa: 6d:65:53:11:3e:90:fb:9e:aa:cd:4b:0d:13:b3:91: fc:95:b0:cc:6e:23:03:4a:74:3a:ad:a1:27:3d:5a: 55:5c:b5:be:33:a5:5c:24:cb:b6:ca:cc:4b:b9:6e: 75:9b:33:ce:75:aa:6e:fe:37:30:9c:aa:83:28:5c: 8b:9f:d5:38:80:c4:e4:73:90:b3:5d:0e:b6:da:af: f7:c3:86:d0:70:43:de:df:54:11:7c:1f:d2:38:01: 01:26:52:7f:7b:d8:df:c0:85:5e:95:83:79:e7:9d: 54:ef:ff:75:ee:bc:12:da:a3:9d:a9:c5:94:f0:05: 48:11:38:b5:4e:d3:bf:00:dd:89:eb:ce:db:98:13: b8:93:af:0f:84:4d:e3:7e:b1:0e:25:84:24:e7:18: aa:b1:31:72:07:15:b5:aa:dc:a4:ef:31:f8:30:88: d5:77:7c:66:3f:73:7b:30:f8:d4:c9:92:ce:e8:1a: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:68:42:5A:AF:E7:6E:41:C0:11:79:15:38:0E:53:CD:63:65:ED:C0 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e2:0f:79:3b:0a:a6:e6:83:4c:db:41:35:30:cf:33:7b:67: ac:db:ae:a3:20:13:a3:55:9d:af:db:6d:7e:5c:18:36:c0:69: 54:4d:55:44:90:4f:4d:72:c2:a1:b7:fa:80:80:cb:2f:28:e0: 92:05:a7:a3:38:19:1a:b6:7c:28:b5:a7:34:c0:6e:43:3b:8a: 62:e2:48:67:f8:62:3d:b3:15:e4:52:8d:80:68:47:12:75:30: c9:9e:d9:d7:dd:e1:20:a3:3d:ec:e4:b7:73:00:90:a7:0c:c1: 58:44:04:41:32:ad:0a:91:5a:86:38:45:eb:26:1d:54:be:7f: a4:74:93:a0:e1:87:37:5b:e4:88:58:9c:57:aa:ff:2f:71:e6: 0f:ce:68:77:a8:ad:49:0a:1a:6d:95:b0:fc:67:e0:cd:b4:37: 6e:12:dc:2b:83:ea:6a:a5:ad:ef:aa:bc:5d:04:51:43:05:41: c6:db:a7:87:41:f2:eb:75:a0:f2:62:e2:05:d2:94:fe:3b:8f: ad:66:8a:3b:85:13:ea:fc:5b:e3:06:89:b5:d2:21:f2:95:31: 2d:e4:ba:ce:be:3e:19:e9:bc:4e:40:26:45:b8:de:77:7f:a8: de:75:9c:f8:97:17:d9:0c:34:be:cb:c8:66:ff:c6:17:c5:b2: b4:45:69:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa5NZzzLSy5qCEKVE6RQVZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjUwNTEwMDgwMDIwWhcNMjUwNTExMDgwMDIwWjAzMTEwLwYDVQQD Eyg1YTY4NDI1YWFmZTc2ZTQxYzAxMTc5MTUzODBlNTNjZDYzNjVlZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJdw3+hOMCOG+UWlPQzOkaM+yNrF 5yPRkeg7cD0xFIrQs73uH7OF33Dd3AAw0cZLFvqGclL+fKhnOhCi9o9fL5hDVJWV F6yxZ/ptZVMRPpD7nqrNSw0Ts5H8lbDMbiMDSnQ6raEnPVpVXLW+M6VcJMu2ysxL uW51mzPOdapu/jcwnKqDKFyLn9U4gMTkc5CzXQ622q/3w4bQcEPe31QRfB/SOAEB JlJ/e9jfwIVelYN5551U7/917rwS2qOdqcWU8AVIETi1TtO/AN2J687bmBO4k68P hE3jfrEOJYQk5xiqsTFyBxW1qtyk7zH4MIjVd3xmP3N7MPjUyZLO6Br6LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpoQlqv525BwBF5FTgOU81jZe3AMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOIPeTsK puaDTNtBNTDPM3tnrNuuoyATo1Wdr9ttflwYNsBpVE1VRJBPTXLCobf6gIDLLyjg kgWnozgZGrZ8KLWnNMBuQzuKYuJIZ/hiPbMV5FKNgGhHEnUwyZ7Z193hIKM97OS3 cwCQpwzBWEQEQTKtCpFahjhF6yYdVL5/pHSToOGHN1vkiFicV6r/L3HmD85od6it SQoabZWw/GfgzbQ3bhLcK4PqaqWt76q8XQRRQwVBxtunh0Hy63Wg8mLiBdKU/juP rWaKO4UT6vxb4waJtdIh8pUxLeS6zr4+Gem8TkAmRbjed3+o3nWc+JcX2Qw0vsvI Zv/GF8WytEVpWg== -----END CERTIFICATE-----Generated at Sat May 10 15:05:20 2025 by rpki-client