$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: eHqr1gfv8ocZ3D28pSxBzwM1WIzn6xXAC3HP/hDfhM8= Subject key identifier: CF:4C:6D:0A:82:62:DD:0C:64:A3:DE:E6:B7:33:79:80:2D:26:45:7E Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0197B70F32DFD6C9DF01B973C55048A48254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0C1C Signing time: Sat 28 Jun 2025 15:01:55 +0000 Manifest this update: Sat 28 Jun 2025 15:01:55 +0000 Manifest next update: Sun 29 Jun 2025 15:01:55 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: edOclpSb/bf4xNuSKo7ztvgE80vdOBW9nAMRVwEWhQo=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 9: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: UYEZb-NB4LxQf23HXvgumhETuh8.roa (hash: 8WWVRhvoeVKe5QD2G/CV3zdyhFyySnvvIH3sDj2uAKc=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 16: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 17: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 18: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 19: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 20: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 21: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0f:32:df:d6:c9:df:01:b9:73:c5:50:48:a4:82:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jun 28 15:01:55 2025 GMT Not After : Jun 29 15:01:55 2025 GMT Subject: CN=cf4c6d0a8262dd0c64a3dee6b73379802d26457e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:b8:d3:68:69:b6:43:ef:4e:06:70:aa:50: 56:87:6e:13:a1:66:61:14:89:5f:04:c3:a8:bc:59: 5f:02:10:3a:fb:96:84:70:90:df:74:21:09:9b:1d: a5:13:29:d7:0c:9f:98:b1:13:de:19:e1:20:c3:89: 49:3a:92:90:f4:46:a5:6b:dc:e9:f2:51:f9:99:fb: c9:15:8a:d6:18:77:57:62:c0:c7:fe:fc:55:e5:1f: 9c:29:ab:22:5a:c7:9a:41:09:eb:17:5b:92:33:37: 14:3b:8a:1b:74:ca:b4:ef:ba:2b:e8:68:1e:c3:3c: 92:7d:b0:12:38:3d:d4:55:ed:67:ae:c0:3f:90:d3: 79:e0:05:6c:c9:41:6b:cb:ef:2f:b7:29:1b:a3:13: 05:93:1b:e2:4c:6c:43:fc:29:5b:62:46:05:ee:6e: ce:33:0b:fe:ad:35:d4:cb:31:d1:32:32:e4:87:b4: 15:12:dc:d8:ac:75:5b:06:ee:d3:05:21:39:08:c0: ab:cd:5c:40:62:77:90:7d:9c:86:1e:51:37:5f:71: ed:6f:77:ef:72:46:d1:ac:de:f0:f3:55:c6:0d:5d: 40:74:cb:7f:8f:b7:d0:48:8b:6c:e9:6a:3b:ec:6c: fe:e5:a5:38:d5:fd:48:09:5f:7b:46:91:9f:c2:5f: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4C:6D:0A:82:62:DD:0C:64:A3:DE:E6:B7:33:79:80:2D:26:45:7E X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a6:af:f0:7a:dd:90:8c:97:85:0c:6c:1d:41:fb:4b:62:15: 68:e3:1e:27:b5:78:11:a0:86:03:9b:7b:27:c9:b6:aa:d5:86: 14:fe:9e:da:ba:b9:eb:7f:35:0e:00:1e:92:b3:bf:11:1a:50: f3:45:28:2a:07:69:38:08:5f:e5:ec:05:eb:f4:42:1c:d5:7e: cc:6d:6d:f0:25:73:2b:2f:04:8b:0d:d4:0e:ab:89:52:28:26: 2f:a5:77:2e:14:65:a8:45:d9:4c:6d:14:db:1a:a0:c1:54:ce: dc:94:0f:1a:a9:a5:e0:5b:af:16:f4:b0:97:4c:69:d0:10:54: 6f:5f:f6:5b:63:31:59:6a:9a:24:06:ca:89:45:b9:fb:12:54: a4:53:05:71:19:3f:5f:82:80:d2:ef:84:83:5e:7a:e4:d4:d9: 86:fd:74:eb:8c:d2:2e:69:9e:20:cc:74:27:3e:9d:2b:e9:36: 9c:93:dd:36:24:11:94:32:aa:a1:58:96:79:17:c8:94:1b:dd: 6e:cb:4e:f3:8c:f6:0c:33:17:9e:cf:cd:6b:f2:85:7b:12:5c: e9:f2:eb:cc:53:c1:af:c6:f3:3f:c1:8a:b4:e4:3d:31:6b:5f: b2:85:ea:8e:82:9a:92:cb:1f:c5:ec:52:71:43:29:04:2c:3e: 2d:cc:db:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DzLf1snfAblzxVBIpIJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwNjI4MTUwMTU1WhcNMjUwNjI5MTUwMTU1WjAzMTEwLwYDVQQD EyhjZjRjNmQwYTgyNjJkZDBjNjRhM2RlZTZiNzMzNzk4MDJkMjY0NTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqm402hptkPvTgZwqlBWh24ToWZh FIlfBMOovFlfAhA6+5aEcJDfdCEJmx2lEynXDJ+YsRPeGeEgw4lJOpKQ9Eala9zp 8lH5mfvJFYrWGHdXYsDH/vxV5R+cKasiWseaQQnrF1uSMzcUO4obdMq077or6Gge wzySfbASOD3UVe1nrsA/kNN54AVsyUFry+8vtykboxMFkxviTGxD/ClbYkYF7m7O Mwv+rTXUyzHRMjLkh7QVEtzYrHVbBu7TBSE5CMCrzVxAYneQfZyGHlE3X3Htb3fv ckbRrN7w81XGDV1AdMt/j7fQSIts6Wo77Gz+5aU41f1ICV97RpGfwl+5dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9MbQqCYt0MZKPe5rczeYAtJkV+MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKav8Hrd kIyXhQxsHUH7S2IVaOMeJ7V4EaCGA5t7J8m2qtWGFP6e2rq56381DgAekrO/ERpQ 80UoKgdpOAhf5ewF6/RCHNV+zG1t8CVzKy8Eiw3UDquJUigmL6V3LhRlqEXZTG0U 2xqgwVTO3JQPGqml4FuvFvSwl0xp0BBUb1/2W2MxWWqaJAbKiUW5+xJUpFMFcRk/ X4KA0u+Eg1565NTZhv1064zSLmmeIMx0Jz6dK+k2nJPdNiQRlDKqoViWeRfIlBvd bstO84z2DDMXns/Na/KFexJc6fLrzFPBr8bzP8GKtOQ9MWtfsoXqjoKakssfxexS cUMpBCw+LczbUA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:04:04 2025 by rpki-client