$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft File: D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft (raw, json) Hash identifier: rY9XPgbCtoVUkdk1VS8YvYuz/EgHKZ85H0126J7AB+0= Subject key identifier: 3D:81:BF:2B:4C:6A:11:92:B6:1D:26:61:AB:FC:80:6F:8C:97:4B:02 Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019874F483AA72415AA06F32CCF4956CCC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft Manifest number: 111C Signing time: Mon 04 Aug 2025 12:00:38 +0000 Manifest this update: Mon 04 Aug 2025 12:00:38 +0000 Manifest next update: Tue 05 Aug 2025 12:00:38 +0000 Files and hashes: 1: 05a96nC6w3y2ygNtRz0fE79NNb8.roa (hash: ppeSYFnMCMF7eN3FJQde50ROVZCQWbOF6N6WCP1Ll48=) 2: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (hash: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=) 3: D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl (hash: BYb/IjYuf7nS7EA4kqMi8kNhn6wW57zwNk8J5lJBHqE=) 4: E4H11vqlDsWfsKfFnRaByGFpFjE.roa (hash: uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=) 5: K-6qcyau0lpKH3EPaspNOEmcv1o.roa (hash: PFVub7EytLYBkg+86PA0qkwP1NNkte9tjEJxcbX+D1w=) 6: KmdLHLP3esDIZdzCArSrlmBbPp8.roa (hash: WqUlEY2bpfF+zvYe5PFelqcso3fi4m7p8oWvpEdkGns=) 7: MKy6XWAYP3zxh7zwKNcWOiDPR-k.roa (hash: R+XM0slVwo6Gs1r7U5p3g+xfmCVjwikkwCXqqmpC4RI=) 8: P1pvZ_QpHLCNhor-GrDuuGuoxWU.roa (hash: j2Q3VKziFV5MgEQnuqrclJc+B8ndKOKWRmqLDbcpuQk=) 9: TBO-3J5fI4kjR6nBhhGm9Q7Fxxs.roa (hash: GxuPpCFAskC5A0RoCelobXY9HbueDhOq2tEj0W9aVGs=) 10: XDcWQfbkwvZ4pO52-Rl-lOrB_iw.roa (hash: ht+KVJK83F1lQo8Wp6/sNr0N7S9QYHVd5SEP7bnL0Q4=) 11: fegZDjvnxgRurYo7N2dE56doPrs.roa (hash: G1Sc4jTNIBp0OhDx/ZdY4eKnulZIfcXzqIWbYkym44I=) 12: hNPAJBJQcRtE-SJjyoGEKsljmXA.roa (hash: cxILOvyPqMN2Kz+W/9LGBBCgK1NOKrZ4exJ0ZNKhTeQ=) 13: hZwwv2HVesOoWYMZ9UQ59KZD92Q.roa (hash: nRGFDkYZm2Umz0tBGBIfwm3qOUkJet0CLVO2qS5d1Y8=) 14: pDnsD5Q1hTzMW2k6uZ4MVh9ZizU.roa (hash: Ug4pqyVy1hepE30KQdlNpPdKYvaVRsEaEW6Bq45BqsI=) 15: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (hash: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=) 16: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (hash: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=) 17: wymauMyBuObkHcbqyELmxjQb01A.roa (hash: HxJBpDrPaBDtEaSkhWhZ9cERTihSHcWb9s0UVwiCrmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f4:83:aa:72:41:5a:a0:6f:32:cc:f4:95:6c:cc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Aug 4 12:00:38 2025 GMT Not After : Aug 5 12:00:38 2025 GMT Subject: CN=3d81bf2b4c6a1192b61d2661abfc806f8c974b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c0:70:4c:bb:c6:ab:3e:c8:6e:0e:4a:87:a4: ae:00:2e:a6:b3:df:9e:0f:26:df:0b:1a:03:7c:94: 97:65:77:46:1e:b0:0e:0d:33:fa:a7:b4:83:e1:c9: e0:55:d0:de:4a:c0:63:f1:fc:bd:ae:61:93:50:62: c3:dc:d8:bd:cc:5c:df:3d:34:cc:28:e9:66:88:0a: e1:bd:9a:3a:6e:6c:39:99:d5:58:4a:e2:6c:1f:a0: 5e:b3:8b:ca:22:61:03:2f:ce:38:05:fe:e6:9a:1a: b1:32:c5:42:4d:f9:c7:85:00:68:40:8e:3e:b5:72: 51:eb:4b:ff:3e:26:4a:d9:c8:9f:6f:25:58:a3:17: eb:b5:68:39:73:26:a1:63:26:ac:ef:b3:0b:df:c2: 0f:8f:20:38:bd:98:40:8a:7f:4c:23:65:be:0f:b3: 60:2e:37:a2:d6:4b:5e:9d:fb:a7:34:15:75:ae:f1: aa:1f:5c:de:d4:47:43:10:c6:e7:8e:36:11:cd:f1: 30:d9:04:76:6d:8d:b7:a6:5e:a2:1b:68:4d:ec:ea: cc:26:cc:92:19:24:0c:79:a8:0f:7e:d6:8d:38:47: 33:e5:97:fc:a5:9d:0f:c3:26:74:2e:c6:75:50:68: 95:1d:9c:a8:6e:76:98:78:82:68:b8:8f:ec:f7:af: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:BF:2B:4C:6A:11:92:B6:1D:26:61:AB:FC:80:6F:8C:97:4B:02 X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a5:9d:93:b8:21:d8:41:a3:53:c3:4f:2c:d4:1b:84:78:52: c2:d6:33:45:a0:12:8b:c1:0a:ef:d9:0c:e3:3e:01:df:81:d4: cf:bc:2e:7e:31:6b:c1:f7:cf:3c:24:e9:f7:07:41:15:f4:de: c3:50:5c:60:9f:41:18:df:43:d6:1f:98:6b:83:af:18:3c:53: f2:51:e4:60:da:08:1c:bc:b3:de:e7:18:16:eb:24:d9:b3:58: 19:9b:11:6d:31:58:c3:b9:f6:a1:dd:48:53:ab:b3:3c:7e:33: 9b:5c:ba:93:90:59:1e:de:89:e7:bd:a0:c4:a3:3f:e3:0a:5a: fb:93:a1:2d:3d:d7:4b:c7:d2:21:73:77:73:75:1b:c6:a2:5e: 9d:25:32:84:c3:7d:e3:f8:79:c8:7f:a5:3e:b7:1a:bb:e9:a8: 82:75:8c:99:ee:28:d1:dc:b7:87:9e:88:3e:c6:8c:9f:eb:30: 8c:07:a6:85:52:e0:ed:f8:c2:c8:bb:33:fb:8a:16:45:45:13: a8:c0:14:e5:64:d7:e4:89:8b:17:77:96:dc:46:8f:ba:61:d3: 2b:40:13:55:13:74:10:50:b3:84:df:a1:d0:b0:71:3b:29:51: 40:a4:f5:b5:2d:77:02:4f:3c:66:28:1d:61:86:8b:a7:0b:4e: f9:0d:72:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09IOqckFaoG8yzPSVbMxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUwODA0MTIwMDM4WhcNMjUwODA1MTIwMDM4WjAzMTEwLwYDVQQD EygzZDgxYmYyYjRjNmExMTkyYjYxZDI2NjFhYmZjODA2ZjhjOTc0YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMBwTLvGqz7Ibg5Kh6SuAC6ms9+e DybfCxoDfJSXZXdGHrAODTP6p7SD4cngVdDeSsBj8fy9rmGTUGLD3Ni9zFzfPTTM KOlmiArhvZo6bmw5mdVYSuJsH6Bes4vKImEDL844Bf7mmhqxMsVCTfnHhQBoQI4+ tXJR60v/PiZK2cifbyVYoxfrtWg5cyahYyas77ML38IPjyA4vZhAin9MI2W+D7Ng Ljei1ktenfunNBV1rvGqH1ze1EdDEMbnjjYRzfEw2QR2bY23pl6iG2hN7OrMJsyS GSQMeagPftaNOEcz5Zf8pZ0PwyZ0LsZ1UGiVHZyobnaYeIJouI/s969MuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2BvytMahGSth0mYav8gG+Ml0sCMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaWdk7gh 2EGjU8NPLNQbhHhSwtYzRaASi8EK79kM4z4B34HUz7wufjFrwffPPCTp9wdBFfTe w1BcYJ9BGN9D1h+Ya4OvGDxT8lHkYNoIHLyz3ucYFusk2bNYGZsRbTFYw7n2od1I U6uzPH4zm1y6k5BZHt6J572gxKM/4wpa+5OhLT3XS8fSIXN3c3UbxqJenSUyhMN9 4/h5yH+lPrcau+mognWMme4o0dy3h56IPsaMn+swjAemhVLg7fjCyLsz+4oWRUUT qMAU5WTX5ImLF3eW3EaPumHTK0ATVRN0EFCzhN+h0LBxOylRQKT1tS13Ak88Zigd YYaLpwtO+Q1yIQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:33:49 2025 by rpki-client