$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: 7WK81Xki/mqhhhlLlVAs6mMgUqubareRJhDxjlKtAqI= Subject key identifier: 7E:24:5E:8E:6B:D1:0E:4E:65:F0:74:91:FD:B2:77:C9:92:65:84:F3 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01987298FB4D5FD9D465F732BE1D92390D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 162E Signing time: Mon 04 Aug 2025 01:01:25 +0000 Manifest this update: Mon 04 Aug 2025 01:01:25 +0000 Manifest next update: Tue 05 Aug 2025 01:01:25 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: dSrmxSjdY9yFlyq9q7JnmO/umfkttkAe0rr/O1A58Jw=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:fb:4d:5f:d9:d4:65:f7:32:be:1d:92:39:0d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Aug 4 01:01:25 2025 GMT Not After : Aug 5 01:01:25 2025 GMT Subject: CN=7e245e8e6bd10e4e65f07491fdb277c9926584f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:9c:22:bf:9d:40:6e:37:4a:88:f4:97:00: e5:aa:9c:e4:c5:62:cf:75:2b:20:17:20:0c:ad:03: 91:51:d1:9e:c6:ed:d9:c6:f1:ba:09:10:c3:7b:95: bb:30:ec:c5:d4:7d:44:81:1b:e6:08:30:2d:68:4f: f9:0f:5b:b4:53:8e:31:da:f3:0f:0d:50:34:2d:09: ca:56:98:92:fb:a2:cb:0f:b4:63:2d:4c:af:50:8e: bb:04:2b:ce:44:7c:39:f8:54:b7:85:6b:f6:98:a1: b0:03:6a:39:24:0f:ca:f9:8f:5f:7e:00:34:f0:5b: 37:09:52:70:b2:db:53:a0:41:a4:04:f8:51:fa:bd: d4:ef:7e:ac:c8:1d:d8:64:e4:31:5a:c7:38:8a:45: f7:96:a0:74:85:2f:9e:c7:1d:70:b7:8a:46:58:28: 52:c2:62:e4:fe:dc:14:52:65:c8:98:20:4d:4b:39: 29:34:4b:f3:02:c0:e8:b0:66:80:53:c9:a9:06:1b: 19:66:bd:0d:d6:99:ff:00:f2:21:8b:a1:97:65:11: 13:0e:27:6b:56:7c:ca:29:30:e7:b6:af:a8:b4:25: 2d:82:28:15:1e:c7:41:14:5b:d7:e6:c9:68:f7:a5: 34:0a:3b:5b:88:11:53:68:38:1d:cd:ec:6f:dc:cb: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:5E:8E:6B:D1:0E:4E:65:F0:74:91:FD:B2:77:C9:92:65:84:F3 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9e:f6:fc:a3:c8:4f:5d:a3:af:25:a2:00:f7:f5:61:5a:c6: 9a:29:84:ac:08:14:4d:c6:84:42:7b:d2:99:21:a7:c7:9e:8c: bb:82:62:3b:48:e1:05:91:02:58:c6:95:55:1f:a3:a2:29:05: 4b:80:2d:c0:69:68:c9:dd:36:68:fd:ce:21:f6:f5:c5:bb:91: c2:7d:fc:f5:64:71:9f:00:21:31:dc:e0:d8:4b:87:1c:5f:fb: 9f:14:f5:24:e9:aa:5f:64:a6:bb:6a:04:42:a2:77:b4:b9:18: 69:69:44:7d:f9:45:46:ac:8b:a8:9f:06:63:bf:9c:b9:ea:00: e6:0a:a4:f5:bb:f0:a5:e7:29:6d:63:8e:24:1c:d4:b3:e0:03: bb:ab:ea:49:93:94:74:6f:9b:ba:59:01:22:b9:0a:2a:94:a3: 3b:b1:06:e6:a4:a6:ad:42:4d:0a:7b:67:a2:7c:fd:9b:46:54: cb:0c:10:66:05:9b:d3:7c:36:bc:85:cc:8e:57:5e:e2:2c:82: 0c:0a:99:ce:80:d0:ba:63:24:16:b8:5c:dd:be:15:43:1e:fb: 6f:a6:cc:d3:76:79:73:29:5b:a1:18:7b:c6:a0:f1:6c:18:d8: be:0a:34:ee:66:00:3c:70:ac:d0:46:5e:58:6f:a1:a8:25:ca: ac:7a:27:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymPtNX9nUZfcyvh2SOQ16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwODA0MDEwMTI1WhcNMjUwODA1MDEwMTI1WjAzMTEwLwYDVQQD Eyg3ZTI0NWU4ZTZiZDEwZTRlNjVmMDc0OTFmZGIyNzdjOTkyNjU4NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXScIr+dQG43Soj0lwDlqpzkxWLP dSsgFyAMrQORUdGexu3ZxvG6CRDDe5W7MOzF1H1EgRvmCDAtaE/5D1u0U44x2vMP DVA0LQnKVpiS+6LLD7RjLUyvUI67BCvORHw5+FS3hWv2mKGwA2o5JA/K+Y9ffgA0 8Fs3CVJwsttToEGkBPhR+r3U736syB3YZOQxWsc4ikX3lqB0hS+exx1wt4pGWChS wmLk/twUUmXImCBNSzkpNEvzAsDosGaAU8mpBhsZZr0N1pn/APIhi6GXZRETDidr VnzKKTDntq+otCUtgigVHsdBFFvX5slo96U0CjtbiBFTaDgdzexv3Ms2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4kXo5r0Q5OZfB0kf2yd8mSZYTzMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ72/KPI T12jryWiAPf1YVrGmimErAgUTcaEQnvSmSGnx56Mu4JiO0jhBZECWMaVVR+joikF S4AtwGloyd02aP3OIfb1xbuRwn389WRxnwAhMdzg2EuHHF/7nxT1JOmqX2Smu2oE QqJ3tLkYaWlEfflFRqyLqJ8GY7+cueoA5gqk9bvwpecpbWOOJBzUs+ADu6vqSZOU dG+bulkBIrkKKpSjO7EG5qSmrUJNCntnonz9m0ZUywwQZgWb03w2vIXMjlde4iyC DAqZzoDQumMkFrhc3b4VQx77b6bM03Z5cylboRh7xqDxbBjYvgo07mYAPHCs0EZe WG+hqCXKrHonJg== -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:02 2025 by rpki-client