$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json) Hash identifier: MC0ibP2AyNoIiJINNaal0oWpWS2mRV/JcEYZxMNwDz0= Subject key identifier: C4:B2:9E:B2:56:BF:1B:A5:25:F9:80:DA:FE:87:84:73:D8:40:06:85 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 0197B7458EF7FA5F8EC09BF1A021891142A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft Manifest number: 15C5 Signing time: Sat 28 Jun 2025 16:01:18 +0000 Manifest this update: Sat 28 Jun 2025 16:01:18 +0000 Manifest next update: Sun 29 Jun 2025 16:01:18 +0000 Files and hashes: 1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=) 2: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=) 3: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=) 4: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=) 5: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=) 6: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: 6AFaEZ1tpQd2ruqadbcAVKgmYakz7HfrZD+66bTMs5k=) 7: avM-B1l2ZcO7r4-2HMpO0TyPxg4.roa (hash: LazrBG41hn09e2iQyCdBaLebO4YAsZBrJ9T8I3t42BA=) 8: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=) 9: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=) 10: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:8e:f7:fa:5f:8e:c0:9b:f1:a0:21:89:11:42:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jun 28 16:01:18 2025 GMT Not After : Jun 29 16:01:18 2025 GMT Subject: CN=c4b29eb256bf1ba525f980dafe878473d8400685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:bf:b0:bf:ee:63:6e:a9:a0:47:e4:22:81: 30:96:1e:e5:45:86:66:a9:47:51:af:e9:82:5b:10: 58:86:e4:72:93:04:5f:5d:90:72:8b:0d:31:cc:d7: 17:6d:1c:42:d4:88:1f:5f:95:fe:56:49:2d:d8:74: 3e:27:3d:f9:51:a6:e6:ff:3d:0c:8a:f9:8f:53:46: 72:6d:67:0a:76:84:e3:e9:32:6e:c2:81:03:52:19: a9:d1:c0:36:49:ab:e7:81:69:3a:60:0a:3e:f7:91: 30:3d:48:84:b7:da:8e:4c:c3:2f:c7:0f:5d:95:a4: 84:1b:8a:ba:88:f0:67:ab:25:97:0a:ea:9f:3d:fa: 6e:7c:f1:c6:d4:68:7f:1a:fa:94:57:64:b4:57:cf: bc:c6:76:63:c2:76:4e:e4:a9:7a:96:8a:9e:9c:e6: cb:7d:72:52:07:ca:03:06:aa:68:02:46:51:e4:e9: 6e:a0:49:ae:49:bc:31:b7:c2:6d:8f:e1:28:a7:a4: 50:4a:67:58:91:74:6b:ce:ec:3b:dc:60:19:26:f9: c5:88:38:9d:94:fa:30:6b:5a:a1:42:a5:a2:da:16: 9c:88:dc:af:50:43:19:7d:e4:52:12:0e:a1:61:b3: 09:41:cf:3b:65:c7:99:68:82:a1:96:8e:85:cf:7a: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B2:9E:B2:56:BF:1B:A5:25:F9:80:DA:FE:87:84:73:D8:40:06:85 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8d:dc:f0:9f:b5:8e:de:39:22:dc:d5:da:b0:ee:0b:ba:b8: 79:9c:33:07:ea:cf:73:5f:b8:f8:fb:3a:9b:89:bd:4a:af:ac: c9:e8:13:af:d2:90:3b:47:35:97:a8:3f:b9:5c:07:8e:6e:e3: 1a:c4:a8:7c:83:7a:21:56:29:fc:8f:d1:8c:ec:16:4f:b7:17: cb:1f:ed:6f:47:3b:f0:d5:5f:8e:f5:12:b8:8e:4b:4c:50:1e: e3:9c:42:4b:eb:54:d8:65:0d:4e:b4:a1:66:fe:5b:95:4d:21: 45:cf:79:21:38:46:b6:e6:54:16:d3:aa:a3:3e:4a:6f:d8:ed: 0d:c8:3c:6c:f2:cb:a6:b1:22:a4:f3:88:b7:0b:6b:a9:58:54: b4:11:7d:1c:4c:42:1b:93:14:47:63:01:1b:df:29:92:c9:e1: 64:1e:eb:71:08:b4:3b:8e:e2:e9:27:13:73:3c:a3:69:11:58: b6:09:88:c7:2c:36:94:ab:1c:8f:37:08:d4:75:53:ca:84:cb: 34:59:7a:56:9c:a4:31:46:36:f9:94:8b:f0:7a:df:56:3f:bc: 5c:bd:95:0c:24:dc:e4:fc:c0:84:cd:60:2c:9e:22:73:37:3a: a7:ca:1f:5e:f9:96:e5:18:82:ac:f6:d0:6e:d1:a9:91:81:ce: e6:df:8f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RY73+l+OwJvxoCGJEUKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjUwNjI4MTYwMTE4WhcNMjUwNjI5MTYwMTE4WjAzMTEwLwYDVQQD EyhjNGIyOWViMjU2YmYxYmE1MjVmOTgwZGFmZTg3ODQ3M2Q4NDAwNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBi/sL/uY26poEfkIoEwlh7lRYZm qUdRr+mCWxBYhuRykwRfXZByiw0xzNcXbRxC1IgfX5X+Vkkt2HQ+Jz35Uabm/z0M ivmPU0ZybWcKdoTj6TJuwoEDUhmp0cA2SavngWk6YAo+95EwPUiEt9qOTMMvxw9d laSEG4q6iPBnqyWXCuqfPfpufPHG1Gh/GvqUV2S0V8+8xnZjwnZO5Kl6loqenObL fXJSB8oDBqpoAkZR5OluoEmuSbwxt8Jtj+Eop6RQSmdYkXRrzuw73GAZJvnFiDid lPowa1qhQqWi2haciNyvUEMZfeRSEg6hYbMJQc87ZceZaIKhlo6Fz3ouywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSynrJWvxulJfmA2v6HhHPYQAaFMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo3c8J+1 jt45ItzV2rDuC7q4eZwzB+rPc1+4+Ps6m4m9Sq+syegTr9KQO0c1l6g/uVwHjm7j GsSofIN6IVYp/I/RjOwWT7cXyx/tb0c78NVfjvUSuI5LTFAe45xCS+tU2GUNTrSh Zv5blU0hRc95IThGtuZUFtOqoz5Kb9jtDcg8bPLLprEipPOItwtrqVhUtBF9HExC G5MUR2MBG98pksnhZB7rcQi0O47i6ScTczyjaRFYtgmIxyw2lKscjzcI1HVTyoTL NFl6VpykMUY2+ZSL8HrfVj+8XL2VDCTc5PzAhM1gLJ4iczc6p8ofXvmW5RiCrPbQ btGpkYHO5t+PHQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:26:13 2025 by rpki-client