$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 8xvD51MztgY8ugvBdfmXpKERHZlXiHsd/H+LdJzwhow= Subject key identifier: 3C:E1:A9:94:8C:8E:9D:EA:88:2A:01:A8:AC:AC:69:62:EC:7D:90:A2 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 0199FD3463F2A9CAFE2C837151BCA147D52B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0ECD Signing time: Sun 19 Oct 2025 16:01:33 +0000 Manifest this update: Sun 19 Oct 2025 16:01:33 +0000 Manifest next update: Mon 20 Oct 2025 16:01:33 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: WxsoLk8sIvYJ29pM5wRQkO7jfJXDXllRd0W2IfLeX/w=) 7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:63:f2:a9:ca:fe:2c:83:71:51:bc:a1:47:d5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Oct 19 16:01:33 2025 GMT Not After : Oct 20 16:01:33 2025 GMT Subject: CN=3ce1a9948c8e9dea882a01a8acac6962ec7d90a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:cd:cb:79:68:94:21:09:a7:c9:13:11:be: 9a:53:e9:3d:f1:bf:86:eb:29:6f:b7:9f:58:82:30: 64:ab:c8:88:64:3e:8d:fa:c5:87:d9:19:92:17:c9: 79:b1:ce:d7:3c:a5:48:7a:93:bb:d8:af:e4:08:9a: b3:19:84:9b:82:38:72:b9:f7:fb:e2:a9:fa:a4:28: 68:5c:b3:e1:8d:3e:95:15:4d:c9:5c:4e:08:11:67: 32:42:3a:0c:c2:9f:50:b9:1c:8a:72:48:f7:59:25: 08:82:dc:95:d0:65:3a:35:52:28:d4:b3:d4:95:b2: 7b:3e:cc:f8:43:f9:d8:f8:fa:0a:42:60:69:e7:63: a2:ff:66:a1:d9:d5:0a:e0:b6:1a:90:c4:3a:60:f5: 0a:b5:11:83:42:f1:d4:97:9f:ed:f5:99:f3:39:0b: 02:ce:29:d1:f5:37:f5:f9:c1:35:73:75:5a:bc:39: 82:a7:4c:a8:d3:60:62:ac:fe:2e:0b:d4:87:d2:b4: ed:46:25:81:fb:25:7d:c5:03:92:17:e6:29:df:a7: 25:d3:2f:8c:ca:08:f1:21:25:46:d7:09:47:06:13: f6:e6:0b:43:51:48:84:7f:ae:d8:d4:91:8f:be:a9: 78:ad:7b:b7:00:b3:04:19:96:a7:57:fa:23:41:d6: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E1:A9:94:8C:8E:9D:EA:88:2A:01:A8:AC:AC:69:62:EC:7D:90:A2 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f3:ac:97:81:08:98:7b:8b:fb:40:79:41:99:00:06:21:19: aa:96:a7:d2:5c:8d:5d:6e:93:84:08:b8:68:13:6d:5a:45:fa: a4:6e:5b:03:85:c1:99:d6:e7:43:b6:1c:f1:b7:c4:d1:da:78: c6:89:76:76:c1:47:54:83:ce:a2:da:86:65:82:6e:63:9f:4b: 9f:5d:3d:fc:9d:95:c4:74:70:ed:6f:21:ca:74:f3:f3:d5:75: e4:14:91:31:26:fa:9c:91:b4:dc:2a:d4:60:69:95:1b:61:d7: 6c:bc:4e:8b:78:a0:0e:35:8f:9e:ff:81:89:49:81:da:ad:f7: 94:7d:87:34:d5:e0:bf:e2:cd:19:63:64:82:9b:2c:fb:44:b4: c7:91:dc:2a:4f:d2:9d:37:7c:17:0a:c3:2d:d6:60:67:07:87: e7:57:db:e1:1a:68:49:9e:17:42:2d:5d:be:df:ee:a7:84:d1: 04:70:7a:36:e8:e4:92:d9:7f:60:86:b0:d0:47:db:1b:7a:7c: 42:f9:a1:34:f6:47:c3:c3:9b:6c:14:8e:95:fd:19:58:f9:33: a1:38:bc:94:d2:a1:dc:77:52:5d:15:4a:96:92:12:ca:46:18: 43:9f:c8:05:e9:78:4f:29:d3:01:48:f2:8d:b8:85:44:45:5f: 77:8d:21:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NGPyqcr+LINxUbyhR9UrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUxMDE5MTYwMTMzWhcNMjUxMDIwMTYwMTMzWjAzMTEwLwYDVQQD EygzY2UxYTk5NDhjOGU5ZGVhODgyYTAxYThhY2FjNjk2MmVjN2Q5MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yLNy3lolCEJp8kTEb6aU+k98b+G 6ylvt59YgjBkq8iIZD6N+sWH2RmSF8l5sc7XPKVIepO72K/kCJqzGYSbgjhyuff7 4qn6pChoXLPhjT6VFU3JXE4IEWcyQjoMwp9QuRyKckj3WSUIgtyV0GU6NVIo1LPU lbJ7Psz4Q/nY+PoKQmBp52Oi/2ah2dUK4LYakMQ6YPUKtRGDQvHUl5/t9ZnzOQsC zinR9Tf1+cE1c3VavDmCp0yo02BirP4uC9SH0rTtRiWB+yV9xQOSF+Yp36cl0y+M ygjxISVG1wlHBhP25gtDUUiEf67Y1JGPvql4rXu3ALMEGZanV/ojQdbzSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzhqZSMjp3qiCoBqKysaWLsfZCiMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfOsl4EI mHuL+0B5QZkABiEZqpan0lyNXW6ThAi4aBNtWkX6pG5bA4XBmdbnQ7Yc8bfE0dp4 xol2dsFHVIPOotqGZYJuY59Ln109/J2VxHRw7W8hynTz89V15BSRMSb6nJG03CrU YGmVG2HXbLxOi3igDjWPnv+BiUmB2q33lH2HNNXgv+LNGWNkgpss+0S0x5HcKk/S nTd8FwrDLdZgZweH51fb4RpoSZ4XQi1dvt/up4TRBHB6Nujkktl/YIaw0EfbG3p8 QvmhNPZHw8ObbBSOlf0ZWPkzoTi8lNKh3HdSXRVKlpISykYYQ5/IBel4TynTAUjy jbiFREVfd40hUg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:56:05 2025 by rpki-client