$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: zr08cTTAMMBl7N/NnOgtlmuIRM8TDA/2V8i0Z/pbdJs= Subject key identifier: B1:0C:D7:35:8F:B8:47:B7:33:3D:48:18:E2:73:7B:E7:68:6B:43:BC Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 0197BB902A6FF41E1080BF027623D13C9900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0DA1 Signing time: Sun 29 Jun 2025 12:01:16 +0000 Manifest this update: Sun 29 Jun 2025 12:01:16 +0000 Manifest next update: Mon 30 Jun 2025 12:01:16 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: f9JHqgJ6sgJx9/9/ev2uf3U4CAVJnDz6Eaa5CfqIJVQ=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:90:2a:6f:f4:1e:10:80:bf:02:76:23:d1:3c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jun 29 12:01:16 2025 GMT Not After : Jun 30 12:01:16 2025 GMT Subject: CN=b10cd7358fb847b7333d4818e2737be7686b43bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:13:5d:7d:73:49:71:68:01:2f:32:be:16:f3: a2:e0:17:8c:1b:b8:9b:42:e4:d5:42:c2:e0:e1:57: 24:7a:5f:85:9a:f6:ed:24:07:39:12:f0:37:fc:1a: 32:ec:92:75:32:73:78:0f:cc:94:12:30:97:0e:f1: 92:94:a8:ee:26:76:35:1c:59:e7:9d:5b:35:0f:5b: 67:ec:de:88:53:f9:2d:f8:32:31:3c:69:8e:cf:b6: 75:37:a2:cf:74:df:f2:b2:02:d2:eb:69:1a:95:cc: e9:a1:95:49:86:bf:4c:cc:27:e3:1e:b8:b1:c6:d2: 50:24:fd:d7:39:48:94:6f:4c:51:8c:25:6b:dc:91: 0e:a8:5c:22:21:f6:f3:4a:43:85:c0:ae:3d:cd:3e: f1:aa:ab:98:49:32:26:55:32:6b:00:ca:fc:47:15: 82:de:5d:43:2d:0c:8f:d4:7e:eb:df:e3:e7:ee:b7: 9c:41:b6:8d:fb:01:2a:0b:99:d5:f2:21:9a:36:8e: 98:a5:3e:3c:14:30:a1:8c:8f:30:5a:43:c4:65:af: fe:d7:c0:07:f3:f4:db:54:a9:ef:d5:ad:de:76:82: e1:60:7d:d4:88:9f:fa:03:2b:be:e5:82:49:83:e1: 12:59:72:d5:33:f4:bb:6e:02:5f:13:de:5c:3d:1c: 0e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0C:D7:35:8F:B8:47:B7:33:3D:48:18:E2:73:7B:E7:68:6B:43:BC X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:81:7c:91:a8:a0:d8:9e:85:5b:df:1f:87:89:a1:7f:13:9d: 35:ee:98:dd:6e:e0:6e:32:d6:09:7f:3e:55:e6:12:da:34:b5: bd:21:4d:01:ad:7a:d2:16:48:89:75:ba:b9:d4:ad:71:ef:97: da:f9:dc:e0:64:61:ec:aa:42:4e:1b:c8:e8:1e:a0:e8:d9:1b: 1c:a7:57:42:c9:3f:77:66:a3:0e:db:86:fa:43:9b:3d:c2:67: bd:15:a3:68:53:6a:07:04:bd:48:54:f9:ed:8f:39:15:32:94: 4d:7b:02:05:d4:22:9f:4f:f8:59:89:2d:17:8d:7b:6f:ca:fe: bf:ca:7b:2d:60:ff:85:ad:56:46:05:b6:16:38:03:0d:2b:f4: 31:42:3e:dd:d5:a6:ab:56:86:f6:89:95:0c:fc:8d:a1:41:84: a6:ee:59:d5:7e:c8:f0:b4:68:21:90:85:fe:c2:1b:43:f8:0c: 31:03:56:68:18:b0:8c:9a:49:1d:13:c4:13:eb:35:bc:70:6c: 4c:22:e1:8d:8c:b6:98:51:4a:47:b5:dc:9f:e3:49:b3:fb:d9: 37:d1:46:28:65:db:8b:55:a1:cf:9f:bf:2b:05:36:06:52:25: f6:dc:e8:df:56:b8:f4:f4:c1:ab:12:05:0d:95:85:18:98:2f: cb:14:a1:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7kCpv9B4QgL8CdiPRPJkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNjI5MTIwMTE2WhcNMjUwNjMwMTIwMTE2WjAzMTEwLwYDVQQD EyhiMTBjZDczNThmYjg0N2I3MzMzZDQ4MThlMjczN2JlNzY4NmI0M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BNdfXNJcWgBLzK+FvOi4BeMG7ib QuTVQsLg4Vckel+FmvbtJAc5EvA3/Boy7JJ1MnN4D8yUEjCXDvGSlKjuJnY1HFnn nVs1D1tn7N6IU/kt+DIxPGmOz7Z1N6LPdN/ysgLS62kalczpoZVJhr9MzCfjHrix xtJQJP3XOUiUb0xRjCVr3JEOqFwiIfbzSkOFwK49zT7xqquYSTImVTJrAMr8RxWC 3l1DLQyP1H7r3+Pn7recQbaN+wEqC5nV8iGaNo6YpT48FDChjI8wWkPEZa/+18AH 8/TbVKnv1a3edoLhYH3UiJ/6Ayu+5YJJg+ESWXLVM/S7bgJfE95cPRwO1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEM1zWPuEe3Mz1IGOJze+doa0O8MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYF8kaig 2J6FW98fh4mhfxOdNe6Y3W7gbjLWCX8+VeYS2jS1vSFNAa160hZIiXW6udStce+X 2vnc4GRh7KpCThvI6B6g6NkbHKdXQsk/d2ajDtuG+kObPcJnvRWjaFNqBwS9SFT5 7Y85FTKUTXsCBdQin0/4WYktF417b8r+v8p7LWD/ha1WRgW2FjgDDSv0MUI+3dWm q1aG9omVDPyNoUGEpu5Z1X7I8LRoIZCF/sIbQ/gMMQNWaBiwjJpJHRPEE+s1vHBs TCLhjYy2mFFKR7Xcn+NJs/vZN9FGKGXbi1Whz5+/KwU2BlIl9tzo31a49PTBqxIF DZWFGJgvyxShUg== -----END CERTIFICATE-----Generated at Sun Jun 29 14:20:12 2025 by rpki-client