$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: H9WKffnxnmKRCdPyefGBCdi+QGUkpEiJyVmT2Oe7nPI= Subject key identifier: A4:BE:A1:96:D3:05:D5:2B:51:4B:2B:4D:5B:7E:68:12:D0:65:03:49 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 0198D5F1AD09912083636C60B1ACD74568F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 099C Signing time: Sat 23 Aug 2025 08:00:42 +0000 Manifest this update: Sat 23 Aug 2025 08:00:42 +0000 Manifest next update: Sun 24 Aug 2025 08:00:42 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: 6T7mcB203cIRqvVqQzSg7eHpvMuu5FOA37C56VB1Khw=) 6: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 7: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 8: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 9: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 10: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 11: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 12: uTvpwRtnh2RZ0zdEa4-XufQf99I.roa (hash: 3DE2jlKHXiRO8HKkM7rg0LAG01decfDpOM8umxeAcJU=) 13: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 14: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:ad:09:91:20:83:63:6c:60:b1:ac:d7:45:68:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Aug 23 08:00:42 2025 GMT Not After : Aug 24 08:00:42 2025 GMT Subject: CN=a4bea196d305d52b514b2b4d5b7e6812d0650349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:6f:ca:5b:6f:b7:c9:e8:6e:07:2a:f9:ad: 57:dc:0b:76:8a:47:2d:b5:82:d8:b9:59:45:0f:26: a8:55:49:d9:da:32:7e:3f:15:92:b2:5e:20:70:e2: fe:08:82:c3:39:e6:4d:3c:46:3b:2f:71:8d:b4:bf: 71:81:22:d1:e8:41:d7:87:04:05:77:63:9f:36:fa: 88:2e:35:80:0b:f7:60:cc:2e:25:58:e6:2e:c8:9c: 21:2f:f3:c6:20:0b:56:0c:b6:a8:1c:8c:fb:dd:bb: b4:07:cd:d2:e2:75:03:2c:16:b4:ad:94:f1:16:0f: 2b:a8:e1:24:8f:7f:6b:30:7f:85:5f:84:11:50:ed: c2:35:2f:bd:1d:9b:eb:7a:45:ad:27:bc:08:c9:62: 55:73:aa:79:ed:f7:aa:81:ab:67:83:5c:e7:9d:19: cb:4e:97:73:72:b4:1b:fe:11:23:35:9d:92:48:53: 3e:bc:79:13:51:fa:12:74:26:bd:62:d4:de:b7:68: 94:fc:3c:5b:ee:cc:9d:49:6d:ab:64:5f:a9:05:c2: ec:cd:d8:12:38:d1:4e:3c:ab:28:55:3a:2e:04:d9: 32:8f:9d:95:a9:40:7a:b3:24:c6:28:5b:a2:74:ad: 28:9b:a1:d9:d0:22:34:0f:b0:69:eb:12:74:3a:81: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BE:A1:96:D3:05:D5:2B:51:4B:2B:4D:5B:7E:68:12:D0:65:03:49 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0a:94:84:1e:9b:17:0b:78:68:10:12:3f:5b:27:d5:96:45: c4:a5:72:7a:63:6b:84:62:a5:59:4d:87:ee:b1:56:13:da:c4: aa:a0:c8:58:a6:b6:e9:ec:2c:39:49:65:d2:52:0e:20:5e:da: 08:b5:92:6e:d2:1b:b9:45:85:b6:f8:9a:09:4c:21:8b:4f:a4: 32:55:11:86:cc:eb:2a:b1:76:e3:37:24:d3:a5:fd:91:5c:50: 85:df:bb:c9:52:75:70:f9:08:6a:58:58:79:b9:e5:3a:d4:a5: f4:cd:25:9e:58:29:ef:55:44:43:01:10:f4:66:f8:ef:03:1a: f4:8b:aa:36:88:a2:45:a8:7f:12:cd:38:1a:51:43:0e:60:b7: 97:89:1b:1c:6a:87:0e:9d:69:78:48:8a:d9:c4:73:c9:ed:e4: ac:83:86:6e:a6:9c:cc:98:ca:dd:63:b9:d9:a4:c8:fa:9f:52: c4:9e:7a:ce:69:f9:ce:f7:dd:4a:35:52:b5:55:58:c3:84:14: 85:58:cf:47:c1:01:ff:ec:2a:b7:8a:b5:7c:c2:4a:e6:39:de: 5a:33:96:7d:3b:d7:68:e8:c5:31:e7:01:00:b9:74:a3:52:6a: 14:c8:4f:50:77:37:50:f9:46:93:5e:96:2e:83:03:d7:fc:4e: 64:43:49:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8a0JkSCDY2xgsazXRWjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUwODIzMDgwMDQyWhcNMjUwODI0MDgwMDQyWjAzMTEwLwYDVQQD EyhhNGJlYTE5NmQzMDVkNTJiNTE0YjJiNGQ1YjdlNjgxMmQwNjUwMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIRvyltvt8nobgcq+a1X3At2ikct tYLYuVlFDyaoVUnZ2jJ+PxWSsl4gcOL+CILDOeZNPEY7L3GNtL9xgSLR6EHXhwQF d2OfNvqILjWAC/dgzC4lWOYuyJwhL/PGIAtWDLaoHIz73bu0B83S4nUDLBa0rZTx Fg8rqOEkj39rMH+FX4QRUO3CNS+9HZvrekWtJ7wIyWJVc6p57feqgatng1znnRnL TpdzcrQb/hEjNZ2SSFM+vHkTUfoSdCa9YtTet2iU/Dxb7sydSW2rZF+pBcLszdgS ONFOPKsoVTouBNkyj52VqUB6syTGKFuidK0om6HZ0CI0D7Bp6xJ0OoFAGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKS+oZbTBdUrUUsrTVt+aBLQZQNJMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQqUhB6b Fwt4aBASP1sn1ZZFxKVyemNrhGKlWU2H7rFWE9rEqqDIWKa26ewsOUll0lIOIF7a CLWSbtIbuUWFtviaCUwhi0+kMlURhszrKrF24zck06X9kVxQhd+7yVJ1cPkIalhY ebnlOtSl9M0lnlgp71VEQwEQ9Gb47wMa9IuqNoiiRah/Es04GlFDDmC3l4kbHGqH Dp1peEiK2cRzye3krIOGbqaczJjK3WO52aTI+p9SxJ56zmn5zvfdSjVStVVYw4QU hVjPR8EB/+wqt4q1fMJK5jneWjOWfTvXaOjFMecBALl0o1JqFMhPUHc3UPlGk16W LoMD1/xOZENJvw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:39 2025 by rpki-client