$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: UlrsPi1QVI8caVp+CB+MNaHtZwXb3AT9u16sJeRBBDo= Subject key identifier: 5D:11:D6:95:38:B9:5D:F4:37:40:A4:71:CB:1E:F1:32:FF:5B:75:8F Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 019768BC26F788AC6A77288340B03F319829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 09DA Signing time: Fri 13 Jun 2025 10:00:50 +0000 Manifest this update: Fri 13 Jun 2025 10:00:50 +0000 Manifest next update: Sat 14 Jun 2025 10:00:50 +0000 Files and hashes: 1: 7hJlVvAGbCOpuMIAbRPmhI1LyJk.roa (hash: kwYrJ2B8iMONESsXhh99M7N/9TNCRx/vPINN+t9MxVk=) 2: TiEA9Nu2FjMVNVi_yHMgYwzLbr0.roa (hash: Tll4LKnun0VoyN+6bo73x6XxD7PysP5fIYKZ9UnMf54=) 3: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 4: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=) 5: _CEvtrrf4ywSW8WL1NKCdbrbTcQ.roa (hash: tJuQHmy5nj4ReIzlLBRLMzRIERXYngetZteIDUh3o+o=) 6: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=) 7: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: RuT7SA9W1bdRSheeKORtXG6fS6sUr1Z7D3ecIxlyccs=) 8: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=) 9: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=) 10: jUEYHb-GuhXwiI1SopLXVRt5GiY.roa (hash: N8zIemkmgk5a0TVxAU9OTz5oZOkNeALYs1e0nI4AZAE=) 11: zrOybo8OUdo1YWpvdexahXHtucc.roa (hash: EWyOKZff8iXaRwsSXU+RwbJXdez1LiNZod4BRpq2JDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bc:26:f7:88:ac:6a:77:28:83:40:b0:3f:31:98:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Jun 13 10:00:50 2025 GMT Not After : Jun 14 10:00:50 2025 GMT Subject: CN=5d11d69538b95df43740a471cb1ef132ff5b758f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:0b:68:31:09:57:01:37:9e:72:de:35:f6: d4:8b:4d:63:11:ae:28:23:58:cc:4b:55:16:ac:0a: 0c:c8:4b:8c:7f:1f:01:d1:81:5b:5d:ff:f4:ef:e8: d0:f8:c2:8e:22:2f:e9:2d:87:3a:af:59:de:bb:df: 18:7e:35:fc:c4:5a:23:f9:09:f5:d8:52:55:e6:66: e3:66:da:24:97:d7:14:51:bf:36:0c:21:6b:60:f3: aa:44:d0:82:7a:fc:35:02:6f:c2:ef:68:b9:5d:6c: 2f:21:32:bd:e7:bd:56:ba:0c:3a:a9:6b:11:bc:28: 55:d4:59:15:90:8d:bb:80:18:b1:14:39:b5:ec:ab: b7:95:47:62:02:c9:5f:63:78:86:1f:e1:d1:34:0b: 8f:6b:e5:b2:48:30:11:2a:de:1b:e6:4a:c4:40:65: 6c:05:24:85:99:23:d4:cd:ba:ba:f4:35:04:7f:db: 77:e7:39:8a:4c:6d:77:38:a0:f8:10:b9:d4:0e:47: 0f:3c:f8:5f:25:e7:e9:6b:b4:27:13:3e:77:c5:33: 7d:99:90:b6:64:9d:17:a2:04:7c:5e:27:81:bd:01: e7:2d:7f:83:9f:15:ee:24:10:7d:6b:80:fc:82:f0: 33:48:0a:a8:20:4f:64:fb:bc:9e:30:5a:04:f8:de: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:11:D6:95:38:B9:5D:F4:37:40:A4:71:CB:1E:F1:32:FF:5B:75:8F X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0d:b9:98:0d:69:38:c9:b1:09:f1:7a:f4:b9:04:b4:5b:d0: 45:06:02:31:78:64:59:54:78:77:14:e4:e8:bf:6b:7e:cb:50: 04:71:b7:b5:9a:6e:26:62:8c:2d:70:4e:6a:c6:82:91:a8:90: cc:8d:5f:92:a3:35:9d:38:3c:2f:2a:20:0b:ad:2f:68:f1:d8: 6c:58:03:da:01:a0:c3:01:8d:99:76:7e:15:22:3e:a4:08:6d: ad:b2:41:25:f8:96:b8:f1:dd:9f:58:81:c0:4f:6d:e2:5f:11: d5:cd:1b:f1:5c:39:d2:90:b4:c5:7a:20:db:07:ed:fe:7c:dc: 0d:bf:82:dc:0f:f2:87:3a:e0:22:ce:a6:b5:77:98:bd:98:27: 19:e8:2d:a6:1f:20:be:f2:69:c0:31:94:a1:a6:e9:c7:fb:77: 7f:cc:55:2d:d2:7f:6f:57:67:6b:01:ff:c7:f2:5d:72:a0:5e: ec:c1:bf:e5:62:d6:26:4f:90:e0:8c:7e:da:36:bc:a9:d0:73: 85:fa:7e:5f:83:3e:7a:43:ac:13:f7:90:23:24:95:3c:80:07: 2d:2e:dc:be:89:9a:ed:86:07:34:0a:44:a2:86:9b:d7:71:b2: eb:61:bd:a7:40:56:6c:e7:a8:0a:c0:b5:b6:60:db:a4:52:0c: 38:ea:fb:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdovCb3iKxqdyiDQLA/MZgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUwNjEzMTAwMDUwWhcNMjUwNjE0MTAwMDUwWjAzMTEwLwYDVQQD Eyg1ZDExZDY5NTM4Yjk1ZGY0Mzc0MGE0NzFjYjFlZjEzMmZmNWI3NThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z8LaDEJVwE3nnLeNfbUi01jEa4o I1jMS1UWrAoMyEuMfx8B0YFbXf/07+jQ+MKOIi/pLYc6r1neu98YfjX8xFoj+Qn1 2FJV5mbjZtokl9cUUb82DCFrYPOqRNCCevw1Am/C72i5XWwvITK9571Wugw6qWsR vChV1FkVkI27gBixFDm17Ku3lUdiAslfY3iGH+HRNAuPa+WySDARKt4b5krEQGVs BSSFmSPUzbq69DUEf9t35zmKTG13OKD4ELnUDkcPPPhfJefpa7QnEz53xTN9mZC2 ZJ0XogR8XieBvQHnLX+DnxXuJBB9a4D8gvAzSAqoIE9k+7yeMFoE+N7QdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0R1pU4uV30N0Ckccse8TL/W3WPMB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIA25mA1p OMmxCfF69LkEtFvQRQYCMXhkWVR4dxTk6L9rfstQBHG3tZpuJmKMLXBOasaCkaiQ zI1fkqM1nTg8LyogC60vaPHYbFgD2gGgwwGNmXZ+FSI+pAhtrbJBJfiWuPHdn1iB wE9t4l8R1c0b8Vw50pC0xXog2wft/nzcDb+C3A/yhzrgIs6mtXeYvZgnGegtph8g vvJpwDGUoabpx/t3f8xVLdJ/b1dnawH/x/JdcqBe7MG/5WLWJk+Q4Ix+2ja8qdBz hfp+X4M+ekOsE/eQIySVPIAHLS7cvoma7YYHNApEooab13Gy62G9p0BWbOeoCsC1 tmDbpFIMOOr7zQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:31:23 2025 by rpki-client