$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: XiTUSEq7y4hps+G42u74ybTkZiPo6dvmTskmtbaoyxQ= Subject key identifier: 09:FC:29:97:7A:70:B4:2B:6F:48:71:E9:BB:86:67:B6:DD:FE:E7:2B Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 0199FC2175D4AEEB75895A8E827C071764C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0F4F Signing time: Sun 19 Oct 2025 11:01:15 +0000 Manifest this update: Sun 19 Oct 2025 11:01:15 +0000 Manifest next update: Mon 20 Oct 2025 11:01:15 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: oQ7Evl0tNdo62UOyUX27y2eQPreZr5o3aGA9B4tj7sI=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: W8-PwKMzVrW65-R2fHKjqVUbX54.roa (hash: C0sW97okII2QoOOpXdKP/WHxFbjbFOar+kEl1869pAo=) 8: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 9: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 10: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 11: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:75:d4:ae:eb:75:89:5a:8e:82:7c:07:17:64:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Oct 19 11:01:15 2025 GMT Not After : Oct 20 11:01:15 2025 GMT Subject: CN=09fc29977a70b42b6f4871e9bb8667b6ddfee72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:42:11:a2:c4:6a:c5:78:2a:c4:c4:f9:a7: e9:b7:05:68:50:43:4c:4b:07:4a:f0:12:5d:40:ff: 40:a9:61:0c:ae:f2:4a:c4:de:cd:e7:2e:af:1f:e4: 99:96:3f:de:f8:eb:38:c5:1b:53:7d:4d:e1:32:03: 74:63:b8:89:45:05:98:03:5c:40:14:4b:63:71:f5: 27:61:0f:9d:c1:fe:10:dc:9b:4f:ed:91:f1:56:b3: 39:09:24:2d:b0:58:3d:52:5a:c9:da:02:71:43:7f: 6c:cc:cd:fa:a5:49:43:63:22:b1:ee:82:e4:da:51: 42:ea:0b:c6:4c:7b:c7:a1:d5:87:62:bb:42:29:7b: b8:b5:02:d6:60:ce:ed:a9:62:c0:fd:8a:0a:1a:a6: b6:74:d2:45:fd:2d:97:ee:f8:ad:aa:1c:9e:36:7f: 59:8b:9e:2d:4c:99:57:5f:0c:b1:a9:cd:3d:2f:9b: b2:7c:58:c7:fb:18:5c:2c:68:0e:56:84:e5:b6:ea: 3c:b2:02:6e:45:4e:bb:f0:cb:b4:35:25:8c:a6:74: d3:46:24:6c:ba:08:82:83:0c:73:80:01:0a:19:86: e4:94:e3:d6:20:2b:f0:8f:cc:bb:68:bd:3b:ed:e9: 3c:b1:f6:99:78:c9:36:50:19:a0:11:ff:ae:f1:52: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FC:29:97:7A:70:B4:2B:6F:48:71:E9:BB:86:67:B6:DD:FE:E7:2B X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:47:d5:57:7b:88:db:53:b5:23:0e:2a:f1:1d:fe:3f:8d:a7: db:cf:d9:5e:46:fe:cd:c2:85:09:8c:11:5a:7f:29:c7:80:0b: 82:7d:76:c1:bf:7f:d1:74:8c:71:1f:f3:97:d2:40:3c:31:8b: ab:7e:52:31:77:bd:6f:26:67:8c:a2:06:a0:a8:a6:80:d5:aa: 0e:36:bb:ed:df:7f:4e:ad:1c:76:9f:d4:a2:05:10:2c:8c:e4: 30:f0:07:e5:a8:fd:c2:0d:5b:06:8d:6b:65:a5:e4:19:e1:97: db:9c:49:1b:ee:5d:82:7b:a4:b5:a7:fd:1a:cc:59:91:14:16: ce:7b:1d:0a:6f:05:a7:42:f8:b9:72:c9:3d:d5:75:74:10:42: 61:75:c9:c3:40:64:0e:ae:54:5d:65:c4:aa:2c:d4:12:9a:21: 7e:b4:b1:19:25:37:53:23:77:27:e8:25:f6:6f:25:a0:95:5c: ca:89:a1:9e:7f:ec:dc:60:02:5c:c5:87:11:5a:88:46:ae:3c: df:e6:0c:a1:59:f3:5e:bf:a2:90:e6:9c:4b:3d:78:c8:ec:df: 62:b6:8d:ad:48:2a:df:2b:da:c6:44:44:af:28:d7:96:54:bc: 09:61:7f:4c:29:be:da:f2:b5:12:06:ab:d0:53:5e:5f:50:e9: dc:c4:36:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IXXUrut1iVqOgnwHF2THMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUxMDE5MTEwMTE1WhcNMjUxMDIwMTEwMTE1WjAzMTEwLwYDVQQD EygwOWZjMjk5NzdhNzBiNDJiNmY0ODcxZTliYjg2NjdiNmRkZmVlNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssJCEaLEasV4KsTE+afptwVoUENM SwdK8BJdQP9AqWEMrvJKxN7N5y6vH+SZlj/e+Os4xRtTfU3hMgN0Y7iJRQWYA1xA FEtjcfUnYQ+dwf4Q3JtP7ZHxVrM5CSQtsFg9UlrJ2gJxQ39szM36pUlDYyKx7oLk 2lFC6gvGTHvHodWHYrtCKXu4tQLWYM7tqWLA/YoKGqa2dNJF/S2X7vitqhyeNn9Z i54tTJlXXwyxqc09L5uyfFjH+xhcLGgOVoTltuo8sgJuRU678Mu0NSWMpnTTRiRs ugiCgwxzgAEKGYbklOPWICvwj8y7aL077ek8sfaZeMk2UBmgEf+u8VKJvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn8KZd6cLQrb0hx6buGZ7bd/ucrMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUfVV3uI 21O1Iw4q8R3+P42n28/ZXkb+zcKFCYwRWn8px4ALgn12wb9/0XSMcR/zl9JAPDGL q35SMXe9byZnjKIGoKimgNWqDja77d9/Tq0cdp/UogUQLIzkMPAH5aj9wg1bBo1r ZaXkGeGX25xJG+5dgnuktaf9GsxZkRQWznsdCm8Fp0L4uXLJPdV1dBBCYXXJw0Bk Dq5UXWXEqizUEpohfrSxGSU3UyN3J+gl9m8loJVcyomhnn/s3GACXMWHEVqIRq48 3+YMoVnzXr+ikOacSz14yOzfYraNrUgq3yvaxkREryjXllS8CWF/TCm+2vK1Egar 0FNeX1Dp3MQ2KQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:10:14 2025 by rpki-client