$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: xXAjGaumbZA06jIs4bhqBZJl8rD5O9qiY+ThSILCn+c= Subject key identifier: 84:7A:CC:ED:D6:9C:D8:B8:F7:C9:C0:07:A0:F8:A9:90:89:4F:13:4F Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01976A05885AD06E3321A92049030F96D259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0F59 Signing time: Fri 13 Jun 2025 16:00:36 +0000 Manifest this update: Fri 13 Jun 2025 16:00:36 +0000 Manifest next update: Sat 14 Jun 2025 16:00:36 +0000 Files and hashes: 1: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 2: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: zS6zKCBOkR3aTwNrKlOWS7EoolQIQPsZoS8e36bQGt8=) 4: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 5: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 6: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 7: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 8: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 9: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 10: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 11: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 12: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (hash: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6a:05:88:5a:d0:6e:33:21:a9:20:49:03:0f:96:d2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jun 13 16:00:36 2025 GMT Not After : Jun 14 16:00:36 2025 GMT Subject: CN=847accedd69cd8b8f7c9c007a0f8a990894f134f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:cf:5b:99:ea:cf:51:db:0f:81:14:45:8c: 22:89:38:d7:82:c9:41:df:48:d6:12:d6:2e:7f:2c: d2:aa:ec:00:30:d2:73:e8:5a:2c:15:d2:43:20:e1: aa:0f:09:fd:b4:fe:5e:8d:52:d2:8d:72:99:32:89: 13:13:d2:a6:c8:50:7a:de:27:61:41:7e:47:34:3a: f5:89:27:60:72:f6:d1:fb:c1:d9:93:7d:dd:57:bd: d7:db:88:b0:6e:19:10:8f:11:68:4a:ce:4f:07:d3: b2:48:3a:78:c0:f7:f5:23:be:77:5e:15:dc:d1:0c: 55:4e:ff:dd:a2:13:f4:42:ba:e3:43:46:e9:d8:c5: dc:ae:e9:e7:c5:e3:db:7d:21:ff:00:60:49:80:82: 65:89:af:67:5b:9e:f2:41:b6:76:00:3e:88:52:31: 8e:c6:33:1a:6f:e0:d7:0c:7c:56:ed:3a:4e:cd:4d: 5b:fa:5e:a5:f7:ae:d5:ca:b8:95:36:2b:13:e2:a5: f6:a1:10:56:32:80:ad:8b:23:0b:52:bd:15:8f:a2: 4c:aa:6e:54:38:3e:4f:d2:17:cc:d3:43:d7:23:5c: 34:fb:96:2a:67:16:5d:cb:53:75:ba:35:d0:b8:58: 89:5d:02:37:49:ec:92:3a:d5:ac:75:6b:33:e8:7d: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:CC:ED:D6:9C:D8:B8:F7:C9:C0:07:A0:F8:A9:90:89:4F:13:4F X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:65:df:82:18:3c:54:66:b0:59:bb:6f:fe:84:57:d5:7a:c2: 38:4a:de:b7:98:6a:94:a1:d3:65:80:a9:c0:4a:6e:6c:a7:e0: 65:60:6c:11:d3:8b:94:cc:6c:79:cd:d8:40:a4:ae:ef:62:33: 7b:f7:52:22:3b:9c:2d:f4:82:20:56:3c:4e:4b:f2:cd:da:02: 8f:16:3c:98:97:ca:aa:06:9a:4f:1f:ca:cf:e6:69:c4:e2:12: 20:b4:d9:75:17:46:af:3c:08:51:c4:af:c2:b4:7e:10:76:08: 8e:2e:eb:bb:c1:c2:7e:a2:e7:6f:c8:b5:e1:e2:dc:4c:ff:62: 7a:8c:81:15:f2:e2:87:3c:6c:fc:82:27:42:b1:1e:54:08:57: db:e9:b4:83:a7:09:67:b4:3e:11:19:f8:1f:fb:3e:08:e2:ae: 80:30:b3:3b:33:e9:8f:16:82:97:14:56:d1:7d:5a:e6:b5:6a: 50:e7:5f:71:64:a7:33:e1:e3:5d:0a:e8:bb:94:82:74:0c:e3: fd:8d:e8:f8:48:63:2a:76:b9:e8:84:ae:fe:b3:39:17:9c:93: 1c:66:af:55:0a:13:cb:5f:ec:96:9e:96:c1:59:c5:97:1a:a2: 62:8a:21:93:2b:90:20:96:2f:5b:34:b2:e6:5c:17:d2:ff:c5: 64:43:3d:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdqBYha0G4zIakgSQMPltJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNjEzMTYwMDM2WhcNMjUwNjE0MTYwMDM2WjAzMTEwLwYDVQQD Eyg4NDdhY2NlZGQ2OWNkOGI4ZjdjOWMwMDdhMGY4YTk5MDg5NGYxMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5HPW5nqz1HbD4EURYwiiTjXgslB 30jWEtYufyzSquwAMNJz6FosFdJDIOGqDwn9tP5ejVLSjXKZMokTE9KmyFB63idh QX5HNDr1iSdgcvbR+8HZk33dV73X24iwbhkQjxFoSs5PB9OySDp4wPf1I753XhXc 0QxVTv/dohP0QrrjQ0bp2MXcrunnxePbfSH/AGBJgIJlia9nW57yQbZ2AD6IUjGO xjMab+DXDHxW7TpOzU1b+l6l967VyriVNisT4qX2oRBWMoCtiyMLUr0Vj6JMqm5U OD5P0hfM00PXI1w0+5YqZxZdy1N1ujXQuFiJXQI3SeySOtWsdWsz6H0JWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR6zO3WnNi498nAB6D4qZCJTxNPMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmXfghg8 VGawWbtv/oRX1XrCOEret5hqlKHTZYCpwEpubKfgZWBsEdOLlMxsec3YQKSu72Iz e/dSIjucLfSCIFY8TkvyzdoCjxY8mJfKqgaaTx/Kz+ZpxOISILTZdRdGrzwIUcSv wrR+EHYIji7ru8HCfqLnb8i14eLcTP9ieoyBFfLihzxs/IInQrEeVAhX2+m0g6cJ Z7Q+ERn4H/s+COKugDCzOzPpjxaClxRW0X1a5rVqUOdfcWSnM+HjXQrou5SCdAzj /Y3o+EhjKna56ISu/rM5F5yTHGavVQoTy1/slp6WwVnFlxqiYoohkyuQIJYvWzSy 5lwX0v/FZEM95w== -----END CERTIFICATE-----Generated at Fri Jun 13 19:13:56 2025 by rpki-client