$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: c+mdBFODKPmwTdnYZ48SKvvXd8yxtT9smL5rr0frfJg= Subject key identifier: 95:EA:2F:F3:95:74:4C:E0:E0:B9:82:9E:6C:6E:74:A7:94:1C:BB:BA Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 01976E502B574CAC36B03D71D0F09DFEE0A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0BF5 Signing time: Sat 14 Jun 2025 12:00:36 +0000 Manifest this update: Sat 14 Jun 2025 12:00:36 +0000 Manifest next update: Sun 15 Jun 2025 12:00:36 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=) 6: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: zzQ6JugtOTrFN71js6AkUT7jIEceIrrq0NVWv7XUQEo=) 7: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 8: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 9: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: UYEZb-NB4LxQf23HXvgumhETuh8.roa (hash: 8WWVRhvoeVKe5QD2G/CV3zdyhFyySnvvIH3sDj2uAKc=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 16: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 17: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 18: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 19: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 20: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 21: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:50:2b:57:4c:ac:36:b0:3d:71:d0:f0:9d:fe:e0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jun 14 12:00:36 2025 GMT Not After : Jun 15 12:00:36 2025 GMT Subject: CN=95ea2ff395744ce0e0b9829e6c6e74a7941cbbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:96:7d:51:6b:2d:14:59:c2:64:4d:fd:de: 2d:23:17:83:8e:6a:bc:d3:e4:cd:25:00:9a:73:48: 9d:17:26:71:b7:4a:ad:45:dc:12:62:ee:f2:31:e6: 8d:58:6b:12:66:d4:09:23:7d:aa:26:61:64:0c:b0: 29:dd:4d:e6:9d:04:48:7c:1d:f7:e6:e7:5c:8b:46: bd:71:7d:99:16:57:be:48:52:f5:f7:10:cd:f9:83: 14:e4:6f:90:80:16:fe:1a:fe:34:6e:a1:3f:dd:19: f0:23:e5:47:b2:59:84:37:c3:3c:96:12:08:b4:0d: 1e:fe:68:4a:63:07:4f:f4:fd:2c:00:4f:14:a0:1b: 54:b4:67:dc:7b:49:6f:a5:9b:4d:22:5c:68:e2:59: 28:d3:39:03:81:1b:a7:f5:b0:34:95:ac:3c:0d:46: 11:2b:c3:ea:3a:de:a6:20:f8:b7:b4:a9:bc:79:f4: 6b:ed:6c:34:4e:8c:5a:c6:35:7f:c6:50:8c:bc:29: 1a:e9:95:29:d3:f5:9e:90:22:39:ff:7a:e4:1e:6c: 10:92:88:87:11:2d:0b:b1:94:ae:bd:b6:b7:ea:fc: 12:1f:16:e6:b3:24:a0:03:f7:ce:d3:76:d1:dd:f3: 1f:81:d3:43:bf:7a:69:82:c3:0f:19:fb:d0:a4:cc: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EA:2F:F3:95:74:4C:E0:E0:B9:82:9E:6C:6E:74:A7:94:1C:BB:BA X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7b:d8:a1:9e:21:3d:e7:be:92:ea:e8:bc:87:04:91:b5:4d: d4:7e:85:79:93:75:fa:24:78:72:3b:68:f1:34:ad:d3:33:4a: d5:85:62:62:ac:c9:3e:be:ff:bb:d9:f6:d1:ca:e8:e4:9f:71: 79:c3:43:c8:f8:a7:f8:a9:a4:42:45:ac:fb:e4:0b:f3:d0:f2: db:c4:6e:6b:92:e0:cc:09:a2:0b:a2:76:81:ce:97:07:ce:5c: 36:d6:fd:a3:87:20:31:bb:4d:90:16:17:99:97:0d:02:58:3f: 50:2d:9f:2d:db:7c:0d:61:61:3c:02:0c:09:ad:51:b1:78:c4: 44:24:1a:76:70:6f:16:28:e1:33:3e:aa:65:68:58:f8:a9:90: 2a:ac:68:84:5e:e8:25:20:79:f1:11:a0:a8:00:5c:12:a3:bc: d9:d6:25:2c:90:90:22:55:87:0c:77:4a:17:a1:db:e1:7a:de: a8:fc:ed:36:4a:0e:c5:d7:7d:f5:c0:c2:63:e5:0b:b2:14:2f: 2a:52:d8:d9:a7:2a:8a:51:55:6a:47:7d:1e:68:58:ac:4e:c9: fd:1a:c3:37:e5:94:d0:d1:2a:eb:80:d1:74:52:44:61:65:22: e7:79:e1:ca:a7:8c:7a:49:46:c1:7a:0e:4f:cf:3c:e6:4c:9a: 4c:d1:36:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduUCtXTKw2sD1x0PCd/uChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwNjE0MTIwMDM2WhcNMjUwNjE1MTIwMDM2WjAzMTEwLwYDVQQD Eyg5NWVhMmZmMzk1NzQ0Y2UwZTBiOTgyOWU2YzZlNzRhNzk0MWNiYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVmWfVFrLRRZwmRN/d4tIxeDjmq8 0+TNJQCac0idFyZxt0qtRdwSYu7yMeaNWGsSZtQJI32qJmFkDLAp3U3mnQRIfB33 5udci0a9cX2ZFle+SFL19xDN+YMU5G+QgBb+Gv40bqE/3RnwI+VHslmEN8M8lhII tA0e/mhKYwdP9P0sAE8UoBtUtGfce0lvpZtNIlxo4lko0zkDgRun9bA0law8DUYR K8PqOt6mIPi3tKm8efRr7Ww0ToxaxjV/xlCMvCka6ZUp0/WekCI5/3rkHmwQkoiH ES0LsZSuvba36vwSHxbmsySgA/fO03bR3fMfgdNDv3ppgsMPGfvQpMxa9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXqL/OVdEzg4LmCnmxudKeUHLu6MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3vYoZ4h Pee+kurovIcEkbVN1H6FeZN1+iR4cjto8TSt0zNK1YViYqzJPr7/u9n20cro5J9x ecNDyPin+KmkQkWs++QL89Dy28Rua5LgzAmiC6J2gc6XB85cNtb9o4cgMbtNkBYX mZcNAlg/UC2fLdt8DWFhPAIMCa1RsXjERCQadnBvFijhMz6qZWhY+KmQKqxohF7o JSB58RGgqABcEqO82dYlLJCQIlWHDHdKF6Hb4XreqPztNkoOxdd99cDCY+ULshQv KlLY2acqilFVakd9HmhYrE7J/RrDN+WU0NEq64DRdFJEYWUi53nhyqeMeklGwXoO T8885kyaTNE25Q== -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:18 2025 by rpki-client