$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: OG3qgfVG7Ay4R1kIYbiPyQ6vhavATgc8f3r13qb4KNQ= Subject key identifier: 0E:D1:C4:E9:A7:9B:BD:08:18:1C:91:DA:86:74:B9:93:34:C2:4E:AD Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 0198D7739B0A1616FA35581A878DBAAA49AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 04DD Signing time: Sat 23 Aug 2025 15:02:14 +0000 Manifest this update: Sat 23 Aug 2025 15:02:14 +0000 Manifest next update: Sun 24 Aug 2025 15:02:14 +0000 Files and hashes: 1: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (hash: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=) 2: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 3: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 4: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=) 5: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: jj4VAh64ZeIJD4v+C8ZE0jwXsvYRQO4fkkG9fEe8GDI=) 6: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=) 7: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 8: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=) 9: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 10: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 11: v_SKShFDpQLE97FIfb9dU2f7gTw.roa (hash: oAcmeVOLuoyrXmmJm/ud/VikfiniUaev/5ojXR6Otro=) 12: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:73:9b:0a:16:16:fa:35:58:1a:87:8d:ba:aa:49:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Aug 23 15:02:14 2025 GMT Not After : Aug 24 15:02:14 2025 GMT Subject: CN=0ed1c4e9a79bbd08181c91da8674b99334c24ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:de:b6:ee:3a:61:ef:c5:e9:c2:27:3a:b5: 98:51:79:6a:a9:a5:bd:86:bb:65:ba:45:68:e2:66: 72:a3:76:b6:10:d9:0d:b2:4f:7c:3f:b9:b0:2a:b8: 8f:67:68:47:78:65:d8:63:73:3f:33:f2:d3:ef:e9: 38:ea:b9:70:b1:32:9b:cf:f4:7d:3e:29:43:cf:16: 71:d4:8b:95:69:c2:6a:e0:b7:31:10:c1:42:95:88: f7:8a:b0:a7:e3:0b:5e:f4:5d:11:f5:09:37:3d:47: 7f:86:f7:97:ce:f4:36:2c:fa:f7:b9:80:52:0c:c8: fc:f5:c7:f2:38:6b:ca:4e:14:e9:0b:53:06:ff:e7: 75:1a:e2:1e:8f:21:9a:25:a2:8a:99:7e:08:e9:63: 0b:b3:6d:17:cc:c5:ae:27:96:5e:61:48:12:6a:e9: 3f:46:80:a3:14:1b:24:54:e0:a2:5e:30:77:79:15: 09:fe:61:83:b1:51:d3:10:b6:6a:c2:36:bc:03:a8: 19:6d:21:f1:5a:7e:66:84:9c:99:16:a7:6b:48:4a: 97:96:bd:61:f9:88:1e:b0:8a:88:f3:a6:dd:62:de: 41:f5:4e:22:94:2a:61:43:03:3d:b0:7f:aa:5f:c5: 48:77:8e:b5:86:7a:a4:dc:22:25:c5:64:95:0f:b2: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D1:C4:E9:A7:9B:BD:08:18:1C:91:DA:86:74:B9:93:34:C2:4E:AD X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2f:db:93:dc:ea:db:3a:be:ae:96:8e:17:ab:eb:e4:28:9a: b5:70:99:56:85:c2:e4:cf:11:1d:fc:00:03:3d:15:3b:99:4f: 88:0f:28:3b:1a:da:fc:9d:d0:34:0d:dd:03:d6:17:f2:8e:e8: 3f:82:97:b6:10:d8:4d:e9:5a:18:9f:36:72:54:f1:1d:50:79: f8:39:fa:c4:e7:a4:e5:37:12:fc:c7:9f:b1:67:2a:13:97:e8: ab:81:8f:98:74:e0:95:af:95:6c:71:16:5b:e0:13:37:23:97: 71:d9:8b:68:01:3f:77:13:2e:b0:15:ba:3c:97:f5:99:ec:05: 4a:39:8d:28:bb:61:70:91:72:80:2c:b6:26:bb:b4:61:08:e8: 17:ba:7f:ec:a0:60:27:26:0b:3d:d3:00:42:ac:98:75:fe:01: 28:8b:9e:3b:4d:1c:c4:f5:39:2f:30:83:78:3d:cc:f4:53:da: cc:82:8f:fa:7c:ae:6c:41:e3:26:e5:31:b2:7d:12:2f:5d:ab: f5:21:01:80:3a:90:c7:ae:2e:f0:e8:51:39:83:07:6d:e2:5b: db:e9:2e:4b:aa:e7:7c:53:3f:59:18:52:a6:ce:19:6a:7d:15: c2:f5:66:44:0a:b4:27:11:39:46:e6:fe:4b:8c:d0:ec:2a:6e: 4c:a9:d3:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXc5sKFhb6NVgah426qkmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUwODIzMTUwMjE0WhcNMjUwODI0MTUwMjE0WjAzMTEwLwYDVQQD EygwZWQxYzRlOWE3OWJiZDA4MTgxYzkxZGE4Njc0Yjk5MzM0YzI0ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcfetu46Ye/F6cInOrWYUXlqqaW9 hrtlukVo4mZyo3a2ENkNsk98P7mwKriPZ2hHeGXYY3M/M/LT7+k46rlwsTKbz/R9 PilDzxZx1IuVacJq4LcxEMFClYj3irCn4wte9F0R9Qk3PUd/hveXzvQ2LPr3uYBS DMj89cfyOGvKThTpC1MG/+d1GuIejyGaJaKKmX4I6WMLs20XzMWuJ5ZeYUgSauk/ RoCjFBskVOCiXjB3eRUJ/mGDsVHTELZqwja8A6gZbSHxWn5mhJyZFqdrSEqXlr1h +YgesIqI86bdYt5B9U4ilCphQwM9sH+qX8VId461hnqk3CIlxWSVD7KgswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7RxOmnm70IGByR2oZ0uZM0wk6tMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIC/bk9zq 2zq+rpaOF6vr5CiatXCZVoXC5M8RHfwAAz0VO5lPiA8oOxra/J3QNA3dA9YX8o7o P4KXthDYTelaGJ82clTxHVB5+Dn6xOek5TcS/MefsWcqE5foq4GPmHTgla+VbHEW W+ATNyOXcdmLaAE/dxMusBW6PJf1mewFSjmNKLthcJFygCy2Jru0YQjoF7p/7KBg JyYLPdMAQqyYdf4BKIueO00cxPU5LzCDeD3M9FPazIKP+nyubEHjJuUxsn0SL12r 9SEBgDqQx64u8OhROYMHbeJb2+kuS6rnfFM/WRhSps4Zan0VwvVmRAq0JxE5Rub+ S4zQ7CpuTKnTFA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:14 2025 by rpki-client