$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: xjtEONqZmDOU0qNWJ7+8EGl6yGbywGK5TExDmUJN0io= Subject key identifier: 43:BA:DF:A1:34:6F:01:56:57:77:D0:CF:ED:CA:DD:2F:E8:B1:EE:D0 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019836167703F04A7FA5AB1FC9B8FFDE3663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0FC3 Signing time: Wed 23 Jul 2025 07:01:38 +0000 Manifest this update: Wed 23 Jul 2025 07:01:38 +0000 Manifest next update: Thu 24 Jul 2025 07:01:38 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 3: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: Kfu8yn8cZ7kPgeTt5Aw9K3Uo+4yk/1rY3W4nBbiy9eM=) 5: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 6: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 7: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 8: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 9: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 10: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 11: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 12: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:16:77:03:f0:4a:7f:a5:ab:1f:c9:b8:ff:de:36:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jul 23 07:01:38 2025 GMT Not After : Jul 24 07:01:38 2025 GMT Subject: CN=43badfa1346f01565777d0cfedcadd2fe8b1eed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:19:b9:d7:5d:4a:fd:e5:63:47:91:08:1e: d6:9a:94:b9:5d:34:2c:7f:d6:21:68:25:ba:72:a7: 66:c6:53:35:02:54:b1:ae:d3:01:85:7e:f4:29:26: e6:ad:dc:cf:a6:86:0f:5c:34:19:a1:5c:0f:b7:83: 1b:0a:52:80:18:d0:ea:c2:cf:22:c4:37:8b:eb:bf: c8:92:4c:05:1f:b6:39:ad:73:ba:6c:49:b1:ea:75: d5:dc:f0:ae:fb:3f:50:90:00:b3:28:0c:10:b4:4d: d9:76:8b:1d:d5:bf:67:10:10:6f:c3:05:06:cc:98: 7b:91:d8:50:86:e8:53:42:49:4e:db:6d:87:da:94: 88:a5:9c:b5:da:41:6e:3f:5a:26:ff:9b:03:aa:34: 0f:25:eb:0e:d1:5a:8d:a3:68:d7:44:3c:d8:9f:c7: 5b:fe:3a:92:5a:72:a1:df:3c:7f:e3:a4:b2:51:9e: 78:92:6e:c0:e6:b5:be:45:11:4f:0a:0b:90:c3:87: b6:76:37:c8:e8:36:0d:44:ed:60:04:fb:9f:cd:99: d0:b1:3f:28:3b:7c:1b:38:e0:cd:85:1d:6c:d2:2e: 5e:6e:c7:a3:49:ac:2f:9b:4c:54:b8:4c:c5:cf:71: ce:25:da:69:78:a6:9d:0c:1f:f7:e8:7e:95:e4:01: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:DF:A1:34:6F:01:56:57:77:D0:CF:ED:CA:DD:2F:E8:B1:EE:D0 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4b:0e:3a:36:ea:fa:6d:05:52:b3:05:ab:73:f2:53:89:94: ae:e7:ef:b8:8d:98:6e:51:5b:df:52:8f:3f:91:69:19:21:58: b7:ac:fb:27:78:4b:12:cb:04:62:4b:5e:70:ef:cd:dc:23:41: 64:55:95:5d:88:4d:04:a1:a7:07:b5:7a:5c:43:8e:39:af:ac: 74:21:75:7b:d4:4b:f3:1a:6d:39:ef:cf:27:46:51:35:a9:b0: cc:f1:79:72:f6:53:02:9d:e7:b9:a2:6a:fa:bc:65:97:67:46: ca:45:e4:f6:cf:d1:66:5f:d5:a1:ed:03:92:c3:02:d8:b5:1b: 03:07:09:2c:45:aa:59:42:2d:74:c0:b0:95:4b:52:02:13:67: 1b:4d:2a:c7:89:d6:81:01:f1:a6:ae:5f:0b:22:78:c5:52:ab: 11:39:bd:be:e0:50:ed:6c:f5:a0:c1:b0:fa:0b:6d:12:18:25: ca:c7:66:17:48:f1:a3:63:ce:5a:ca:e9:ec:15:85:41:83:2a: f2:85:31:ba:c3:67:67:7a:8b:42:da:38:24:44:35:e2:41:0c: 7d:92:8b:59:c2:37:6b:25:ab:ec:3a:70:64:4f:bb:9f:d8:5d: 1d:5b:8c:3a:5b:ff:05:3a:72:00:01:39:6b:22:40:c1:f1:eb: eb:08:e9:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2FncD8Ep/pasfybj/3jZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNzIzMDcwMTM4WhcNMjUwNzI0MDcwMTM4WjAzMTEwLwYDVQQD Eyg0M2JhZGZhMTM0NmYwMTU2NTc3N2QwY2ZlZGNhZGQyZmU4YjFlZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogsZudddSv3lY0eRCB7WmpS5XTQs f9YhaCW6cqdmxlM1AlSxrtMBhX70KSbmrdzPpoYPXDQZoVwPt4MbClKAGNDqws8i xDeL67/IkkwFH7Y5rXO6bEmx6nXV3PCu+z9QkACzKAwQtE3Zdosd1b9nEBBvwwUG zJh7kdhQhuhTQklO222H2pSIpZy12kFuP1om/5sDqjQPJesO0VqNo2jXRDzYn8db /jqSWnKh3zx/46SyUZ54km7A5rW+RRFPCguQw4e2djfI6DYNRO1gBPufzZnQsT8o O3wbOODNhR1s0i5ebsejSawvm0xUuEzFz3HOJdppeKadDB/36H6V5AGR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO636E0bwFWV3fQz+3K3S/ose7QMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0sOOjbq +m0FUrMFq3PyU4mUrufvuI2YblFb31KPP5FpGSFYt6z7J3hLEssEYktecO/N3CNB ZFWVXYhNBKGnB7V6XEOOOa+sdCF1e9RL8xptOe/PJ0ZRNamwzPF5cvZTAp3nuaJq +rxll2dGykXk9s/RZl/Voe0DksMC2LUbAwcJLEWqWUItdMCwlUtSAhNnG00qx4nW gQHxpq5fCyJ4xVKrETm9vuBQ7Wz1oMGw+gttEhglysdmF0jxo2POWsrp7BWFQYMq 8oUxusNnZ3qLQto4JEQ14kEMfZKLWcI3ayWr7DpwZE+7n9hdHVuMOlv/BTpyAAE5 ayJAwfHr6wjpvw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:09:53 2025 by rpki-client