$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: n2yKS4tjIWy+C8NaYNXVC2cm9KnXrlCiAU4/YIheHjU= Subject key identifier: CF:E4:7A:D3:34:77:F1:57:0F:29:F3:9E:A1:D2:5C:D5:9C:35:9B:EC Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 0198D65FD68E1000022A495B7DF1E8AE8F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1666 Signing time: Sat 23 Aug 2025 10:01:01 +0000 Manifest this update: Sat 23 Aug 2025 10:01:01 +0000 Manifest next update: Sun 24 Aug 2025 10:01:01 +0000 Files and hashes: 1: 5Tj38Bsn0hJUYrmVNSahq5IYxas.roa (hash: GZ7T7PHhO62jK4WQFKNvOrwYNZYOPPS6icOBzwnz7nI=) 2: 6p9AkcbnlE4Z8IbJhSYYYojDJrg.roa (hash: SKcAYEFRxxbeCI1HsQW06reRx+d5nEWDWPFTqTMItNM=) 3: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (hash: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=) 4: IZrh2fKkBSEsZhHZW1V-vS3SOsU.roa (hash: Bu6uRwEYKgZWKKUFSCHxc6kWVnShkzj76gtymj7qNwg=) 5: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=) 6: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=) 7: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=) 8: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: rnCP+zQYilOP2Nz8eKauilA04zNX0R/gIhqaGWAbsIo=) 9: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=) 10: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=) 11: u-uXh8WZWOS9uWtRFI-rTtX1S9A.roa (hash: kDD2Qmq25WjJ3/Vhs1pz7/0NseMdnFHogi9MbnP9L+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:d6:8e:10:00:02:2a:49:5b:7d:f1:e8:ae:8f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Aug 23 10:01:01 2025 GMT Not After : Aug 24 10:01:01 2025 GMT Subject: CN=cfe47ad33477f1570f29f39ea1d25cd59c359bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0b:4c:78:27:31:7a:48:a7:47:58:4a:a8:4e: 95:95:0a:04:7d:38:dd:42:60:c1:c1:7e:53:23:9d: 6a:67:fe:5c:3b:98:61:1f:fb:b5:83:a8:78:52:cf: 93:4e:a3:38:d7:6d:11:fb:9b:40:19:21:a9:27:5f: 8f:a0:26:5f:b0:76:ab:f5:6e:b9:7e:c3:b7:85:4b: 18:1e:e7:14:37:87:7d:47:8a:36:1d:e2:9e:ae:be: bf:95:e4:de:8d:cc:f0:28:89:63:03:a1:6d:a3:5c: cf:61:e1:cd:3f:5d:bf:8a:05:90:f3:d1:ff:2b:33: b1:80:7d:3f:07:90:88:fb:5c:e3:89:8a:4d:4e:07: a7:af:f8:89:c4:cc:c4:ce:55:ab:7e:fa:ef:db:cd: d3:43:12:17:66:fa:c2:71:16:81:d9:9f:9b:52:2b: 38:a1:76:84:a2:cd:8d:78:11:29:a0:34:ea:c3:60: 1e:b6:62:e1:73:2b:bd:87:00:c4:3f:41:fc:98:23: 1b:bd:eb:21:6f:11:e5:07:a9:cb:a6:2e:ca:90:1f: f7:f4:78:9f:1d:72:4e:d6:9d:30:62:98:cf:bb:cb: 04:30:d3:c4:38:34:5c:a0:c7:6e:f7:05:1e:4d:75: 0b:6c:eb:6c:8c:d0:82:31:f4:58:00:75:b4:64:b8: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E4:7A:D3:34:77:F1:57:0F:29:F3:9E:A1:D2:5C:D5:9C:35:9B:EC X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7f:8f:89:a5:95:7f:cd:70:2b:a7:d0:d3:c8:41:fa:92:0e: 42:63:c2:3e:80:0d:f7:5f:86:91:5c:5e:85:bc:94:10:71:c3: 1a:8f:02:a5:e8:1c:57:96:df:39:56:2e:3b:51:b7:a3:dd:bb: 49:30:e8:f9:fb:2d:20:69:8d:a0:f6:d5:00:59:ca:2c:76:f5: 9a:db:ca:a2:2f:c6:2c:65:c6:a1:e6:b2:79:e7:82:7c:0b:c2: 27:c0:fe:cd:44:4d:7c:80:d2:70:54:07:da:c1:80:38:54:9d: 91:ac:82:a1:24:f5:f7:e1:7e:7e:6e:1b:be:3c:9c:68:59:32: 53:04:69:13:11:b8:40:1b:f9:47:39:7a:5d:36:6e:6e:46:8e: 3f:02:e9:45:7c:ee:4d:cc:9a:95:16:bf:50:de:3b:c4:c4:b7: b7:01:5c:fc:fa:31:90:34:66:9d:dc:6a:14:33:73:c8:46:dd: ac:b8:55:c2:bf:56:90:d0:0b:f7:90:cc:f8:67:18:c7:55:09: 0a:a0:51:49:58:e7:66:65:d9:ca:5e:6e:b2:a8:49:15:f4:e2: 46:b4:35:7e:04:1a:d5:38:56:0d:9d:91:95:da:b0:66:5c:46: 67:f0:f1:a6:b3:3a:9e:e1:f6:3b:f5:83:49:30:c0:dc:03:1a: 27:50:ce:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX9aOEAACKklbffHoro9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjUwODIzMTAwMTAxWhcNMjUwODI0MTAwMTAxWjAzMTEwLwYDVQQD EyhjZmU0N2FkMzM0NzdmMTU3MGYyOWYzOWVhMWQyNWNkNTljMzU5YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgtMeCcxekinR1hKqE6VlQoEfTjd QmDBwX5TI51qZ/5cO5hhH/u1g6h4Us+TTqM4120R+5tAGSGpJ1+PoCZfsHar9W65 fsO3hUsYHucUN4d9R4o2HeKerr6/leTejczwKIljA6Fto1zPYeHNP12/igWQ89H/ KzOxgH0/B5CI+1zjiYpNTgenr/iJxMzEzlWrfvrv283TQxIXZvrCcRaB2Z+bUis4 oXaEos2NeBEpoDTqw2AetmLhcyu9hwDEP0H8mCMbveshbxHlB6nLpi7KkB/39Hif HXJO1p0wYpjPu8sEMNPEODRcoMdu9wUeTXULbOtsjNCCMfRYAHW0ZLhShQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/ketM0d/FXDynznqHSXNWcNZvsMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX+PiaWV f81wK6fQ08hB+pIOQmPCPoAN91+GkVxehbyUEHHDGo8CpegcV5bfOVYuO1G3o927 STDo+fstIGmNoPbVAFnKLHb1mtvKoi/GLGXGoeayeeeCfAvCJ8D+zURNfIDScFQH 2sGAOFSdkayCoST19+F+fm4bvjycaFkyUwRpExG4QBv5Rzl6XTZubkaOPwLpRXzu TcyalRa/UN47xMS3twFc/PoxkDRmndxqFDNzyEbdrLhVwr9WkNAL95DM+GcYx1UJ CqBRSVjnZmXZyl5usqhJFfTiRrQ1fgQa1ThWDZ2RldqwZlxGZ/DxprM6nuH2O/WD STDA3AMaJ1DO/A== -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:24 2025 by rpki-client