$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: cGCCaljNXWHPbZex4IcTiePPTcFI/LRjDd9WoJ3oke8= Subject key identifier: D2:A8:84:D9:51:FA:03:65:1E:E9:1B:D1:EA:14:8F:0B:AA:55:F8:0B Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019A4EBD5E8EF69FE1B14121DC7C1F99A95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 05A2 Signing time: Tue 04 Nov 2025 12:00:24 +0000 Manifest this update: Tue 04 Nov 2025 12:00:24 +0000 Manifest next update: Wed 05 Nov 2025 12:00:24 +0000 Files and hashes: 1: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 2: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 3: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=) 4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: 6BgO7zVAN4dt19CtCtUl19fe5HHLN126/L+xPaNYShE=) 5: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=) 6: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 7: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=) 8: fJ7QUHmY7g9_qP5KvxSEKPQgQ_w.roa (hash: ITyQh90VAvZCZTslbIDDuC/RBxNBRt44KDVHARLU210=) 9: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 10: pc8KquVkf7Bjvabr2oO_2AB4Js4.roa (hash: bRnqKdovtszgM8jGx0ckj/Q6NzvUm1MzmoZsUpk8Ya0=) 11: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 12: v_SKShFDpQLE97FIfb9dU2f7gTw.roa (hash: oAcmeVOLuoyrXmmJm/ud/VikfiniUaev/5ojXR6Otro=) 13: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:5e:8e:f6:9f:e1:b1:41:21:dc:7c:1f:99:a9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Nov 4 12:00:24 2025 GMT Not After : Nov 5 12:00:24 2025 GMT Subject: CN=d2a884d951fa03651ee91bd1ea148f0baa55f80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:2b:05:20:79:3d:d1:78:35:38:bd:60:a4: ec:83:76:e4:b9:a5:e8:7e:f6:c0:2c:ee:4b:7a:91: 91:f8:f3:51:03:3c:24:08:ed:85:81:7d:6a:46:e1: b9:78:1a:f7:97:b5:cf:fb:ab:70:70:c6:78:27:33: 0c:1f:6b:75:92:47:62:d7:9b:e3:f0:3e:cf:05:96: 75:21:31:e8:b4:fb:e9:ed:68:68:11:c1:21:d0:bd: 68:98:c2:36:d3:a6:b4:d5:a4:06:55:d8:19:50:c3: 1e:55:19:36:e2:e4:73:5f:2b:41:e9:bc:c2:85:c6: cb:06:d6:22:76:5f:2c:c9:47:81:2e:1c:b3:02:b3: 02:6e:3b:fa:98:36:da:58:bd:93:d9:3e:85:2a:07: 54:b8:2a:d8:ba:f3:66:5b:fb:7c:90:f9:e3:5b:82: 30:96:f8:2f:90:41:fe:24:e5:54:d6:bf:a1:80:1e: 2a:94:31:2a:95:26:7f:3a:3d:c3:e7:3a:8c:c1:e1: 72:37:15:44:6a:3e:e4:7c:fe:53:b2:8a:d4:03:5f: dc:58:91:57:5a:e5:13:58:a1:74:61:65:be:8e:e7: 0f:08:68:bb:b5:a2:97:d6:3f:5e:fb:88:37:65:ea: 3d:66:f8:f5:f6:6e:8e:55:8f:d9:b0:0c:68:35:1c: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A8:84:D9:51:FA:03:65:1E:E9:1B:D1:EA:14:8F:0B:AA:55:F8:0B X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a0:29:2f:3c:99:88:e3:a5:ee:a1:75:0c:a2:cf:f3:7d:e5: 84:0e:e7:53:b0:56:e8:e6:fd:4f:8e:89:27:37:6c:89:e5:50: 4d:7e:d6:32:33:15:57:94:76:e8:4f:df:c8:7f:a9:0f:5a:b5: 8e:37:41:25:e1:a5:d1:19:cb:a4:04:36:80:84:25:9c:92:f0: fc:2a:4e:58:a3:1d:9a:1d:20:50:31:d1:54:37:c7:5e:84:18: 6a:89:f2:f4:fa:85:2c:a3:3a:fd:28:81:a2:e5:0d:9c:7a:89: 1e:7f:0f:49:41:5a:be:55:e2:b9:70:69:8c:3b:5e:46:4a:ef: 45:3c:de:8c:ef:4b:3a:11:d3:4c:d4:ea:7e:bc:42:1a:96:b0: 47:20:ea:c6:51:46:91:cc:5f:14:43:82:07:0e:1e:72:0e:3d: 0c:d0:dc:3c:a3:be:13:88:43:92:b9:cc:d2:e1:53:3c:73:9e: ad:07:f3:3d:62:13:12:80:37:d6:02:05:16:1f:0c:f2:34:0e: d6:90:05:7c:b6:ab:80:6b:cb:23:d2:b7:74:14:a7:15:4a:ef: d2:ed:16:b8:a5:99:67:4d:a3:0c:92:43:38:e7:3f:2e:26:d0: 27:9e:8b:c5:ff:7c:21:2f:e8:df:8c:a3:3d:dd:fd:2f:47:a1: a3:4f:8e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvV6O9p/hsUEh3HwfmalaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUxMTA0MTIwMDI0WhcNMjUxMTA1MTIwMDI0WjAzMTEwLwYDVQQD EyhkMmE4ODRkOTUxZmEwMzY1MWVlOTFiZDFlYTE0OGYwYmFhNTVmODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/UrBSB5PdF4NTi9YKTsg3bkuaXo fvbALO5LepGR+PNRAzwkCO2FgX1qRuG5eBr3l7XP+6twcMZ4JzMMH2t1kkdi15vj 8D7PBZZ1ITHotPvp7WhoEcEh0L1omMI206a01aQGVdgZUMMeVRk24uRzXytB6bzC hcbLBtYidl8syUeBLhyzArMCbjv6mDbaWL2T2T6FKgdUuCrYuvNmW/t8kPnjW4Iw lvgvkEH+JOVU1r+hgB4qlDEqlSZ/Oj3D5zqMweFyNxVEaj7kfP5TsorUA1/cWJFX WuUTWKF0YWW+jucPCGi7taKX1j9e+4g3Zeo9Zvj19m6OVY/ZsAxoNRxdswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKohNlR+gNlHukb0eoUjwuqVfgLMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6ApLzyZ iOOl7qF1DKLP833lhA7nU7BW6Ob9T46JJzdsieVQTX7WMjMVV5R26E/fyH+pD1q1 jjdBJeGl0RnLpAQ2gIQlnJLw/CpOWKMdmh0gUDHRVDfHXoQYaony9PqFLKM6/SiB ouUNnHqJHn8PSUFavlXiuXBpjDteRkrvRTzejO9LOhHTTNTqfrxCGpawRyDqxlFG kcxfFEOCBw4ecg49DNDcPKO+E4hDkrnM0uFTPHOerQfzPWITEoA31gIFFh8M8jQO 1pAFfLargGvLI9K3dBSnFUrv0u0WuKWZZ02jDJJDOOc/LibQJ56Lxf98IS/o34yj Pd39L0eho0+O3Q== -----END CERTIFICATE-----Generated at Tue Nov 4 15:12:15 2025 by rpki-client