$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: iHFjcnewfcbzcpZFIj+qVkwotIwi7IGa43CJN5y0mbw= Subject key identifier: 9A:7C:D2:A3:02:D4:AB:9B:59:A9:0D:DA:6E:46:74:3C:D0:3F:F9:D1 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 0198D4E0E00DE0F041D5D8E2488FDDFB57E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 165E Signing time: Sat 23 Aug 2025 03:02:43 +0000 Manifest this update: Sat 23 Aug 2025 03:02:43 +0000 Manifest next update: Sun 24 Aug 2025 03:02:43 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: pvAeYzTcUxl/hn5N58oi0oTHn6Yn4PuQ5StxAXqcQ3Y=) 11: w7JADU6oCGh6YbUdtkn1AWlz8C8.roa (hash: BeTxZ9eibtqN9brjaSZeCdnih1w74ddiTrBxnDrR2hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:e0:0d:e0:f0:41:d5:d8:e2:48:8f:dd:fb:57:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Aug 23 03:02:43 2025 GMT Not After : Aug 24 03:02:43 2025 GMT Subject: CN=9a7cd2a302d4ab9b59a90dda6e46743cd03ff9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:1f:6d:e9:17:f9:03:97:2b:12:d9:b5:d1: a8:2b:6d:e4:ab:35:03:b4:b7:10:45:e6:61:ea:0d: 90:e4:32:6f:c1:93:4e:58:52:75:c2:0e:5f:55:a9: 4d:4a:36:ac:48:50:0e:01:b8:f7:4c:7e:cd:87:a2: a7:59:99:70:8c:b5:fd:3e:d1:c3:ad:27:ae:c6:1c: cb:6a:f2:5c:a3:9f:5d:ab:86:0c:78:0a:77:b8:a4: 64:61:c9:a6:89:94:a3:49:b9:44:77:99:74:94:35: f0:2b:07:59:d6:de:dd:65:4c:35:67:d3:79:30:3f: eb:33:a7:ee:9e:70:12:e6:03:5b:8d:b5:c9:98:bf: 00:23:c4:08:fc:a1:16:07:75:3f:4f:e1:39:19:eb: 84:17:16:ae:cf:2d:9e:03:c9:12:96:71:c0:ee:d7: 4d:ab:b7:f8:74:15:05:12:8b:90:92:0e:d0:33:4f: 2e:7a:c8:97:ff:c0:1f:f7:6e:54:bb:34:33:fe:34: 0c:59:f0:65:ac:1c:f2:82:7b:5f:9a:cd:d3:22:b7: c7:fd:fc:12:f7:d4:dc:7e:eb:42:8b:7b:52:3f:c1: 78:98:9a:c0:ab:56:7a:2f:5f:7c:e3:3c:3e:cf:c9: ec:80:13:27:c1:09:f6:62:e9:85:1c:a2:2d:71:b0: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7C:D2:A3:02:D4:AB:9B:59:A9:0D:DA:6E:46:74:3C:D0:3F:F9:D1 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e1:77:c9:c0:3e:4a:39:c6:68:30:97:1b:3b:a5:89:37:da: 7e:1b:5b:49:e4:ea:a3:50:e3:d4:51:87:d8:6f:72:1e:af:de: 8b:15:63:35:f5:64:c5:ab:76:4c:0d:6d:07:6f:71:7e:67:35: bf:ae:ef:8d:fe:ae:80:b4:e2:26:76:39:3d:86:3d:81:2d:46: 6c:57:96:aa:ce:98:da:fc:da:2a:ce:88:cd:04:ef:b2:2f:ed: 62:3e:e5:1a:ea:b0:1b:8d:79:4a:76:f0:d6:3f:7f:09:a2:49: de:12:ae:49:8a:69:07:49:80:aa:02:41:16:34:f3:78:b7:76: de:29:55:90:f9:ae:f6:c0:d1:e0:55:b9:fe:11:c4:1f:d1:b3: 25:28:7b:56:08:da:a6:a1:b6:50:1c:05:de:0e:54:26:f6:07: bd:2a:cc:f7:df:dc:fb:6a:98:3e:4c:5e:c4:56:f1:ca:9d:6d: 5f:38:ae:34:73:47:ce:98:bb:cf:df:ac:64:11:36:51:06:0b: 44:ef:ce:78:7e:0c:ee:a3:10:e2:a6:98:99:ce:3c:f9:71:7b: 01:ce:68:59:b3:e6:ac:2c:34:cb:27:07:76:42:e3:a6:2c:aa: 10:92:b3:e8:6a:bc:84:b1:e8:3a:66:9f:fe:00:ce:ed:dd:cc: f6:eb:88:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4OAN4PBB1djiSI/d+1fpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwODIzMDMwMjQzWhcNMjUwODI0MDMwMjQzWjAzMTEwLwYDVQQD Eyg5YTdjZDJhMzAyZDRhYjliNTlhOTBkZGE2ZTQ2NzQzY2QwM2ZmOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm80fbekX+QOXKxLZtdGoK23kqzUD tLcQReZh6g2Q5DJvwZNOWFJ1wg5fValNSjasSFAOAbj3TH7Nh6KnWZlwjLX9PtHD rSeuxhzLavJco59dq4YMeAp3uKRkYcmmiZSjSblEd5l0lDXwKwdZ1t7dZUw1Z9N5 MD/rM6funnAS5gNbjbXJmL8AI8QI/KEWB3U/T+E5GeuEFxauzy2eA8kSlnHA7tdN q7f4dBUFEouQkg7QM08uesiX/8Af925UuzQz/jQMWfBlrBzygntfms3TIrfH/fwS 99TcfutCi3tSP8F4mJrAq1Z6L1984zw+z8nsgBMnwQn2YumFHKItcbD8DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp80qMC1KubWakN2m5GdDzQP/nRMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruF3ycA+ SjnGaDCXGzuliTfafhtbSeTqo1Dj1FGH2G9yHq/eixVjNfVkxat2TA1tB29xfmc1 v67vjf6ugLTiJnY5PYY9gS1GbFeWqs6Y2vzaKs6IzQTvsi/tYj7lGuqwG415Snbw 1j9/CaJJ3hKuSYppB0mAqgJBFjTzeLd23ilVkPmu9sDR4FW5/hHEH9GzJSh7Vgja pqG2UBwF3g5UJvYHvSrM99/c+2qYPkxexFbxyp1tXziuNHNHzpi7z9+sZBE2UQYL RO/OeH4M7qMQ4qaYmc48+XF7Ac5oWbPmrCw0yycHdkLjpiyqEJKz6Gq8hLHoOmaf /gDO7d3M9uuI0A== -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:14 2025 by rpki-client