$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: yAFrFYclu3WqXoJtg9LKWeS9TV/JHT4iwLHA8wtHm4g= Subject key identifier: 1A:8D:17:04:24:9F:F6:41:A4:EC:AD:A9:39:E1:18:27:30:59:88:FC Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 0197B6D79D09BC918DA2B5C8458CF6F89D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 0A04 Signing time: Sat 28 Jun 2025 14:01:13 +0000 Manifest this update: Sat 28 Jun 2025 14:01:13 +0000 Manifest next update: Sun 29 Jun 2025 14:01:13 +0000 Files and hashes: 1: 5kgmWFbSotEjp_FBh1D9H4GQdQM.roa (hash: Zncej6bG8tjRfISSCN9agbd/46PCgnaW+SXrGYXgxc8=) 2: 7MKtSQ03LybAFvKeFYQhZzPI3gs.roa (hash: RUtBjRwDYReInMQgPiuL3sji7pGnF8mBEIioeh6Vtmw=) 3: TiEA9Nu2FjMVNVi_yHMgYwzLbr0.roa (hash: Tll4LKnun0VoyN+6bo73x6XxD7PysP5fIYKZ9UnMf54=) 4: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 5: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=) 6: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=) 7: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: MZtkH7dCT7CX/FH4ny12PGwcMocVFtScC4qLDjOvZa4=) 8: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=) 9: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=) 10: jUEYHb-GuhXwiI1SopLXVRt5GiY.roa (hash: N8zIemkmgk5a0TVxAU9OTz5oZOkNeALYs1e0nI4AZAE=) 11: zrOybo8OUdo1YWpvdexahXHtucc.roa (hash: EWyOKZff8iXaRwsSXU+RwbJXdez1LiNZod4BRpq2JDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:9d:09:bc:91:8d:a2:b5:c8:45:8c:f6:f8:9d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Jun 28 14:01:13 2025 GMT Not After : Jun 29 14:01:13 2025 GMT Subject: CN=1a8d1704249ff641a4ecada939e11827305988fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:c8:ed:0a:8d:6f:79:1b:0e:33:16:da:ce: e8:d6:be:00:ae:dd:28:76:9f:34:ac:89:26:b7:5e: f2:6d:0a:ee:77:58:25:f7:cd:09:08:2b:3e:f4:fe: 18:d1:11:f3:80:0f:e8:fa:2e:91:2c:66:94:da:4c: cf:41:ad:84:92:ff:55:5f:92:74:08:22:a1:aa:d7: a4:8e:70:dc:b5:92:0f:82:30:d0:25:74:eb:bc:a5: 19:cd:35:01:c6:bd:68:05:09:3e:1a:4d:c8:1f:12: 86:3a:4e:5a:92:f8:8a:1a:33:46:c6:47:89:42:30: c9:6b:33:a1:28:da:aa:ad:bd:7a:bd:2a:24:9b:fd: f7:cb:52:3c:4e:87:e3:17:24:43:37:47:10:7c:0e: f3:60:dc:06:3c:1d:ab:9f:1c:10:87:93:4f:75:02: 4a:c9:84:d2:4f:e8:0a:d6:80:70:77:d4:44:c5:e3: 87:32:8c:0e:a3:c0:2e:6e:30:c4:b8:51:fb:27:73: d7:a9:3f:77:a6:23:f8:d9:cc:9d:9f:8b:ee:37:9c: 0f:f9:e5:ea:8e:f5:7d:83:14:e2:21:a1:35:60:15: fb:f8:ce:86:44:a9:77:20:cb:91:1d:ff:5e:0b:71: ab:b8:12:33:4d:b9:fa:84:10:09:96:47:15:ff:1b: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8D:17:04:24:9F:F6:41:A4:EC:AD:A9:39:E1:18:27:30:59:88:FC X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:67:d0:83:3a:c2:04:5c:0a:9e:c8:43:05:6c:80:24:27:07: e6:5d:6a:fe:21:77:4f:7c:35:fe:c9:ef:8f:22:1e:a2:1b:26: 85:bf:03:f0:e8:52:46:9b:95:ed:06:30:3d:7d:1c:58:c4:a7: c8:94:2f:af:1c:49:5e:02:cb:88:c8:a0:c1:50:28:5f:50:95: bb:3d:04:12:64:12:4c:bb:46:1c:e4:b1:30:1b:a9:ee:81:1e: ce:93:95:c0:8d:89:18:61:b3:9d:05:9f:14:5b:8e:c9:fe:8e: 94:12:e8:52:9a:6d:e3:cc:3e:1b:02:b3:68:82:a7:6b:0d:99: 1d:7d:b1:b0:54:38:06:d7:aa:bc:57:be:dd:ce:fe:f6:31:d0: d0:38:95:82:66:37:68:1f:67:05:c9:66:fb:31:91:95:4a:bc: 76:60:d0:66:b0:65:07:1f:d9:12:75:82:d4:3b:5a:ce:f6:c1: 65:37:c3:aa:21:fc:d9:59:90:0f:9b:45:48:6d:b2:0b:ca:be: c7:ab:48:7d:35:d7:99:c2:5f:b8:54:6e:ee:62:c7:90:b8:74: c3:e2:6d:c8:60:16:25:a1:2b:e2:2d:9b:7d:33:18:ab:62:45: 6b:da:75:79:4f:73:69:00:38:b4:bb:89:7c:db:cb:27:99:4c: ab:ea:b8:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2150JvJGNorXIRYz2+J11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUwNjI4MTQwMTEzWhcNMjUwNjI5MTQwMTEzWjAzMTEwLwYDVQQD EygxYThkMTcwNDI0OWZmNjQxYTRlY2FkYTkzOWUxMTgyNzMwNTk4OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR/I7QqNb3kbDjMW2s7o1r4Art0o dp80rIkmt17ybQrud1gl980JCCs+9P4Y0RHzgA/o+i6RLGaU2kzPQa2Ekv9VX5J0 CCKhqtekjnDctZIPgjDQJXTrvKUZzTUBxr1oBQk+Gk3IHxKGOk5akviKGjNGxkeJ QjDJazOhKNqqrb16vSokm/33y1I8TofjFyRDN0cQfA7zYNwGPB2rnxwQh5NPdQJK yYTST+gK1oBwd9RExeOHMowOo8AubjDEuFH7J3PXqT93piP42cydn4vuN5wP+eXq jvV9gxTiIaE1YBX7+M6GRKl3IMuRHf9eC3GruBIzTbn6hBAJlkcV/xtwoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqNFwQkn/ZBpOytqTnhGCcwWYj8MB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WfQgzrC BFwKnshDBWyAJCcH5l1q/iF3T3w1/snvjyIeohsmhb8D8OhSRpuV7QYwPX0cWMSn yJQvrxxJXgLLiMigwVAoX1CVuz0EEmQSTLtGHOSxMBup7oEezpOVwI2JGGGznQWf FFuOyf6OlBLoUppt48w+GwKzaIKnaw2ZHX2xsFQ4BteqvFe+3c7+9jHQ0DiVgmY3 aB9nBclm+zGRlUq8dmDQZrBlBx/ZEnWC1DtazvbBZTfDqiH82VmQD5tFSG2yC8q+ x6tIfTXXmcJfuFRu7mLHkLh0w+JtyGAWJaEr4i2bfTMYq2JFa9p1eU9zaQA4tLuJ fNvLJ5lMq+q4zA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:54:31 2025 by rpki-client