$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: cUrKQsZkJPUGvXTYRbP6VwWBZ/4T4JwutdH59Cc8LuM= Subject key identifier: 58:5C:D7:51:89:C3:57:00:27:07:0E:19:92:6F:1C:70:6A:E7:BA:DD Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019875D19C2F548CFCF1F2F649EAB65ADB5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0C80 Signing time: Mon 04 Aug 2025 16:02:07 +0000 Manifest this update: Mon 04 Aug 2025 16:02:07 +0000 Manifest next update: Tue 05 Aug 2025 16:02:07 +0000 Files and hashes: 1: 1LUgjj7ov-D18235s2ZQMS4tHzY.roa (hash: UEi+jnPCSYFB8at753cQs95MMeTUd/LDPkAmCWkVszw=) 2: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 3: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 4: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: 2IMyWpbi48B4cX50Ow0Xh6PmEtoDfpYHzYTLSkGB5gM=) 7: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 8: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 9: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 10: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 11: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 22: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 23: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 24: zIb65ZJns3oX5PPTPawqhHAMsZU.roa (hash: 74NPwbbyglVnvRUeHdKO7hXqs4rc+5TCbIoFZCGC0Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:d1:9c:2f:54:8c:fc:f1:f2:f6:49:ea:b6:5a:db:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Aug 4 16:02:07 2025 GMT Not After : Aug 5 16:02:07 2025 GMT Subject: CN=585cd75189c3570027070e19926f1c706ae7badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:5d:fb:db:01:84:90:bb:aa:4d:db:bc:c4: 00:01:67:ba:52:49:11:8b:cc:93:a0:e6:b8:e2:00: ea:b4:80:ae:c7:80:bc:b1:e4:dc:b7:b2:c0:66:f7: a9:b1:dd:63:7d:44:f8:e5:a3:b5:67:6c:16:e2:9f: 03:98:c0:64:9d:0e:2c:69:8b:96:54:ad:24:c9:03: ea:1e:bf:d4:16:e1:13:b1:6a:69:74:4d:63:01:17: 4e:78:62:10:db:26:3e:f9:f9:c4:5b:df:45:7c:ae: d9:2a:c2:4a:24:0d:8c:ab:e8:20:93:6c:62:5b:ee: cc:5f:97:a2:e3:93:e0:f1:9e:d5:4a:97:0d:12:50: 1c:08:99:43:19:df:d0:1c:6a:95:a9:5d:6d:24:71: 00:52:cc:85:d0:34:16:53:6d:e8:83:b1:50:0b:44: 79:82:29:4f:a2:ef:b3:80:45:31:48:c6:bc:af:44: 40:ac:9d:ee:cf:c8:49:ea:9a:55:10:f0:73:0a:6f: e3:30:77:32:00:29:97:ff:44:40:2f:07:1f:f9:c9: ec:a7:1a:ed:18:e4:f0:d1:6a:a7:37:1c:02:89:b3: ed:55:88:3a:87:0f:1a:e8:66:f5:85:7d:85:a2:6a: db:96:e0:8b:a0:f3:95:81:81:b1:e4:b2:91:1f:39: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5C:D7:51:89:C3:57:00:27:07:0E:19:92:6F:1C:70:6A:E7:BA:DD X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c8:b1:9a:92:e0:90:5c:b7:f9:50:d4:22:35:2a:93:88:28: b7:f6:14:db:7a:c4:c3:60:e1:bd:91:7a:0a:c4:5b:34:7d:fc: 96:97:9a:c6:04:c3:8b:2d:51:79:16:68:ac:c3:fa:36:ac:f6: a3:10:02:df:40:d9:4b:3f:7e:76:b9:9d:e4:79:96:da:31:1c: e1:c6:a9:87:05:85:d5:4c:c6:8a:7f:7e:90:ed:74:80:d5:18: 75:73:6f:03:79:0a:47:d8:97:82:da:82:17:61:6f:a7:63:40: da:5b:90:62:ac:eb:9e:19:63:48:52:6e:f2:a4:6f:8f:c9:bb: d6:4e:0d:e2:bd:85:d6:f8:72:9f:f8:6e:87:f3:dc:76:c7:6f: 22:8a:fa:00:47:7b:b0:9f:1d:c9:17:00:bd:6c:f2:85:c3:ee: e3:09:6c:f7:85:88:a9:df:4f:b2:c5:82:20:8d:11:89:4f:6f: ce:1f:9c:2d:f5:42:df:82:6a:22:88:8b:e0:6e:15:05:e1:50: cd:8f:35:af:8f:49:28:d5:41:6d:c6:1b:3b:4b:f9:e1:00:08: c4:e8:66:cd:b4:37:f3:9f:ef:2c:13:f2:c8:7f:cc:1d:c9:58: 76:43:f0:5d:33:a1:1c:d7:51:1f:06:5d:d4:9d:a0:38:81:cc: e7:76:aa:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh10ZwvVIz88fL2Seq2WttcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwODA0MTYwMjA3WhcNMjUwODA1MTYwMjA3WjAzMTEwLwYDVQQD Eyg1ODVjZDc1MTg5YzM1NzAwMjcwNzBlMTk5MjZmMWM3MDZhZTdiYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JJd+9sBhJC7qk3bvMQAAWe6UkkR i8yToOa44gDqtICux4C8seTct7LAZvepsd1jfUT45aO1Z2wW4p8DmMBknQ4saYuW VK0kyQPqHr/UFuETsWppdE1jARdOeGIQ2yY++fnEW99FfK7ZKsJKJA2Mq+ggk2xi W+7MX5ei45Pg8Z7VSpcNElAcCJlDGd/QHGqVqV1tJHEAUsyF0DQWU23og7FQC0R5 gilPou+zgEUxSMa8r0RArJ3uz8hJ6ppVEPBzCm/jMHcyACmX/0RALwcf+cnspxrt GOTw0WqnNxwCibPtVYg6hw8a6Gb1hX2FomrbluCLoPOVgYGx5LKRHzkBYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhc11GJw1cAJwcOGZJvHHBq57rdMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsixmpLg kFy3+VDUIjUqk4got/YU23rEw2DhvZF6CsRbNH38lpeaxgTDiy1ReRZorMP6Nqz2 oxAC30DZSz9+drmd5HmW2jEc4caphwWF1UzGin9+kO10gNUYdXNvA3kKR9iXgtqC F2Fvp2NA2luQYqzrnhljSFJu8qRvj8m71k4N4r2F1vhyn/huh/PcdsdvIor6AEd7 sJ8dyRcAvWzyhcPu4wls94WIqd9PssWCII0RiU9vzh+cLfVC34JqIoiL4G4VBeFQ zY81r49JKNVBbcYbO0v54QAIxOhmzbQ385/vLBPyyH/MHclYdkPwXTOhHNdRHwZd 1J2gOIHM53aqWQ== -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:29 2025 by rpki-client