$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 70sbba38scvAwsdboWZDFDP4NA9OdBR0V13OOT2nVeY= Subject key identifier: A8:B6:57:15:8D:BC:1E:F7:BE:5A:8E:F9:C2:63:58:25:07:68:59:F7 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019675304D6CAE44AC5A32993E1C2CF1CB5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0CF8 Signing time: Sun 27 Apr 2025 03:00:21 +0000 Manifest this update: Sun 27 Apr 2025 03:00:21 +0000 Manifest next update: Mon 28 Apr 2025 03:00:21 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: uZ+VXRCeuQbE9WVxsjXYaJOjsF19NgaWKEgjt16bNZI=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:30:4d:6c:ae:44:ac:5a:32:99:3e:1c:2c:f1:cb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Apr 27 03:00:21 2025 GMT Not After : Apr 28 03:00:21 2025 GMT Subject: CN=a8b657158dbc1ef7be5a8ef9c2635825076859f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:10:65:60:98:e4:6d:73:7d:a8:87:0e:a1: d2:d5:f6:7e:1e:40:cd:31:50:44:27:2a:f9:20:ac: 84:e7:01:bd:95:7f:f7:06:ea:45:b5:14:25:3d:87: 46:37:bf:af:f5:03:23:58:68:60:a7:28:c9:f5:3a: d6:93:81:9d:b0:7a:5b:30:39:9f:b7:72:85:53:99: d7:1d:27:63:e3:91:8e:64:4c:48:e9:d2:52:f4:9e: 52:df:b9:65:2d:26:60:bc:43:9d:06:05:77:cf:86: ac:50:f8:01:83:f3:27:29:6d:54:f9:8c:e9:6f:c8: 70:88:62:85:06:76:f7:b2:31:d4:e9:df:c8:da:a0: 14:bc:2f:04:21:c3:97:a9:ab:b1:f4:0a:45:ce:c3: 9d:aa:3c:23:aa:96:44:9f:b2:9a:fc:15:cd:33:46: 69:c0:7b:50:e7:dd:6d:f5:79:2b:a7:26:ca:6e:e6: bb:89:ef:0b:cd:f7:64:19:55:75:04:e8:64:c3:72: cb:b8:4b:21:d1:4c:69:b3:a5:75:83:7f:f4:e3:6d: 88:ef:d6:62:5f:ec:d5:39:6c:96:8d:1d:4f:69:bf: 05:16:ab:ab:19:50:c0:c5:ec:39:b8:95:60:99:07: e2:f9:bf:98:9a:d8:96:79:22:10:4e:61:64:17:c7: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:57:15:8D:BC:1E:F7:BE:5A:8E:F9:C2:63:58:25:07:68:59:F7 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:96:8f:9a:0e:09:0b:44:ce:18:d1:fc:d4:e4:7c:09:a7:bf: 7c:6b:57:db:44:48:bb:0f:a6:c7:a6:14:c3:7b:7f:e5:e2:6d: 49:1c:9d:55:c8:fd:a3:e4:9a:39:19:52:50:0a:58:d6:39:59: a7:47:41:e1:c8:d4:b5:69:cb:31:c2:88:41:09:96:5c:32:d0: af:1a:25:00:5a:75:01:1f:18:a6:de:cd:b3:75:fc:c8:56:0c: 1c:5e:6b:80:f5:5d:5c:b9:e9:da:81:35:f6:91:08:33:6f:36: 4d:5a:4f:8b:2a:2e:22:83:76:0c:ec:d1:a4:82:35:91:5b:cc: 22:26:ce:1c:5b:be:7f:bc:5a:96:d9:c9:d3:74:bf:30:af:b2: 20:59:6b:67:c9:63:ca:3f:12:0d:ae:83:86:2f:b6:5d:d7:02: e6:b9:6c:b5:0a:a4:3f:98:0f:fd:85:0d:0a:a4:1e:6f:a7:16: 61:8f:4c:17:8f:1f:46:2c:b4:cc:e4:24:d0:75:dc:38:f7:f3: ad:5b:42:41:a1:e8:fd:1a:8f:e5:a1:a5:b8:cf:35:5c:66:2b: fc:83:be:80:db:36:ee:ce:5c:f9:52:30:aa:b1:e4:a2:05:56: d2:27:7c:d0:38:23:3a:46:ca:53:2d:87:93:c3:80:98:97:6c: e8:8f:48:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1ME1srkSsWjKZPhws8cteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNDI3MDMwMDIxWhcNMjUwNDI4MDMwMDIxWjAzMTEwLwYDVQQD EyhhOGI2NTcxNThkYmMxZWY3YmU1YThlZjljMjYzNTgyNTA3Njg1OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqsQZWCY5G1zfaiHDqHS1fZ+HkDN MVBEJyr5IKyE5wG9lX/3BupFtRQlPYdGN7+v9QMjWGhgpyjJ9TrWk4GdsHpbMDmf t3KFU5nXHSdj45GOZExI6dJS9J5S37llLSZgvEOdBgV3z4asUPgBg/MnKW1U+Yzp b8hwiGKFBnb3sjHU6d/I2qAUvC8EIcOXqaux9ApFzsOdqjwjqpZEn7Ka/BXNM0Zp wHtQ591t9XkrpybKbua7ie8LzfdkGVV1BOhkw3LLuEsh0Uxps6V1g3/0422I79Zi X+zVOWyWjR1Pab8FFqurGVDAxew5uJVgmQfi+b+YmtiWeSIQTmFkF8egHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi2VxWNvB73vlqO+cJjWCUHaFn3MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJaPmg4J C0TOGNH81OR8Cae/fGtX20RIuw+mx6YUw3t/5eJtSRydVcj9o+SaORlSUApY1jlZ p0dB4cjUtWnLMcKIQQmWXDLQrxolAFp1AR8Ypt7Ns3X8yFYMHF5rgPVdXLnp2oE1 9pEIM282TVpPiyouIoN2DOzRpII1kVvMIibOHFu+f7xaltnJ03S/MK+yIFlrZ8lj yj8SDa6Dhi+2XdcC5rlstQqkP5gP/YUNCqQeb6cWYY9MF48fRiy0zOQk0HXcOPfz rVtCQaHo/RqP5aGluM81XGYr/IO+gNs27s5c+VIwqrHkogVW0id80DgjOkbKUy2H k8OAmJds6I9IUA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:51 2025 by rpki-client