$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: 8dIHn9uEr9awtGPmuMz+2Fk0TVM0HldUA2QehTK4oFc= Subject key identifier: 13:88:2E:6D:4C:80:24:2C:AE:FE:25:E7:77:BF:51:81:0A:FC:66:A6 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 01987E2F191C2DBF1BE369799C5807B41CB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 143A Signing time: Wed 06 Aug 2025 07:01:12 +0000 Manifest this update: Wed 06 Aug 2025 07:01:12 +0000 Manifest next update: Thu 07 Aug 2025 07:01:12 +0000 Files and hashes: 1: 1-FSCARn17wWw6WjvMiMGNYzthco.roa (hash: WzPC2hd+hE5fhExQNNOD10aWRIj2XENdQ2evH7suYjY=) 2: 4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa (hash: 9LRN3dhEIGXRSt5kx+/0cte7If5ewtrmgKSLFoQCoRA=) 3: 7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa (hash: j/PlTPWJXoAbzz7GDCcNEwPNZni/IbWZSAVFS2c7T/A=) 4: ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa (hash: R5pOTkBAAT7TRu9QQOKBqiaak7g3rRzRJ3OAgIJQHig=) 5: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: KuoIBxC2v4tD/5fwF0/THzqhpUGrUb/2/+meZRAqi+w=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: Lf1cCl1IpFmYHIudcOFMfjDfEHo.roa (hash: KjEuRJMPD034xqLQUzhOXBLOQ1h7H0ojX7rXNXHplxI=) 8: _hNjOcARC5ny-TPLISrm1ofTPfM.roa (hash: USSWK8fGx8ZYhYqn9tdxp5t4H5mEj6fREHx4NuHsuIs=) 9: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 10: ands1ewW_p4rUPNxNNwaH3t7Wgw.roa (hash: r0Kt8ppRm38RnP39fdx5wDLkfswfrhUk1HCm9MglBrU=) 11: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 12: u_qHWW7Hs6TG9DcD4BT0NhbWLvI.roa (hash: yQWdgUPHoOST9WB6Rg3EXAASM0wMNoAjl/d3+4N9/4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7e:2f:19:1c:2d:bf:1b:e3:69:79:9c:58:07:b4:1c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Aug 6 07:01:12 2025 GMT Not After : Aug 7 07:01:12 2025 GMT Subject: CN=13882e6d4c80242caefe25e777bf51810afc66a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:07:4e:e9:7b:3e:ba:91:da:5e:c3:96:40: 59:3e:c9:6f:c6:97:7a:d7:77:8f:10:39:d4:54:72: fe:c4:f4:0c:9a:94:13:23:20:60:1e:a3:ed:c5:58: b7:6d:b4:e4:e9:c4:5a:8d:6a:a5:e4:56:ec:41:3a: f7:06:e9:3c:77:b4:32:bb:e6:fe:8c:0b:74:e9:88: e7:df:b8:63:45:65:4b:9c:04:3e:7c:8d:59:42:56: e0:e8:d2:d3:4b:4a:85:48:1c:36:27:47:ed:cf:ef: 3e:91:9f:43:7e:7b:63:dd:48:d2:85:60:b4:1d:d8: 05:e0:e5:db:66:81:f3:85:6b:da:43:bc:aa:02:b6: 67:d8:94:0d:13:00:76:ae:51:f1:de:cf:a2:2b:30: ec:1c:1c:8b:d8:23:3f:10:f6:15:34:33:13:8e:7b: ed:c6:bb:81:73:94:9c:05:16:ab:cc:fa:f3:59:e6: b0:83:01:be:6f:f6:df:be:97:1c:ed:fb:55:cf:17: 12:06:8b:dd:de:22:0d:65:96:f0:9b:fa:2f:d4:23: 6c:ca:d9:32:1f:94:4a:e2:4e:bb:91:9c:16:d1:50: 6f:5c:a0:fc:dd:c2:1c:8b:84:b1:8c:1f:89:ca:ca: c1:29:a1:00:d2:60:e8:a1:07:5f:00:b3:7a:0f:50: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:88:2E:6D:4C:80:24:2C:AE:FE:25:E7:77:BF:51:81:0A:FC:66:A6 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6c:7f:95:1d:cb:e3:a6:ec:a8:2a:76:6a:ba:43:2f:c8:e6: 3b:01:5a:7c:13:47:19:13:54:26:37:31:9c:b2:f8:eb:c4:55: 92:57:a9:b5:26:54:93:39:8e:bb:f6:6f:29:1b:8e:fa:0c:b1: b2:b4:61:9b:93:6a:24:cd:ef:d3:28:fc:69:d8:d8:66:25:78: a3:31:22:a6:c4:25:03:59:79:33:31:37:4a:4f:69:b8:6b:e3: 21:c0:0f:f6:7d:35:49:f2:15:b8:11:7a:9d:1c:04:6f:4f:90: 7a:5a:a0:54:93:7c:09:7d:e2:07:a4:22:0c:82:57:ca:bc:70: 95:7f:40:0c:04:15:7c:f2:d6:c1:d8:dd:9d:95:fb:2b:50:20: ac:fb:2b:8c:cc:bf:5e:87:f5:47:87:d9:e3:f9:80:9c:a2:df: 2e:b3:cd:b6:00:32:d5:a5:1c:8c:00:00:07:96:a7:81:72:db: 76:c8:ba:69:ed:12:a7:c8:4d:05:3f:69:23:62:2a:2a:b1:80: ad:2f:6a:10:86:b5:51:1e:ed:3e:b6:17:5d:af:f6:05:45:4e: f8:87:c1:8a:c7:c6:19:59:e0:40:38:21:ee:25:06:95:79:5a: b6:13:c4:e4:4b:26:c3:61:39:04:0a:35:3d:4b:c6:73:22:0e: 4f:1a:e2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh+LxkcLb8b42l5nFgHtByxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwODA2MDcwMTEyWhcNMjUwODA3MDcwMTEyWjAzMTEwLwYDVQQD EygxMzg4MmU2ZDRjODAyNDJjYWVmZTI1ZTc3N2JmNTE4MTBhZmM2NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW4HTul7PrqR2l7DlkBZPslvxpd6 13ePEDnUVHL+xPQMmpQTIyBgHqPtxVi3bbTk6cRajWql5FbsQTr3Buk8d7Qyu+b+ jAt06Yjn37hjRWVLnAQ+fI1ZQlbg6NLTS0qFSBw2J0ftz+8+kZ9Dfntj3UjShWC0 HdgF4OXbZoHzhWvaQ7yqArZn2JQNEwB2rlHx3s+iKzDsHByL2CM/EPYVNDMTjnvt xruBc5ScBRarzPrzWeawgwG+b/bfvpcc7ftVzxcSBovd3iINZZbwm/ov1CNsytky H5RK4k67kZwW0VBvXKD83cIci4SxjB+JysrBKaEA0mDooQdfALN6D1C1QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOILm1MgCQsrv4l53e/UYEK/GamMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmx/lR3L 46bsqCp2arpDL8jmOwFafBNHGRNUJjcxnLL468RVkleptSZUkzmOu/ZvKRuO+gyx srRhm5NqJM3v0yj8adjYZiV4ozEipsQlA1l5MzE3Sk9puGvjIcAP9n01SfIVuBF6 nRwEb0+QelqgVJN8CX3iB6QiDIJXyrxwlX9ADAQVfPLWwdjdnZX7K1AgrPsrjMy/ Xof1R4fZ4/mAnKLfLrPNtgAy1aUcjAAAB5angXLbdsi6ae0Sp8hNBT9pI2IqKrGA rS9qEIa1UR7tPrYXXa/2BUVO+IfBisfGGVngQDgh7iUGlXlathPE5Esmw2E5BAo1 PUvGcyIOTxriUw== -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:45 2025 by rpki-client