$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: 8eN7p4OiL7Y2LdgaW2t3Um8bFXs+GS67+a7/MePiyxM= Subject key identifier: EB:3D:5A:3C:C6:C6:69:53:94:B8:25:56:1F:C3:B1:D7:D5:96:46:E7 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 0198D583554632922C072ED48A3E70F2EAB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0E8D Signing time: Sat 23 Aug 2025 06:00:10 +0000 Manifest this update: Sat 23 Aug 2025 06:00:10 +0000 Manifest next update: Sun 24 Aug 2025 06:00:10 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: cvp5qD7WWxGTPUo3v7+O7AAVov1kwypWmSgyZCZqydo=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:55:46:32:92:2c:07:2e:d4:8a:3e:70:f2:ea:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Aug 23 06:00:10 2025 GMT Not After : Aug 24 06:00:10 2025 GMT Subject: CN=eb3d5a3cc6c6695394b825561fc3b1d7d59646e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:ae:37:b2:cc:4d:70:82:5c:39:80:e1:fd: d7:12:ed:8f:da:de:c1:af:06:60:d3:c5:18:fa:59: 4e:94:97:f5:41:83:4d:be:03:a1:9c:40:ee:e5:3b: 1a:e9:bb:e9:c5:3b:c6:02:fc:b4:be:bd:f8:ca:22: df:52:01:a0:1c:c3:62:dd:fa:4d:92:38:a4:a8:fc: 00:ed:7b:b7:2f:54:df:64:9a:4d:fb:f3:00:fb:76: 75:5b:21:0e:4a:26:1d:90:bc:cb:4d:00:d4:3a:a8: 5f:e5:5d:98:c6:dd:6f:be:65:40:d5:76:80:d4:32: 74:9c:07:9c:19:1f:5e:dc:00:d1:11:be:82:4b:58: 5e:5a:b8:c7:74:06:8b:74:8f:bf:a4:d0:9c:bc:95: f1:57:06:50:55:3a:f1:42:eb:d5:b5:d3:18:e6:22: 40:60:94:35:a6:d2:5f:c8:a6:36:82:3e:04:df:c7: fb:24:05:8d:cb:4d:85:8f:3c:15:d9:46:5c:8a:85: ba:9b:4f:66:da:fe:2e:f3:a9:d1:4f:ab:5f:c6:3f: 44:51:a4:7a:d6:8b:2a:0b:40:d1:49:0d:5c:b3:da: d5:fc:3d:53:38:94:62:9b:e3:b1:85:e5:fa:e8:5a: 69:17:4f:95:20:dd:18:f9:d1:fb:63:ac:8e:6d:73: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3D:5A:3C:C6:C6:69:53:94:B8:25:56:1F:C3:B1:D7:D5:96:46:E7 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d9:40:25:b4:17:af:90:4d:44:40:b1:60:11:3c:75:6a:26: 57:ac:3e:96:e1:d4:d6:ab:22:e4:02:65:ca:d0:51:aa:c2:0a: 1e:2c:38:0b:7f:c2:c3:e4:21:c6:72:cc:46:8b:75:c7:13:be: 82:d3:2a:77:c9:82:b0:ef:ba:f5:b9:a7:47:a4:06:18:72:ce: 21:fa:6e:4c:cf:4f:1e:a5:31:7c:b2:31:88:0f:2c:08:e7:ff: 1f:1c:fe:a5:e5:9c:d2:a9:ed:1a:41:13:b9:00:7d:93:26:59: 40:e0:f6:79:f2:1e:fb:1f:26:26:5e:89:5e:7c:47:46:cf:31: e6:c7:04:a1:1a:34:39:b9:c7:81:6e:3d:37:7d:e9:43:5e:42: 49:13:81:a7:51:46:4d:45:a3:b8:f8:31:ca:4f:61:03:a5:b1: ea:bf:00:e7:5f:fb:b7:2f:f0:46:6c:bd:36:df:67:de:78:05: ea:36:a6:f5:2d:ad:2e:90:16:1e:a9:a9:a7:f4:69:1f:5b:9a: d2:dd:e1:63:33:1c:71:f8:8a:2d:3e:c9:24:6c:a2:f0:00:d5: c8:aa:4f:3b:21:7b:e5:b1:34:18:d3:8a:02:63:0f:d1:e2:4e: a8:3a:47:21:28:dc:be:e7:0f:72:7b:4b:b1:da:ad:22:4e:4b: b0:fe:ef:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg1VGMpIsBy7Uij5w8uq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwODIzMDYwMDEwWhcNMjUwODI0MDYwMDEwWjAzMTEwLwYDVQQD EyhlYjNkNWEzY2M2YzY2OTUzOTRiODI1NTYxZmMzYjFkN2Q1OTY0NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku+uN7LMTXCCXDmA4f3XEu2P2t7B rwZg08UY+llOlJf1QYNNvgOhnEDu5Tsa6bvpxTvGAvy0vr34yiLfUgGgHMNi3fpN kjikqPwA7Xu3L1TfZJpN+/MA+3Z1WyEOSiYdkLzLTQDUOqhf5V2Yxt1vvmVA1XaA 1DJ0nAecGR9e3ADREb6CS1heWrjHdAaLdI+/pNCcvJXxVwZQVTrxQuvVtdMY5iJA YJQ1ptJfyKY2gj4E38f7JAWNy02FjzwV2UZcioW6m09m2v4u86nRT6tfxj9EUaR6 1osqC0DRSQ1cs9rV/D1TOJRim+OxheX66FppF0+VIN0Y+dH7Y6yObXOfrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs9WjzGxmlTlLglVh/DsdfVlkbnMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNlAJbQX r5BNRECxYBE8dWomV6w+luHU1qsi5AJlytBRqsIKHiw4C3/Cw+QhxnLMRot1xxO+ gtMqd8mCsO+69bmnR6QGGHLOIfpuTM9PHqUxfLIxiA8sCOf/Hxz+peWc0qntGkET uQB9kyZZQOD2efIe+x8mJl6JXnxHRs8x5scEoRo0ObnHgW49N33pQ15CSROBp1FG TUWjuPgxyk9hA6Wx6r8A51/7ty/wRmy9Nt9n3ngF6jam9S2tLpAWHqmpp/RpH1ua 0t3hYzMccfiKLT7JJGyi8ADVyKpPOyF75bE0GNOKAmMP0eJOqDpHISjcvucPcntL sdqtIk5LsP7vVw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:29 2025 by rpki-client