$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: aptItfRTlvUMPlWSoSI9WfSYV8GZgrT4a5hVBdysDEA= Subject key identifier: EE:53:94:62:D4:D1:7E:E0:50:0B:62:05:9F:53:6C:26:93:9A:BC:9A Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019827106853AD86FC48B23BCEA32E7FD4F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0E5C Signing time: Sun 20 Jul 2025 09:00:43 +0000 Manifest this update: Sun 20 Jul 2025 09:00:43 +0000 Manifest next update: Mon 21 Jul 2025 09:00:43 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: PNNI1ozr3Xjd9UHwUGWmU5pAR9yJ83SUlJIYBqPnT0E=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:10:68:53:ad:86:fc:48:b2:3b:ce:a3:2e:7f:d4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jul 20 09:00:43 2025 GMT Not After : Jul 21 09:00:43 2025 GMT Subject: CN=ee539462d4d17ee0500b62059f536c26939abc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:8d:71:47:99:47:6b:d1:d0:ff:b4:64:ea: 3c:c6:d9:8a:8e:f7:12:82:86:7f:e5:1b:ba:4c:c6: 32:3f:85:15:92:76:f1:f3:38:c0:54:b7:e2:65:e9: 2a:bc:01:e1:b5:9a:f4:8d:fe:ca:fc:92:82:89:47: ba:64:b0:8d:68:6c:be:7f:91:c4:60:8f:96:71:69: 1e:ac:7b:24:e6:98:32:48:b7:e1:d1:c3:62:9d:de: e2:ca:0b:49:ff:d8:6b:b2:0b:14:ba:63:ab:16:91: f4:e1:41:8d:6b:b7:91:29:0c:9e:fb:cd:ea:12:ef: bd:bd:1f:3a:90:5b:bd:59:63:10:61:b1:8d:82:e8: 0c:86:69:d9:b9:15:ee:4d:1e:34:66:3c:08:64:a7: 35:ac:be:f7:f0:0c:35:4e:cc:70:ae:e8:d1:f7:db: 90:05:f3:68:02:d7:9b:b6:14:42:c6:aa:d6:6c:64: 06:d8:a4:a3:9d:73:28:a0:11:c7:9d:f6:f4:aa:55: 1a:05:5d:b0:10:a3:0b:86:4c:2e:cb:95:87:7f:d3: 69:92:01:5c:3c:08:69:ed:42:98:54:e5:9a:c3:51: 05:c8:a1:2d:a0:38:19:d3:41:36:1f:95:bd:91:f0: 6d:81:59:c5:fd:d3:09:e4:f6:8a:91:76:e8:5a:67: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:53:94:62:D4:D1:7E:E0:50:0B:62:05:9F:53:6C:26:93:9A:BC:9A X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:62:31:1f:e3:02:20:9f:f7:e9:3e:3d:2a:b8:a2:f6:f2:7c: 06:59:66:55:12:ab:6d:92:ff:e0:d9:b2:61:04:26:84:3d:c0: d1:01:ca:f8:44:e0:2b:48:94:fc:49:52:d1:1f:1c:b2:94:e1: a9:f6:e1:bd:8b:1a:f8:c2:7b:86:3f:4d:40:1e:23:6b:1d:90: 48:ad:d2:de:2c:bb:b1:64:da:0e:ed:5e:27:9b:db:fb:a0:7a: 9f:d4:c8:7b:be:79:0d:3c:bd:82:af:93:66:cf:c2:19:5c:67: 95:73:79:6d:a3:6c:d6:dd:bb:fb:5b:4b:39:8b:79:f5:6b:29: c7:31:0d:05:30:f6:1d:66:e4:1c:09:dd:41:72:53:62:0c:55: 62:ca:94:4b:80:7a:90:72:f5:dc:f5:b7:e6:e5:5a:32:0a:00: a4:e9:32:9e:3e:d4:45:21:46:f1:9f:2f:67:0a:55:21:06:f1: 5d:c6:b7:a7:15:bb:58:cd:4d:d5:4b:06:2f:fc:b7:f1:9a:49: 10:95:6a:23:a6:e2:6a:9d:1d:20:b0:cc:e2:71:3d:0c:57:d5: 19:e6:09:06:b8:9e:8f:c7:c2:ca:98:67:ff:bc:70:a7:d8:a5: df:eb:48:e1:d5:40:78:20:86:35:0d:3f:3a:53:68:03:e4:4f: f4:ec:1a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnEGhTrYb8SLI7zqMuf9TwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwNzIwMDkwMDQzWhcNMjUwNzIxMDkwMDQzWjAzMTEwLwYDVQQD EyhlZTUzOTQ2MmQ0ZDE3ZWUwNTAwYjYyMDU5ZjUzNmMyNjkzOWFiYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIiNcUeZR2vR0P+0ZOo8xtmKjvcS goZ/5Ru6TMYyP4UVknbx8zjAVLfiZekqvAHhtZr0jf7K/JKCiUe6ZLCNaGy+f5HE YI+WcWkerHsk5pgySLfh0cNind7iygtJ/9hrsgsUumOrFpH04UGNa7eRKQye+83q Eu+9vR86kFu9WWMQYbGNgugMhmnZuRXuTR40ZjwIZKc1rL738Aw1TsxwrujR99uQ BfNoAtebthRCxqrWbGQG2KSjnXMooBHHnfb0qlUaBV2wEKMLhkwuy5WHf9NpkgFc PAhp7UKYVOWaw1EFyKEtoDgZ00E2H5W9kfBtgVnF/dMJ5PaKkXboWmfdDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5TlGLU0X7gUAtiBZ9TbCaTmryaMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2IxH+MC IJ/36T49Krii9vJ8BllmVRKrbZL/4NmyYQQmhD3A0QHK+ETgK0iU/ElS0R8cspTh qfbhvYsa+MJ7hj9NQB4jax2QSK3S3iy7sWTaDu1eJ5vb+6B6n9TIe755DTy9gq+T Zs/CGVxnlXN5baNs1t27+1tLOYt59WspxzENBTD2HWbkHAndQXJTYgxVYsqUS4B6 kHL13PW35uVaMgoApOkynj7URSFG8Z8vZwpVIQbxXca3pxW7WM1N1UsGL/y38ZpJ EJVqI6biap0dILDM4nE9DFfVGeYJBriej8fCyphn/7xwp9il3+tI4dVAeCCGNQ0/ OlNoA+RP9OwaKQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:15 2025 by rpki-client