$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: iUvyc48+qB8mnfAiFx3eDxRZ7gsvztoxnMozyAlFto4= Subject key identifier: 57:C1:03:B9:D0:E3:8A:04:EF:55:DD:9B:AF:8A:43:F8:5D:B8:66:42 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 0198D583EBF5AFC84D1CDACB57BCFAE6752F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0E33 Signing time: Sat 23 Aug 2025 06:00:49 +0000 Manifest this update: Sat 23 Aug 2025 06:00:49 +0000 Manifest next update: Sun 24 Aug 2025 06:00:49 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: aqW4nLWoXxVg3GqF7IWHglQiJLF6HPU5fguRLTMVS+g=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:eb:f5:af:c8:4d:1c:da:cb:57:bc:fa:e6:75:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Aug 23 06:00:49 2025 GMT Not After : Aug 24 06:00:49 2025 GMT Subject: CN=57c103b9d0e38a04ef55dd9baf8a43f85db86642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:41:6f:7f:4b:eb:41:37:07:39:c6:69:87: fe:00:0d:df:4d:89:91:5d:d5:a3:b2:a4:a5:cc:c3: 5a:d0:7e:48:06:30:f7:3e:0d:ce:83:c7:a2:83:60: 04:02:e2:f7:05:56:06:64:ed:ec:40:8e:3b:49:b6: 32:09:21:5e:f4:27:1b:7f:d8:13:3c:e4:a3:07:35: fa:3b:33:e1:a9:68:cd:23:e5:59:59:bb:62:3c:f7: e2:ca:ab:86:45:1d:ed:12:1e:44:fe:08:53:6c:47: 75:4f:74:a3:e4:54:71:64:e1:dd:aa:e6:da:d4:d4: f3:87:26:d6:0e:e6:8a:69:d3:2e:8c:a3:e5:b1:f9: a7:9d:55:05:a6:5a:3c:2a:0c:74:97:d8:6b:f9:05: d2:af:b2:68:18:d6:ff:10:1e:42:91:30:cd:6f:bb: af:cc:e2:a5:fa:75:99:f7:95:3b:50:05:11:a3:86: 62:2c:03:9e:9b:3e:4e:5e:b8:2c:ee:6a:e1:f7:9e: dc:24:c7:5f:0c:c2:69:d3:db:b2:67:da:db:c0:da: 18:9b:c3:00:d1:ec:02:64:9e:1f:d5:c1:ca:57:f8: c0:9f:dc:36:7a:52:8c:18:c5:6e:3d:9c:af:2c:8f: ad:c2:4b:be:1b:7f:a6:dd:14:ec:73:44:fd:c2:25: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C1:03:B9:D0:E3:8A:04:EF:55:DD:9B:AF:8A:43:F8:5D:B8:66:42 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bc:60:20:3b:a1:41:5d:8a:b5:d3:66:c4:ee:70:b6:77:7e: aa:40:09:e1:19:8f:38:44:da:30:7c:0a:a6:ee:be:60:75:4f: 09:d9:dc:88:d4:fb:13:09:76:f6:cb:2d:0f:2a:72:f5:ca:e2: 76:5e:53:de:47:e2:00:9e:fc:3d:ff:c7:f1:de:b2:3f:bf:b5: 90:3a:93:e1:3f:a5:5e:ed:c8:d0:cb:9d:63:9c:2d:82:35:df: da:9e:88:aa:79:a1:cf:c8:16:4f:58:6b:1a:23:33:c4:52:dc: b2:c7:04:83:1b:11:42:e9:40:e4:b3:9c:a7:68:39:53:ba:27: 03:d3:2a:3e:a0:d1:c6:6c:f3:7f:cc:ce:bc:7b:a7:20:cf:88: ee:22:8c:97:7c:6d:ad:bf:4f:bc:ac:a4:0f:1e:e2:0a:2d:bb: a3:5e:28:4e:e1:ca:a1:a1:a1:1a:c0:5b:64:b8:1e:c9:dc:ec: 4d:60:51:30:00:81:fb:7c:f0:e4:2e:c2:14:24:fd:96:fd:3a: 7e:81:49:16:08:e0:5c:1d:5f:b6:94:3d:86:fd:00:cc:a1:ea: 92:76:12:c8:ea:0f:87:7c:e6:95:43:b1:e8:49:e7:b3:c1:c3: 93:e0:35:30:52:08:a5:9f:7e:9b:80:43:71:a6:f9:e3:ab:94: 28:65:90:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg+v1r8hNHNrLV7z65nUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwODIzMDYwMDQ5WhcNMjUwODI0MDYwMDQ5WjAzMTEwLwYDVQQD Eyg1N2MxMDNiOWQwZTM4YTA0ZWY1NWRkOWJhZjhhNDNmODVkYjg2NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6lBb39L60E3BznGaYf+AA3fTYmR XdWjsqSlzMNa0H5IBjD3Pg3Og8eig2AEAuL3BVYGZO3sQI47SbYyCSFe9Ccbf9gT POSjBzX6OzPhqWjNI+VZWbtiPPfiyquGRR3tEh5E/ghTbEd1T3Sj5FRxZOHdquba 1NTzhybWDuaKadMujKPlsfmnnVUFplo8Kgx0l9hr+QXSr7JoGNb/EB5CkTDNb7uv zOKl+nWZ95U7UAURo4ZiLAOemz5OXrgs7mrh957cJMdfDMJp09uyZ9rbwNoYm8MA 0ewCZJ4f1cHKV/jAn9w2elKMGMVuPZyvLI+twku+G3+m3RTsc0T9wiUHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfBA7nQ44oE71Xdm6+KQ/hduGZCMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7xgIDuh QV2KtdNmxO5wtnd+qkAJ4RmPOETaMHwKpu6+YHVPCdnciNT7Ewl29sstDypy9cri dl5T3kfiAJ78Pf/H8d6yP7+1kDqT4T+lXu3I0MudY5wtgjXf2p6Iqnmhz8gWT1hr GiMzxFLcsscEgxsRQulA5LOcp2g5U7onA9MqPqDRxmzzf8zOvHunIM+I7iKMl3xt rb9PvKykDx7iCi27o14oTuHKoaGhGsBbZLgeydzsTWBRMACB+3zw5C7CFCT9lv06 foFJFgjgXB1ftpQ9hv0AzKHqknYSyOoPh3zmlUOx6Enns8HDk+A1MFIIpZ9+m4BD cab546uUKGWQVw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:35:29 2025 by rpki-client