$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: /+DwhkpdUin/hx45LTj2R8CMH+kKncmB7LZMdu0hMbU= Subject key identifier: 79:18:24:56:9D:9E:12:A9:85:05:3A:FA:39:C3:06:4C:35:D2:FE:7C Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 0199FAD7BB57EE856637D864FDE37B17BB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0A34 Signing time: Sun 19 Oct 2025 05:01:06 +0000 Manifest this update: Sun 19 Oct 2025 05:01:06 +0000 Manifest next update: Mon 20 Oct 2025 05:01:06 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (hash: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: sntEHWN8MLIoXKjKXv/8zH9i2okWRhzSwfMXyCYSnWA=) 7: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 8: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 9: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 10: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 11: cJ1rW8VClyRweGHbeEMtWBhnXAQ.roa (hash: xDtfcFeuvoc7H53dx6XMFpyYCc4Qq+FPUImWBrlN+70=) 12: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 13: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 14: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 15: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d7:bb:57:ee:85:66:37:d8:64:fd:e3:7b:17:bb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Oct 19 05:01:06 2025 GMT Not After : Oct 20 05:01:06 2025 GMT Subject: CN=791824569d9e12a985053afa39c3064c35d2fe7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:b0:80:5e:c1:fa:20:6f:fb:65:e9:10:ea: ae:63:03:e5:aa:5a:85:83:2e:ce:d8:b4:2b:ad:0e: 89:98:7c:80:c1:06:50:a6:00:36:07:44:3e:4f:f1: 91:77:43:e1:45:2b:95:5c:01:3d:a0:12:89:07:ef: 38:0f:ef:08:7d:ab:02:db:bb:7e:8d:56:6a:b7:38: 9c:3b:4c:1c:12:5d:a4:48:d2:2d:ab:06:9c:15:c1: 72:35:54:59:5a:ee:2e:83:ad:c3:94:b8:0f:18:38: 9a:0e:e3:27:96:d6:6c:1a:73:90:a0:e9:cf:32:9a: ad:fc:3c:8d:e3:52:76:e6:c0:16:6a:cc:f8:5a:f2: da:52:64:5d:3f:36:aa:d0:b6:88:f0:46:9f:32:48: 5c:5f:ba:1b:2d:c5:0c:ab:ee:88:97:90:4b:ba:2a: 6d:a1:b4:4f:2d:ad:97:87:8f:55:f4:86:26:d8:ce: d7:38:d2:81:4a:ab:e0:ec:74:2d:21:50:37:71:34: ad:a5:7a:a2:fa:bf:85:1e:35:23:79:40:2d:59:86: 6a:33:d4:aa:25:6e:eb:57:d7:5e:3b:29:94:f4:76: fc:af:19:8c:83:3b:f9:82:17:d2:ac:76:85:da:4c: 1d:5d:96:b2:32:80:42:63:1b:cd:d5:fa:cc:64:ae: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:18:24:56:9D:9E:12:A9:85:05:3A:FA:39:C3:06:4C:35:D2:FE:7C X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:de:d6:c0:19:f4:b5:e5:ba:e5:91:93:a8:69:dd:40:ab:b4: 3e:11:d6:94:b9:63:cd:4c:bc:58:e6:8c:ea:5b:b5:fb:30:a7: e4:b0:e5:38:0c:24:ff:96:ea:8f:12:68:25:5c:e4:97:ca:06: 5c:ea:eb:e7:3d:8b:89:a9:9b:a0:58:bc:28:09:d0:24:58:ac: 2c:71:5d:dd:31:70:e7:a9:da:f0:d4:77:e2:0b:06:2b:d3:0e: 4e:ff:43:6a:d0:5d:ea:01:39:43:17:92:59:4f:66:b7:57:dd: 4f:82:d4:09:c5:8a:a3:a7:11:af:98:a9:52:69:57:34:1a:3f: b4:40:b8:c6:1b:bd:da:6e:ba:5f:3a:7c:1d:a1:fa:ce:30:9f: 41:1e:96:cd:32:09:0f:c0:95:aa:0b:77:a9:ba:fd:71:4a:2d: 40:01:2e:6a:78:c9:e4:05:cd:a4:f8:7f:fe:d2:98:be:07:48: 68:f2:84:56:bc:fd:1d:a9:19:ce:1b:34:5f:29:4c:8d:11:6a: 9a:b3:fb:2a:82:94:e2:fd:5b:84:b3:ee:e3:50:9a:28:48:f5: 15:52:a4:41:54:e7:5c:04:fd:f3:1a:5f:a3:60:f1:49:ee:c3: 5b:fc:10:52:18:59:1e:77:97:d9:b2:35:58:b5:71:aa:ed:2b: f9:95:0c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn617tX7oVmN9hk/eN7F7txMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUxMDE5MDUwMTA2WhcNMjUxMDIwMDUwMTA2WjAzMTEwLwYDVQQD Eyg3OTE4MjQ1NjlkOWUxMmE5ODUwNTNhZmEzOWMzMDY0YzM1ZDJmZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNmwgF7B+iBv+2XpEOquYwPlqlqF gy7O2LQrrQ6JmHyAwQZQpgA2B0Q+T/GRd0PhRSuVXAE9oBKJB+84D+8IfasC27t+ jVZqtzicO0wcEl2kSNItqwacFcFyNVRZWu4ug63DlLgPGDiaDuMnltZsGnOQoOnP Mpqt/DyN41J25sAWasz4WvLaUmRdPzaq0LaI8EafMkhcX7obLcUMq+6Il5BLuipt obRPLa2Xh49V9IYm2M7XONKBSqvg7HQtIVA3cTStpXqi+r+FHjUjeUAtWYZqM9Sq JW7rV9deOymU9Hb8rxmMgzv5ghfSrHaF2kwdXZayMoBCYxvN1frMZK7E6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkYJFadnhKphQU6+jnDBkw10v58MB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkN7WwBn0 teW65ZGTqGndQKu0PhHWlLljzUy8WOaM6lu1+zCn5LDlOAwk/5bqjxJoJVzkl8oG XOrr5z2LiamboFi8KAnQJFisLHFd3TFw56na8NR34gsGK9MOTv9DatBd6gE5QxeS WU9mt1fdT4LUCcWKo6cRr5ipUmlXNBo/tEC4xhu92m66Xzp8HaH6zjCfQR6WzTIJ D8CVqgt3qbr9cUotQAEuanjJ5AXNpPh//tKYvgdIaPKEVrz9HakZzhs0XylMjRFq mrP7KoKU4v1bhLPu41CaKEj1FVKkQVTnXAT98xpfo2DxSe7DW/wQUhhZHneX2bI1 WLVxqu0r+ZUM2g== -----END CERTIFICATE-----Generated at Sun Oct 19 15:12:17 2025 by rpki-client