$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: SX5/poNsf9UKrnhkEixrgUmGIEbYAppqrosvT4y2txs= Subject key identifier: D1:E9:FE:6A:B9:53:3C:A9:90:AF:1D:BD:53:71:30:52:68:C3:97:1A Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 01977BD52D44E840D126EF8DAC30CE9C4EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 0E8A Signing time: Tue 17 Jun 2025 03:00:57 +0000 Manifest this update: Tue 17 Jun 2025 03:00:57 +0000 Manifest next update: Wed 18 Jun 2025 03:00:57 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: hPoHKKmqy8MPGJ1TYQ6N2i40r9vHu/5JJp4xP5cccYU=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7b:d5:2d:44:e8:40:d1:26:ef:8d:ac:30:ce:9c:4e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jun 17 03:00:57 2025 GMT Not After : Jun 18 03:00:57 2025 GMT Subject: CN=d1e9fe6ab9533ca990af1dbd5371305268c3971a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:2a:16:a6:c6:f3:37:77:94:98:57:3a:2b: 9f:20:77:e5:35:7b:1d:17:8c:b2:fb:55:2e:f5:f7: 1c:76:19:83:57:08:7d:35:a6:af:f9:a3:95:bf:aa: 2f:c1:8f:7f:55:d7:79:fc:58:2a:f3:05:00:d7:a6: a8:9a:77:0b:15:94:15:82:79:e6:e0:2d:52:85:f0: c5:50:cc:94:00:5e:58:10:94:97:84:da:ed:1a:8c: b5:fe:a0:0f:85:4f:ce:1d:1c:d0:66:e2:c2:81:e1: f8:ff:d2:67:62:a1:47:4e:3f:f6:fd:39:6c:c1:50: 36:f7:03:14:43:8b:1f:ae:f8:ee:66:52:c5:d6:d9: 41:df:0e:87:e5:25:32:40:31:24:d8:5f:05:80:62: e4:f2:6c:74:b9:31:63:47:2f:3f:ca:90:63:8c:2e: d0:a2:59:d3:d1:01:07:6a:44:48:aa:20:e0:5a:8c: 43:3d:a6:38:6c:09:07:d2:e7:01:ae:b6:67:4e:1f: a1:71:e8:7f:e2:40:dc:4d:55:c4:76:d0:6e:50:f3: 98:1f:ac:a1:52:8f:da:c0:92:96:b2:f2:b0:e1:eb: b7:97:bc:52:d5:09:a1:72:c9:93:39:3f:1b:7e:be: 96:cb:b7:05:95:35:19:0c:30:4e:15:e1:23:50:39: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:FE:6A:B9:53:3C:A9:90:AF:1D:BD:53:71:30:52:68:C3:97:1A X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a1:e9:a9:92:97:2a:d5:e8:15:5f:0f:52:de:20:c6:48:64: 45:46:46:6c:6e:b2:c8:8e:68:63:e9:64:5c:f0:47:67:8c:0e: 93:4b:d3:7c:a7:de:0e:c4:d4:32:9d:f9:ca:3c:c8:37:30:96: b6:26:db:2b:1a:01:f4:1b:7c:1b:40:bf:ed:98:18:3e:f5:e0: bb:93:60:87:fc:37:bf:3e:16:a7:ad:bc:81:1e:dd:dd:8f:eb: c9:6f:57:6f:c2:38:2f:b3:3b:8d:97:64:20:6e:06:2d:40:6c: 7b:0c:b3:08:35:d2:94:2b:ad:ff:17:21:53:ce:fa:6a:84:3a: e3:e4:2a:38:ce:1a:42:f6:7c:e2:76:77:16:03:95:77:e8:14: f6:31:5f:94:14:23:05:72:64:e9:d5:d8:d8:b3:3a:30:ae:58: 56:1f:15:81:5e:ff:c9:77:2c:c8:2c:c4:51:43:ea:e5:97:9c: 56:54:55:2b:2a:ab:a9:ba:e6:79:39:13:2a:24:33:c0:fd:ce: 8f:57:06:c5:70:a8:b4:aa:26:62:50:f5:7b:47:ef:84:9a:5e: 98:d7:56:65:9a:80:36:f0:ee:db:ca:ae:da:49:a2:b2:19:32: 87:a1:ae:0e:4e:e2:17:14:c1:72:d6:5b:e5:d0:0b:ac:2b:b8: c8:06:f8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd71S1E6EDRJu+NrDDOnE7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUwNjE3MDMwMDU3WhcNMjUwNjE4MDMwMDU3WjAzMTEwLwYDVQQD EyhkMWU5ZmU2YWI5NTMzY2E5OTBhZjFkYmQ1MzcxMzA1MjY4YzM5NzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtukqFqbG8zd3lJhXOiufIHflNXsd F4yy+1Uu9fccdhmDVwh9Naav+aOVv6ovwY9/Vdd5/Fgq8wUA16aomncLFZQVgnnm 4C1ShfDFUMyUAF5YEJSXhNrtGoy1/qAPhU/OHRzQZuLCgeH4/9JnYqFHTj/2/Tls wVA29wMUQ4sfrvjuZlLF1tlB3w6H5SUyQDEk2F8FgGLk8mx0uTFjRy8/ypBjjC7Q olnT0QEHakRIqiDgWoxDPaY4bAkH0ucBrrZnTh+hceh/4kDcTVXEdtBuUPOYH6yh Uo/awJKWsvKw4eu3l7xS1QmhcsmTOT8bfr6Wy7cFlTUZDDBOFeEjUDly5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHp/mq5UzypkK8dvVNxMFJow5caMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKHpqZKX KtXoFV8PUt4gxkhkRUZGbG6yyI5oY+lkXPBHZ4wOk0vTfKfeDsTUMp35yjzINzCW tibbKxoB9Bt8G0C/7ZgYPvXgu5Ngh/w3vz4Wp628gR7d3Y/ryW9Xb8I4L7M7jZdk IG4GLUBsewyzCDXSlCut/xchU876aoQ64+QqOM4aQvZ84nZ3FgOVd+gU9jFflBQj BXJk6dXY2LM6MK5YVh8VgV7/yXcsyCzEUUPq5ZecVlRVKyqrqbrmeTkTKiQzwP3O j1cGxXCotKomYlD1e0fvhJpemNdWZZqANvDu28qu2kmishkyh6GuDk7iFxTBctZb 5dALrCu4yAb4OQ== -----END CERTIFICATE-----Generated at Tue Jun 17 08:54:01 2025 by rpki-client