$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: JamBOh1UZck7bt4CYGEkPZIMrh6S/y/33FKqZRs6zD8= Subject key identifier: 06:D1:C3:04:DB:5A:48:62:AA:6B:78:8C:23:A6:77:53:5C:18:0C:38 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 0197B8FD210B2D309B0E142C235198A1ACCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 15CD Signing time: Sun 29 Jun 2025 00:01:26 +0000 Manifest this update: Sun 29 Jun 2025 00:01:26 +0000 Manifest next update: Mon 30 Jun 2025 00:01:26 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: U2dm7BNLr5gjIr5h+QZggIuIk6SmqvohbYIvjn3bSpA=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:fd:21:0b:2d:30:9b:0e:14:2c:23:51:98:a1:ac:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jun 29 00:01:26 2025 GMT Not After : Jun 30 00:01:26 2025 GMT Subject: CN=06d1c304db5a4862aa6b788c23a677535c180c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:52:a5:01:d1:26:67:92:f0:6a:0c:6a:49: 3e:fe:51:53:9b:6d:75:84:a8:ae:d4:2d:d7:9b:0c: 6e:6d:c9:62:86:fc:11:55:db:a3:62:c9:ff:f7:d7: db:ed:24:e2:88:d9:fb:a5:68:dc:01:59:7a:07:4f: 75:c4:a6:58:49:17:5e:3c:fa:7f:9a:ac:d3:60:ae: 05:da:12:28:58:ba:9e:23:54:dc:d4:76:21:ab:b5: 5d:5b:70:c3:9e:e6:db:75:56:48:1a:94:f3:de:f8: 96:96:62:7c:57:f6:41:27:18:10:ef:d3:67:09:e1: c8:73:80:70:5e:01:63:9c:c5:d8:26:a7:46:b7:8c: 2a:68:18:15:f8:1e:e5:28:13:39:3b:e1:42:2e:8a: ea:fe:71:ae:ef:3f:86:40:2a:66:f9:19:1f:6e:d0: c7:50:f8:2e:13:ac:63:87:30:9e:9e:68:38:12:b4: b6:55:ca:83:07:59:51:77:03:af:6a:82:20:64:aa: 33:25:55:2a:03:54:43:7c:00:17:bf:76:dd:87:0a: 18:d3:52:57:59:97:7a:62:8f:3d:3d:76:02:b4:ce: 85:3a:08:eb:8f:81:e1:f5:9d:c6:ee:4c:5a:be:54: 4f:1b:81:45:61:92:bf:3c:fd:ad:b2:27:86:32:3e: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:C3:04:DB:5A:48:62:AA:6B:78:8C:23:A6:77:53:5C:18:0C:38 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1e:fb:28:a3:2f:dc:2a:c3:46:14:81:bc:6a:74:27:a1:d6: 66:b5:03:a5:5d:c6:f4:dd:dd:69:0c:ba:a6:92:65:5f:ab:af: 8f:b7:d4:fb:21:0c:3d:c4:46:6d:25:85:34:1a:5f:59:8e:73: c9:b2:be:e3:82:f1:20:b9:c5:03:3c:32:d1:b6:28:a5:c2:5b: 91:fb:f3:6e:b1:30:fe:2a:af:fa:c7:d4:55:ff:df:d8:cf:6c: e9:18:b0:9e:47:17:32:aa:31:b2:76:0d:38:9e:46:27:e6:d2: c9:2b:65:ea:19:c8:26:aa:9f:1a:7f:54:a8:47:61:d6:42:a1: db:d5:a0:46:fa:c2:5b:6d:22:15:2a:45:16:87:91:af:40:74: f7:eb:e5:cf:f5:9f:68:65:35:22:b2:e9:d4:c9:fa:4f:c9:3a: 19:2d:8c:b8:c2:33:5c:5a:80:da:08:b3:cb:0a:ed:f7:4b:8f: 4e:43:50:4c:43:6e:64:c2:95:a1:c9:70:31:9e:6f:37:34:6c: 6b:f8:a7:55:53:c9:97:df:37:d6:07:cd:35:42:1c:87:27:ba: 82:b9:ea:be:36:6a:a3:96:3e:af:99:6c:3b:ab:a7:eb:41:60: ea:7d:43:0c:1f:34:ee:2d:66:48:4a:cb:90:5e:a8:fd:e8:1a: 2c:d0:62:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4/SELLTCbDhQsI1GYoazNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNjI5MDAwMTI2WhcNMjUwNjMwMDAwMTI2WjAzMTEwLwYDVQQD EygwNmQxYzMwNGRiNWE0ODYyYWE2Yjc4OGMyM2E2Nzc1MzVjMTgwYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1xSpQHRJmeS8GoMakk+/lFTm211 hKiu1C3XmwxubclihvwRVdujYsn/99fb7STiiNn7pWjcAVl6B091xKZYSRdePPp/ mqzTYK4F2hIoWLqeI1Tc1HYhq7VdW3DDnubbdVZIGpTz3viWlmJ8V/ZBJxgQ79Nn CeHIc4BwXgFjnMXYJqdGt4wqaBgV+B7lKBM5O+FCLorq/nGu7z+GQCpm+RkfbtDH UPguE6xjhzCenmg4ErS2VcqDB1lRdwOvaoIgZKozJVUqA1RDfAAXv3bdhwoY01JX WZd6Yo89PXYCtM6FOgjrj4Hh9Z3G7kxavlRPG4FFYZK/PP2tsieGMj77yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbRwwTbWkhiqmt4jCOmd1NcGAw4MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh77KKMv 3CrDRhSBvGp0J6HWZrUDpV3G9N3daQy6ppJlX6uvj7fU+yEMPcRGbSWFNBpfWY5z ybK+44LxILnFAzwy0bYopcJbkfvzbrEw/iqv+sfUVf/f2M9s6RiwnkcXMqoxsnYN OJ5GJ+bSyStl6hnIJqqfGn9UqEdh1kKh29WgRvrCW20iFSpFFoeRr0B09+vlz/Wf aGU1IrLp1Mn6T8k6GS2MuMIzXFqA2gizywrt90uPTkNQTENuZMKVoclwMZ5vNzRs a/inVVPJl9831gfNNUIchye6grnqvjZqo5Y+r5lsO6un60Fg6n1DDB807i1mSErL kF6o/egaLNBivg== -----END CERTIFICATE-----Generated at Sun Jun 29 06:22:00 2025 by rpki-client