$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: XktHzgK42D3h8KBZcY5p6ItC6T2+iG/CBL4wg8GJAro= Subject key identifier: 40:12:01:31:84:6E:E1:00:F9:E8:1C:88:A4:E1:D3:8D:3B:4B:3E:89 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 0197B7EA2CA65E905CB2A0E907DF754A64F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 14F1 Signing time: Sat 28 Jun 2025 19:01:06 +0000 Manifest this update: Sat 28 Jun 2025 19:01:06 +0000 Manifest next update: Sun 29 Jun 2025 19:01:06 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=) 5: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=) 6: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: H4kTK2Dli4CSMMW8vU4N+1F+4sMhaungwxygBSdHWcI=) 7: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 8: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=) 9: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 10: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 11: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:2c:a6:5e:90:5c:b2:a0:e9:07:df:75:4a:64:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jun 28 19:01:06 2025 GMT Not After : Jun 29 19:01:06 2025 GMT Subject: CN=40120131846ee100f9e81c88a4e1d38d3b4b3e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c5:ae:ee:4b:a0:b8:46:ab:88:aa:71:6e:08: 04:90:60:c4:f4:af:4d:f5:f5:f7:cb:07:af:f0:9a: 50:fd:4f:34:e5:61:89:83:c7:f5:d1:8d:2c:84:99: 3f:dd:76:a5:ac:b1:05:9c:a5:c6:72:b3:a3:26:45: 1f:2a:a5:4b:99:0a:8d:31:66:8f:7c:54:4b:54:07: 1b:bf:1f:f9:a7:b9:5e:31:46:1f:6d:9f:4d:30:75: 75:be:d4:88:f6:3d:bc:d0:05:cc:5c:11:1f:f8:c9: b9:df:f0:70:5f:e8:b1:87:aa:fb:33:30:c1:12:72: 76:11:30:95:d5:48:6b:63:75:07:41:0e:6f:90:e7: b7:85:47:4a:be:bb:ee:14:8d:98:de:a1:90:14:42: 6e:35:88:72:0a:ca:ed:4e:c4:1b:d1:5c:2a:c3:66: 9e:76:fa:76:d6:44:03:b3:b3:cb:cb:3c:48:8b:60: 94:4d:a9:f7:12:82:dc:4f:22:8f:c1:fe:93:da:68: 6e:ec:bb:f4:95:d8:a7:d9:4e:04:b0:b4:ae:ed:1e: 82:60:15:6f:97:63:8d:f2:44:c3:16:c5:a2:65:42: 7e:26:ca:69:71:48:39:c7:73:27:03:40:2e:81:ba: 2c:6b:15:7f:8f:61:21:26:85:34:53:6e:95:14:71: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:12:01:31:84:6E:E1:00:F9:E8:1C:88:A4:E1:D3:8D:3B:4B:3E:89 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:34:0d:8b:8c:eb:41:2f:7c:a7:f2:e2:93:73:15:fd:74:59: 6a:ee:f8:ee:e4:72:b1:4a:36:b8:25:be:64:03:91:a7:b6:7d: 09:d0:7a:e5:9e:8c:65:07:1e:4b:39:e1:cd:1f:38:77:d0:9c: 6c:12:bf:ef:fe:98:7f:13:cf:75:c6:42:18:81:c1:27:e1:1f: 27:0a:4a:d4:9e:b1:fa:55:22:47:a8:7a:c9:53:de:40:49:80: 31:13:58:5d:18:63:2a:90:ed:c6:d1:33:ca:31:24:ac:ff:52: f1:47:8b:d2:6e:92:39:66:90:a5:0c:3e:5a:80:d7:27:ea:23: 2f:81:46:7b:b0:62:77:7d:4c:bb:8a:cc:3d:89:9e:6b:3c:28: 98:2d:d5:66:b3:18:67:f7:91:7e:ce:ab:73:4c:52:0f:71:47: 37:54:0c:68:dd:52:38:de:1e:15:6c:63:b9:1b:bc:fc:25:90: c7:72:e7:32:3f:61:0f:be:ec:77:be:09:90:e6:7a:4c:cd:a3: c8:43:c3:e6:06:8b:17:6a:a0:a0:e6:d2:a2:63:af:4b:30:ab: ce:59:d4:1b:c9:6e:69:55:c3:1d:ba:19:42:27:06:43:d9:92: f8:77:34:d6:47:3b:f9:b4:68:43:3e:42:91:72:ea:b9:c5:73: 80:a8:e6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36iymXpBcsqDpB991SmT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUwNjI4MTkwMTA2WhcNMjUwNjI5MTkwMTA2WjAzMTEwLwYDVQQD Eyg0MDEyMDEzMTg0NmVlMTAwZjllODFjODhhNGUxZDM4ZDNiNGIzZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MWu7kuguEariKpxbggEkGDE9K9N 9fX3ywev8JpQ/U805WGJg8f10Y0shJk/3XalrLEFnKXGcrOjJkUfKqVLmQqNMWaP fFRLVAcbvx/5p7leMUYfbZ9NMHV1vtSI9j280AXMXBEf+Mm53/BwX+ixh6r7MzDB EnJ2ETCV1UhrY3UHQQ5vkOe3hUdKvrvuFI2Y3qGQFEJuNYhyCsrtTsQb0Vwqw2ae dvp21kQDs7PLyzxIi2CUTan3EoLcTyKPwf6T2mhu7Lv0ldin2U4EsLSu7R6CYBVv l2ON8kTDFsWiZUJ+JsppcUg5x3MnA0AugbosaxV/j2EhJoU0U26VFHFRpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEASATGEbuEA+egciKTh0407Sz6JMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjQNi4zr QS98p/Lik3MV/XRZau747uRysUo2uCW+ZAORp7Z9CdB65Z6MZQceSznhzR84d9Cc bBK/7/6YfxPPdcZCGIHBJ+EfJwpK1J6x+lUiR6h6yVPeQEmAMRNYXRhjKpDtxtEz yjEkrP9S8UeL0m6SOWaQpQw+WoDXJ+ojL4FGe7Bid31Mu4rMPYmeazwomC3VZrMY Z/eRfs6rc0xSD3FHN1QMaN1SON4eFWxjuRu8/CWQx3LnMj9hD77sd74JkOZ6TM2j yEPD5gaLF2qgoObSomOvSzCrzlnUG8luaVXDHboZQicGQ9mS+Hc01kc7+bRoQz5C kXLqucVzgKjm9w== -----END CERTIFICATE-----Generated at Sat Jun 28 21:29:34 2025 by rpki-client