$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: MKA+IKHYMJyT11fK/bPG60FniwUhKS88yLF7lgtll7E= Subject key identifier: 1E:A3:A8:7E:D4:76:FE:AB:9D:AE:7F:4B:7E:87:01:15:93:94:7E:E9 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 01A1C32F8964BC1D132049B63A067C5CFA77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 035A Signing time: Tue 10 Nov 2026 02:00:34 +0000 Manifest this update: Tue 10 Nov 2026 02:00:34 +0000 Manifest next update: Wed 11 Nov 2026 02:00:34 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: 9CPMn8n9A5mjkPe1SFXuL0mKi4I.roa (hash: D4EraHxT4/ppNGkdi8N5s7eEH3KKmP9mBFsVKAr04RU=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: ojdFipDg9LemgElpT6VgChvScjSt7iqvH29nHPY0xfI=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: LWCb_rn7dtaoroBNMd5nV8LGQ1I.roa (hash: saQHmdyeeE4qKDwnXpH56fkp0rFvJK6q7KF3ePpi/JU=) 8: OCvApHO5mjUuV4yskONg4kSU_tU.roa (hash: SD3pfUSDH8g2hAqab8oUoG9VqzVkLCW7ntgh81aWSJo=) 9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 11: oPUMDVZdNJJ0wbtNiKpT4bB3cJM.roa (hash: 2sttQ/LaGMOGWj3sxLpiozuHzg1tWCewZ5VkHDFqrH4=) 12: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 13: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 22:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:c3:2f:89:64:bc:1d:13:20:49:b6:3a:06:7c:5c:fa:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Nov 10 02:00:34 2026 GMT Not After : Nov 11 02:00:34 2026 GMT Subject: CN=1ea3a87ed476feab9dae7f4b7e87011593947ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:ee:31:94:dc:62:e0:41:6c:41:58:b2:c7: 33:71:1d:2b:8d:87:a5:af:43:79:96:5f:8a:a5:24: 51:a9:2c:6c:c6:4a:42:27:09:92:3f:61:1b:1e:f1: 78:43:7d:da:7a:bc:b9:f7:db:2d:c4:cb:11:cc:41: f4:b6:a6:53:2c:3b:88:ea:19:f0:ed:f8:16:df:b0: 6d:c1:04:fd:0b:a3:9b:86:0b:eb:2d:d7:4c:c9:91: 03:27:96:14:4d:80:59:48:3d:10:45:a7:7f:db:69: 62:2b:eb:50:c6:b7:a7:d5:18:94:f8:83:37:15:7a: 35:71:07:f1:80:30:63:e3:98:c1:8b:51:48:42:ed: 22:5f:02:41:9c:04:96:fa:1d:35:26:74:bd:e4:d9: 52:45:9d:e6:63:36:76:b5:4f:bb:dd:a6:e9:49:c2: cf:ce:5c:23:21:b3:99:0d:77:1b:07:50:e4:54:7d: 5b:ac:9b:f3:7b:e1:b1:55:6b:7c:a6:ce:46:4c:b4: 1a:14:ad:b4:ed:a9:dc:f3:23:75:f2:55:12:7f:55: 32:b6:28:c9:53:a2:3b:46:bc:02:66:22:95:ba:cc: 18:ef:02:df:d1:d5:ee:71:53:00:2f:1d:20:47:e1: 92:3f:36:f7:5b:61:84:3b:16:7b:46:19:f9:bb:b7: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:A8:7E:D4:76:FE:AB:9D:AE:7F:4B:7E:87:01:15:93:94:7E:E9 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9a:2e:bf:e2:14:b6:c1:f5:90:b3:c3:73:fa:cd:52:60:c4: 88:cf:1c:34:04:a3:d7:eb:9b:9e:8c:f7:3f:ee:16:a4:74:7d: c2:02:c6:5b:ce:63:c4:6f:fd:7d:7d:c7:87:01:33:73:34:a9: 5a:02:12:1f:02:5d:91:79:1c:bb:70:36:69:90:b7:89:9b:22: 18:09:db:20:a5:36:8f:17:f1:05:8b:8d:dd:1a:17:77:d6:90: 72:0e:64:37:68:f7:a8:8d:92:43:d0:3d:4b:43:48:1b:bf:00: 90:a9:18:59:4f:43:a1:14:21:1c:52:6f:a4:de:4d:61:18:5a: 52:8c:cc:cf:96:b3:84:bf:8e:a9:7c:d4:03:50:07:3e:0b:7c: 15:55:a1:2d:c1:b0:fe:5b:74:b2:ac:40:ad:f9:a1:b6:1e:ed: c9:3c:3c:30:02:9d:a9:c5:a6:a7:e4:ea:6a:74:ae:ec:94:40: 94:a6:6f:30:eb:cd:10:c9:ac:b5:73:5e:7c:8c:4a:67:e9:2e: 98:01:e9:40:28:b3:ed:34:08:38:ca:cb:06:7c:ca:5e:de:18: f1:b5:2b:1e:eb:42:dc:0f:7f:4c:47:e3:62:a7:86:72:0b:f1: 19:2f:24:65:c1:4f:3d:1f:e5:92:a5:cd:c1:9c:60:be:ee:d5: 5d:42:de:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHDL4lkvB0TIEm2OgZ8XPp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYxMTEwMDIwMDM0WhcNMjYxMTExMDIwMDM0WjAzMTEwLwYDVQQD EygxZWEzYTg3ZWQ0NzZmZWFiOWRhZTdmNGI3ZTg3MDExNTkzOTQ3ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhDuMZTcYuBBbEFYssczcR0rjYel r0N5ll+KpSRRqSxsxkpCJwmSP2EbHvF4Q33aery599stxMsRzEH0tqZTLDuI6hnw 7fgW37BtwQT9C6ObhgvrLddMyZEDJ5YUTYBZSD0QRad/22liK+tQxren1RiU+IM3 FXo1cQfxgDBj45jBi1FIQu0iXwJBnASW+h01JnS95NlSRZ3mYzZ2tU+73abpScLP zlwjIbOZDXcbB1DkVH1brJvze+GxVWt8ps5GTLQaFK207anc8yN18lUSf1UytijJ U6I7RrwCZiKVuswY7wLf0dXucVMALx0gR+GSPzb3W2GEOxZ7Rhn5u7fTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6jqH7Udv6rna5/S36HARWTlH7pMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZouv+IU tsH1kLPDc/rNUmDEiM8cNASj1+ubnoz3P+4WpHR9wgLGW85jxG/9fX3HhwEzczSp WgISHwJdkXkcu3A2aZC3iZsiGAnbIKU2jxfxBYuN3RoXd9aQcg5kN2j3qI2SQ9A9 S0NIG78AkKkYWU9DoRQhHFJvpN5NYRhaUozMz5azhL+OqXzUA1AHPgt8FVWhLcGw /lt0sqxArfmhth7tyTw8MAKdqcWmp+TqanSu7JRAlKZvMOvNEMmstXNefIxKZ+ku mAHpQCiz7TQIOMrLBnzKXt4Y8bUrHutC3A9/TEfjYqeGcgvxGS8kZcFPPR/lkqXN wZxgvu7VXULeqQ== -----END CERTIFICATE-----Generated at Tue Nov 10 07:46:16 2026 by rpki-client