$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: f0pamARwEJSg1E3wOANv+8gFAG7S6UGsPrKpQ4+Wjb4= Subject key identifier: 67:40:5B:1E:DF:E1:BA:FF:0E:3F:5B:FE:21:CD:2A:F3:A5:C9:95:8D Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019842BE8BAB4126D8C74A11718BAE121215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0DE7 Signing time: Fri 25 Jul 2025 18:00:40 +0000 Manifest this update: Fri 25 Jul 2025 18:00:40 +0000 Manifest next update: Sat 26 Jul 2025 18:00:40 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: UjNqqWEO3WOrMOBdrkdnLf74QpWcBAzGUAe72ur/67M=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:42:be:8b:ab:41:26:d8:c7:4a:11:71:8b:ae:12:12:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jul 25 18:00:40 2025 GMT Not After : Jul 26 18:00:40 2025 GMT Subject: CN=67405b1edfe1baff0e3f5bfe21cd2af3a5c9958d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:4e:a2:51:58:96:ac:94:85:67:c8:6e:9e: 49:6b:94:48:d5:7c:db:65:13:2d:ee:5a:8b:0e:61: 04:1f:2c:33:e1:62:f9:e1:cc:9a:37:76:d2:46:d2: d1:7a:38:56:1e:89:5a:2c:7f:04:79:55:6d:80:2f: e3:8f:af:f5:b7:ba:13:2e:7d:f4:e7:d1:17:2e:b2: 75:18:5f:ca:78:16:79:16:bd:70:ba:4c:ee:21:ca: 4a:0d:d8:82:2d:74:d0:38:04:36:75:80:2e:55:26: dc:9d:f4:6d:41:c4:4b:b3:a6:a5:f5:4d:b0:1d:8b: 02:5e:8e:d2:bb:07:f2:d2:1f:16:7b:2f:d2:8b:c7: 4a:cd:d1:bb:c0:02:10:3b:98:f6:fb:7c:a1:25:35: 41:0b:5f:63:a5:ee:58:f3:b2:67:9a:c2:db:5d:87: 66:c9:4b:dc:cb:05:8b:13:9c:aa:5d:2b:28:d0:62: b8:7d:be:68:93:9a:8a:3f:7e:a6:ef:16:b7:7e:8d: 7e:04:2c:10:d9:e3:42:9d:a1:0d:22:9f:be:f8:8b: b5:47:c1:68:d9:bf:3c:01:43:8b:09:f8:72:69:47: 1b:26:fb:a2:80:eb:12:d8:14:b1:6b:0e:29:98:dd: 5a:e0:24:8a:27:f8:f3:f3:93:8d:27:b3:fa:9a:e1: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:40:5B:1E:DF:E1:BA:FF:0E:3F:5B:FE:21:CD:2A:F3:A5:C9:95:8D X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2c:c3:a7:36:f3:d2:83:d4:b3:48:a1:ae:c8:b6:46:15:67: 96:37:6e:cb:f6:3b:62:ea:f1:b2:c4:00:ed:07:8c:01:49:7b: cd:2e:d7:2f:9e:1c:28:d4:75:d4:40:d9:07:d1:07:26:8d:b0: 7a:be:e8:78:dc:23:3e:76:83:2d:90:ab:8f:ed:03:42:23:7c: 01:31:bc:a3:c1:7a:42:40:0b:0c:87:ad:da:43:4f:2e:50:32: ca:71:8f:c0:84:1a:0b:a3:36:e3:8d:cd:f4:82:99:cb:08:d1: b9:17:c8:4f:11:0f:9b:22:fb:46:28:0a:99:92:08:aa:2a:86: 79:30:ca:01:7c:40:f6:be:22:58:9d:29:96:83:92:a8:17:81: 97:39:b6:2c:b9:b8:c3:0c:80:d2:eb:6a:bd:1c:c0:a2:7c:45: f8:30:54:1e:1a:7a:41:c5:59:18:0d:88:dc:4e:2a:b2:da:59: c2:2e:19:96:63:e6:9f:79:84:d6:c7:fd:79:71:a4:02:e7:0e: 20:69:b1:2e:4b:c5:2e:c8:a7:7e:2a:1d:ee:96:f5:41:92:16: 44:4a:38:dc:f8:d5:3d:5b:44:64:10:10:d7:29:80:71:97:36: 5a:c1:67:3d:96:71:6c:fd:5b:0b:4c:01:ef:7c:ba:9d:52:c4: 5a:46:74:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhCvourQSbYx0oRcYuuEhIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNzI1MTgwMDQwWhcNMjUwNzI2MTgwMDQwWjAzMTEwLwYDVQQD Eyg2NzQwNWIxZWRmZTFiYWZmMGUzZjViZmUyMWNkMmFmM2E1Yzk5NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA769OolFYlqyUhWfIbp5Ja5RI1Xzb ZRMt7lqLDmEEHywz4WL54cyaN3bSRtLRejhWHolaLH8EeVVtgC/jj6/1t7oTLn30 59EXLrJ1GF/KeBZ5Fr1wukzuIcpKDdiCLXTQOAQ2dYAuVSbcnfRtQcRLs6al9U2w HYsCXo7Suwfy0h8Wey/Si8dKzdG7wAIQO5j2+3yhJTVBC19jpe5Y87JnmsLbXYdm yUvcywWLE5yqXSso0GK4fb5ok5qKP36m7xa3fo1+BCwQ2eNCnaENIp+++Iu1R8Fo 2b88AUOLCfhyaUcbJvuigOsS2BSxaw4pmN1a4CSKJ/jz85ONJ7P6muHEUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdAWx7f4br/Dj9b/iHNKvOlyZWNMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSzDpzbz 0oPUs0ihrsi2RhVnljduy/Y7YurxssQA7QeMAUl7zS7XL54cKNR11EDZB9EHJo2w er7oeNwjPnaDLZCrj+0DQiN8ATG8o8F6QkALDIet2kNPLlAyynGPwIQaC6M2443N 9IKZywjRuRfITxEPmyL7RigKmZIIqiqGeTDKAXxA9r4iWJ0ploOSqBeBlzm2LLm4 wwyA0utqvRzAonxF+DBUHhp6QcVZGA2I3E4qstpZwi4ZlmPmn3mE1sf9eXGkAucO IGmxLkvFLsinfiod7pb1QZIWREo43PjVPVtEZBAQ1ymAcZc2WsFnPZZxbP1bC0wB 73y6nVLEWkZ0AQ== -----END CERTIFICATE-----Generated at Sat Jul 26 00:08:56 2025 by rpki-client