$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: vyzKry1iaTcEf5HUW0+6k6/uRX8/lGPKBygPAkY1ctM= Subject key identifier: E2:AA:0F:E8:76:15:5C:C4:A1:CE:93:83:6D:D1:64:04:DE:25:9F:86 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019893DAF710C9DD1D1A1AE85EFA5566E9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 04BA Signing time: Sun 10 Aug 2025 12:00:57 +0000 Manifest this update: Sun 10 Aug 2025 12:00:57 +0000 Manifest next update: Mon 11 Aug 2025 12:00:57 +0000 Files and hashes: 1: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (hash: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=) 2: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 3: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 4: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=) 5: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: QBVB99+A2Nfe+79tpZVcKLlQ4nk6uqfyjPfgyYi+5Yc=) 6: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=) 7: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 8: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=) 9: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 10: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 11: v_SKShFDpQLE97FIfb9dU2f7gTw.roa (hash: oAcmeVOLuoyrXmmJm/ud/VikfiniUaev/5ojXR6Otro=) 12: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:93:da:f7:10:c9:dd:1d:1a:1a:e8:5e:fa:55:66:e9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Aug 10 12:00:57 2025 GMT Not After : Aug 11 12:00:57 2025 GMT Subject: CN=e2aa0fe876155cc4a1ce93836dd16404de259f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:87:57:1b:13:94:31:a0:81:ca:ff:57:89: 1e:82:59:db:86:cc:98:b1:73:c3:28:0f:8b:c4:ac: df:4f:7f:15:23:32:d4:2f:9b:99:fb:34:e9:ee:f2: d4:d9:5a:a4:dd:2f:0c:25:c2:dc:d8:50:ed:aa:75: 5e:d4:ba:5f:94:27:af:80:27:e2:0e:52:3d:2f:d9: e0:b6:a5:e3:38:ae:b8:5f:db:0a:3a:44:4c:78:3f: bb:de:d8:a3:25:6d:73:bb:99:fa:68:4c:6e:ca:ec: 07:f1:6a:4a:50:ad:ae:56:9b:18:bb:e4:02:ed:17: be:df:83:5d:38:11:65:6e:f9:1c:1f:fa:af:4a:f7: 14:f1:f1:94:cf:fc:65:11:06:4a:ec:e9:a8:91:c1: 01:cc:90:57:7d:58:5b:cb:a1:60:f8:d1:d9:6a:5c: 5a:2f:f3:1e:1f:0d:e4:ec:31:0a:11:cf:4f:ce:e4: f1:58:91:14:22:b5:bb:6f:8d:a4:ec:f8:99:f6:f5: a7:39:6f:8e:64:8f:18:02:2f:d6:2b:6e:1b:a9:62: 8d:a3:87:a1:f4:0e:cc:be:e1:10:e9:cf:21:46:48: 27:d0:be:6d:bf:de:ba:5b:19:9b:9b:a9:73:59:63: 96:4f:61:db:b2:3f:59:3f:c3:a3:39:b0:e7:6c:a1: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:0F:E8:76:15:5C:C4:A1:CE:93:83:6D:D1:64:04:DE:25:9F:86 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f7:ee:ae:1e:78:ae:91:32:75:4a:d1:ad:0f:01:68:60:54: 5b:b9:c7:bc:54:75:cc:69:a7:a2:c9:c3:61:6d:cd:25:aa:d5: c1:8c:fd:8e:37:f7:f8:82:0a:64:00:2c:e1:3d:6a:91:6b:61: f6:fc:7e:c0:74:2d:6e:5f:7f:03:8a:d7:78:e5:8f:2c:7e:ae: f2:33:48:b5:6b:ca:a7:5e:4f:50:20:76:ee:06:1f:58:fe:f4: 30:7e:08:57:71:14:fe:f9:ca:bb:5a:e5:ae:1a:d6:19:43:df: bb:be:92:72:41:65:6b:67:ae:2b:0c:b8:90:6e:be:e0:1d:46: 67:f1:e0:5e:07:bc:ed:39:a9:b3:ea:e6:83:48:bd:9a:11:15: c3:d6:1c:c6:d6:8d:e3:d4:af:a7:9c:60:21:85:cb:ec:5e:39: 6b:ed:96:2d:ab:0a:8c:a4:00:83:a1:a8:83:65:60:3d:0c:a6: ac:51:e0:32:30:6c:e0:21:28:70:7a:8e:23:30:ff:b4:42:76: c5:03:63:9f:eb:bb:a8:03:7e:f3:68:86:f9:38:0e:32:ba:4f: 43:51:a8:b9:bb:71:72:5e:3f:13:85:bc:bf:ec:89:57:bd:e7: e6:c1:ea:69:04:ec:d8:90:25:61:62:b1:24:00:f7:4a:93:16: 38:91:c8:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiT2vcQyd0dGhroXvpVZunpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUwODEwMTIwMDU3WhcNMjUwODExMTIwMDU3WjAzMTEwLwYDVQQD EyhlMmFhMGZlODc2MTU1Y2M0YTFjZTkzODM2ZGQxNjQwNGRlMjU5Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTiHVxsTlDGggcr/V4keglnbhsyY sXPDKA+LxKzfT38VIzLUL5uZ+zTp7vLU2Vqk3S8MJcLc2FDtqnVe1LpflCevgCfi DlI9L9ngtqXjOK64X9sKOkRMeD+73tijJW1zu5n6aExuyuwH8WpKUK2uVpsYu+QC 7Re+34NdOBFlbvkcH/qvSvcU8fGUz/xlEQZK7OmokcEBzJBXfVhby6Fg+NHZalxa L/MeHw3k7DEKEc9PzuTxWJEUIrW7b42k7PiZ9vWnOW+OZI8YAi/WK24bqWKNo4eh 9A7MvuEQ6c8hRkgn0L5tv966Wxmbm6lzWWOWT2Hbsj9ZP8OjObDnbKFmmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKqD+h2FVzEoc6Tg23RZATeJZ+GMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPfurh54 rpEydUrRrQ8BaGBUW7nHvFR1zGmnosnDYW3NJarVwYz9jjf3+IIKZAAs4T1qkWth 9vx+wHQtbl9/A4rXeOWPLH6u8jNItWvKp15PUCB27gYfWP70MH4IV3EU/vnKu1rl rhrWGUPfu76SckFla2euKwy4kG6+4B1GZ/HgXge87Tmps+rmg0i9mhEVw9YcxtaN 49Svp5xgIYXL7F45a+2WLasKjKQAg6Gog2VgPQymrFHgMjBs4CEocHqOIzD/tEJ2 xQNjn+u7qAN+82iG+TgOMrpPQ1Goubtxcl4/E4W8v+yJV73n5sHqaQTs2JAlYWKx JAD3SpMWOJHI+Q== -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:59 2025 by rpki-client