$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: Ico1yPAwMoemYtU+yt5hE/9k31e7yk57Amrdy7SB1zU= Subject key identifier: 23:AA:A4:72:90:34:19:0B:A1:12:E4:5B:FC:13:1A:35:D1:9B:F6:74 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 0198D4E0046335DEE9CF464B1F2CC048DFF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0EB6 Signing time: Sat 23 Aug 2025 03:01:47 +0000 Manifest this update: Sat 23 Aug 2025 03:01:47 +0000 Manifest next update: Sun 24 Aug 2025 03:01:47 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: o5DYD9s9Qf4p67tP1S0zTSYwRWRU8Ke3ayxb+J+peF0=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:04:63:35:de:e9:cf:46:4b:1f:2c:c0:48:df:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Aug 23 03:01:47 2025 GMT Not After : Aug 24 03:01:47 2025 GMT Subject: CN=23aaa4729034190ba112e45bfc131a35d19bf674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:c8:14:16:a8:5b:49:c6:de:c8:27:f8:1c: 05:5c:cd:f7:d7:4c:58:70:45:c3:5d:a3:c9:53:35: df:f1:6f:35:4e:01:e2:a7:c7:66:d6:27:15:72:83: 9c:42:f8:e7:2c:c6:d1:e9:c8:e1:6b:ef:5c:8b:7a: 61:3f:17:c7:9c:47:79:eb:eb:6d:6d:c5:b6:5c:d9: 63:27:5d:88:bf:90:b8:b3:3b:92:05:91:85:40:62: 9f:b2:8b:13:c2:65:18:5b:33:b0:ad:3a:32:12:c0: 5f:06:56:a6:62:fc:34:71:92:20:3d:d9:77:64:2f: ae:56:84:ba:08:34:ed:b0:a6:e0:83:96:87:f8:28: f3:03:e0:bc:40:fe:a1:5c:20:a8:57:49:ef:3c:d2: 7c:87:db:4e:0e:0b:15:7f:23:ec:9d:72:ea:16:4d: 2e:fb:1a:0f:89:90:e8:52:c3:db:b0:19:65:f2:9a: 3e:cd:32:5b:a9:b9:31:a5:dc:e7:cc:9e:a7:dc:88: 0b:06:69:d1:fe:89:df:1f:dd:cc:54:c2:99:e3:1e: 0e:18:fe:9b:3b:a0:56:9c:26:0d:53:18:b9:b1:a8: 78:09:d7:08:26:20:ef:90:27:c7:7a:95:6c:4d:82: 1d:22:40:08:9b:3f:1e:3e:ee:7f:90:0c:bb:a0:37: 16:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AA:A4:72:90:34:19:0B:A1:12:E4:5B:FC:13:1A:35:D1:9B:F6:74 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:35:77:16:b6:13:30:60:12:7d:f4:9f:c7:02:8c:6d:3f: 91:77:8e:c4:7c:66:52:d5:b1:aa:7b:95:7f:72:06:f4:c7:2a: da:89:f9:fb:ab:68:bf:cd:63:f2:81:6c:a2:70:b6:c5:89:ed: ce:31:58:23:d6:79:7d:80:b0:49:13:21:96:a4:63:47:37:bb: f8:97:b8:b8:af:3a:ee:c7:b0:bd:50:a6:c9:42:3a:15:e7:a8: 3c:0e:a4:81:ae:b7:1e:66:a4:99:e2:1f:aa:bc:b2:48:e5:c6: 3d:6a:80:3c:bf:c6:c9:fb:f0:b7:af:b6:ed:71:74:f8:4e:73: 08:69:ad:d9:12:3c:c6:7e:db:e4:38:d4:45:43:30:d7:6e:bf: e6:f8:b1:c1:26:1d:72:74:6a:a2:40:89:12:ed:07:4a:d9:2c: 62:9f:79:59:cd:89:93:bd:0b:5e:97:b6:9b:e2:6a:ef:7a:cb: c7:db:2e:b9:da:03:8f:5b:fc:bb:aa:1d:51:36:53:b6:64:a4: 0b:aa:fd:52:90:68:1b:dd:bc:17:1a:1a:45:7b:f1:e1:b8:87: 79:9c:1a:ea:02:e1:1f:88:26:52:6b:fa:6d:7c:0d:5c:b8:aa: 12:44:a1:6e:b0:a6:6e:aa:9d:46:d5:c1:9c:49:66:80:bc:34: 05:cb:2e:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4ARjNd7pz0ZLHyzASN/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD EygyM2FhYTQ3MjkwMzQxOTBiYTExMmU0NWJmYzEzMWEzNWQxOWJmNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kDIFBaoW0nG3sgn+BwFXM3310xY cEXDXaPJUzXf8W81TgHip8dm1icVcoOcQvjnLMbR6cjha+9ci3phPxfHnEd56+tt bcW2XNljJ12Iv5C4szuSBZGFQGKfsosTwmUYWzOwrToyEsBfBlamYvw0cZIgPdl3 ZC+uVoS6CDTtsKbgg5aH+CjzA+C8QP6hXCCoV0nvPNJ8h9tODgsVfyPsnXLqFk0u +xoPiZDoUsPbsBll8po+zTJbqbkxpdznzJ6n3IgLBmnR/onfH93MVMKZ4x4OGP6b O6BWnCYNUxi5sah4CdcIJiDvkCfHepVsTYIdIkAImz8ePu5/kAy7oDcWIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOqpHKQNBkLoRLkW/wTGjXRm/Z0MB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI81dxa2 EzBgEn30n8cCjG0/kXeOxHxmUtWxqnuVf3IG9Mcq2on5+6tov81j8oFsonC2xYnt zjFYI9Z5fYCwSRMhlqRjRze7+Je4uK867sewvVCmyUI6FeeoPA6kga63HmakmeIf qryySOXGPWqAPL/Gyfvwt6+27XF0+E5zCGmt2RI8xn7b5DjURUMw126/5vixwSYd cnRqokCJEu0HStksYp95Wc2Jk70LXpe2m+Jq73rLx9suudoDj1v8u6odUTZTtmSk C6r9UpBoG928FxoaRXvx4biHeZwa6gLhH4gmUmv6bXwNXLiqEkShbrCmbqqdRtXB nElmgLw0Bcsucg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:07 2025 by rpki-client