$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: Por6wOwlkzzKMS0RuK4yUvGUpBjDQ9dmOvOV8iz9o1A= Subject key identifier: 5D:CC:11:3A:5D:6F:82:5A:B0:0C:24:B9:C7:9C:5D:F3:37:D1:26:CF Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 0198D4A829456331C7582F583327AB1FA35B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1663 Signing time: Sat 23 Aug 2025 02:00:47 +0000 Manifest this update: Sat 23 Aug 2025 02:00:47 +0000 Manifest next update: Sun 24 Aug 2025 02:00:47 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: D16ZHogTlgRT8PxDQdDsbFYTitE.roa (hash: 9Pd/cbA5jb9CKWSLB9DutetbzCBRnVp9AgMw+IGa8yY=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: a7mwfmQGQ/7B++MU8wl3lWF49io+xH2T7yQetrE6sjE=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a8:29:45:63:31:c7:58:2f:58:33:27:ab:1f:a3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Aug 23 02:00:47 2025 GMT Not After : Aug 24 02:00:47 2025 GMT Subject: CN=5dcc113a5d6f825ab00c24b9c79c5df337d126cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:84:b3:2b:22:37:ac:37:bb:89:62:80:90: 5b:69:82:d9:c1:27:c0:35:bb:77:18:52:82:3e:ec: 81:9e:83:f2:55:c5:12:25:92:20:64:0d:65:00:e3: 83:79:8e:fb:18:89:bf:61:8c:0b:ee:d2:40:e9:94: 41:9c:78:81:99:8f:23:30:4b:1c:92:7c:99:0c:e2: a6:8c:9f:20:26:1c:82:b6:3c:c9:a1:65:58:4e:71: 29:0c:51:a0:0f:02:a3:13:1f:c7:b1:01:1e:98:f2: 83:71:1f:a5:56:c1:ee:09:1e:ff:49:f6:ee:39:07: 92:f0:73:5b:3c:e8:b8:74:da:1e:72:44:dc:44:0c: 21:fe:cb:fc:71:1c:17:10:65:0d:70:94:90:d9:43: f8:62:b6:4d:c3:b0:29:e2:88:ae:63:1b:a7:95:9c: a7:8d:74:97:cf:c2:fa:68:19:bf:9d:fd:fd:73:f8: 80:6c:a1:27:85:03:97:23:7c:17:38:31:10:7b:f4: 3e:a9:78:d3:95:0c:aa:37:dd:75:38:aa:d0:2d:d4: cf:db:0d:da:e4:53:47:9a:6b:58:ff:1e:a1:7d:56: b0:2f:38:ef:0e:a3:50:b0:81:03:94:25:e4:01:e4: 1c:a9:40:9f:df:4a:64:00:8a:75:54:5f:b8:fa:df: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:11:3A:5D:6F:82:5A:B0:0C:24:B9:C7:9C:5D:F3:37:D1:26:CF X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:dc:b6:e9:3b:b0:ad:36:85:af:86:85:ce:98:ee:a3:59:47: 5e:db:4e:41:24:a4:c7:c9:d3:c8:f5:6e:25:07:db:3f:88:8b: e5:43:91:01:24:2a:81:69:55:0b:ec:48:5c:e5:01:f7:20:cb: 64:10:fb:68:fb:27:5d:d0:71:4b:42:3a:f9:a0:99:a6:5b:8d: 95:84:f8:ba:00:b4:34:86:a4:30:88:0b:55:ad:f6:99:c3:87: 2d:f0:3b:55:fd:ed:7a:c2:38:f9:36:d6:5a:3f:62:61:87:8c: 0f:a7:ae:ad:ce:2d:12:f7:d8:86:a7:fc:3d:da:dc:76:1c:3b: e5:a7:3f:b1:8f:c9:b4:07:64:51:54:38:cb:6c:90:08:ac:61: b0:27:78:ff:b7:27:f5:fa:44:ad:c9:d7:79:65:ba:02:e3:10: 61:14:70:99:58:00:6e:62:c1:37:29:05:08:99:9c:4c:13:b9: e8:94:aa:76:b8:ad:3b:11:ae:ae:98:4d:e5:9e:cc:f1:b7:67: 7b:1c:26:0e:01:f6:7d:92:cd:c7:c0:04:11:a0:9f:1f:51:32: 44:f5:2c:6c:7c:ed:63:0e:74:e2:b7:e4:eb:32:7e:32:a7:aa: b3:f8:5b:33:dc:39:0c:e4:7e:dd:9e:ca:94:ef:41:f7:af:2b: c9:49:e7:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUqClFYzHHWC9YMyerH6NbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwODIzMDIwMDQ3WhcNMjUwODI0MDIwMDQ3WjAzMTEwLwYDVQQD Eyg1ZGNjMTEzYTVkNmY4MjVhYjAwYzI0YjljNzljNWRmMzM3ZDEyNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/CEsysiN6w3u4ligJBbaYLZwSfA Nbt3GFKCPuyBnoPyVcUSJZIgZA1lAOODeY77GIm/YYwL7tJA6ZRBnHiBmY8jMEsc knyZDOKmjJ8gJhyCtjzJoWVYTnEpDFGgDwKjEx/HsQEemPKDcR+lVsHuCR7/Sfbu OQeS8HNbPOi4dNoeckTcRAwh/sv8cRwXEGUNcJSQ2UP4YrZNw7Ap4oiuYxunlZyn jXSXz8L6aBm/nf39c/iAbKEnhQOXI3wXODEQe/Q+qXjTlQyqN911OKrQLdTP2w3a 5FNHmmtY/x6hfVawLzjvDqNQsIEDlCXkAeQcqUCf30pkAIp1VF+4+t/dawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3METpdb4JasAwkucecXfM30SbPMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaty26Tuw rTaFr4aFzpjuo1lHXttOQSSkx8nTyPVuJQfbP4iL5UORASQqgWlVC+xIXOUB9yDL ZBD7aPsnXdBxS0I6+aCZpluNlYT4ugC0NIakMIgLVa32mcOHLfA7Vf3tesI4+TbW Wj9iYYeMD6eurc4tEvfYhqf8Pdrcdhw75ac/sY/JtAdkUVQ4y2yQCKxhsCd4/7cn 9fpErcnXeWW6AuMQYRRwmVgAbmLBNykFCJmcTBO56JSqdritOxGurphN5Z7M8bdn exwmDgH2fZLNx8AEEaCfH1EyRPUsbHztYw504rfk6zJ+Mqeqs/hbM9w5DOR+3Z7K lO9B968ryUnnrw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:40:34 2025 by rpki-client