$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: 4LkOokAWYg1lTu/xMqkZ+WIvpLrRasZEujjvYqwQaPk= Subject key identifier: 74:B0:DE:B5:C8:7F:D8:4E:98:39:A4:27:3E:9D:FE:84:15:AA:88:58 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 0199FB0F293A2756085247B567DF1D3BA090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 1500 Signing time: Sun 19 Oct 2025 06:01:38 +0000 Manifest this update: Sun 19 Oct 2025 06:01:38 +0000 Manifest next update: Mon 20 Oct 2025 06:01:38 +0000 Files and hashes: 1: 1-FSCARn17wWw6WjvMiMGNYzthco.roa (hash: WzPC2hd+hE5fhExQNNOD10aWRIj2XENdQ2evH7suYjY=) 2: 4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa (hash: 9LRN3dhEIGXRSt5kx+/0cte7If5ewtrmgKSLFoQCoRA=) 3: 7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa (hash: j/PlTPWJXoAbzz7GDCcNEwPNZni/IbWZSAVFS2c7T/A=) 4: ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa (hash: R5pOTkBAAT7TRu9QQOKBqiaak7g3rRzRJ3OAgIJQHig=) 5: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: oeDX14CvRxq5PhwnlGQv3OMLQ7rM7uptzhpEt7Xc180=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: _hNjOcARC5ny-TPLISrm1ofTPfM.roa (hash: USSWK8fGx8ZYhYqn9tdxp5t4H5mEj6fREHx4NuHsuIs=) 8: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 9: ands1ewW_p4rUPNxNNwaH3t7Wgw.roa (hash: r0Kt8ppRm38RnP39fdx5wDLkfswfrhUk1HCm9MglBrU=) 10: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 11: mREEeF225OSAkRfQQtiIq9LrI6o.roa (hash: 1IS5pv/sHGlKIqLjS6Tjvd/z25MjlvDjJaOIDNQv5zU=) 12: u_qHWW7Hs6TG9DcD4BT0NhbWLvI.roa (hash: yQWdgUPHoOST9WB6Rg3EXAASM0wMNoAjl/d3+4N9/4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0f:29:3a:27:56:08:52:47:b5:67:df:1d:3b:a0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Oct 19 06:01:38 2025 GMT Not After : Oct 20 06:01:38 2025 GMT Subject: CN=74b0deb5c87fd84e9839a4273e9dfe8415aa8858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:71:24:a2:1c:48:e4:c4:05:89:b3:a4:d3: 37:c4:ed:3f:d3:09:45:c8:4b:5e:97:73:d6:13:60: 81:ee:bd:dd:a6:8b:b2:ab:2f:17:00:4a:ce:98:aa: 0a:b9:00:e2:54:db:21:4e:b2:30:40:e8:05:3a:e0: d2:ea:4f:07:f2:02:24:c5:54:5c:f2:98:a5:8e:8f: f4:86:e8:8d:dc:42:fa:5a:c0:6a:8d:d7:ab:43:b6: f0:7b:ec:f2:9a:9b:cc:93:71:6f:78:bf:99:b1:2f: fa:04:b1:ac:a8:03:14:8f:14:55:9b:51:8c:26:13: ff:8e:44:3b:81:30:e7:60:ad:87:ec:c4:79:56:72: 70:b2:36:f7:68:77:62:4b:e4:cd:31:bb:bd:3a:b7: 46:d8:88:40:ae:c8:68:b5:8c:98:c7:3a:1f:77:38: 3f:41:31:3e:23:37:d2:ca:c0:9e:c3:4a:6b:c5:0f: 70:13:e3:ff:fa:b1:56:66:06:5a:fa:2c:cd:cc:8f: ad:57:56:31:e1:6f:1b:a7:4e:ad:95:d8:e3:ca:ef: aa:3e:e5:a3:d6:6e:3b:a2:23:3f:41:16:2b:20:4e: b1:18:aa:19:76:91:b6:bd:76:be:89:47:8f:ca:10: 9b:b9:18:81:5d:3a:fa:07:78:f6:2a:a3:c8:f3:85: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:DE:B5:C8:7F:D8:4E:98:39:A4:27:3E:9D:FE:84:15:AA:88:58 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:62:f6:f2:4f:8a:23:59:48:95:15:47:4c:7b:53:6c:ab:be: d2:62:0b:f0:1a:7e:f7:11:88:5b:8c:2c:5f:86:9f:78:a5:ad: 14:f7:21:de:f0:f0:4a:3e:f9:bf:8a:23:c0:1e:fa:9f:9b:bc: 51:f5:2a:d8:38:41:27:43:63:7e:55:61:60:3b:a1:a7:ab:3d: 5c:55:82:b2:79:0e:22:c8:a0:79:58:9a:67:fe:79:c7:36:34: c0:37:bc:58:50:56:66:c2:ae:ca:e8:79:95:a3:1d:a7:05:d2: 5b:67:d1:aa:90:bb:fe:3b:3e:46:e9:36:29:e1:29:1e:e7:e3: 8a:5e:1f:63:f1:2c:42:23:e2:ce:f3:1c:c0:99:99:25:fe:17: 9b:91:4f:66:c0:f5:f9:ab:3a:2b:2c:92:6b:ce:a1:59:a1:87: e6:7f:22:73:eb:22:b4:ba:61:4b:9f:b8:c8:e9:12:de:d5:95: 44:40:ee:ff:d5:89:67:2d:d2:04:9f:de:5d:52:18:e0:79:5e: de:65:e1:38:5b:90:3b:e9:2a:9a:36:e5:a8:f1:82:e8:d5:57: 57:61:45:5d:56:a1:b5:57:4a:f8:1c:20:1c:63:5e:0f:ff:91: fb:b7:90:da:1c:08:83:cb:eb:b7:8f:8f:9b:09:cb:da:49:ef: dd:4b:eb:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7Dyk6J1YIUke1Z98dO6CQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUxMDE5MDYwMTM4WhcNMjUxMDIwMDYwMTM4WjAzMTEwLwYDVQQD Eyg3NGIwZGViNWM4N2ZkODRlOTgzOWE0MjczZTlkZmU4NDE1YWE4ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8txJKIcSOTEBYmzpNM3xO0/0wlF yEtel3PWE2CB7r3dpouyqy8XAErOmKoKuQDiVNshTrIwQOgFOuDS6k8H8gIkxVRc 8piljo/0huiN3EL6WsBqjderQ7bwe+zympvMk3FveL+ZsS/6BLGsqAMUjxRVm1GM JhP/jkQ7gTDnYK2H7MR5VnJwsjb3aHdiS+TNMbu9OrdG2IhArshotYyYxzofdzg/ QTE+IzfSysCew0prxQ9wE+P/+rFWZgZa+izNzI+tV1Yx4W8bp06tldjjyu+qPuWj 1m47oiM/QRYrIE6xGKoZdpG2vXa+iUePyhCbuRiBXTr6B3j2KqPI84WFuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSw3rXIf9hOmDmkJz6d/oQVqohYMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimL28k+K I1lIlRVHTHtTbKu+0mIL8Bp+9xGIW4wsX4afeKWtFPch3vDwSj75v4ojwB76n5u8 UfUq2DhBJ0NjflVhYDuhp6s9XFWCsnkOIsigeViaZ/55xzY0wDe8WFBWZsKuyuh5 laMdpwXSW2fRqpC7/js+Ruk2KeEpHufjil4fY/EsQiPizvMcwJmZJf4Xm5FPZsD1 +as6KyySa86hWaGH5n8ic+sitLphS5+4yOkS3tWVREDu/9WJZy3SBJ/eXVIY4Hle 3mXhOFuQO+kqmjblqPGC6NVXV2FFXVahtVdK+BwgHGNeD/+R+7eQ2hwIg8vrt4+P mwnL2knv3UvrJg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:34:11 2025 by rpki-client