$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: 0t/2WdwEGmv7B1j2V4/eTlNU8qOSGur19lMlIcqCn7I= Subject key identifier: E5:C4:7F:F0:D9:20:A8:85:FC:13:A9:8D:3B:9F:61:F4:43:C7:05:99 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 01977A546FC03BBD983022D27DF0A9F7857B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 13A5 Signing time: Mon 16 Jun 2025 20:00:43 +0000 Manifest this update: Mon 16 Jun 2025 20:00:43 +0000 Manifest next update: Tue 17 Jun 2025 20:00:43 +0000 Files and hashes: 1: 0hFTuA6AYFpULfZQK-DJnDN4HTE.roa (hash: ZWH8sUTXV7vc3XiT9tGW1AKcmChi4TaSnZLt2D9dIPY=) 2: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=) 3: 5w999aY5B-VWAa6ftaNr618pG0E.roa (hash: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=) 4: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: reoWgmKzQ4xwzZpGEi824tXGok7vFnpihVNT5JHiMsY=) 5: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: L7V7oBMQWuhH90NOYH_atbAnsH8.roa (hash: plj3XbX2925ks8hdutOLpZj2760YVYJf0gs36tgJmEI=) 8: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=) 9: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=) 10: Yz2WA4YrokT5MNylkkePaMrbf2o.roa (hash: ziXl9mNJzbObSVi2cK+BC9zmxuWzXdJmKO6shLQNMdA=) 11: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 12: aVCML_0qfO6OM-B-v0Xw0SaCLis.roa (hash: gzLeZf6vO+ZM/QBYI1anl4lUtsGtfB7flnqVi3ieG9w=) 13: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=) 14: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=) 15: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 16: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=) 17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7a:54:6f:c0:3b:bd:98:30:22:d2:7d:f0:a9:f7:85:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jun 16 20:00:43 2025 GMT Not After : Jun 17 20:00:43 2025 GMT Subject: CN=e5c47ff0d920a885fc13a98d3b9f61f443c70599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:de:d5:42:9e:fb:ad:36:57:67:86:9b:ae: 97:b2:3e:fd:bc:ac:ba:97:a8:93:9e:96:3c:5e:08: c0:8b:ae:93:70:4f:7d:7e:85:0c:de:7c:89:7f:ad: d1:2b:c5:dc:8d:36:69:cb:6f:df:74:33:fe:0f:64: 7a:31:2f:2e:cf:37:84:b7:6d:5d:f5:ef:81:5c:67: c2:86:aa:3f:6c:22:d6:0c:a3:46:94:ed:62:90:5f: c7:24:66:e2:fe:9c:57:90:ee:1c:d6:ef:0f:3e:44: 66:43:d5:cd:30:05:bc:6e:21:82:40:95:4a:37:4d: c5:19:f1:94:f0:69:32:78:87:d7:72:7a:f8:2e:d4: 21:0b:15:1f:12:ec:50:27:75:0d:b2:a7:a9:99:ca: a5:a6:4c:db:02:5d:0c:0b:f8:d3:a5:69:03:22:8d: 26:ec:4f:66:7c:b3:44:8b:18:fb:40:d3:84:88:fd: 1a:c5:03:0b:5b:aa:49:54:4e:48:e8:78:81:f4:80: e0:14:30:b5:89:d6:a4:4c:da:40:23:4b:bf:3a:6e: ba:98:1b:38:eb:38:a8:0d:e9:c2:bf:62:1a:03:17: 20:8d:88:d4:8c:32:b8:40:4c:1b:dc:7f:29:5e:fb: 2c:99:86:94:71:61:d1:1c:e0:54:07:cc:7b:3f:38: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C4:7F:F0:D9:20:A8:85:FC:13:A9:8D:3B:9F:61:F4:43:C7:05:99 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d4:41:9f:94:fb:5d:30:75:31:88:a6:80:f8:d3:c8:9c:3d: ce:d2:65:e6:43:32:dd:ed:ec:74:e7:43:38:49:93:c1:c1:f8: f9:fc:e1:6e:ca:28:bd:df:e7:09:f7:86:ea:7e:8e:32:dd:36: 2b:02:83:a8:52:43:46:17:60:f9:d4:84:f0:fa:b3:72:d6:94: 07:e6:9e:0a:56:de:f8:2d:fe:c1:eb:b2:65:b7:1e:41:75:5a: 0e:71:92:54:cb:45:88:9e:02:d1:70:25:28:1f:e3:cb:43:13: b8:d1:6d:92:17:fc:a0:3c:b8:9a:46:b6:03:98:87:05:9b:6b: af:f6:bb:84:67:36:62:82:98:41:3b:9d:ab:8b:2b:a0:cc:f9: c6:b4:fb:f1:91:89:9a:03:32:3d:6d:0d:fa:8a:05:8c:01:e9: c0:ea:22:7e:de:d1:00:70:d8:f1:7f:6a:58:6e:ff:18:e8:42: c4:0e:a8:a3:01:8a:f0:dd:f2:f7:26:69:6c:12:0a:a4:0a:5a: 03:da:7e:9b:ba:cb:b7:bb:dd:fb:83:1d:ee:e1:81:a2:10:ab: 19:57:e9:78:35:d4:07:f5:08:30:3e:c8:7c:b0:37:ce:cf:c0: 1b:12:24:cd:33:87:71:a7:a0:3f:76:82:2a:7a:b6:a9:f3:15: 0e:5a:bb:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd6VG/AO72YMCLSffCp94V7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwNjE2MjAwMDQzWhcNMjUwNjE3MjAwMDQzWjAzMTEwLwYDVQQD EyhlNWM0N2ZmMGQ5MjBhODg1ZmMxM2E5OGQzYjlmNjFmNDQzYzcwNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mPe1UKe+602V2eGm66Xsj79vKy6 l6iTnpY8XgjAi66TcE99foUM3nyJf63RK8XcjTZpy2/fdDP+D2R6MS8uzzeEt21d 9e+BXGfChqo/bCLWDKNGlO1ikF/HJGbi/pxXkO4c1u8PPkRmQ9XNMAW8biGCQJVK N03FGfGU8GkyeIfXcnr4LtQhCxUfEuxQJ3UNsqepmcqlpkzbAl0MC/jTpWkDIo0m 7E9mfLNEixj7QNOEiP0axQMLW6pJVE5I6HiB9IDgFDC1idakTNpAI0u/Om66mBs4 6zioDenCv2IaAxcgjYjUjDK4QEwb3H8pXvssmYaUcWHRHOBUB8x7PziARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXEf/DZIKiF/BOpjTufYfRDxwWZMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONRBn5T7 XTB1MYimgPjTyJw9ztJl5kMy3e3sdOdDOEmTwcH4+fzhbsoovd/nCfeG6n6OMt02 KwKDqFJDRhdg+dSE8PqzctaUB+aeClbe+C3+weuyZbceQXVaDnGSVMtFiJ4C0XAl KB/jy0MTuNFtkhf8oDy4mka2A5iHBZtrr/a7hGc2YoKYQTudq4sroMz5xrT78ZGJ mgMyPW0N+ooFjAHpwOoift7RAHDY8X9qWG7/GOhCxA6oowGK8N3y9yZpbBIKpApa A9p+m7rLt7vd+4Md7uGBohCrGVfpeDXUB/UIMD7IfLA3zs/AGxIkzTOHcaegP3aC Knq2qfMVDlq7dQ== -----END CERTIFICATE-----Generated at Tue Jun 17 00:33:33 2025 by rpki-client