$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: Skx2DZT/fPP5YRYmdcPevKjl9+ToCmY0XaXg3UAeFR4= Subject key identifier: 29:78:7E:0D:0E:32:4B:CA:BA:3B:3F:39:40:CD:A9:F9:AD:08:B1:D8 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 0197C500F8D68362F4DED6B5CEC27D59F918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 13CE Signing time: Tue 01 Jul 2025 08:01:04 +0000 Manifest this update: Tue 01 Jul 2025 08:01:04 +0000 Manifest next update: Wed 02 Jul 2025 08:01:04 +0000 Files and hashes: 1: 0hFTuA6AYFpULfZQK-DJnDN4HTE.roa (hash: ZWH8sUTXV7vc3XiT9tGW1AKcmChi4TaSnZLt2D9dIPY=) 2: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=) 3: 5w999aY5B-VWAa6ftaNr618pG0E.roa (hash: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=) 4: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: vPYrT9jyMLYirhYIIsmU4x3ySU/fyw8I4b0kQ1wYZP8=) 5: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: L7V7oBMQWuhH90NOYH_atbAnsH8.roa (hash: plj3XbX2925ks8hdutOLpZj2760YVYJf0gs36tgJmEI=) 8: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=) 9: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=) 10: Yz2WA4YrokT5MNylkkePaMrbf2o.roa (hash: ziXl9mNJzbObSVi2cK+BC9zmxuWzXdJmKO6shLQNMdA=) 11: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 12: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=) 13: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=) 14: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 15: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=) 16: z4O62mSdPKZ1k9q692ubnjE6vOo.roa (hash: c3RiSBEOzTB9FABzAdHhtFOE9zFx7ajtwqIReSWuF8Q=) 17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c5:00:f8:d6:83:62:f4:de:d6:b5:ce:c2:7d:59:f9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jul 1 08:01:04 2025 GMT Not After : Jul 2 08:01:04 2025 GMT Subject: CN=29787e0d0e324bcaba3b3f3940cda9f9ad08b1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:33:45:5b:83:03:f8:df:ec:d4:3d:bd:11: cd:ea:b7:92:b5:52:e8:0d:16:2e:c8:88:ae:21:b0: 2b:6b:7e:0e:64:77:48:cf:d9:f1:67:f2:71:f5:b1: 5c:a9:3e:8c:a5:81:95:cf:88:c1:ba:9d:ca:45:3d: 3c:72:f8:5a:f3:c9:61:1c:b7:e4:9c:38:7f:1c:5c: d5:05:c9:86:3f:d3:60:9b:ea:15:22:55:42:57:18: 25:7b:c5:ad:d6:49:eb:b2:42:9f:67:54:cc:cc:79: 0b:fe:a5:15:48:a7:37:46:0d:bf:93:70:b5:bd:c7: 6f:2c:50:d9:0d:ae:ab:20:67:ce:3c:2d:ee:48:e8: e3:b1:f7:00:78:f2:e9:5e:1c:b7:5b:2c:1f:1b:3c: 27:a2:25:f0:69:87:6d:ec:b4:75:c9:21:bc:76:aa: 16:3e:50:a5:5b:24:a6:47:71:fa:b0:5b:43:79:0b: 39:1d:b8:75:80:00:8b:27:aa:2e:27:e7:02:2a:11: 4a:65:b5:5f:ed:ea:7c:af:3f:6d:af:8e:4e:58:74: 1d:46:8e:d9:6e:61:df:86:5d:c6:d3:9a:fd:54:46: af:c7:0e:30:e8:4a:c1:92:d9:96:b1:73:a4:c7:a6: 22:50:6d:e1:5d:8c:74:77:ec:3e:17:05:e6:50:a0: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:7E:0D:0E:32:4B:CA:BA:3B:3F:39:40:CD:A9:F9:AD:08:B1:D8 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:96:8a:96:ec:89:e9:23:54:c9:49:6a:f4:21:1c:ac:ce:d9: 03:67:9c:85:cd:be:af:2e:ea:e5:6b:63:01:fd:6a:ad:91:55: b9:b4:1c:84:81:81:20:ec:08:66:84:72:b2:07:c1:bc:bf:5a: 19:0c:6a:f5:01:86:44:fa:6c:93:d9:97:7b:8a:c4:69:60:67: dc:da:7c:0b:73:d1:47:40:e3:23:a5:e7:cb:98:d7:53:a2:47: a1:d0:47:5e:df:28:99:f8:57:50:a6:eb:2f:b1:26:af:69:d2: 4d:81:62:72:ca:da:90:87:48:4b:80:32:06:cf:35:8c:74:5d: 4e:7d:42:a1:1b:c7:94:9a:a7:c5:b7:08:78:3e:a5:8a:58:3f: b5:45:12:9c:e7:2f:21:a7:99:24:65:dd:65:81:0b:a8:15:5c: bb:ee:2e:01:c6:17:63:f0:b3:68:52:a0:54:be:bf:cd:be:ea: 53:b1:92:cc:7d:68:1c:0e:58:cf:19:d2:83:1b:de:c4:51:f8: c3:6a:77:33:12:38:76:d5:43:be:d4:2d:24:a1:86:51:7e:91: 18:eb:70:d5:6b:a5:96:bd:b6:26:a7:91:f9:99:55:a4:d7:a1: 59:6b:fa:5d:c0:ad:9a:81:6c:af:0c:01:57:6c:09:2f:09:8a: 58:bd:7f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfFAPjWg2L03ta1zsJ9WfkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwNzAxMDgwMTA0WhcNMjUwNzAyMDgwMTA0WjAzMTEwLwYDVQQD EygyOTc4N2UwZDBlMzI0YmNhYmEzYjNmMzk0MGNkYTlmOWFkMDhiMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hIzRVuDA/jf7NQ9vRHN6reStVLo DRYuyIiuIbAra34OZHdIz9nxZ/Jx9bFcqT6MpYGVz4jBup3KRT08cvha88lhHLfk nDh/HFzVBcmGP9Ngm+oVIlVCVxgle8Wt1knrskKfZ1TMzHkL/qUVSKc3Rg2/k3C1 vcdvLFDZDa6rIGfOPC3uSOjjsfcAePLpXhy3WywfGzwnoiXwaYdt7LR1ySG8dqoW PlClWySmR3H6sFtDeQs5Hbh1gACLJ6ouJ+cCKhFKZbVf7ep8rz9tr45OWHQdRo7Z bmHfhl3G05r9VEavxw4w6ErBktmWsXOkx6YiUG3hXYx0d+w+FwXmUKBeawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl4fg0OMkvKujs/OUDNqfmtCLHYMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZaKluyJ 6SNUyUlq9CEcrM7ZA2echc2+ry7q5WtjAf1qrZFVubQchIGBIOwIZoRysgfBvL9a GQxq9QGGRPpsk9mXe4rEaWBn3Np8C3PRR0DjI6Xny5jXU6JHodBHXt8omfhXUKbr L7Emr2nSTYFicsrakIdIS4AyBs81jHRdTn1CoRvHlJqnxbcIeD6lilg/tUUSnOcv IaeZJGXdZYELqBVcu+4uAcYXY/CzaFKgVL6/zb7qU7GSzH1oHA5YzxnSgxvexFH4 w2p3MxI4dtVDvtQtJKGGUX6RGOtw1Wullr22JqeR+ZlVpNehWWv6XcCtmoFsrwwB V2wJLwmKWL1/hA== -----END CERTIFICATE-----Generated at Tue Jul 1 13:10:35 2025 by rpki-client