$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: YQsQoOjOr8JU7SOID2RL8lgyCYDfFEiZnVn2ADZqvV8= Subject key identifier: 9A:EE:E1:EA:56:BD:AF:77:CF:DD:4E:FA:01:43:B0:C5:B4:BC:67:12 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 0196BD1278ADDF8FFF2242C6121CB838256A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 1343 Signing time: Sun 11 May 2025 02:00:26 +0000 Manifest this update: Sun 11 May 2025 02:00:26 +0000 Manifest next update: Mon 12 May 2025 02:00:26 +0000 Files and hashes: 1: 0hFTuA6AYFpULfZQK-DJnDN4HTE.roa (hash: ZWH8sUTXV7vc3XiT9tGW1AKcmChi4TaSnZLt2D9dIPY=) 2: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=) 3: 5w999aY5B-VWAa6ftaNr618pG0E.roa (hash: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=) 4: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: reAZulT7Wm9AUjO4kTYbmXfMsclTheMGbgYaabBlPHY=) 5: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: L7V7oBMQWuhH90NOYH_atbAnsH8.roa (hash: plj3XbX2925ks8hdutOLpZj2760YVYJf0gs36tgJmEI=) 8: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=) 9: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=) 10: Yz2WA4YrokT5MNylkkePaMrbf2o.roa (hash: ziXl9mNJzbObSVi2cK+BC9zmxuWzXdJmKO6shLQNMdA=) 11: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 12: aVCML_0qfO6OM-B-v0Xw0SaCLis.roa (hash: gzLeZf6vO+ZM/QBYI1anl4lUtsGtfB7flnqVi3ieG9w=) 13: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=) 14: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=) 15: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 16: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=) 17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:12:78:ad:df:8f:ff:22:42:c6:12:1c:b8:38:25:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: May 11 02:00:26 2025 GMT Not After : May 12 02:00:26 2025 GMT Subject: CN=9aeee1ea56bdaf77cfdd4efa0143b0c5b4bc6712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:9f:a9:a8:87:07:b5:d4:9a:be:0a:ec:29: e8:32:c8:f0:e3:00:81:bb:3e:66:a4:3b:3b:95:bd: 14:a1:74:f3:08:7e:e3:e5:8a:d4:f8:ad:97:04:be: 30:ee:e8:9f:5e:90:ec:39:e5:83:31:65:ed:14:c8: e9:5c:59:8b:37:1d:19:37:bb:e7:9c:d7:00:26:56: 42:5e:7f:9a:c1:dd:90:33:cb:ba:4c:3d:d2:8b:34: 1d:e0:22:9d:04:ee:c5:7b:ee:86:2e:76:67:e0:9e: 73:ab:b9:85:1f:f8:62:3e:f4:b6:67:e8:8c:39:d2: 65:65:2e:80:25:b3:f8:56:ce:51:c2:c3:c8:84:87: 2e:9b:29:7e:33:cd:66:6e:bb:b8:58:78:3e:5d:bd: e1:d6:cf:a8:bb:b2:8c:98:92:a2:22:42:04:b0:1e: 22:87:1a:a9:7a:50:ae:08:29:59:91:5a:4c:b7:13: d2:d0:83:f9:06:28:54:5a:23:5a:a0:d3:41:7d:f9: 2b:83:19:b7:0e:98:83:f3:69:b4:25:58:2f:73:ca: ab:15:47:db:f8:c2:51:f6:00:ea:48:52:64:8c:ad: dd:f8:fa:3c:bb:27:50:d9:d1:ec:4f:8b:9d:1e:54: b3:12:05:95:7c:7d:d5:17:15:5c:66:81:69:e5:c4: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EE:E1:EA:56:BD:AF:77:CF:DD:4E:FA:01:43:B0:C5:B4:BC:67:12 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:28:a0:20:72:50:71:79:e4:b7:94:74:0b:8c:16:75:e4:dc: b6:4d:63:ba:93:5d:93:23:9b:26:bf:76:c4:5c:7d:41:42:d8: 89:4d:cf:0d:50:8f:a6:88:1b:05:e4:77:30:ed:24:6b:0b:a1: 8f:bd:0b:2f:66:44:ee:41:e6:11:ef:0f:57:05:48:0d:2a:09: 9e:d5:76:18:4a:79:44:da:61:73:5b:df:fd:07:da:6e:62:9f: 73:25:4c:b1:f2:7c:e1:5e:77:47:cf:57:24:76:0a:31:39:8d: 36:b9:db:f4:91:83:73:9e:b6:0f:53:d2:77:de:cb:a2:2c:a9: d5:d0:18:71:b1:1d:ef:cf:a9:f6:bb:fd:54:d9:6c:86:87:d4: b1:7a:af:9f:db:80:f6:e9:40:e4:91:32:ba:42:11:4e:85:cc: c8:b7:92:c7:af:02:15:c3:5c:00:03:59:5a:00:84:eb:d6:f4: 54:44:a5:41:94:b4:9b:f1:c2:3c:95:f3:eb:37:0e:d4:ba:9f: 3f:8d:c6:af:d1:45:ee:7b:bb:00:33:cb:68:4d:5d:aa:40:be: 09:b0:c8:d2:19:8c:63:3f:c6:14:87:a6:46:87:4a:8b:0e:07: 14:d8:ec:63:a9:a7:ad:b5:2e:59:56:32:99:1b:29:9f:80:92: 0a:a5:20:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9Enit34//IkLGEhy4OCVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwNTExMDIwMDI2WhcNMjUwNTEyMDIwMDI2WjAzMTEwLwYDVQQD Eyg5YWVlZTFlYTU2YmRhZjc3Y2ZkZDRlZmEwMTQzYjBjNWI0YmM2NzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopyfqaiHB7XUmr4K7CnoMsjw4wCB uz5mpDs7lb0UoXTzCH7j5YrU+K2XBL4w7uifXpDsOeWDMWXtFMjpXFmLNx0ZN7vn nNcAJlZCXn+awd2QM8u6TD3SizQd4CKdBO7Fe+6GLnZn4J5zq7mFH/hiPvS2Z+iM OdJlZS6AJbP4Vs5RwsPIhIcumyl+M81mbru4WHg+Xb3h1s+ou7KMmJKiIkIEsB4i hxqpelCuCClZkVpMtxPS0IP5BihUWiNaoNNBffkrgxm3DpiD82m0JVgvc8qrFUfb +MJR9gDqSFJkjK3d+Po8uydQ2dHsT4udHlSzEgWVfH3VFxVcZoFp5cR0rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJru4epWva93z91O+gFDsMW0vGcSMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSigIHJQ cXnkt5R0C4wWdeTctk1jupNdkyObJr92xFx9QULYiU3PDVCPpogbBeR3MO0kawuh j70LL2ZE7kHmEe8PVwVIDSoJntV2GEp5RNphc1vf/QfabmKfcyVMsfJ84V53R89X JHYKMTmNNrnb9JGDc562D1PSd97Loiyp1dAYcbEd78+p9rv9VNlshofUsXqvn9uA 9ulA5JEyukIRToXMyLeSx68CFcNcAANZWgCE69b0VESlQZS0m/HCPJXz6zcO1Lqf P43Gr9FF7nu7ADPLaE1dqkC+CbDI0hmMYz/GFIemRodKiw4HFNjsY6mnrbUuWVYy mRspn4CSCqUgPA== -----END CERTIFICATE-----Generated at Sun May 11 04:20:26 2025 by rpki-client