$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: EB/bahh/XKDl5Ld/neI+ontHSQVNoeaNcpQ3i/ckDXA= Subject key identifier: 86:0C:D2:04:97:0A:60:0A:55:D8:96:45:CB:C8:2E:8A:89:AC:4C:07 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 0198D5BC29E8FEFD5499D78DFABA4FAE357B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 165A Signing time: Sat 23 Aug 2025 07:02:15 +0000 Manifest this update: Sat 23 Aug 2025 07:02:15 +0000 Manifest next update: Sun 24 Aug 2025 07:02:15 +0000 Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=) 2: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=) 3: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=) 4: KscvLVMtZmBkxarHMZjKvBgfLfk.roa (hash: LHSFj6xYYHfALWFv5ULF2z+mFPohWH8M77+ifjvdIiM=) 5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=) 6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=) 7: T5IqxO0s3d3X9Y1GttHlSthoJkA.roa (hash: jGjUBiUWn1NYJl7CNkq/qe+4X44OgJIbeG2hNg3nO48=) 8: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: NpRYP5Qt/ooVgycvp0X7o2OrOoyuFLsxADxdIZ5A710=) 9: UM40IJoMbmC2E6_NVNk7myz37CE.roa (hash: ho6wywXgZcMzdgmZ/BHVUcsSpC5snRTwoXFhr5WOwMg=) 10: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=) 11: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=) 12: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:29:e8:fe:fd:54:99:d7:8d:fa:ba:4f:ae:35:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Aug 23 07:02:15 2025 GMT Not After : Aug 24 07:02:15 2025 GMT Subject: CN=860cd204970a600a55d89645cbc82e8a89ac4c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:82:c5:f8:cc:af:a5:25:f7:a0:e3:41:81: 9b:a0:e5:ec:7b:60:4c:f1:8f:68:34:a4:60:51:4d: e1:41:0a:2d:c8:31:d0:fe:2e:49:93:e4:d3:23:99: 20:de:1e:e9:ff:50:9f:04:9d:32:b4:53:51:b9:40: fd:7a:ec:c0:69:63:5c:8d:79:19:a2:44:05:c7:dc: 38:a8:e6:33:48:aa:4b:a7:27:67:69:25:7b:1a:76: 50:49:d7:6a:ef:a7:ee:40:8f:62:19:0c:e3:aa:91: c6:b0:71:67:0e:ec:27:d5:aa:a4:38:c5:f1:3b:44: 92:24:78:3c:89:c8:dd:eb:16:4d:94:fe:1b:50:8d: 83:38:fa:93:10:70:fb:00:9f:29:16:eb:a0:32:6f: ce:0f:72:c5:59:02:60:58:a4:bd:a6:cb:45:03:49: 36:ee:24:75:74:3f:d2:1e:2f:0d:cf:8d:00:e2:87: e4:a8:41:4a:a7:a3:22:63:75:1a:ef:80:02:18:26: 63:81:ea:64:2a:47:ea:62:4a:74:35:ad:4b:2b:70: 6d:81:3a:99:5f:b0:a0:41:6d:e5:6f:60:0d:d4:45: b0:5e:dd:8c:04:5b:28:3b:fd:c9:9f:67:52:eb:be: 88:f1:82:94:0e:35:a9:1c:5b:00:72:26:30:46:63: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:D2:04:97:0A:60:0A:55:D8:96:45:CB:C8:2E:8A:89:AC:4C:07 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b4:4d:73:0e:cf:66:55:a3:cc:a8:fb:63:b7:6e:1d:46:4c: 4c:79:44:bb:cf:8b:44:6b:2e:f7:06:d7:ed:dd:eb:aa:ff:83: 07:bb:09:b6:0d:07:9a:d9:a1:26:5f:29:0d:8a:2d:33:cb:a3: 99:f6:99:8c:5c:f7:31:dc:a9:69:bb:21:ed:98:fc:0e:62:4e: 54:9b:6e:20:fa:73:9f:0b:d3:75:ca:73:7d:a3:25:f0:49:be: 03:ee:fd:66:1e:9b:64:b0:f9:ed:53:3f:19:cd:9d:15:be:a4: 00:68:ee:78:c0:92:20:d2:27:9a:b4:b4:65:d0:e9:30:bf:83: 5c:92:b7:f6:95:cb:fc:47:da:54:0d:00:8d:96:7f:a3:44:12: 6d:92:6b:99:9c:7c:5a:0a:5f:9b:fc:0b:20:c8:99:33:e1:c3: 40:04:42:e3:a1:25:a4:db:b5:4d:7a:84:62:8b:ce:5c:76:b6: fb:ea:d8:54:c4:ee:5a:ac:97:7f:ef:e9:ae:c0:35:d3:4f:d1: dd:6a:e0:48:3a:69:7b:4d:3f:7e:d7:e7:6f:a5:ed:64:60:b2: 8a:73:6b:1b:ad:c5:09:56:fe:a4:e1:bf:bb:bd:d9:e4:20:00: 63:05:ee:1a:af:91:26:82:ef:3c:2c:2c:29:1b:1f:c7:d0:7e: 7a:fe:23:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvCno/v1UmdeN+rpPrjV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjUwODIzMDcwMjE1WhcNMjUwODI0MDcwMjE1WjAzMTEwLwYDVQQD Eyg4NjBjZDIwNDk3MGE2MDBhNTVkODk2NDVjYmM4MmU4YTg5YWM0YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0aCxfjMr6Ul96DjQYGboOXse2BM 8Y9oNKRgUU3hQQotyDHQ/i5Jk+TTI5kg3h7p/1CfBJ0ytFNRuUD9euzAaWNcjXkZ okQFx9w4qOYzSKpLpydnaSV7GnZQSddq76fuQI9iGQzjqpHGsHFnDuwn1aqkOMXx O0SSJHg8icjd6xZNlP4bUI2DOPqTEHD7AJ8pFuugMm/OD3LFWQJgWKS9pstFA0k2 7iR1dD/SHi8Nz40A4ofkqEFKp6MiY3Ua74ACGCZjgepkKkfqYkp0Na1LK3BtgTqZ X7CgQW3lb2AN1EWwXt2MBFsoO/3Jn2dS676I8YKUDjWpHFsAciYwRmNFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYM0gSXCmAKVdiWRcvILoqJrEwHMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrRNcw7P ZlWjzKj7Y7duHUZMTHlEu8+LRGsu9wbX7d3rqv+DB7sJtg0HmtmhJl8pDYotM8uj mfaZjFz3Mdypabsh7Zj8DmJOVJtuIPpznwvTdcpzfaMl8Em+A+79Zh6bZLD57VM/ Gc2dFb6kAGjueMCSINInmrS0ZdDpML+DXJK39pXL/EfaVA0AjZZ/o0QSbZJrmZx8 Wgpfm/wLIMiZM+HDQARC46ElpNu1TXqEYovOXHa2++rYVMTuWqyXf+/prsA100/R 3WrgSDppe00/ftfnb6XtZGCyinNrG63FCVb+pOG/u73Z5CAAYwXuGq+RJoLvPCws KRsfx9B+ev4jTA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:28:21 2025 by rpki-client