$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: XV5axealAq/nBUptbbaAOludGj9kpl2KEN2MiXUCMkI= Subject key identifier: 11:A5:DE:1A:23:8A:C2:A8:10:59:F2:A0:1E:29:9A:0F:2D:39:2A:20 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 0197C9146AC4790935050A7F58E48CD91197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 15C8 Signing time: Wed 02 Jul 2025 03:00:47 +0000 Manifest this update: Wed 02 Jul 2025 03:00:47 +0000 Manifest next update: Thu 03 Jul 2025 03:00:47 +0000 Files and hashes: 1: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (hash: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=) 2: CaGm-a6CxApZqirxxCCZ9rx1aiM.roa (hash: in3Qvj8lVIdQByC2i0yNl5XLhAZsdDWoJ0Q3xc4mK5w=) 3: G7X7b_-2524mL2utRjqA_p3x1ko.roa (hash: eNBADPehKuBiSWTNdfZV2c/hvceCYObCQ47OijZj/IM=) 4: NhgBecJhbXJyu80EUHu6BPAS8Mg.roa (hash: FolUs3V79z5eN7vUncBGVFdi3TkJgSnVDd9F6NqCZ5I=) 5: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (hash: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=) 6: ZaGVuVXsRBNxP4dq86SPZaH0d2Y.roa (hash: ePG1AbpK3bZttwJyXTf9fJ1Yn9VK5Fh/mraSKmrNJ6g=) 7: _JHDbAZ2ATmmU2h8LNTts0pQdRw.roa (hash: ydLyrnNRvtcOwVHilzuoONY7T6CbRsMdyLBgcqYGqyo=) 8: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (hash: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=) 9: sCoMzCi05UrDFtmTnulnnY6R09o.roa (hash: ZM5RYx3VNWn9QHDFDvEBjHCFQTlKZaYcsLAypuanz3s=) 10: tPcgE7Dec0le1j4-lCiliZGhMhA.roa (hash: rqY7E+ZB4onuPYp0NQezTIDslFC1HqRDysd/HXAkW7Y=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: Pm0Zlc05miqI5t9UClDJO3jT4WYFgh+f8LO/4bzw5+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c9:14:6a:c4:79:09:35:05:0a:7f:58:e4:8c:d9:11:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jul 2 03:00:47 2025 GMT Not After : Jul 3 03:00:47 2025 GMT Subject: CN=11a5de1a238ac2a81059f2a01e299a0f2d392a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:2c:fd:7a:40:8a:e1:8c:c4:5a:d9:9b:f1: 35:0c:20:de:78:13:60:f6:13:6a:d9:23:d4:28:44: 43:43:18:0f:93:82:ca:b9:dc:ab:38:76:66:dc:a4: a2:1a:9d:35:e5:ab:37:e8:f6:1c:10:a7:24:25:39: e5:5c:2e:6b:48:ac:b2:90:bb:4a:09:a4:7d:85:7b: bc:41:75:d9:7c:56:31:29:94:3f:dc:c8:22:8b:98: 6d:15:8d:a1:03:f3:53:14:61:5d:5f:5d:fa:7e:1e: a3:e9:42:3e:df:dc:a1:f4:6f:1f:ae:0b:91:eb:81: 49:33:8a:dd:74:8a:36:76:16:bb:65:52:81:8c:bc: 29:23:b0:c0:2e:8e:05:fb:a2:54:73:a7:7e:31:b9: 27:3e:fa:07:7e:ec:7b:a4:d4:bb:11:ce:ca:6b:86: db:c8:e6:78:08:c0:c6:ae:fe:02:e9:e2:ac:12:1d: 9f:ea:b3:5e:e0:66:c2:1e:f7:dc:f1:b4:52:06:e3: d5:45:99:ef:49:72:68:02:ad:1b:be:cf:d5:83:6d: 5e:ac:ba:0d:e7:68:6e:fd:66:01:ee:a8:ca:25:3c: 99:02:8a:77:9d:10:a2:41:03:53:a4:d6:12:8c:9f: 61:24:2c:6e:38:34:44:97:40:35:1a:d5:ee:dc:4e: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:DE:1A:23:8A:C2:A8:10:59:F2:A0:1E:29:9A:0F:2D:39:2A:20 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e6:33:f3:d1:ab:d9:01:c3:7f:bf:e0:1a:25:89:2b:0f:b5: 5f:f7:bf:e7:5d:95:b6:ec:5e:c2:4d:9f:5b:d1:ac:18:42:6c: aa:3c:cc:1a:42:2b:6b:0c:ac:2e:67:e3:10:ec:48:3c:ba:2f: fa:bb:41:cb:57:47:2f:18:82:bb:98:c8:f3:dc:f0:70:21:96: 20:43:7c:e3:6a:16:1f:27:84:89:86:17:16:f7:43:69:4a:c5: 8c:e1:e9:6c:93:91:f4:73:fb:a0:92:76:37:9e:b3:dd:bd:fb: 65:3f:c5:6e:fe:29:e8:07:26:a6:a3:ea:4b:d4:92:b2:87:8b: 2c:f9:ac:38:fb:4d:a0:e5:cc:b1:4d:34:39:44:e3:fd:19:15: 41:ae:18:a8:9d:10:10:c5:47:ee:5b:15:19:a4:4d:d5:3d:6b: 2f:de:62:71:76:b8:b4:91:c8:e4:8b:96:89:da:42:7e:7c:63: cd:f1:d0:03:2f:42:3d:a5:cc:90:b8:df:aa:7b:2a:2e:fa:29: e3:b8:41:bc:fa:f0:74:df:28:cd:14:de:ee:89:d3:d6:05:51: 47:7f:db:c5:0b:b1:64:80:86:99:87:20:2f:7e:30:aa:95:79: e6:ec:62:78:ad:73:30:8c:e7:37:8e:f9:18:15:1c:e9:31:06: e7:8a:ce:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfJFGrEeQk1BQp/WOSM2RGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjUwNzAyMDMwMDQ3WhcNMjUwNzAzMDMwMDQ3WjAzMTEwLwYDVQQD EygxMWE1ZGUxYTIzOGFjMmE4MTA1OWYyYTAxZTI5OWEwZjJkMzkyYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcks/XpAiuGMxFrZm/E1DCDeeBNg 9hNq2SPUKERDQxgPk4LKudyrOHZm3KSiGp015as36PYcEKckJTnlXC5rSKyykLtK CaR9hXu8QXXZfFYxKZQ/3Mgii5htFY2hA/NTFGFdX136fh6j6UI+39yh9G8frguR 64FJM4rddIo2dha7ZVKBjLwpI7DALo4F+6JUc6d+MbknPvoHfux7pNS7Ec7Ka4bb yOZ4CMDGrv4C6eKsEh2f6rNe4GbCHvfc8bRSBuPVRZnvSXJoAq0bvs/Vg21erLoN 52hu/WYB7qjKJTyZAop3nRCiQQNTpNYSjJ9hJCxuODREl0A1GtXu3E52DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGl3hojisKoEFnyoB4pmg8tOSogMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+Yz89Gr 2QHDf7/gGiWJKw+1X/e/512Vtuxewk2fW9GsGEJsqjzMGkIrawysLmfjEOxIPLov +rtBy1dHLxiCu5jI89zwcCGWIEN842oWHyeEiYYXFvdDaUrFjOHpbJOR9HP7oJJ2 N56z3b37ZT/Fbv4p6AcmpqPqS9SSsoeLLPmsOPtNoOXMsU00OUTj/RkVQa4YqJ0Q EMVH7lsVGaRN1T1rL95icXa4tJHI5IuWidpCfnxjzfHQAy9CPaXMkLjfqnsqLvop 47hBvPrwdN8ozRTe7onT1gVRR3/bxQuxZICGmYcgL34wqpV55uxieK1zMIznN475 GBUc6TEG54rOkA== -----END CERTIFICATE-----Generated at Wed Jul 2 12:26:49 2025 by rpki-client