$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: h20GEr/VQrlXKGZkpnY8mHiJnz9v08QlNMVi6WHmcZY= Subject key identifier: 00:FC:A4:5F:32:87:E7:05:71:0D:94:02:2E:5F:9F:D1:7E:D0:D4:28 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 01982B5B70236B244BE297F7235C434CA172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 1408 Signing time: Mon 21 Jul 2025 05:01:09 +0000 Manifest this update: Mon 21 Jul 2025 05:01:09 +0000 Manifest next update: Tue 22 Jul 2025 05:01:09 +0000 Files and hashes: 1: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=) 2: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: RL228RxbNxinJ+swILW+MXFCfEv6H6solGo6zohzsbk=) 3: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=) 4: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 5: L7V7oBMQWuhH90NOYH_atbAnsH8.roa (hash: plj3XbX2925ks8hdutOLpZj2760YVYJf0gs36tgJmEI=) 6: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=) 7: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=) 8: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 9: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=) 10: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=) 11: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 12: h-V4YCyNCE3omsXuuAMBsxo_l7I.roa (hash: +PH6IsvUThXKqOZiHkDLtzu2RY8WlWt5iWk/5hrs36o=) 13: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=) 14: kjIvVbxcwGLH5SjeTdqkIDQRAyc.roa (hash: luAw27nn+Q9DaAgXp0DPJsam5ai+yI+hFHF62vHs6nQ=) 15: sc_n_VU-n2SVljxSSLfYKip6owA.roa (hash: Y8b2/uZScC6zfzguMSIf5+YwDVqSXzld7hHLb2CjR84=) 16: vnG5yW1sgiONDKxqTnC980HG4IE.roa (hash: jpE7nvDDH9+I0CbcSt4XW0/KFv4rRB0tFtOwQMEBy1Y=) 17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2b:5b:70:23:6b:24:4b:e2:97:f7:23:5c:43:4c:a1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jul 21 05:01:09 2025 GMT Not After : Jul 22 05:01:09 2025 GMT Subject: CN=00fca45f3287e705710d94022e5f9fd17ed0d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:45:a5:93:b0:5f:e4:36:c5:99:ae:47:70: 60:97:d8:80:15:0c:f5:5a:14:c7:a3:83:78:1a:5d: df:14:51:9b:86:b3:4d:a4:f6:b6:4e:52:7b:0a:6f: e2:96:40:a1:9d:ae:35:bc:57:60:8d:52:6d:a0:11: 4f:26:d5:73:ae:18:f3:a6:6c:67:a8:8e:17:f7:38: 28:2f:ce:3c:e0:25:30:95:33:3f:5e:3d:e2:f9:73: f1:95:b0:fa:df:cc:7d:c4:0b:e6:07:54:65:5d:ad: 01:96:51:b3:1e:96:9d:4d:03:41:40:33:ba:0f:97: 1b:b3:38:c7:a6:b0:c4:50:22:d4:1a:07:f4:1d:90: 65:3e:fe:55:98:92:75:5d:05:f6:ff:77:ed:1f:74: 23:24:2d:ad:47:7f:ae:2c:f6:e1:d1:ee:27:53:e9: 3a:34:ce:cd:aa:78:73:0c:ba:b7:24:d9:c9:5b:da: 9d:48:e8:ae:7e:0f:87:c8:52:7f:0a:da:eb:b8:4c: 75:cb:5a:22:8e:15:2a:d5:53:0b:38:0c:48:5f:9d: 02:24:a4:59:64:f8:e8:da:b0:ad:21:bd:06:88:59: 98:b6:ad:c4:61:5c:55:57:fa:61:2f:da:49:ea:fb: de:74:2e:40:04:78:8f:c5:cf:65:98:f8:bb:e2:a4: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FC:A4:5F:32:87:E7:05:71:0D:94:02:2E:5F:9F:D1:7E:D0:D4:28 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:b9:9f:3f:17:71:78:a3:92:f2:3a:b8:70:17:c9:77:45: f3:16:cc:e1:93:7a:25:3f:aa:40:e8:c6:e2:f2:94:f9:5a:b4: 28:1d:87:b2:9b:dc:ca:be:24:97:29:33:46:8d:83:40:a2:ae: 1b:82:b7:82:2f:d8:8a:1e:94:a5:76:8b:79:00:4f:9e:3e:14: a4:44:eb:dd:df:59:87:35:bf:c5:9a:10:e5:95:c3:96:aa:e9: 30:7a:d4:ed:28:b3:8b:48:7f:2c:f6:b7:e2:1a:9f:56:80:ae: 35:62:e9:0d:ff:55:7e:b9:f0:8a:73:b6:68:eb:31:4c:20:bd: dc:fd:9b:0d:7e:3b:ea:d6:a6:f0:bf:a4:24:b1:46:04:ed:6d: c1:a4:ee:17:35:cb:18:86:80:15:18:89:01:1a:bc:a2:72:cb: 16:a1:2f:7a:4c:f4:e3:e2:b3:83:40:6e:d5:4a:3b:70:c2:15: 16:a7:bc:d4:78:3f:4c:c0:26:27:d9:90:4b:4a:aa:8f:fb:5d: b5:92:4d:5f:2e:15:13:b5:40:c6:a7:3a:e9:6a:9b:36:dc:ed: 8a:7a:e5:10:e2:e0:87:01:e4:45:e2:6d:0a:19:fc:ee:11:70: 6c:27:57:0e:39:3f:3a:0c:3c:7c:f1:42:4a:8e:f0:10:79:34: df:bf:48:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgrW3AjayRL4pf3I1xDTKFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwNzIxMDUwMTA5WhcNMjUwNzIyMDUwMTA5WjAzMTEwLwYDVQQD EygwMGZjYTQ1ZjMyODdlNzA1NzEwZDk0MDIyZTVmOWZkMTdlZDBkNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+pFpZOwX+Q2xZmuR3Bgl9iAFQz1 WhTHo4N4Gl3fFFGbhrNNpPa2TlJ7Cm/ilkChna41vFdgjVJtoBFPJtVzrhjzpmxn qI4X9zgoL8484CUwlTM/Xj3i+XPxlbD638x9xAvmB1RlXa0BllGzHpadTQNBQDO6 D5cbszjHprDEUCLUGgf0HZBlPv5VmJJ1XQX2/3ftH3QjJC2tR3+uLPbh0e4nU+k6 NM7NqnhzDLq3JNnJW9qdSOiufg+HyFJ/CtrruEx1y1oijhUq1VMLOAxIX50CJKRZ ZPjo2rCtIb0GiFmYtq3EYVxVV/phL9pJ6vvedC5ABHiPxc9lmPi74qTbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD8pF8yh+cFcQ2UAi5fn9F+0NQoMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4a5nz8X cXijkvI6uHAXyXdF8xbM4ZN6JT+qQOjG4vKU+Vq0KB2Hspvcyr4klykzRo2DQKKu G4K3gi/Yih6UpXaLeQBPnj4UpETr3d9ZhzW/xZoQ5ZXDlqrpMHrU7Sizi0h/LPa3 4hqfVoCuNWLpDf9VfrnwinO2aOsxTCC93P2bDX476tam8L+kJLFGBO1twaTuFzXL GIaAFRiJARq8onLLFqEvekz04+Kzg0Bu1Uo7cMIVFqe81Hg/TMAmJ9mQS0qqj/td tZJNXy4VE7VAxqc66WqbNtztinrlEOLghwHkReJtChn87hFwbCdXDjk/Ogw8fPFC So7wEHk0379IMg== -----END CERTIFICATE-----Generated at Mon Jul 21 12:26:08 2025 by rpki-client