$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: +nu75bak4lhSYsg2tzr7XwfEF2i2AaJQID6SWDkuves= Subject key identifier: 13:E0:5D:0D:40:E8:34:81:72:88:F1:32:D1:BB:67:2F:DD:2F:82:B0 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 0198D583670B7E57C66EF28227C908F3D62F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1653 Signing time: Sat 23 Aug 2025 06:00:14 +0000 Manifest this update: Sat 23 Aug 2025 06:00:14 +0000 Manifest next update: Sun 24 Aug 2025 06:00:14 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 9: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 10: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: N+TPzWk/pfEDKGMVeDfV91xGnqI8j6Nh+soGyzMZqh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 06:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:67:0b:7e:57:c6:6e:f2:82:27:c9:08:f3:d6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Aug 23 06:00:14 2025 GMT Not After : Aug 24 06:00:14 2025 GMT Subject: CN=13e05d0d40e834817288f132d1bb672fdd2f82b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:61:e5:1c:68:09:64:a4:fd:b1:c9:50:b1: 9f:62:b0:d4:e3:6d:cd:c2:6f:a4:71:bd:75:7c:dd: 0b:23:04:6c:55:38:a1:04:42:4f:29:6b:77:98:a6: 72:4a:5c:88:85:eb:2d:fa:2a:c4:b8:ce:c6:3b:82: 67:f6:09:f2:81:65:49:4a:03:f6:9d:8d:53:5e:fb: e6:b5:22:14:bd:59:83:86:0d:f7:a1:3d:76:a9:bb: 0b:50:94:a8:ef:d6:51:bc:f6:43:de:65:50:55:a1: 31:2f:ab:6d:20:9a:87:12:4a:e3:cf:bb:c5:77:eb: 5f:b8:fd:07:17:b4:dc:6c:c0:ea:50:73:bf:76:72: 93:e5:08:69:55:36:4e:67:0e:26:fb:97:16:df:27: 5a:f5:0c:74:66:9e:93:9c:50:dc:e5:b7:5e:87:80: b8:fb:c2:20:e2:17:fb:05:bd:a7:b9:ae:18:39:97: 63:74:76:0e:d9:2b:9e:f8:88:d8:78:25:4d:05:21: e0:b6:f0:e2:41:28:ee:f0:c7:f7:4e:0b:0e:21:d2: d8:17:fd:f4:6f:cf:00:92:52:63:74:07:dd:80:d9: b6:ae:4e:83:af:24:80:8d:0e:1a:84:7e:f7:eb:57: 2c:a7:48:e2:a8:82:29:d2:de:37:0c:f9:03:f1:8d: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E0:5D:0D:40:E8:34:81:72:88:F1:32:D1:BB:67:2F:DD:2F:82:B0 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:99:6d:be:91:7e:c6:ac:56:da:77:d4:c1:2a:3e:79:2a:19: 81:8f:18:5a:26:b1:ac:8d:5b:6a:94:cf:a8:b0:8a:51:72:ae: 68:b1:81:53:57:54:94:c2:af:7e:62:56:f8:72:13:bc:72:d3: 95:74:d0:f4:f7:4f:f9:4d:54:f6:2f:9f:70:ad:26:8e:0e:a7: 3e:ce:16:be:72:aa:98:d8:9e:a5:75:32:b0:fc:b5:5a:5c:94: 33:f9:f2:45:19:e6:96:e2:a6:dc:5c:22:fb:ab:5c:d8:8a:fb: 57:df:b4:a4:7d:ee:86:de:8a:46:ad:63:6c:da:80:81:ac:aa: a3:34:9c:16:f0:21:73:81:9d:64:f4:42:d6:ca:74:5f:0b:3b: 51:2b:c3:7d:e3:3a:2f:6e:ec:e3:51:97:8d:cd:7d:10:72:b4: b6:46:ce:f9:03:79:99:e0:4b:0e:93:18:93:2e:3c:bd:38:5b: 29:77:02:cb:d5:8e:bd:17:4e:c6:e3:8f:0a:e8:13:f0:c9:6d: e3:97:ff:13:e5:8a:8a:e1:76:35:3d:d4:3a:9c:08:ec:53:c1: 33:d6:a4:66:5c:3c:76:09:b1:c5:fe:45:28:cc:d5:be:97:9d: 95:3f:ea:6a:7b:71:0f:dd:64:45:9a:c6:34:a9:95:91:9d:41: 60:f1:11:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg2cLflfGbvKCJ8kI89YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD EygxM2UwNWQwZDQwZTgzNDgxNzI4OGYxMzJkMWJiNjcyZmRkMmY4MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UNh5RxoCWSk/bHJULGfYrDU423N wm+kcb11fN0LIwRsVTihBEJPKWt3mKZySlyIhest+irEuM7GO4Jn9gnygWVJSgP2 nY1TXvvmtSIUvVmDhg33oT12qbsLUJSo79ZRvPZD3mVQVaExL6ttIJqHEkrjz7vF d+tfuP0HF7TcbMDqUHO/dnKT5QhpVTZOZw4m+5cW3yda9Qx0Zp6TnFDc5bdeh4C4 +8Ig4hf7Bb2nua4YOZdjdHYO2Sue+IjYeCVNBSHgtvDiQSju8Mf3TgsOIdLYF/30 b88AklJjdAfdgNm2rk6DrySAjQ4ahH7361csp0jiqIIp0t43DPkD8Y0rPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPgXQ1A6DSBcojxMtG7Zy/dL4KwMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpltvpF+ xqxW2nfUwSo+eSoZgY8YWiaxrI1bapTPqLCKUXKuaLGBU1dUlMKvfmJW+HITvHLT lXTQ9PdP+U1U9i+fcK0mjg6nPs4WvnKqmNiepXUysPy1WlyUM/nyRRnmluKm3Fwi +6tc2Ir7V9+0pH3uht6KRq1jbNqAgayqozScFvAhc4GdZPRC1sp0Xws7USvDfeM6 L27s41GXjc19EHK0tkbO+QN5meBLDpMYky48vThbKXcCy9WOvRdOxuOPCugT8Mlt 45f/E+WKiuF2NT3UOpwI7FPBM9akZlw8dgmxxf5FKMzVvpedlT/qantxD91kRZrG NKmVkZ1BYPERmQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:08 2025 by rpki-client