$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: M/Z2KX/6y8NRVUidr8GdWNG8VwwuzdSbtnIGAQEK7sI= Subject key identifier: A1:A0:3B:E8:E8:00:89:B8:6D:8F:0D:87:0A:5C:E1:27:73:BA:64:F3 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0198D5161AC335CBC26180B4DD50D6DC2568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0CB2 Signing time: Sat 23 Aug 2025 04:00:52 +0000 Manifest this update: Sat 23 Aug 2025 04:00:52 +0000 Manifest next update: Sun 24 Aug 2025 04:00:52 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: 8vbYi6qvgoFfazaSOulqJidsDwOou+7HKKF8DHjTxGE=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 9: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 10: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 11: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 22: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 23: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 24: ujQDG3VgRwepwoNtLrD2tcEZ4jU.roa (hash: 7YDxNcqLFt8ODygsXYaRPA4VdqPHb87Z3n4DnYrIpiI=) 25: zIb65ZJns3oX5PPTPawqhHAMsZU.roa (hash: 74NPwbbyglVnvRUeHdKO7hXqs4rc+5TCbIoFZCGC0Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:16:1a:c3:35:cb:c2:61:80:b4:dd:50:d6:dc:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Aug 23 04:00:52 2025 GMT Not After : Aug 24 04:00:52 2025 GMT Subject: CN=a1a03be8e80089b86d8f0d870a5ce12773ba64f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:f3:d5:f3:24:2a:f9:a9:2c:c2:30:6d:36: 45:bb:dc:e5:e2:3c:44:d1:29:8a:a4:ed:03:1e:c7: 8d:a3:8d:59:6b:d4:fc:10:7f:ab:86:ee:19:e4:31: 30:9b:cb:1b:4d:bd:63:c5:44:97:f1:fd:fb:af:a1: b6:9a:12:cd:97:1f:00:ca:88:32:38:e5:96:6a:42: 19:38:83:3b:fe:98:21:ac:7b:52:d5:84:3e:72:f6: 8c:d8:cf:4d:91:98:89:e8:d0:28:1a:e6:c3:8a:dd: 68:99:2b:37:83:0d:41:61:19:2f:53:ea:7a:5f:2d: 43:58:b1:c5:65:5c:bd:f3:2d:48:41:d4:bc:94:c3: ae:5f:99:05:e5:f4:bb:06:1f:97:44:1b:54:d9:dc: 38:9b:9c:ac:a8:fa:35:40:7b:5e:4a:42:44:ca:38: 89:d9:f5:1d:ee:9f:a4:76:3c:06:3a:03:3f:16:67: e8:63:c0:cb:c5:74:fd:22:d6:f5:38:25:f3:45:f0: e7:2a:ad:5d:4a:f3:15:09:63:52:db:5a:55:56:33: c1:f2:10:94:0a:a8:82:6d:39:22:63:c4:c2:e0:0e: 7c:be:32:57:57:cd:ac:bf:cb:fa:db:f7:1d:88:bf: 5e:19:d9:9e:15:12:34:86:05:28:7c:e0:b4:e0:f8: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:3B:E8:E8:00:89:B8:6D:8F:0D:87:0A:5C:E1:27:73:BA:64:F3 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:34:05:df:cd:fe:6a:66:36:05:c7:f2:5c:af:bb:55:20:70: 8c:0d:78:17:13:ed:a8:11:21:0f:2a:44:47:53:97:09:9b:53: 1e:dd:a9:f9:8c:e5:1f:48:ca:f5:13:e5:e3:ce:ad:33:8c:70: 35:04:e9:88:19:01:2b:3e:45:77:8b:2b:e7:d6:65:51:0e:91: 1e:71:c1:02:97:e0:5b:9c:ab:7a:b6:8e:28:27:44:64:45:74: 4f:d9:db:a0:d4:97:5f:98:5f:64:12:df:51:49:6f:3f:71:01: 4c:71:28:f0:00:a5:85:f3:8b:c7:5f:88:95:23:70:5e:ce:9c: 4f:9b:ea:4b:e8:d2:89:4f:9b:00:5c:3f:d5:00:d8:b8:ca:33: a7:79:40:c1:1b:02:b5:b9:81:f7:c1:98:2e:fe:66:fb:23:f9: 6d:26:77:13:91:f9:c0:b8:e5:99:82:77:84:90:b8:2b:8c:46: 35:c7:ca:30:80:70:6c:0d:ec:92:99:6e:1f:a4:2d:23:d9:fc: cf:28:3f:3d:e5:df:6b:f7:ba:a4:2d:eb:e2:38:32:e4:29:80: e2:6a:55:d2:41:af:34:be:aa:12:b7:5b:2d:cd:8c:a7:e3:a3: 72:07:79:6b:0a:f6:a7:67:a3:55:aa:a2:07:d4:9b:d6:8f:13: 5f:5d:55:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFhrDNcvCYYC03VDW3CVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwODIzMDQwMDUyWhcNMjUwODI0MDQwMDUyWjAzMTEwLwYDVQQD EyhhMWEwM2JlOGU4MDA4OWI4NmQ4ZjBkODcwYTVjZTEyNzczYmE2NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPnz1fMkKvmpLMIwbTZFu9zl4jxE 0SmKpO0DHseNo41Za9T8EH+rhu4Z5DEwm8sbTb1jxUSX8f37r6G2mhLNlx8Ayogy OOWWakIZOIM7/pghrHtS1YQ+cvaM2M9NkZiJ6NAoGubDit1omSs3gw1BYRkvU+p6 Xy1DWLHFZVy98y1IQdS8lMOuX5kF5fS7Bh+XRBtU2dw4m5ysqPo1QHteSkJEyjiJ 2fUd7p+kdjwGOgM/FmfoY8DLxXT9Itb1OCXzRfDnKq1dSvMVCWNS21pVVjPB8hCU CqiCbTkiY8TC4A58vjJXV82sv8v62/cdiL9eGdmeFRI0hgUofOC04PjkOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGgO+joAIm4bY8Nhwpc4SdzumTzMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTQF383+ amY2BcfyXK+7VSBwjA14FxPtqBEhDypER1OXCZtTHt2p+YzlH0jK9RPl486tM4xw NQTpiBkBKz5Fd4sr59ZlUQ6RHnHBApfgW5yreraOKCdEZEV0T9nboNSXX5hfZBLf UUlvP3EBTHEo8AClhfOLx1+IlSNwXs6cT5vqS+jSiU+bAFw/1QDYuMozp3lAwRsC tbmB98GYLv5m+yP5bSZ3E5H5wLjlmYJ3hJC4K4xGNcfKMIBwbA3skpluH6QtI9n8 zyg/PeXfa/e6pC3r4jgy5CmA4mpV0kGvNL6qErdbLc2Mp+Ojcgd5awr2p2ejVaqi B9Sb1o8TX11V2g== -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:02 2025 by rpki-client