$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: pIqn6ySbu/JUg4o2QJ1/++rTncqTb26P5iMWIKIZBAs= Subject key identifier: 83:23:98:5B:09:E7:FE:58:70:CA:04:1D:29:99:BA:A8:51:43:03:8B Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 0196B4EAE1BF919FD8E2536B21485C33CE1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0D19 Signing time: Fri 09 May 2025 12:00:14 +0000 Manifest this update: Fri 09 May 2025 12:00:14 +0000 Manifest next update: Sat 10 May 2025 12:00:14 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: inUFhwB2lRfSvmbWMGTq7FZ2nl4jiMhxg4aJ4PYAesY=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b4:ea:e1:bf:91:9f:d8:e2:53:6b:21:48:5c:33:ce:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: May 9 12:00:14 2025 GMT Not After : May 10 12:00:14 2025 GMT Subject: CN=8323985b09e7fe5870ca041d2999baa85143038b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:88:68:52:ee:2c:53:b3:aa:7d:5c:0d:30:65: 24:ee:5a:92:55:bb:d7:2c:0a:77:df:77:5f:41:ec: b6:59:f8:52:88:0e:0a:44:10:3a:d8:9a:68:da:be: 4f:86:27:a6:2f:9c:b9:db:26:e8:c5:5b:f7:3a:33: 38:83:6f:0e:82:54:6a:32:af:7a:b8:3f:c6:e7:b5: e5:2a:b2:03:93:55:6d:9e:1a:1d:68:db:f8:ad:ed: d0:b2:b5:83:2f:74:fa:b1:ae:76:19:1d:c8:16:76: 39:50:ca:28:cd:e7:2d:9b:a7:01:1e:cd:c7:a7:a3: 83:10:c1:09:3c:d7:de:f0:da:bb:d1:53:c4:78:ef: 74:0c:df:63:87:a8:a1:a5:95:6c:47:7e:2f:ae:c1: 91:e4:47:51:41:40:47:84:68:6a:8e:2b:e1:45:32: c2:5f:a0:f2:fa:71:00:fe:52:f2:bd:3b:d7:63:8c: 02:e2:d6:37:57:53:c3:ae:ea:d8:18:22:cb:da:74: c9:f7:78:02:d4:e7:29:1a:29:d4:05:ea:27:2e:f2: b6:df:aa:0d:86:8c:f1:90:13:6e:8f:58:94:35:e6: 42:b9:28:fa:2e:bf:49:08:4e:d6:79:33:0d:2a:a5: 3c:35:f5:18:96:80:9c:72:fb:83:a5:57:f7:c5:49: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:98:5B:09:E7:FE:58:70:CA:04:1D:29:99:BA:A8:51:43:03:8B X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b7:97:82:85:8b:85:e7:71:20:ef:a0:69:0e:62:43:5c:46: 93:2f:05:ea:f6:c9:c1:c4:1c:b3:a4:1e:ca:eb:de:08:91:bd: a0:a4:bb:4e:6b:5c:c6:01:6a:d1:7e:0e:49:c1:50:e3:fc:a3: c6:2a:2b:55:72:4f:03:80:2e:0f:a5:f2:94:17:46:da:47:df: 4c:49:c8:72:1b:1f:74:39:b2:9e:b2:7b:3d:2a:60:ac:20:92: 05:45:b8:1d:d2:e9:82:d8:f6:3e:34:b7:78:7e:76:6a:62:50: e3:9d:2f:ae:65:6b:2e:de:af:75:b0:4c:43:28:d6:36:41:37: a2:1c:69:cb:e0:31:50:22:d2:a6:8c:0d:5a:0f:c8:df:76:53: c3:fe:18:f3:9a:90:0e:bf:28:96:c8:34:56:5b:a5:1c:61:be: 78:3a:73:38:6d:14:97:fd:13:ed:79:d1:f5:b4:ed:ff:8e:95: e6:32:95:86:c0:8d:f2:44:84:a0:1b:0c:80:7f:58:04:4c:1e: 06:6c:49:4f:9e:76:85:c9:8c:e7:f4:4f:4e:2f:24:83:51:df: af:95:cd:c0:43:a0:4d:9a:81:3d:69:69:78:42:ff:8e:32:8a: c4:40:26:91:48:0c:b1:c3:d2:68:6c:6d:51:e1:e4:4a:1b:d7: 07:cc:a7:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa06uG/kZ/Y4lNrIUhcM84cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNTA5MTIwMDE0WhcNMjUwNTEwMTIwMDE0WjAzMTEwLwYDVQQD Eyg4MzIzOTg1YjA5ZTdmZTU4NzBjYTA0MWQyOTk5YmFhODUxNDMwMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ohoUu4sU7OqfVwNMGUk7lqSVbvX LAp333dfQey2WfhSiA4KRBA62Jpo2r5PhiemL5y52yboxVv3OjM4g28OglRqMq96 uD/G57XlKrIDk1VtnhodaNv4re3QsrWDL3T6sa52GR3IFnY5UMoozectm6cBHs3H p6ODEMEJPNfe8Nq70VPEeO90DN9jh6ihpZVsR34vrsGR5EdRQUBHhGhqjivhRTLC X6Dy+nEA/lLyvTvXY4wC4tY3V1PDrurYGCLL2nTJ93gC1OcpGinUBeonLvK236oN hozxkBNuj1iUNeZCuSj6Lr9JCE7WeTMNKqU8NfUYloCccvuDpVf3xUnSNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMjmFsJ5/5YcMoEHSmZuqhRQwOLMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLeXgoWL hedxIO+gaQ5iQ1xGky8F6vbJwcQcs6QeyuveCJG9oKS7TmtcxgFq0X4OScFQ4/yj xiorVXJPA4AuD6XylBdG2kffTEnIchsfdDmynrJ7PSpgrCCSBUW4HdLpgtj2PjS3 eH52amJQ450vrmVrLt6vdbBMQyjWNkE3ohxpy+AxUCLSpowNWg/I33ZTw/4Y85qQ Dr8olsg0VlulHGG+eDpzOG0Ul/0T7XnR9bTt/46V5jKVhsCN8kSEoBsMgH9YBEwe BmxJT552hcmM5/RPTi8kg1Hfr5XNwEOgTZqBPWlpeEL/jjKKxEAmkUgMscPSaGxt UeHkShvXB8yn3A== -----END CERTIFICATE-----Generated at Fri May 9 20:53:07 2025 by rpki-client