$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: A2rr7EtpZYKozGWAePluhTjc6mmsSitjpmA4QthPQeI= Subject key identifier: F9:D1:96:5B:EA:20:F4:54:EE:64:26:5E:D9:55:0D:C0:ED:E2:B3:9F Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 0196A65418419CE0FD0E4A9C9692A0C46EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 1537 Signing time: Tue 06 May 2025 16:00:51 +0000 Manifest this update: Tue 06 May 2025 16:00:51 +0000 Manifest next update: Wed 07 May 2025 16:00:51 +0000 Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=) 2: GkzUiQjxAwqkp5Z39cxt3GUWIng.roa (hash: vLNapJVPwIEWIsnPkWMH8DeeJJAdXd67gcOUXS+rDWA=) 3: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=) 4: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=) 5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=) 6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=) 7: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: jjQ4VcrAvN4pjRctu0lEKC0Q9oQzBo3PoHc1yL/rZbg=) 8: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=) 9: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=) 10: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a6:54:18:41:9c:e0:fd:0e:4a:9c:96:92:a0:c4:6e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: May 6 16:00:51 2025 GMT Not After : May 7 16:00:51 2025 GMT Subject: CN=f9d1965bea20f454ee64265ed9550dc0ede2b39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:f0:79:3c:e7:1d:67:41:04:ee:69:cd:e3: 85:05:e9:c7:92:d3:88:c6:b0:ff:80:1f:a7:c8:b2: b4:ca:0e:d2:b6:44:28:a9:e5:82:88:25:2d:1a:c3: 6c:f2:f2:dc:0b:ef:78:ae:be:8f:8f:fe:b6:39:8b: c5:f9:4c:d9:6c:55:e5:2f:33:ec:d7:31:7d:29:e7: da:30:f7:23:ff:5f:1e:de:ff:30:b4:a4:8b:d0:f5: 3a:e8:c5:c0:4c:21:75:a4:db:45:4d:f3:88:89:c8: 1a:e7:4c:3d:34:3f:93:b1:7d:53:c1:d2:6d:6e:67: e5:b3:28:e2:7f:ea:cc:0d:3f:fb:ea:0e:4a:9e:6e: b1:d8:f8:a2:35:9e:e2:c4:a4:cf:c8:c3:6c:19:b4: 28:c3:f5:ba:d9:55:83:1e:6c:d2:40:0b:54:15:6f: 9c:0c:89:bb:2e:27:92:6b:63:f2:0b:35:68:01:8a: 62:3f:3a:73:25:62:2d:a4:6e:91:3f:05:f2:68:5b: 67:5b:98:82:1f:4f:5c:fe:1f:ea:7f:fe:a1:96:5d: d6:78:72:07:c5:19:7c:84:26:b5:b0:34:87:b4:5b: cd:65:15:f7:4c:0b:e2:f2:34:f4:cf:8d:11:e5:48: 19:cb:f1:d3:38:6b:5d:b6:64:89:bf:5f:68:b0:5e: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:96:5B:EA:20:F4:54:EE:64:26:5E:D9:55:0D:C0:ED:E2:B3:9F X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fb:b7:95:d9:6b:e2:d5:db:89:73:86:07:ce:c4:c4:c6:bb: 29:d1:cc:b0:6b:57:99:71:04:7c:57:9c:40:bd:55:4c:13:d4: 48:76:ba:2a:f8:b0:d9:c7:b3:e0:92:6b:60:7b:53:53:c4:98: 30:dd:38:50:94:da:9a:ee:c2:6e:d2:ff:a3:01:51:05:49:c2: 83:0d:6b:40:76:89:e5:6a:cc:1f:61:e1:ad:40:5a:ad:cd:06: 67:67:8b:f0:fe:d8:8f:1f:91:63:c1:d9:1a:a5:8d:b2:bf:11: 51:a6:6b:f8:2e:52:3c:89:3a:72:12:a1:79:51:81:b0:b3:fb: 46:e9:e1:9e:27:88:9d:cf:44:7a:0d:43:1f:9b:ee:0a:af:30: 1f:a8:4e:4b:f4:69:20:a6:6d:3c:73:9a:e3:91:92:39:8e:48: 3a:25:d7:6e:c2:20:a5:36:c3:8f:24:e0:47:15:b4:ae:bc:62: 9c:35:2b:8e:6b:5f:76:ab:1a:a3:55:fb:57:b2:d0:bf:ad:2d: e1:02:2b:45:b4:6e:f1:69:80:50:ac:1b:77:7a:ca:85:ee:ef: 80:3d:13:bb:f5:3c:ef:96:0a:b3:1b:ac:ed:a1:95:ea:91:a6: 0e:8d:ba:4c:db:35:b1:49:1e:f6:82:cc:4c:ff:e1:ac:cb:dd: 48:25:12:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZamVBhBnOD9DkqclpKgxG7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjUwNTA2MTYwMDUxWhcNMjUwNTA3MTYwMDUxWjAzMTEwLwYDVQQD EyhmOWQxOTY1YmVhMjBmNDU0ZWU2NDI2NWVkOTU1MGRjMGVkZTJiMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQrweTznHWdBBO5pzeOFBenHktOI xrD/gB+nyLK0yg7StkQoqeWCiCUtGsNs8vLcC+94rr6Pj/62OYvF+UzZbFXlLzPs 1zF9KefaMPcj/18e3v8wtKSL0PU66MXATCF1pNtFTfOIicga50w9ND+TsX1TwdJt bmflsyjif+rMDT/76g5Knm6x2PiiNZ7ixKTPyMNsGbQow/W62VWDHmzSQAtUFW+c DIm7LieSa2PyCzVoAYpiPzpzJWItpG6RPwXyaFtnW5iCH09c/h/qf/6hll3WeHIH xRl8hCa1sDSHtFvNZRX3TAvi8jT0z40R5UgZy/HTOGtdtmSJv19osF5vcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnRllvqIPRU7mQmXtlVDcDt4rOfMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePu3ldlr 4tXbiXOGB87ExMa7KdHMsGtXmXEEfFecQL1VTBPUSHa6Kviw2cez4JJrYHtTU8SY MN04UJTamu7CbtL/owFRBUnCgw1rQHaJ5WrMH2HhrUBarc0GZ2eL8P7Yjx+RY8HZ GqWNsr8RUaZr+C5SPIk6chKheVGBsLP7RunhnieInc9Eeg1DH5vuCq8wH6hOS/Rp IKZtPHOa45GSOY5IOiXXbsIgpTbDjyTgRxW0rrxinDUrjmtfdqsao1X7V7LQv60t 4QIrRbRu8WmAUKwbd3rKhe7vgD0Tu/U875YKsxus7aGV6pGmDo26TNs1sUke9oLM TP/hrMvdSCUSHg== -----END CERTIFICATE-----Generated at Tue May 6 20:10:06 2025 by rpki-client