$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: zCU4wejEeKmSGb/FDW0YXZpGdg1lcju/XJ2txLvqxuA= Subject key identifier: D9:26:67:A0:12:2D:1E:1A:5C:8C:32:06:C5:8D:1A:73:36:82:A9:69 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 0197B6A1981B1F6698F79C658E8533309E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0F81 Signing time: Sat 28 Jun 2025 13:02:12 +0000 Manifest this update: Sat 28 Jun 2025 13:02:12 +0000 Manifest next update: Sun 29 Jun 2025 13:02:12 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 3: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 7C4R9SPid9sErhuWjY0J7QvY24s3gPVMuVBFeJ59JQk=) 5: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 6: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 7: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 8: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 9: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 10: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 11: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 12: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:98:1b:1f:66:98:f7:9c:65:8e:85:33:30:9e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jun 28 13:02:12 2025 GMT Not After : Jun 29 13:02:12 2025 GMT Subject: CN=d92667a0122d1e1a5c8c3206c58d1a733682a969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:58:cc:9d:34:f0:c3:64:b9:3e:ec:6a:ff: 02:26:2b:aa:0b:84:88:d1:d2:af:eb:c0:34:ac:92: 04:10:e2:5f:8a:84:ff:3d:6a:ee:84:4b:a6:e3:15: 67:da:21:86:a1:75:90:1a:bc:29:5a:72:6c:7d:7d: 96:de:5b:f7:f6:8d:fc:70:1b:b6:7d:79:12:b1:de: 53:14:96:6c:ce:6c:0e:07:17:d9:45:bc:65:dd:a8: cc:aa:ed:e1:08:bf:27:32:b8:5f:e1:bc:7b:8c:f9: b1:0c:0b:df:ba:39:eb:f8:33:f3:07:05:7d:fb:9b: cb:a9:7b:94:bf:53:3f:b1:cc:7a:0d:33:f9:55:b3: 29:0f:24:17:3c:79:5f:11:85:63:9e:a1:ff:66:40: da:38:27:45:c8:0b:aa:e3:9c:1f:81:09:79:90:d6: 2d:56:87:e3:a7:3b:17:73:e8:71:81:29:b5:f0:e1: a7:0f:cb:65:d5:6c:32:b5:50:95:a9:2a:f6:0e:ae: d9:07:9b:dc:24:cf:5c:5b:39:76:db:37:47:46:63: bc:a9:ff:5b:0b:f0:0d:9f:c1:49:55:10:a3:ff:df: f4:8c:bb:73:36:de:c2:d8:c0:e3:94:d5:7e:a6:85: 13:65:49:05:58:e4:0f:a0:ad:23:77:16:3d:88:90: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:26:67:A0:12:2D:1E:1A:5C:8C:32:06:C5:8D:1A:73:36:82:A9:69 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:7c:ad:16:b6:d7:ca:3b:dc:db:35:18:6e:87:ec:64:8e: 78:9e:51:82:95:f0:92:29:7e:b7:42:b7:e9:48:06:8f:0b:e6: c5:50:0a:2c:c9:19:21:3c:e0:8e:07:69:50:58:a8:19:fb:84: f6:de:95:fe:2b:e9:b6:15:c0:95:f8:60:4a:22:d9:1b:49:58: 21:5c:b8:ad:6e:58:d1:f4:a9:f9:83:80:03:1f:5a:6a:b2:74: ee:9f:a1:10:3e:2e:20:79:7d:0e:18:a7:c0:5c:81:fa:51:bb: ff:04:15:4a:25:5d:7d:8f:ee:54:d2:57:9f:68:71:14:99:7f: 1d:e8:14:72:c0:11:c8:30:56:03:2b:ce:06:c1:58:03:09:46: 37:af:8d:0d:f9:17:37:6b:b0:93:43:cb:cc:8a:d7:73:40:18: 47:30:9d:37:13:13:1a:ab:b3:03:c3:2c:a0:77:f6:5f:fb:07: 6c:b6:53:61:ec:fb:9d:c2:06:4b:eb:8e:c1:fc:86:a8:6f:43: 88:1b:65:b9:31:71:a5:5d:9f:5e:d0:f2:b6:08:71:6d:65:ba: 1d:92:5d:e7:d2:7e:10:2a:a0:11:06:ef:3c:f6:d2:96:88:0e: 5c:bc:f4:60:65:21:d0:3e:98:7b:91:b4:46:27:75:c7:c2:a4: f2:f9:01:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oZgbH2aY95xljoUzMJ4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNjI4MTMwMjEyWhcNMjUwNjI5MTMwMjEyWjAzMTEwLwYDVQQD EyhkOTI2NjdhMDEyMmQxZTFhNWM4YzMyMDZjNThkMWE3MzM2ODJhOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0NYzJ008MNkuT7sav8CJiuqC4SI 0dKv68A0rJIEEOJfioT/PWruhEum4xVn2iGGoXWQGrwpWnJsfX2W3lv39o38cBu2 fXkSsd5TFJZszmwOBxfZRbxl3ajMqu3hCL8nMrhf4bx7jPmxDAvfujnr+DPzBwV9 +5vLqXuUv1M/scx6DTP5VbMpDyQXPHlfEYVjnqH/ZkDaOCdFyAuq45wfgQl5kNYt VofjpzsXc+hxgSm18OGnD8tl1WwytVCVqSr2Dq7ZB5vcJM9cWzl22zdHRmO8qf9b C/ANn8FJVRCj/9/0jLtzNt7C2MDjlNV+poUTZUkFWOQPoK0jdxY9iJAoBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkmZ6ASLR4aXIwyBsWNGnM2gqlpMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx18rRa2 18o73Ns1GG6H7GSOeJ5RgpXwkil+t0K36UgGjwvmxVAKLMkZITzgjgdpUFioGfuE 9t6V/ivpthXAlfhgSiLZG0lYIVy4rW5Y0fSp+YOAAx9aarJ07p+hED4uIHl9Dhin wFyB+lG7/wQVSiVdfY/uVNJXn2hxFJl/HegUcsARyDBWAyvOBsFYAwlGN6+NDfkX N2uwk0PLzIrXc0AYRzCdNxMTGquzA8MsoHf2X/sHbLZTYez7ncIGS+uOwfyGqG9D iBtluTFxpV2fXtDytghxbWW6HZJd59J+ECqgEQbvPPbSlogOXLz0YGUh0D6Ye5G0 Rid1x8Kk8vkBxQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:45:15 2025 by rpki-client