$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: f7fzNvCtHEfJSdqbW74xcVEAmqaNcXqnanXWPKO3X5k= Subject key identifier: 89:3D:4C:7C:51:82:D7:50:CE:59:9F:0B:84:85:ED:3A:0A:67:0F:40 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 0196C081C43276D33A656B35FC5ABFA8B335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 153F Signing time: Sun 11 May 2025 18:00:51 +0000 Manifest this update: Sun 11 May 2025 18:00:51 +0000 Manifest next update: Mon 12 May 2025 18:00:51 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 9: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 10: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: zcsYmXmxkl1nnx4n4TNkoGc6Em1sxMeRSBXX7NrjUBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:81:c4:32:76:d3:3a:65:6b:35:fc:5a:bf:a8:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: May 11 18:00:51 2025 GMT Not After : May 12 18:00:51 2025 GMT Subject: CN=893d4c7c5182d750ce599f0b8485ed3a0a670f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:1d:45:5e:5b:2a:f8:9f:cc:8e:7e:f4:ef: d2:a2:99:93:85:ff:9b:2b:ad:dc:c6:8c:5a:23:ba: cf:f5:05:f8:3b:f4:01:f3:07:40:8f:21:dd:59:0e: bd:8e:da:72:23:f0:34:df:a2:41:3d:be:c0:5d:c4: 7a:04:b6:d3:d2:7d:fa:05:7a:1d:9d:51:4b:df:29: 72:fb:65:d4:81:8c:b8:5d:02:6e:99:72:4c:f7:9a: 33:e3:06:14:8c:b0:fe:61:50:40:74:2f:04:71:d0: 64:ea:00:b6:1f:d0:d5:7f:7c:c5:98:8b:19:03:41: ed:14:48:e6:cb:1e:cf:0c:58:e7:ad:86:66:7a:13: 65:9a:75:98:3a:4e:dc:aa:16:79:e4:49:38:fc:94: 1c:11:43:9c:e2:cf:00:2b:e8:02:2e:4d:c8:93:fd: da:af:38:16:24:e0:f3:2a:99:79:86:07:c9:04:6a: 2c:b6:f8:20:27:fd:0b:cf:68:cd:88:91:9f:73:bb: 71:15:fe:32:d9:9e:9f:59:89:f3:d8:32:3c:e5:af: 6d:1e:be:a6:4e:c8:1f:b6:32:91:99:7b:e8:38:44: 06:0d:fa:5c:31:dd:cd:c1:5f:2c:72:f3:ad:9f:fe: 21:1b:57:f2:c4:05:07:8d:ae:72:10:0e:45:04:4d: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3D:4C:7C:51:82:D7:50:CE:59:9F:0B:84:85:ED:3A:0A:67:0F:40 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f7:f1:68:08:81:b1:81:8a:69:3d:ea:34:5b:02:5d:2f:a8: 05:8a:87:d9:2d:d4:ef:70:f7:89:e0:16:19:c7:ec:14:4f:e3: 08:87:49:71:d2:74:d1:1a:36:55:e9:97:ef:b9:32:c1:7c:f8: dd:d6:6c:4c:cf:d8:70:32:fa:70:9b:7d:e2:50:b6:e8:d6:1c: 9d:2b:1d:ec:9e:51:60:bd:bf:e9:28:eb:8b:f8:52:ca:be:c4: b2:b5:d5:a8:51:33:4e:4b:5a:2a:29:30:e9:dc:16:60:66:6c: 4b:d7:51:7c:33:12:b0:0e:07:fa:1d:b7:a0:cf:65:23:17:dc: ea:15:4c:58:ea:dd:8c:81:2e:93:7d:6a:f6:25:70:ef:9f:28: 5f:2a:ac:e3:77:90:28:55:75:16:fb:67:47:f9:0e:06:1c:20: 71:9f:94:83:08:41:23:77:07:ea:18:64:63:e7:73:fd:3e:1c: 91:63:bf:4b:bd:ca:1f:b9:9e:96:67:2f:3e:83:7b:ec:7a:48: 76:0b:8b:69:83:0f:5d:54:26:11:a0:ff:e6:0a:78:ab:ab:af: 18:83:6d:14:e1:2b:91:f9:26:e7:d8:ff:a0:0b:9f:ae:67:56: 77:4d:8c:35:a2:bb:81:ef:fd:b8:91:49:07:1e:ff:d0:78:9f: c7:40:45:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbAgcQydtM6ZWs1/Fq/qLM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwNTExMTgwMDUxWhcNMjUwNTEyMTgwMDUxWjAzMTEwLwYDVQQD Eyg4OTNkNGM3YzUxODJkNzUwY2U1OTlmMGI4NDg1ZWQzYTBhNjcwZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUkdRV5bKvifzI5+9O/SopmThf+b K63cxoxaI7rP9QX4O/QB8wdAjyHdWQ69jtpyI/A036JBPb7AXcR6BLbT0n36BXod nVFL3yly+2XUgYy4XQJumXJM95oz4wYUjLD+YVBAdC8EcdBk6gC2H9DVf3zFmIsZ A0HtFEjmyx7PDFjnrYZmehNlmnWYOk7cqhZ55Ek4/JQcEUOc4s8AK+gCLk3Ik/3a rzgWJODzKpl5hgfJBGostvggJ/0Lz2jNiJGfc7txFf4y2Z6fWYnz2DI85a9tHr6m TsgftjKRmXvoOEQGDfpcMd3NwV8scvOtn/4hG1fyxAUHja5yEA5FBE2xewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIk9THxRgtdQzlmfC4SF7ToKZw9AMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvfxaAiB sYGKaT3qNFsCXS+oBYqH2S3U73D3ieAWGcfsFE/jCIdJcdJ00Ro2VemX77kywXz4 3dZsTM/YcDL6cJt94lC26NYcnSsd7J5RYL2/6Sjri/hSyr7EsrXVqFEzTktaKikw 6dwWYGZsS9dRfDMSsA4H+h23oM9lIxfc6hVMWOrdjIEuk31q9iVw758oXyqs43eQ KFV1FvtnR/kOBhwgcZ+UgwhBI3cH6hhkY+dz/T4ckWO/S73KH7melmcvPoN77HpI dguLaYMPXVQmEaD/5gp4q6uvGINtFOErkfkm59j/oAufrmdWd02MNaK7ge/9uJFJ Bx7/0Hifx0BFgw== -----END CERTIFICATE-----Generated at Sun May 11 19:54:14 2025 by rpki-client