$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: /KE6S+cZAL7wpl3GngC/x1c4w+1BG2q/6F/XNzGe5ho= Subject key identifier: 77:4A:56:5F:4A:27:1D:7B:D2:65:C0:83:60:04:F4:38:5C:E4:9F:74 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 0199FB7CEBBB15F5B4EF23DAA6FA4A24A44D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 0576 Signing time: Sun 19 Oct 2025 08:01:31 +0000 Manifest this update: Sun 19 Oct 2025 08:01:31 +0000 Manifest next update: Mon 20 Oct 2025 08:01:31 +0000 Files and hashes: 1: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 2: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 3: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=) 4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: eTVj+KMDOYYKcji9+3zXo93G2gHGHZMMEa9P0IgQXjg=) 5: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=) 6: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 7: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=) 8: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 9: pc8KquVkf7Bjvabr2oO_2AB4Js4.roa (hash: bRnqKdovtszgM8jGx0ckj/Q6NzvUm1MzmoZsUpk8Ya0=) 10: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 11: v_SKShFDpQLE97FIfb9dU2f7gTw.roa (hash: oAcmeVOLuoyrXmmJm/ud/VikfiniUaev/5ojXR6Otro=) 12: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:eb:bb:15:f5:b4:ef:23:da:a6:fa:4a:24:a4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Oct 19 08:01:31 2025 GMT Not After : Oct 20 08:01:31 2025 GMT Subject: CN=774a565f4a271d7bd265c0836004f4385ce49f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f1:c4:49:8f:bf:a6:30:7b:05:05:00:80:12: 72:b9:0c:92:db:5c:13:d6:46:bd:84:a1:e1:ce:71: 0f:11:cd:e9:a3:fa:47:67:6e:84:a6:dc:da:68:63: 35:af:7b:84:39:bb:0b:cb:f9:2b:c0:33:01:57:8c: fd:f9:09:cd:71:2b:cc:b7:ff:68:7d:bc:08:f2:69: 48:79:42:34:02:f7:be:2a:47:74:bf:91:e5:a5:54: 6d:af:0d:88:f7:eb:14:98:54:40:88:bd:05:b6:ee: 48:16:3b:07:6d:2a:5d:81:d0:7e:6c:47:71:2b:84: b9:a6:0a:2f:65:5b:7b:5c:0f:73:01:8b:43:ca:7c: c4:44:4f:74:8c:e1:e8:4a:0b:e2:f7:dc:0e:8f:9e: 1a:b4:47:13:eb:03:68:48:f0:d4:89:4e:ca:e6:a4: 44:4d:f7:f1:e6:4f:b6:77:94:e4:a2:64:01:a8:e9: bc:49:0d:95:9c:5d:c0:5c:c7:ff:5b:c7:36:e7:c9: 63:14:30:ea:fc:70:58:b7:9a:c2:2a:ad:ea:74:79: d0:a3:9c:ca:e2:9b:f1:e1:2d:87:23:b4:4a:52:07: 6f:39:94:f6:c4:bb:ec:99:24:96:39:88:b1:8e:fb: b5:0f:52:0e:23:52:8b:eb:5d:95:ad:ff:33:12:46: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4A:56:5F:4A:27:1D:7B:D2:65:C0:83:60:04:F4:38:5C:E4:9F:74 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:43:68:13:93:c4:07:9a:d1:87:ce:20:07:81:c6:d4:58:c5: 24:ae:f6:de:85:e0:14:79:3a:ad:85:29:18:42:8c:2a:7c:91: 4b:28:de:38:d9:af:c5:98:ad:40:5d:2b:6d:e6:47:c8:b0:51: e7:49:31:b2:4d:b0:24:66:04:22:72:15:33:e5:36:b2:79:9e: 16:b0:03:b9:71:cc:c7:ff:b9:d0:11:81:f8:b4:60:09:ea:c6: ef:61:9a:89:f5:36:51:18:65:70:53:35:cc:4a:67:cf:8c:e9: 2a:b7:8f:50:33:f4:a1:19:49:61:40:0b:12:4b:f4:4d:dd:b2: 34:43:9a:05:eb:b4:d3:33:6d:bb:71:65:b0:60:28:12:34:44: 94:a8:a9:c1:9b:ae:ae:be:59:8a:b7:35:b4:f1:9e:05:41:be: 25:7f:3d:e5:46:d5:ea:a1:b3:b1:4c:a3:09:3f:b5:38:97:fa: 2e:04:4d:49:a8:26:38:31:80:19:df:9b:39:55:e9:bf:42:a9: 52:fc:2a:e2:da:ca:a7:80:27:59:b9:2f:cc:7b:ec:c1:31:45: 35:4e:ca:81:42:ef:53:0d:d7:4f:00:b1:ee:be:e9:c8:c8:a0: d0:20:71:40:0b:96:c9:85:1c:37:b1:a0:6b:e5:02:f6:0d:d6: 7f:a7:48:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fOu7FfW07yPapvpKJKRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUxMDE5MDgwMTMxWhcNMjUxMDIwMDgwMTMxWjAzMTEwLwYDVQQD Eyg3NzRhNTY1ZjRhMjcxZDdiZDI2NWMwODM2MDA0ZjQzODVjZTQ5Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vHESY+/pjB7BQUAgBJyuQyS21wT 1ka9hKHhznEPEc3po/pHZ26EptzaaGM1r3uEObsLy/krwDMBV4z9+QnNcSvMt/9o fbwI8mlIeUI0Ave+Kkd0v5HlpVRtrw2I9+sUmFRAiL0Ftu5IFjsHbSpdgdB+bEdx K4S5pgovZVt7XA9zAYtDynzERE90jOHoSgvi99wOj54atEcT6wNoSPDUiU7K5qRE Tffx5k+2d5TkomQBqOm8SQ2VnF3AXMf/W8c258ljFDDq/HBYt5rCKq3qdHnQo5zK 4pvx4S2HI7RKUgdvOZT2xLvsmSSWOYixjvu1D1IOI1KL612Vrf8zEkZ9JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdKVl9KJx170mXAg2AE9Dhc5J90MB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0NoE5PE B5rRh84gB4HG1FjFJK723oXgFHk6rYUpGEKMKnyRSyjeONmvxZitQF0rbeZHyLBR 50kxsk2wJGYEInIVM+U2snmeFrADuXHMx/+50BGB+LRgCerG72GaifU2URhlcFM1 zEpnz4zpKrePUDP0oRlJYUALEkv0Td2yNEOaBeu00zNtu3FlsGAoEjRElKipwZuu rr5Zirc1tPGeBUG+JX895UbV6qGzsUyjCT+1OJf6LgRNSagmODGAGd+bOVXpv0Kp Uvwq4trKp4AnWbkvzHvswTFFNU7KgULvUw3XTwCx7r7pyMig0CBxQAuWyYUcN7Gg a+UC9g3Wf6dIyQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:05:58 2025 by rpki-client