$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: aqfVBwpQkRPE+F908Kkp7vOZqP4VgDARLmT1/x5BR7Q= Subject key identifier: 5A:91:35:15:89:6F:DE:D4:5D:3D:6B:60:C7:5B:37:3D:B8:65:99:43 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 0198D66023104B76C339302E88C66F66F8EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1016 Signing time: Sat 23 Aug 2025 10:01:21 +0000 Manifest this update: Sat 23 Aug 2025 10:01:21 +0000 Manifest next update: Sun 24 Aug 2025 10:01:21 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 3: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 9mNn3S0OSnPk+kVoj9ZUR1XYRezspzt3RVc9pwlff9s=) 5: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 6: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 7: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 8: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 9: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 10: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 11: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 12: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:60:23:10:4b:76:c3:39:30:2e:88:c6:6f:66:f8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Aug 23 10:01:21 2025 GMT Not After : Aug 24 10:01:21 2025 GMT Subject: CN=5a913515896fded45d3d6b60c75b373db8659943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:6e:ab:44:ce:54:1e:a4:93:00:25:8f:7f: 49:fe:2a:78:66:d2:44:7c:e5:22:94:4d:fc:a6:65: 02:6f:98:20:07:0b:ac:4b:b5:74:cc:78:6f:eb:82: a0:12:c8:72:f0:7a:75:27:be:e1:03:49:1c:92:fd: 99:07:df:83:47:9b:4a:a4:d9:21:8a:a5:96:ce:33: 4f:cb:60:7f:14:21:8b:60:cd:c6:b8:25:e0:f0:8e: 80:5f:0e:66:78:c5:a2:f3:34:46:28:4b:a9:0f:4b: 1e:52:1b:dc:fa:1a:07:52:0e:f6:ad:82:e9:dc:82: 62:f0:e1:a4:c5:ed:e2:f0:cb:28:54:ff:d3:30:1e: 39:6a:7c:49:6a:f0:8b:07:0c:c6:d8:b9:8f:d2:0c: 65:4e:87:06:31:94:35:95:c9:5f:3f:4f:34:87:d4: 80:c1:10:52:7c:8f:88:4c:eb:98:6d:da:28:39:57: 1d:6a:67:db:c0:51:93:8b:87:34:26:b4:73:9a:b6: 22:64:38:3c:b7:78:83:e5:0f:87:37:13:36:44:78: 18:ac:12:88:41:83:c2:c2:b9:91:88:7e:71:34:97: 30:2d:22:35:7e:93:d4:dd:14:f4:bd:d8:24:c4:9a: 5f:4e:76:9a:cf:9b:9e:aa:e1:bd:5c:8c:ba:d0:f9: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:91:35:15:89:6F:DE:D4:5D:3D:6B:60:C7:5B:37:3D:B8:65:99:43 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:02:bd:e7:d2:17:98:94:7b:4d:37:80:42:b9:cd:9e:59:4b: 92:36:e7:d6:91:db:81:68:0e:4e:21:71:0a:e4:28:a4:47:d7: e7:38:47:f6:bf:70:c4:e7:f2:36:2b:20:66:cc:f8:c9:c5:a7: b7:47:32:f7:11:ee:09:75:d3:0c:b9:d0:e6:96:b7:e4:35:b2: a7:31:e2:f0:01:df:af:42:d9:94:3a:76:f6:41:a3:d0:18:4a: d4:08:86:1d:93:b8:45:08:8b:6f:09:74:a1:da:2d:64:8c:02: 8c:d3:26:4f:30:ff:ee:de:08:d3:17:a0:22:c1:f1:c9:4d:97: 44:b5:00:88:24:89:d1:dc:1f:0a:12:4a:bb:cf:b3:1e:bb:53: 32:6d:de:87:d7:5e:85:a1:ca:46:45:2f:ed:74:e1:36:3f:3c: f5:4f:4c:d5:cd:55:33:13:b2:0c:cb:8b:bd:b3:57:5f:6b:fb: 03:71:c0:5c:93:33:3d:63:6c:ad:ab:d7:39:a5:8e:d3:7a:42: 05:d8:39:56:d3:f4:56:ef:c3:81:d6:63:4c:75:d2:71:44:af: 20:2a:4a:7a:81:74:03:ad:6b:be:58:9d:c6:9d:16:ca:9e:03: b2:86:25:48:c6:13:75:df:2e:27:d0:2c:24:37:02:65:41:76: 64:a3:22:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYCMQS3bDOTAuiMZvZvjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwODIzMTAwMTIxWhcNMjUwODI0MTAwMTIxWjAzMTEwLwYDVQQD Eyg1YTkxMzUxNTg5NmZkZWQ0NWQzZDZiNjBjNzViMzczZGI4NjU5OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQNuq0TOVB6kkwAlj39J/ip4ZtJE fOUilE38pmUCb5ggBwusS7V0zHhv64KgEshy8Hp1J77hA0kckv2ZB9+DR5tKpNkh iqWWzjNPy2B/FCGLYM3GuCXg8I6AXw5meMWi8zRGKEupD0seUhvc+hoHUg72rYLp 3IJi8OGkxe3i8MsoVP/TMB45anxJavCLBwzG2LmP0gxlTocGMZQ1lclfP080h9SA wRBSfI+ITOuYbdooOVcdamfbwFGTi4c0JrRzmrYiZDg8t3iD5Q+HNxM2RHgYrBKI QYPCwrmRiH5xNJcwLSI1fpPU3RT0vdgkxJpfTnaaz5uequG9XIy60Pn/4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqRNRWJb97UXT1rYMdbNz24ZZlDMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgK959IX mJR7TTeAQrnNnllLkjbn1pHbgWgOTiFxCuQopEfX5zhH9r9wxOfyNisgZsz4ycWn t0cy9xHuCXXTDLnQ5pa35DWypzHi8AHfr0LZlDp29kGj0BhK1AiGHZO4RQiLbwl0 odotZIwCjNMmTzD/7t4I0xegIsHxyU2XRLUAiCSJ0dwfChJKu8+zHrtTMm3eh9de haHKRkUv7XThNj889U9M1c1VMxOyDMuLvbNXX2v7A3HAXJMzPWNsravXOaWO03pC Bdg5VtP0Vu/DgdZjTHXScUSvICpKeoF0A61rvlidxp0Wyp4DsoYlSMYTdd8uJ9As JDcCZUF2ZKMi9A== -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:20 2025 by rpki-client