$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: g0yCgRw4Cj+Fsru9Ny4MLU+5Vv2jwycxoeQbAkJf0Zs= Subject key identifier: EC:3E:AD:EB:90:8A:96:D4:31:80:10:13:8E:59:09:06:7B:39:F1:42 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019A4E4F975CD4BC5D78BE8014121E3987BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0EF7 Signing time: Tue 04 Nov 2025 10:00:30 +0000 Manifest this update: Tue 04 Nov 2025 10:00:30 +0000 Manifest next update: Wed 05 Nov 2025 10:00:30 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: DkxalkTCINJqj4WY6byfxeumgoFGVgqrt9l4/lNaTv8=) 7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:97:5c:d4:bc:5d:78:be:80:14:12:1e:39:87:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Nov 4 10:00:30 2025 GMT Not After : Nov 5 10:00:30 2025 GMT Subject: CN=ec3eadeb908a96d4318010138e5909067b39f142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:54:58:8f:fa:0a:34:1b:c6:9a:b4:c2:f1: ff:5a:0d:a4:48:d9:80:5c:80:df:95:ac:14:83:99: 15:6c:f7:a7:7d:cb:15:2e:7f:47:9f:36:ed:84:d9: 96:59:29:ab:5d:7d:c7:9e:3b:5c:a6:ce:38:02:ed: 1d:0f:f8:80:99:5b:8a:39:9c:f8:8e:d0:7d:d0:3a: 47:36:2e:2b:80:ec:c7:dd:3c:04:bc:55:22:1e:cb: 04:32:4a:f1:5c:3e:c2:20:01:89:ef:ec:7a:f4:bf: 0b:62:8c:ea:7a:a6:8a:b6:bd:d7:37:77:fe:40:68: 8c:6a:1f:26:92:ac:e1:d4:94:2c:4d:51:71:b1:14: 4d:b9:50:f3:af:66:43:46:0b:7b:0f:69:08:da:ed: ac:b9:2a:16:a5:28:b2:d7:a1:11:5d:46:4a:af:e2: 6c:8a:a9:89:3c:fb:39:e5:21:bd:c0:a0:2a:f8:97: ba:8f:ee:32:4d:7c:19:ad:f7:e4:0c:7a:19:df:a5: 6d:99:d5:77:9e:09:b9:ed:b8:49:97:92:de:b2:95: af:49:54:b4:9d:1f:1b:0b:09:39:db:d7:9c:62:38: c6:3e:f6:92:7a:68:1a:1e:27:8a:45:1b:b1:a3:4c: 7f:5a:12:7f:a1:41:bb:80:e2:27:6d:ba:eb:f2:ff: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3E:AD:EB:90:8A:96:D4:31:80:10:13:8E:59:09:06:7B:39:F1:42 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:37:ed:38:fc:cf:82:54:0f:8a:23:22:70:b7:af:79:a8: 5a:79:f1:ca:d4:9c:b0:22:59:e3:72:18:4e:d0:8a:c6:9e:77: 09:3e:4a:c6:08:ec:4a:73:d8:be:22:bd:fb:85:8d:bf:37:fa: 44:b7:9a:a2:d6:7c:c8:97:46:ef:fd:f9:4c:3d:ec:a6:c0:69: eb:47:8c:60:a7:f5:25:2a:71:c5:f2:7a:18:2a:c0:1b:a0:ca: ab:c5:8a:ef:64:57:d0:04:70:6e:31:55:ea:ad:bd:10:2b:cd: 16:b5:6e:7c:71:f5:38:96:47:59:a5:fa:20:47:e5:89:f8:99: a3:18:0b:f2:80:00:b4:7a:33:bc:5b:5b:ed:2b:b2:7e:a3:ad: b1:a8:e0:32:a2:e0:34:ab:90:6e:56:59:c4:ab:f9:d3:07:b0: 81:d4:5e:ed:66:c1:de:01:f3:00:05:23:bd:68:12:49:ae:98: 84:8a:d6:72:b3:76:70:04:bb:a7:29:3d:c2:40:ba:f0:01:00: 40:f4:20:e4:b8:f3:52:b5:1d:d1:89:12:f6:11:78:d3:91:05: b2:65:02:fc:75:2a:99:ca:56:86:b2:71:bf:12:24:3f:07:ab: 58:43:b0:35:46:d1:92:92:b7:db:69:d6:0c:88:2f:44:f0:cb: 6d:1e:7b:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT5dc1LxdeL6AFBIeOYe8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUxMTA0MTAwMDMwWhcNMjUxMTA1MTAwMDMwWjAzMTEwLwYDVQQD EyhlYzNlYWRlYjkwOGE5NmQ0MzE4MDEwMTM4ZTU5MDkwNjdiMzlmMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PBUWI/6CjQbxpq0wvH/Wg2kSNmA XIDflawUg5kVbPenfcsVLn9HnzbthNmWWSmrXX3Hnjtcps44Au0dD/iAmVuKOZz4 jtB90DpHNi4rgOzH3TwEvFUiHssEMkrxXD7CIAGJ7+x69L8LYozqeqaKtr3XN3f+ QGiMah8mkqzh1JQsTVFxsRRNuVDzr2ZDRgt7D2kI2u2suSoWpSiy16ERXUZKr+Js iqmJPPs55SG9wKAq+Je6j+4yTXwZrffkDHoZ36VtmdV3ngm57bhJl5LespWvSVS0 nR8bCwk529ecYjjGPvaSemgaHieKRRuxo0x/WhJ/oUG7gOInbbrr8v/EZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw+reuQipbUMYAQE45ZCQZ7OfFCMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPI37Tj8 z4JUD4ojInC3r3moWnnxytScsCJZ43IYTtCKxp53CT5KxgjsSnPYviK9+4WNvzf6 RLeaotZ8yJdG7/35TD3spsBp60eMYKf1JSpxxfJ6GCrAG6DKq8WK72RX0ARwbjFV 6q29ECvNFrVufHH1OJZHWaX6IEflifiZoxgL8oAAtHozvFtb7SuyfqOtsajgMqLg NKuQblZZxKv50wewgdRe7WbB3gHzAAUjvWgSSa6YhIrWcrN2cAS7pyk9wkC68AEA QPQg5LjzUrUd0YkS9hF405EFsmUC/HUqmcpWhrJxvxIkPwerWEOwNUbRkpK322nW DIgvRPDLbR573A== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:49 2025 by rpki-client