$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: qsuut++AeqqQA213p4vfBGP82q82WCxKcuFgB9V+mBM= Subject key identifier: 04:96:57:D1:91:F9:88:5F:BB:80:2D:5D:F1:5F:5F:CA:29:05:00:C2 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 0199FF5961FA27462EA5F55496AC27324C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 16EE Signing time: Mon 20 Oct 2025 02:01:11 +0000 Manifest this update: Mon 20 Oct 2025 02:01:11 +0000 Manifest next update: Tue 21 Oct 2025 02:01:11 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: d8FJXq1b4szp4yZ7oXkDDNHVJNZ320pH5wPyRfSzziM=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:59:61:fa:27:46:2e:a5:f5:54:96:ac:27:32:4c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Oct 20 02:01:11 2025 GMT Not After : Oct 21 02:01:11 2025 GMT Subject: CN=049657d191f9885fbb802d5df15f5fca290500c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:e2:90:12:54:86:cc:fa:61:96:cf:42:90: 6a:f4:b7:cc:96:5b:e1:c7:55:7d:b7:75:92:cf:e4: 06:c8:1c:4b:d6:9f:9d:b6:5f:a3:13:6a:a7:87:53: 92:84:40:81:19:ae:ab:09:a1:cc:46:19:63:3d:c0: eb:08:c5:69:81:b2:12:77:9f:0b:53:4b:72:85:6c: 8f:13:b4:7f:5d:8c:4a:37:d7:78:7c:f2:77:12:be: 0c:1f:15:f7:89:07:83:42:95:9c:3d:65:43:e7:e3: 8f:b3:94:cc:5a:5a:17:a8:5b:d4:38:04:80:35:88: 57:71:91:c9:0f:b8:c6:d2:09:bc:df:70:6a:ff:c7: 67:12:c6:0a:42:89:ae:c8:c4:d9:9a:32:9b:7f:5d: 03:31:eb:11:e7:d6:64:d3:15:a0:5f:73:df:8e:a9: d1:be:be:ec:88:88:48:e1:95:d2:f7:53:df:99:de: c6:06:20:e6:8e:d7:6c:16:e2:14:2b:48:e3:ec:a6: 61:be:38:63:f5:2f:d6:46:1e:ad:ba:f1:b0:b9:d9: 3d:64:b1:7d:90:c4:9c:49:ce:47:28:be:b4:bb:2e: 93:1e:7a:09:8f:9d:d8:10:aa:94:20:61:f2:44:d6: cb:f4:bd:b4:65:ed:f5:f6:ae:e8:a5:89:ef:94:89: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:96:57:D1:91:F9:88:5F:BB:80:2D:5D:F1:5F:5F:CA:29:05:00:C2 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7b:9d:c8:1e:35:c9:97:65:76:f3:89:c9:ce:e3:f3:6c:53: 77:b8:fd:2f:d1:8d:67:7a:8c:a6:d1:f8:ba:22:69:8a:a8:4f: 5e:f1:18:fc:7a:f0:e2:3d:d0:00:6e:a6:d2:11:54:99:7d:37: 6f:87:05:46:d7:d5:e4:f7:69:a9:9a:90:2d:59:44:73:82:24: 12:98:00:23:4b:2a:f4:a9:9d:78:9a:75:53:09:92:6b:4b:8c: 87:db:e8:8e:b4:d9:2e:6f:52:22:42:59:12:cf:35:14:92:95: ad:8f:1b:a8:c1:5d:25:ca:16:fe:84:9f:f2:e2:32:2d:6c:1b: 8a:e2:c7:55:1f:43:af:d7:83:e8:05:91:2a:cf:63:62:d9:2c: db:d0:cd:65:e6:6b:85:04:90:e9:65:12:24:d7:41:4e:ce:1e: a5:01:5c:03:7b:96:77:cf:0a:1b:93:eb:26:85:70:68:0f:84: 3a:ad:f5:f2:9a:63:ef:7f:a1:1e:8d:b5:19:94:0c:e4:5d:ee: ca:59:56:f1:52:d5:1b:c8:7d:41:bd:4a:c2:ee:43:cc:4f:1c: 42:a5:ae:ec:56:df:32:03:1f:bc:9c:f4:8a:e4:18:18:87:b4: 45:24:8f:10:80:de:1c:d9:25:ac:5a:e2:74:e4:ff:0d:ef:62: a7:22:e5:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/WWH6J0YupfVUlqwnMkwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMDIwMDIwMTExWhcNMjUxMDIxMDIwMTExWjAzMTEwLwYDVQQD EygwNDk2NTdkMTkxZjk4ODVmYmI4MDJkNWRmMTVmNWZjYTI5MDUwMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW7ikBJUhsz6YZbPQpBq9LfMllvh x1V9t3WSz+QGyBxL1p+dtl+jE2qnh1OShECBGa6rCaHMRhljPcDrCMVpgbISd58L U0tyhWyPE7R/XYxKN9d4fPJ3Er4MHxX3iQeDQpWcPWVD5+OPs5TMWloXqFvUOASA NYhXcZHJD7jG0gm833Bq/8dnEsYKQomuyMTZmjKbf10DMesR59Zk0xWgX3PfjqnR vr7siIhI4ZXS91Pfmd7GBiDmjtdsFuIUK0jj7KZhvjhj9S/WRh6tuvGwudk9ZLF9 kMScSc5HKL60uy6THnoJj53YEKqUIGHyRNbL9L20Ze319q7opYnvlIk4UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASWV9GR+Yhfu4AtXfFfX8opBQDCMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHudyB41 yZdldvOJyc7j82xTd7j9L9GNZ3qMptH4uiJpiqhPXvEY/Hrw4j3QAG6m0hFUmX03 b4cFRtfV5PdpqZqQLVlEc4IkEpgAI0sq9KmdeJp1UwmSa0uMh9vojrTZLm9SIkJZ Es81FJKVrY8bqMFdJcoW/oSf8uIyLWwbiuLHVR9Dr9eD6AWRKs9jYtks29DNZeZr hQSQ6WUSJNdBTs4epQFcA3uWd88KG5PrJoVwaA+EOq318ppj73+hHo21GZQM5F3u yllW8VLVG8h9Qb1Kwu5DzE8cQqWu7FbfMgMfvJz0iuQYGIe0RSSPEIDeHNklrFri dOT/De9ipyLlrw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:02:23 2025 by rpki-client