$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: /2QVw8ATNirgNDZix1zOLvfosc1ERyOG0Y+LtPMnUbU= Subject key identifier: 36:64:2A:2C:D4:DA:50:E9:34:74:03:06:68:DA:A1:62:ED:9F:BC:E3 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019873E2EB9EE9A61321C0AB16115B18613C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0FE3 Signing time: Mon 04 Aug 2025 07:01:47 +0000 Manifest this update: Mon 04 Aug 2025 07:01:47 +0000 Manifest next update: Tue 05 Aug 2025 07:01:47 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 3: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 7Wh4nOeuI5vXHqoE7XSyWZU+77tHPmue9STWmAmkvx4=) 5: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 6: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 7: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 8: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 9: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 10: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 11: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 12: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 07:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:eb:9e:e9:a6:13:21:c0:ab:16:11:5b:18:61:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Aug 4 07:01:47 2025 GMT Not After : Aug 5 07:01:47 2025 GMT Subject: CN=36642a2cd4da50e93474030668daa162ed9fbce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:ed:56:15:94:77:e6:21:9a:d9:02:6e:47: 3e:da:f3:4c:28:92:b6:fc:c1:aa:b3:15:6b:48:50: 0f:68:fd:08:d7:e2:50:2f:47:00:f5:32:e0:18:e6: 2c:75:67:49:ac:8a:12:d7:b0:7f:c4:df:69:81:a4: 54:da:2c:34:14:59:20:23:a7:a7:aa:18:94:72:47: df:c7:6a:bc:80:00:40:0b:d6:89:e6:aa:93:a8:eb: 91:76:ef:45:11:00:f3:35:94:53:ad:e9:df:02:86: b0:f2:45:27:93:95:79:ee:51:48:e9:36:d4:a1:31: 74:36:f3:12:ce:89:df:db:0e:67:11:c9:6f:80:39: 64:53:13:0c:ae:59:01:9d:dc:7c:86:59:0b:39:7f: 26:ae:6e:94:80:d9:d9:01:af:60:3b:f9:cb:43:88: 87:a8:d7:9e:95:2c:f5:d9:fc:78:fa:93:c8:d0:ed: 6d:32:8c:3a:5e:0b:8a:56:2e:a2:74:c2:a0:97:6c: a5:fe:65:da:18:64:f7:a1:60:d9:72:64:e5:3c:38: f1:c4:54:53:f7:5c:41:4d:ba:19:a7:8d:25:b0:c9: 35:2e:d2:b4:74:7e:65:0b:00:4c:27:e5:90:fe:4a: 45:83:5c:c5:39:28:2f:ca:07:4b:7a:db:7b:fe:82: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:2A:2C:D4:DA:50:E9:34:74:03:06:68:DA:A1:62:ED:9F:BC:E3 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8e:30:f8:45:ff:02:2d:ec:f4:f0:de:4a:20:40:7f:94:f0: df:a9:1c:f0:0c:7e:c8:27:0e:f9:29:2c:4d:c7:f1:d4:bf:dd: 6d:13:4a:f3:74:da:f6:cb:fd:b3:e3:66:84:ae:33:cf:d6:41: c7:c9:f2:1b:b8:dc:76:64:a9:64:3d:9e:b8:db:b0:d1:49:2d: 91:62:a1:a5:5f:7e:8b:01:7a:84:19:8a:37:4e:f6:a9:a0:c7: 45:b5:82:95:f5:1f:a8:33:6d:8a:15:29:00:c5:03:72:45:e9: 67:d0:c8:3a:56:68:0f:f7:78:e9:63:f4:65:26:dd:8c:20:5b: fb:f9:55:50:ba:59:eb:6c:6d:41:74:83:62:c4:e2:1e:ca:bf: d7:a8:0b:e6:8c:ee:b4:d4:af:65:e9:14:ba:f4:96:4e:2a:46: ed:87:cd:2d:14:c8:03:da:f4:e4:e6:45:ff:46:41:58:2d:25: 77:0d:61:85:75:6d:f1:4d:fb:39:7c:07:00:56:66:58:3d:14: be:5d:f9:25:ca:eb:1b:bc:3f:45:4c:73:1e:0d:65:d3:49:82: 3b:5f:55:5d:5f:90:b3:f7:f0:5d:0c:3a:b7:6e:86:6b:e3:6a: a1:27:a0:dd:3e:ce:10:75:d7:08:d3:8e:9f:b3:0f:fe:e1:a9: d5:d3:37:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4uue6aYTIcCrFhFbGGE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwODA0MDcwMTQ3WhcNMjUwODA1MDcwMTQ3WjAzMTEwLwYDVQQD EygzNjY0MmEyY2Q0ZGE1MGU5MzQ3NDAzMDY2OGRhYTE2MmVkOWZiY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrjtVhWUd+YhmtkCbkc+2vNMKJK2 /MGqsxVrSFAPaP0I1+JQL0cA9TLgGOYsdWdJrIoS17B/xN9pgaRU2iw0FFkgI6en qhiUckffx2q8gABAC9aJ5qqTqOuRdu9FEQDzNZRTrenfAoaw8kUnk5V57lFI6TbU oTF0NvMSzonf2w5nEclvgDlkUxMMrlkBndx8hlkLOX8mrm6UgNnZAa9gO/nLQ4iH qNeelSz12fx4+pPI0O1tMow6XguKVi6idMKgl2yl/mXaGGT3oWDZcmTlPDjxxFRT 91xBTboZp40lsMk1LtK0dH5lCwBMJ+WQ/kpFg1zFOSgvygdLett7/oKhRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZkKizU2lDpNHQDBmjaoWLtn7zjMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVI4w+EX/ Ai3s9PDeSiBAf5Tw36kc8Ax+yCcO+SksTcfx1L/dbRNK83Ta9sv9s+NmhK4zz9ZB x8nyG7jcdmSpZD2euNuw0UktkWKhpV9+iwF6hBmKN072qaDHRbWClfUfqDNtihUp AMUDckXpZ9DIOlZoD/d46WP0ZSbdjCBb+/lVULpZ62xtQXSDYsTiHsq/16gL5ozu tNSvZekUuvSWTipG7YfNLRTIA9r05OZF/0ZBWC0ldw1hhXVt8U37OXwHAFZmWD0U vl35JcrrG7w/RUxzHg1l00mCO19VXV+Qs/fwXQw6t26Ga+NqoSeg3T7OEHXXCNOO n7MP/uGp1dM3lA== -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:49 2025 by rpki-client