$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: Ufd8JIux+sE2Nbo/Av936wEusw2XYbTavdAMv1+6T2A= Subject key identifier: F1:C5:5D:B0:5B:85:35:3D:D7:F5:70:4A:15:92:D1:E9:D9:FE:40:DE Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 01987D1CB80EAC547DE44D9313C6713E9782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 096E Signing time: Wed 06 Aug 2025 02:01:30 +0000 Manifest this update: Wed 06 Aug 2025 02:01:30 +0000 Manifest next update: Thu 07 Aug 2025 02:01:30 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: eWyC3f+emCExwZfi0XtOx1KnVKjLAb7Owb+1vJkWxsw=) 6: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 7: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 8: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 9: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 10: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 11: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 12: uTvpwRtnh2RZ0zdEa4-XufQf99I.roa (hash: 3DE2jlKHXiRO8HKkM7rg0LAG01decfDpOM8umxeAcJU=) 13: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 14: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:1c:b8:0e:ac:54:7d:e4:4d:93:13:c6:71:3e:97:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Aug 6 02:01:30 2025 GMT Not After : Aug 7 02:01:30 2025 GMT Subject: CN=f1c55db05b85353dd7f5704a1592d1e9d9fe40de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:44:33:b7:c6:35:46:e9:2e:95:d3:ce:ca: e5:98:fe:26:bc:30:03:19:18:a5:37:ce:fc:8e:4b: 49:1c:4f:74:30:67:a2:4c:65:ae:b4:af:e1:7b:56: 4e:aa:1b:d7:49:ac:b8:23:b3:7f:c4:24:89:ca:dc: ca:ab:95:8f:9d:58:20:69:39:c2:82:85:35:74:13: b4:fd:e4:17:94:9d:95:f8:dc:34:a6:48:d4:ee:5f: c0:3a:56:b5:ec:37:a3:6c:89:16:10:09:c8:7b:f1: 99:3b:e3:23:a8:3b:96:c4:12:ce:38:9d:c4:37:54: 10:15:75:e9:17:0a:31:5f:3c:73:f2:46:b5:08:05: 83:aa:7e:90:c9:ea:b2:58:7e:5a:72:1c:90:ce:bc: c6:39:79:3d:ff:22:9f:77:45:5a:50:bf:42:49:ea: e0:37:f9:8f:d1:87:c5:17:cd:a0:53:0e:8b:00:39: 95:19:e6:28:95:17:03:41:38:ac:73:f2:cd:38:65: bc:e5:c2:23:2d:99:a2:2d:18:df:e0:93:34:0a:f7: 6e:51:b8:24:68:ca:50:59:54:36:25:f9:0a:36:11: 10:c8:76:04:6f:48:5f:25:50:70:32:53:a0:eb:db: 12:93:a5:16:f9:9b:f7:79:85:fc:ea:84:59:42:3a: 16:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:5D:B0:5B:85:35:3D:D7:F5:70:4A:15:92:D1:E9:D9:FE:40:DE X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:18:92:92:62:5d:f6:4d:d8:18:d6:48:e6:38:d7:d7:a4: 25:0b:bf:66:f0:20:9d:54:d6:97:04:5d:cb:db:a7:41:29:00: fd:d0:91:bc:9d:2f:23:1a:d8:0a:de:a9:f4:57:fc:12:f3:6a: 30:09:06:45:b4:99:e3:b7:fb:10:a9:b6:9f:b7:a0:4a:3f:af: 28:9c:23:7e:36:74:7b:29:77:10:8a:1c:64:f0:3e:fc:1c:ed: 68:8a:4f:f1:88:a6:d4:37:b3:b7:e2:c9:99:73:66:df:03:af: 7e:eb:e1:8b:9a:a5:28:e1:85:e0:80:d0:f9:b9:54:c9:c1:69: 2b:0b:fa:df:24:b2:4b:40:90:b8:65:bb:06:04:3f:b3:f7:63: bd:ac:b8:f1:ee:6e:c9:94:d9:01:a3:31:32:f0:1f:3c:35:53: c8:9d:78:94:d4:14:75:f9:3b:70:ea:b9:ec:30:37:66:12:37: cd:50:4d:07:7b:81:57:05:25:71:c7:3e:f0:3b:01:69:78:45: fe:a1:dd:6a:7f:45:3f:44:36:8e:14:da:aa:ed:ad:8f:d1:51: b8:9c:33:45:7d:da:63:b7:64:85:76:8c:ee:22:7d:ee:8e:d2: 10:a6:0b:ef:3b:a8:61:eb:00:9c:57:f6:22:a8:7a:4d:19:a3: 85:d3:99:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9HLgOrFR95E2TE8ZxPpeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUwODA2MDIwMTMwWhcNMjUwODA3MDIwMTMwWjAzMTEwLwYDVQQD EyhmMWM1NWRiMDViODUzNTNkZDdmNTcwNGExNTkyZDFlOWQ5ZmU0MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZlEM7fGNUbpLpXTzsrlmP4mvDAD GRilN878jktJHE90MGeiTGWutK/he1ZOqhvXSay4I7N/xCSJytzKq5WPnVggaTnC goU1dBO0/eQXlJ2V+Nw0pkjU7l/AOla17DejbIkWEAnIe/GZO+MjqDuWxBLOOJ3E N1QQFXXpFwoxXzxz8ka1CAWDqn6QyeqyWH5achyQzrzGOXk9/yKfd0VaUL9CSerg N/mP0YfFF82gUw6LADmVGeYolRcDQTisc/LNOGW85cIjLZmiLRjf4JM0CvduUbgk aMpQWVQ2JfkKNhEQyHYEb0hfJVBwMlOg69sSk6UW+Zv3eYX86oRZQjoWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHFXbBbhTU91/VwShWS0enZ/kDeMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeoYkpJi XfZN2BjWSOY419ekJQu/ZvAgnVTWlwRdy9unQSkA/dCRvJ0vIxrYCt6p9Ff8EvNq MAkGRbSZ47f7EKm2n7egSj+vKJwjfjZ0eyl3EIocZPA+/BztaIpP8Yim1Dezt+LJ mXNm3wOvfuvhi5qlKOGF4IDQ+blUycFpKwv63ySyS0CQuGW7BgQ/s/djvay48e5u yZTZAaMxMvAfPDVTyJ14lNQUdfk7cOq57DA3ZhI3zVBNB3uBVwUlccc+8DsBaXhF /qHdan9FP0Q2jhTaqu2tj9FRuJwzRX3aY7dkhXaM7iJ97o7SEKYL7zuoYesAnFf2 Iqh6TRmjhdOZ0w== -----END CERTIFICATE-----Generated at Wed Aug 6 12:31:05 2025 by rpki-client