$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft File: TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json) Hash identifier: 26rH/T7O7P7DVsx0CUEci0SYAr9yYd/zWVdpfFUEclk= Subject key identifier: 5B:EF:84:F6:D1:6E:6B:4F:3E:8C:F7:D8:31:EF:13:A7:2F:A1:76:6A Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 0198D4E04828FC4D836CFEF2BC6A948565BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft Manifest number: 1654 Signing time: Sat 23 Aug 2025 03:02:04 +0000 Manifest this update: Sat 23 Aug 2025 03:02:04 +0000 Manifest next update: Sun 24 Aug 2025 03:02:04 +0000 Files and hashes: 1: 5ihFdcr9l-tc7rukSnsuZYO-sCc.roa (hash: jVp/K4TFXHukJ6ToifAvqgLYscP9U1YkYRjyQ/vS7rs=) 2: 6yNeqI6cfHc3f4rCblxx3TjO0eA.roa (hash: gtLbnA120/ol5rBCSdNOOaWzTA+gt7YvBjty1F7J0T4=) 3: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (hash: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=) 4: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (hash: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=) 5: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (hash: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=) 6: HFBEdH3RlWYpvPeNgp6xKhpodko.roa (hash: JH1fjI/K5jNqNFebQu9ct1cPojHEsM6BVZLaKE0xEso=) 7: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: DSDMOXtMDPXu55GkHWDlqRqKRRKqtITqAvEq4pHTbAU=) 8: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (hash: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=) 9: ehged3mZieiEQPKX6YV4LMY94IA.roa (hash: 7eCOyiKG9ZW1g+yYlD3ivpQA1oY2V4uQMAsWpNV5czU=) 10: isgHEY3DLcIdH7fzaoi9hSSweWI.roa (hash: UYsZ1nus3c+5ErOsOKu1wsJtYaH8MiA2+iXpl5haTe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:48:28:fc:4d:83:6c:fe:f2:bc:6a:94:85:65:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Aug 23 03:02:04 2025 GMT Not After : Aug 24 03:02:04 2025 GMT Subject: CN=5bef84f6d16e6b4f3e8cf7d831ef13a72fa1766a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:d6:c8:28:24:ea:10:2c:13:d7:4d:48:36: cf:45:83:8e:34:13:6f:10:34:ff:ec:46:70:7b:48: b8:8a:00:1f:3f:dc:9a:37:64:f6:ad:a9:9e:81:92: 12:26:57:a2:96:54:ba:8b:d7:df:6b:38:a3:bf:b3: d7:7a:98:c1:ec:c4:8f:c1:2e:23:94:d3:31:29:ed: 9f:49:94:7c:8b:f6:4d:64:08:e7:89:5b:31:aa:75: dd:bf:69:47:ec:0b:07:08:fb:88:ea:26:89:66:5a: 92:b9:7a:e4:32:cf:b9:5c:61:03:9e:ec:7e:bc:9b: 84:93:19:58:ff:1f:44:c9:02:64:0e:d4:6f:0b:16: 62:01:64:f1:68:40:86:77:ce:e9:8d:65:2d:49:dc: f0:c6:b8:f6:f1:7d:a2:1d:ef:9c:1f:43:e4:a8:72: 3a:11:e6:1b:76:7d:9f:cb:6b:e9:32:81:c7:39:57: fd:b4:8e:ae:11:a5:23:0f:d6:cb:ba:ce:fc:85:57: be:eb:ea:29:82:cf:a6:18:13:2a:9e:24:cb:b1:ef: 8b:4b:07:52:c9:8d:e3:e6:26:fb:e9:68:07:05:d7: af:a9:45:c4:b8:7b:ef:96:8b:65:e7:99:b8:6e:50: 77:25:0e:6c:66:86:3b:ff:41:1f:82:3e:7f:38:e1: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EF:84:F6:D1:6E:6B:4F:3E:8C:F7:D8:31:EF:13:A7:2F:A1:76:6A X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:08:80:fc:d9:15:0f:c2:67:a9:d1:65:b7:48:2a:a0:12:0d: 77:f9:50:8b:c9:0a:b1:cf:f0:77:ef:53:e9:db:0e:0b:59:3d: ca:93:06:9a:2a:16:8a:3b:6a:69:77:3c:af:ec:67:b1:5a:8f: 09:c2:c3:ff:c6:b1:48:9d:86:d5:26:04:d0:24:dd:e8:2e:e3: ff:12:42:ac:79:f0:13:3a:7e:a4:54:37:52:a8:28:17:0e:9a: 06:3d:f3:7c:84:4f:6a:00:8e:df:6c:9c:bc:e5:a4:92:da:65: 96:7f:16:ad:37:62:27:80:38:2e:c8:83:85:ea:d0:06:eb:c2: 59:00:99:ba:a0:ad:e4:ee:0d:7a:51:54:40:99:3c:2f:0b:bd: 42:fe:f6:c7:3a:0c:9d:ef:bd:25:4c:36:b8:48:52:1c:a0:18: ae:cd:cf:43:f3:4e:e5:85:a9:a3:4e:38:c0:db:5a:85:4d:48: 7d:fe:c0:f4:c4:10:18:ff:4d:11:57:79:52:c6:67:69:2f:08: 32:38:56:6c:a1:83:7d:2a:e8:d1:40:64:8c:ed:35:aa:7b:e5: 52:c5:2c:00:bf:4d:58:03:0c:43:db:a9:b6:d9:21:91:d7:fe: 48:f6:f9:99:7b:42:16:77:d6:b9:2a:a0:c4:b7:7f:11:8f:1f: 47:af:bb:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4Ego/E2DbP7yvGqUhWW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjUwODIzMDMwMjA0WhcNMjUwODI0MDMwMjA0WjAzMTEwLwYDVQQD Eyg1YmVmODRmNmQxNmU2YjRmM2U4Y2Y3ZDgzMWVmMTNhNzJmYTE3NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmvWyCgk6hAsE9dNSDbPRYOONBNv EDT/7EZwe0i4igAfP9yaN2T2ramegZISJleillS6i9ffazijv7PXepjB7MSPwS4j lNMxKe2fSZR8i/ZNZAjniVsxqnXdv2lH7AsHCPuI6iaJZlqSuXrkMs+5XGEDnux+ vJuEkxlY/x9EyQJkDtRvCxZiAWTxaECGd87pjWUtSdzwxrj28X2iHe+cH0PkqHI6 EeYbdn2fy2vpMoHHOVf9tI6uEaUjD9bLus78hVe+6+opgs+mGBMqniTLse+LSwdS yY3j5ib76WgHBdevqUXEuHvvlotl55m4blB3JQ5sZoY7/0Efgj5/OOH2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvvhPbRbmtPPoz32DHvE6cvoXZqMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQiA/NkV D8JnqdFlt0gqoBINd/lQi8kKsc/wd+9T6dsOC1k9ypMGmioWijtqaXc8r+xnsVqP CcLD/8axSJ2G1SYE0CTd6C7j/xJCrHnwEzp+pFQ3UqgoFw6aBj3zfIRPagCO32yc vOWkktplln8WrTdiJ4A4LsiDherQBuvCWQCZuqCt5O4NelFUQJk8Lwu9Qv72xzoM ne+9JUw2uEhSHKAYrs3PQ/NO5YWpo044wNtahU1Iff7A9MQQGP9NEVd5UsZnaS8I MjhWbKGDfSro0UBkjO01qnvlUsUsAL9NWAMMQ9upttkhkdf+SPb5mXtCFnfWuSqg xLd/EY8fR6+73g== -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:50 2025 by rpki-client