$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: s6V9OtyZFEDFQ92N8ggCpAFIaqBu3JoMB1ixaBizrbI= Subject key identifier: 95:7B:35:4C:24:44:E2:E7:11:2F:7D:F3:1D:5D:94:FB:E7:DF:D9:64 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 0198D5BC4223DC26D8D732C76F21A75C2828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 158C Signing time: Sat 23 Aug 2025 07:02:21 +0000 Manifest this update: Sat 23 Aug 2025 07:02:21 +0000 Manifest next update: Sun 24 Aug 2025 07:02:21 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 5: JCqujfTGMs0CXH7Tcl7wXUJG7rk.roa (hash: EOjAhyUB1/yJybUbQZT8krxAn/rD2CzV6whjFRdiiOs=) 6: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 7: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: 4YUf40N1dv0XjZ9Tf1RT/poRyLqISgNlA4eOge9y2LA=) 9: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 10: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (hash: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=) 11: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 12: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 13: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 14: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:42:23:dc:26:d8:d7:32:c7:6f:21:a7:5c:28:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Aug 23 07:02:21 2025 GMT Not After : Aug 24 07:02:21 2025 GMT Subject: CN=957b354c2444e2e7112f7df31d5d94fbe7dfd964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:87:ee:8d:e8:ea:87:65:ba:52:da:6d:9a: ef:c5:3e:dd:08:8e:62:90:68:d7:76:ab:08:0a:c1: d8:57:ec:07:ab:96:3e:91:bb:1c:57:4c:60:47:cc: 2b:d8:fb:6b:e1:ae:ed:a5:e9:a2:70:19:5c:fe:53: e2:43:7c:7f:99:42:a8:60:52:23:5b:d7:1d:c0:99: 94:52:38:0f:fd:6d:3d:95:2e:24:10:12:23:0e:da: 5b:a3:7f:2c:92:f7:9e:26:51:bb:c3:70:7d:33:6c: 88:d1:65:9a:85:89:f3:8d:c6:f8:30:d2:22:20:09: b2:50:b6:19:4a:b2:4d:31:6f:19:6a:02:7f:fe:40: c4:c7:35:8d:bf:ce:aa:4e:c5:7b:2f:2d:9f:96:d8: c8:21:a7:49:d7:0e:ee:22:75:9b:8c:b9:01:7d:23: da:20:4b:42:a1:dd:40:c5:1b:83:b7:37:34:66:79: cc:79:73:56:bb:42:9d:54:37:66:62:0e:de:ec:44: 95:a1:4c:ce:d0:88:b3:1e:b2:58:89:04:97:71:ff: 9b:42:c2:7a:8a:d9:00:5b:18:4a:5d:ac:11:94:ac: a9:9e:6c:92:f8:18:21:ce:6d:2e:8d:ff:89:24:af: 2b:a8:4d:cc:04:ac:92:77:4e:b6:16:73:0b:06:3f: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:35:4C:24:44:E2:E7:11:2F:7D:F3:1D:5D:94:FB:E7:DF:D9:64 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:63:71:41:fb:58:59:a9:96:d7:4b:e0:bc:22:62:24:ce:4a: a6:f2:7c:c3:80:e5:ba:ab:4f:75:ba:2b:8d:25:ed:d5:99:2c: 15:1b:be:a3:30:94:e5:b1:5c:e1:6c:50:a9:e5:65:79:4c:62: 3c:11:7d:49:be:2c:03:55:f5:d9:48:15:2a:37:5a:08:48:31: ab:2b:ef:06:6d:b5:3b:f2:26:14:13:1e:74:6c:74:aa:a0:94: df:4f:79:68:23:5f:09:0a:8c:eb:b3:f0:9b:31:70:63:dc:15: 1d:81:dc:69:97:f0:23:e5:28:6d:6c:63:95:c4:0d:ea:b0:d1: 01:3b:61:cd:1a:98:90:33:73:1a:e1:85:b6:42:cb:4b:de:1e: 1d:25:27:ef:f9:1d:f5:32:61:58:42:e8:38:8a:28:76:bc:64: d3:44:90:68:3e:89:5d:4c:53:b6:6c:dd:9f:9f:51:58:1f:a0: c5:90:ad:92:86:d3:bb:27:af:3a:f0:d6:8e:d4:34:a3:c6:81: 8f:5f:82:f0:45:55:d0:e4:ae:d4:ca:91:21:42:bc:69:ab:c5: f3:82:5e:af:1a:2c:ae:09:33:6e:30:1a:98:87:39:f8:47:26: 8f:1f:d1:2f:a5:a4:a9:38:d6:91:9a:66:23:cd:8b:a2:db:dc: 40:1c:45:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvEIj3CbY1zLHbyGnXCgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwODIzMDcwMjIxWhcNMjUwODI0MDcwMjIxWjAzMTEwLwYDVQQD Eyg5NTdiMzU0YzI0NDRlMmU3MTEyZjdkZjMxZDVkOTRmYmU3ZGZkOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmmH7o3o6odlulLabZrvxT7dCI5i kGjXdqsICsHYV+wHq5Y+kbscV0xgR8wr2Ptr4a7tpemicBlc/lPiQ3x/mUKoYFIj W9cdwJmUUjgP/W09lS4kEBIjDtpbo38skveeJlG7w3B9M2yI0WWahYnzjcb4MNIi IAmyULYZSrJNMW8ZagJ//kDExzWNv86qTsV7Ly2fltjIIadJ1w7uInWbjLkBfSPa IEtCod1AxRuDtzc0ZnnMeXNWu0KdVDdmYg7e7ESVoUzO0IizHrJYiQSXcf+bQsJ6 itkAWxhKXawRlKypnmyS+Bghzm0ujf+JJK8rqE3MBKySd062FnMLBj/79QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV7NUwkROLnES998x1dlPvn39lkMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmNxQftY WamW10vgvCJiJM5KpvJ8w4DluqtPdborjSXt1ZksFRu+ozCU5bFc4WxQqeVleUxi PBF9Sb4sA1X12UgVKjdaCEgxqyvvBm21O/ImFBMedGx0qqCU3095aCNfCQqM67Pw mzFwY9wVHYHcaZfwI+UobWxjlcQN6rDRATthzRqYkDNzGuGFtkLLS94eHSUn7/kd 9TJhWELoOIoodrxk00SQaD6JXUxTtmzdn59RWB+gxZCtkobTuyevOvDWjtQ0o8aB j1+C8EVV0OSu1MqRIUK8aavF84JerxosrgkzbjAamIc5+Ecmjx/RL6WkqTjWkZpm I82LotvcQBxFHA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:49:33 2025 by rpki-client