$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: qmB7PYDsLWXPCKsHN66gxP1X1APQEJo7coIAgBfcDFc= Subject key identifier: 62:03:97:48:B8:11:5E:29:A8:F4:CE:3C:D2:F1:AA:D0:41:8C:DB:49 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 01983CF309A156E97C8411FA400C4E33DECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0E3E Signing time: Thu 24 Jul 2025 15:00:17 +0000 Manifest this update: Thu 24 Jul 2025 15:00:17 +0000 Manifest next update: Fri 25 Jul 2025 15:00:17 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: +R97OpSYwFPg6JQnB55evNgoL7YsR/D2UWUoRJ+S5oU=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3c:f3:09:a1:56:e9:7c:84:11:fa:40:0c:4e:33:de:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jul 24 15:00:17 2025 GMT Not After : Jul 25 15:00:17 2025 GMT Subject: CN=62039748b8115e29a8f4ce3cd2f1aad0418cdb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:78:3c:55:b8:4d:94:59:4b:c9:12:62:a4: ac:a6:9d:e9:b6:95:6e:e0:53:e9:b4:90:b2:c7:13: 37:9e:dc:89:65:68:26:34:45:7c:c6:28:a8:2d:e0: 00:7a:a2:e7:78:7a:59:b4:b8:5d:d0:8c:5f:2f:e3: 68:c2:3a:89:a9:9d:a4:c6:8a:b8:4a:63:70:74:75: 7a:38:8a:9a:84:b8:f4:75:9f:df:c1:e4:16:23:b2: e9:d2:98:58:f6:67:1e:6d:47:f6:10:2b:81:34:f2: 6d:f2:ac:09:73:2a:f5:40:4c:d6:53:49:9f:0b:0d: 7a:7b:63:ee:b9:25:5b:bf:7f:53:7e:22:8c:db:59: ad:ae:ee:11:33:14:fd:cb:e2:82:f7:93:05:96:cf: 81:88:14:83:24:89:11:bf:bc:b6:bb:be:54:7b:e7: 50:da:b6:1b:66:5a:c3:dc:97:d8:e6:b9:d5:05:71: 53:d4:a7:1f:28:a2:d9:5e:af:ba:98:af:aa:76:fb: dd:ff:04:34:4a:25:e1:33:a2:7f:df:16:4f:de:7d: 30:4e:3e:ac:35:47:18:f8:7d:e9:cc:e9:0b:89:aa: 5e:01:c7:37:a0:24:3f:29:cd:47:46:dc:e0:0d:c0: 87:a5:bc:1a:75:77:33:9c:81:b0:d0:8d:a4:fa:f8: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:03:97:48:B8:11:5E:29:A8:F4:CE:3C:D2:F1:AA:D0:41:8C:DB:49 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:ec:b0:35:3e:7d:4c:e0:3c:b9:4b:c2:55:0a:f5:f1:11:27: e2:da:7f:d1:c5:0d:5f:fd:bb:56:f0:e0:53:64:10:f6:21:69: 6f:d5:37:96:b0:7c:74:47:ef:e1:b2:2d:df:f9:e8:ba:3e:b5: c9:14:df:c4:21:83:d3:10:05:8d:b4:9a:22:87:33:77:75:83: 25:c2:6f:93:eb:10:65:fb:4b:6c:5f:aa:a5:69:90:75:39:9e: 9f:22:b5:60:99:f1:39:f2:b4:c2:11:40:e0:3d:4e:b7:03:f1: c4:9d:7e:d9:40:f7:81:b3:88:e0:6c:d0:84:28:5b:62:5c:3d: 9c:ce:8a:6c:c0:c5:62:cb:0f:9d:fa:81:d2:02:a9:15:27:b3: 64:3f:59:0c:a7:27:ad:f8:6c:0b:9f:2f:69:67:3d:65:33:aa: 1b:27:6e:43:10:5b:c6:6c:bf:2c:09:40:e5:5f:e4:19:19:ad: 72:fd:56:b3:13:b1:56:c5:89:6f:e6:73:63:54:f7:56:b2:43: 47:45:0a:3c:83:b9:bd:7a:f8:c8:89:e4:93:db:10:79:fa:3e: 31:86:ee:1f:af:52:9c:0d:34:4a:84:43:76:1a:bb:ce:da:01: 38:56:15:f2:bc:35:45:ed:27:cd:b8:7b:18:4a:01:99:25:67: 17:a0:a2:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg88wmhVul8hBH6QAxOM97KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwNzI0MTUwMDE3WhcNMjUwNzI1MTUwMDE3WjAzMTEwLwYDVQQD Eyg2MjAzOTc0OGI4MTE1ZTI5YThmNGNlM2NkMmYxYWFkMDQxOGNkYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xF4PFW4TZRZS8kSYqSspp3ptpVu 4FPptJCyxxM3ntyJZWgmNEV8xiioLeAAeqLneHpZtLhd0IxfL+NowjqJqZ2kxoq4 SmNwdHV6OIqahLj0dZ/fweQWI7Lp0phY9mcebUf2ECuBNPJt8qwJcyr1QEzWU0mf Cw16e2PuuSVbv39TfiKM21mtru4RMxT9y+KC95MFls+BiBSDJIkRv7y2u75Ue+dQ 2rYbZlrD3JfY5rnVBXFT1KcfKKLZXq+6mK+qdvvd/wQ0SiXhM6J/3xZP3n0wTj6s NUcY+H3pzOkLiapeAcc3oCQ/Kc1HRtzgDcCHpbwadXcznIGw0I2k+vhocQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIDl0i4EV4pqPTOPNLxqtBBjNtJMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOywNT59 TOA8uUvCVQr18REn4tp/0cUNX/27VvDgU2QQ9iFpb9U3lrB8dEfv4bIt3/nouj61 yRTfxCGD0xAFjbSaIoczd3WDJcJvk+sQZftLbF+qpWmQdTmenyK1YJnxOfK0whFA 4D1OtwPxxJ1+2UD3gbOI4GzQhChbYlw9nM6KbMDFYssPnfqB0gKpFSezZD9ZDKcn rfhsC58vaWc9ZTOqGyduQxBbxmy/LAlA5V/kGRmtcv1WsxOxVsWJb+ZzY1T3VrJD R0UKPIO5vXr4yInkk9sQefo+MYbuH69SnA00SoRDdhq7ztoBOFYV8rw1Re0nzbh7 GEoBmSVnF6CiHA== -----END CERTIFICATE-----Generated at Fri Jul 25 01:05:10 2025 by rpki-client