$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft File: DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json) Hash identifier: YDZHxfYHpIYv8wOJhgz6AQaG8i/HaHGM7fXV1UUvCRI= Subject key identifier: 36:78:CC:62:B4:D3:A2:CB:D9:8A:D2:0F:03:A0:C7:B0:F9:27:A6:0A Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019FA9753A9C4BC46CC26EF1C26AB40E88CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft Manifest number: 023E Signing time: Tue 28 Jul 2026 16:00:59 +0000 Manifest this update: Tue 28 Jul 2026 16:00:59 +0000 Manifest next update: Wed 29 Jul 2026 16:00:59 +0000 Files and hashes: 1: 5H5HvQv575nFSmKSZOWkpoNmJa4.roa (hash: C7AqddrBTGFSdtwcxzGRSd2Sbb+zBQZFF1QXO0RlcUs=) 2: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=) 3: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=) 4: AcToql_UqNBfG1rjDk5FIUcSzS4.roa (hash: S2Tpi4kDrEf93PoUW4sACQhMZl5q7cDANwyMjE4r/9E=) 5: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: s1aKkUUJHvGUBWVSE9dfhEdhBK6nDz3zZGqZTbLFRCY=) 6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=) 7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=) 8: O-QEXm4qSbt72Nnk4qRQFwvPr_0.roa (hash: vVF+iuhTnkhVo+LKbluIv023EO5M+EyUgI75CD2LSB0=) 9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=) 10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=) 11: _zcItGlmx6998FM_OkVMktHXtJY.roa (hash: BVU2FfRsrCVxlC5hx2l9rOZ/f3ofzH78ETxGPtN8M6c=) 12: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=) 13: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=) 14: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=) 15: x2XYLxaNKJRFn9DehiizW9aYMTk.roa (hash: Osl107YeRkqGDPiFlpVzUDvS4jF+uDx9WoyD7Axzjng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:3a:9c:4b:c4:6c:c2:6e:f1:c2:6a:b4:0e:88:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Jul 28 16:00:59 2026 GMT Not After : Jul 29 16:00:59 2026 GMT Subject: CN=3678cc62b4d3a2cbd98ad20f03a0c7b0f927a60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:ba:30:0e:94:ca:d0:d5:c2:c7:c3:35:36: 04:a6:39:11:d6:24:47:e4:de:d2:e5:c0:52:41:1d: 32:ef:62:89:4e:4a:eb:b9:13:98:e0:de:3c:56:e5: ab:e3:a7:a0:d6:d8:33:55:c6:21:3c:d5:04:8e:32: 1b:c0:a1:56:d8:70:54:47:82:6c:77:c5:f0:65:c2: 47:8e:bc:ea:ea:41:cf:ee:d9:2d:57:74:b5:0c:9c: 01:49:2c:9d:52:0c:be:25:b6:9a:ef:fa:4f:d2:33: 38:ee:ab:e3:35:f4:fc:d4:3e:30:d1:c4:ba:4f:31: 5c:8d:5f:de:84:47:83:1e:6a:61:3e:11:0f:e1:38: b9:c7:a9:ba:39:26:cf:a3:b3:a1:1c:b4:ac:db:ee: ae:5f:9d:20:8e:9c:35:2b:3b:dc:22:ea:31:5a:f9: b7:f8:e4:3f:58:6a:47:c6:59:1e:c0:42:8c:59:29: 6a:2a:40:38:19:22:85:53:45:7e:2e:7e:92:3f:03: bd:28:f4:e6:f9:29:8d:5f:a2:d3:c3:1c:d6:87:b7: 05:18:ff:ad:32:63:c7:f2:93:25:35:da:87:30:c2: 5a:19:b7:34:b9:dc:f9:4f:70:2d:82:18:3e:c7:cd: 04:e1:d7:e8:74:13:d4:94:b7:3e:63:59:66:27:d0: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:78:CC:62:B4:D3:A2:CB:D9:8A:D2:0F:03:A0:C7:B0:F9:27:A6:0A X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fe:7b:cd:4e:3d:80:36:85:ba:b6:23:cc:7f:57:a7:a1:2b: 73:4f:9a:0a:f9:4f:31:aa:ba:d5:f0:e9:ea:34:ac:b1:89:69: af:da:9c:95:59:fe:ae:17:7e:75:82:f8:ed:d7:9b:54:be:37: 2a:d9:eb:1b:3d:b5:96:b9:33:25:7c:73:ba:82:f3:dd:55:eb: 74:65:6b:4f:2f:08:e6:b0:bd:f2:a6:59:2b:e9:3a:df:d4:8f: da:33:4a:4c:3b:5f:5d:58:a5:b4:d8:2b:a4:61:0b:7a:c4:d0: 11:36:06:2f:7c:7a:50:5b:af:a8:35:36:f3:44:25:f7:f9:4c: 9a:ab:e2:3c:ad:f4:2b:ff:56:cf:d4:8c:4f:84:71:95:85:55: e5:7b:38:9e:29:23:26:4a:2d:ab:22:16:f1:65:71:c4:80:76: 42:8b:c9:fc:ff:18:ed:45:ef:d3:4f:de:4d:3c:d2:c1:8f:db: 36:07:dd:b2:42:0e:2f:fe:10:96:df:04:c2:dc:99:2a:80:1e: d4:10:a4:f0:9e:dc:fb:49:36:34:c5:09:79:94:cf:0a:d5:6e: a6:2a:05:7d:18:3f:8d:45:0b:56:c8:cb:7c:44:3c:66:35:e7: 8d:4f:65:9c:39:5f:15:47:73:a9:78:45:ef:71:b3:c9:e9:dd: 80:e2:2e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdTqcS8Rswm7xwmq0DojLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjYwNzI4MTYwMDU5WhcNMjYwNzI5MTYwMDU5WjAzMTEwLwYDVQQD EygzNjc4Y2M2MmI0ZDNhMmNiZDk4YWQyMGYwM2EwYzdiMGY5MjdhNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweG6MA6UytDVwsfDNTYEpjkR1iRH 5N7S5cBSQR0y72KJTkrruROY4N48VuWr46eg1tgzVcYhPNUEjjIbwKFW2HBUR4Js d8XwZcJHjrzq6kHP7tktV3S1DJwBSSydUgy+Jbaa7/pP0jM47qvjNfT81D4w0cS6 TzFcjV/ehEeDHmphPhEP4Ti5x6m6OSbPo7OhHLSs2+6uX50gjpw1KzvcIuoxWvm3 +OQ/WGpHxlkewEKMWSlqKkA4GSKFU0V+Ln6SPwO9KPTm+SmNX6LTwxzWh7cFGP+t MmPH8pMlNdqHMMJaGbc0udz5T3Atghg+x80E4dfodBPUlLc+Y1lmJ9Bz1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ4zGK006LL2YrSDwOgx7D5J6YKMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIf57zU49 gDaFurYjzH9Xp6Erc0+aCvlPMaq61fDp6jSssYlpr9qclVn+rhd+dYL47debVL43 KtnrGz21lrkzJXxzuoLz3VXrdGVrTy8I5rC98qZZK+k639SP2jNKTDtfXViltNgr pGELesTQETYGL3x6UFuvqDU280Ql9/lMmqviPK30K/9Wz9SMT4RxlYVV5Xs4nikj JkotqyIW8WVxxIB2QovJ/P8Y7UXv00/eTTzSwY/bNgfdskIOL/4Qlt8EwtyZKoAe 1BCk8J7c+0k2NMUJeZTPCtVupioFfRg/jUULVsjLfEQ8ZjXnjU9lnDlfFUdzqXhF 73GzyendgOIufQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:12 2026 by rpki-client