$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: SJgE9GXMtR2ogZcYfRUIKaZWHXKT2PGyvziyJ3R9rOg= Subject key identifier: 1A:7F:7A:A7:6C:49:7D:67:9F:E5:10:E3:42:2C:1A:59:85:E2:B7:97 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 0198578F22319C4E3AA61A29306CD52EBEB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0959 Signing time: Tue 29 Jul 2025 19:00:54 +0000 Manifest this update: Tue 29 Jul 2025 19:00:54 +0000 Manifest next update: Wed 30 Jul 2025 19:00:54 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: 3Rs86Lc44hixviQDeL5KN9Lgz7K2AA8vNhFF9xtctRQ=) 6: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 7: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 8: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 9: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 10: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 11: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 12: lY5lInv89iRxJVvC3a6rnPaLUZE.roa (hash: NXKmyIXzqyj9f0ZTzfiv0j+d+aicHdwiSS0J0/+KFtg=) 13: veJEUJlOM2CviEnGl10A91ot5GY.roa (hash: /hB3dvMinNmS8ydpLK9fobmCgmadtOoHLY0n+FVP1Cw=) 14: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 15: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Jul 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:57:8f:22:31:9c:4e:3a:a6:1a:29:30:6c:d5:2e:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jul 29 19:00:54 2025 GMT Not After : Jul 30 19:00:54 2025 GMT Subject: CN=1a7f7aa76c497d679fe510e3422c1a5985e2b797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:4c:4c:8a:df:76:ab:05:39:a2:fe:df:d9: 23:05:41:e3:4a:7e:2b:79:48:92:86:7d:4f:b1:fa: 5f:ec:50:71:01:ef:67:90:09:52:ac:86:55:4d:7c: 24:71:ab:05:87:39:8c:ad:dc:5e:7d:37:eb:6c:cf: d1:42:a7:bd:91:c4:fe:6d:30:27:28:b2:f0:04:32: 0a:63:75:38:6c:fd:79:32:cb:e9:b1:bc:9f:bb:b0: 72:0d:58:f7:ef:83:ea:bc:80:4f:8f:b7:14:07:b2: 11:f0:67:b3:7c:99:be:89:6c:54:4f:9a:01:e3:b4: 09:a9:b2:fd:14:96:d8:7a:0c:2e:89:72:30:30:fa: 9e:6e:66:21:06:cc:4f:79:7a:90:b8:bc:75:c5:fd: 8e:12:c2:91:ee:a5:3f:e2:f4:67:ad:fb:94:7e:f8: 68:3d:05:b5:c9:e4:18:ed:9a:cb:18:e3:21:ad:00: 1a:17:e3:d5:28:38:2d:32:29:7d:59:22:13:59:27: 71:95:25:fc:54:4e:da:f4:6d:57:3e:24:18:6f:b5: 87:21:eb:b8:73:4e:27:27:b5:93:bf:13:a8:1a:38: e6:66:49:8a:b6:14:7a:7d:20:9a:59:91:ed:03:eb: 2d:f9:0e:cd:fa:8d:bc:f6:0e:de:91:9c:84:4c:58: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:7A:A7:6C:49:7D:67:9F:E5:10:E3:42:2C:1A:59:85:E2:B7:97 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1a:44:0b:b3:dd:7c:a9:54:7e:54:17:7b:52:1a:42:09:62: 93:4e:21:f9:8b:97:82:dc:0b:6e:9a:3f:07:5f:d9:6c:14:a9: 3d:cb:96:3f:0d:a8:dd:b9:d2:05:2e:66:c3:70:57:02:9c:b6: bc:17:7e:b6:09:9e:0a:41:0f:0a:ee:ea:7f:1d:91:15:2e:b1: 96:c4:ac:b1:a3:42:f5:02:73:7e:18:d6:cb:bd:5b:08:56:d0: c7:a2:0e:17:3d:94:07:a4:0e:12:cd:a6:46:d9:d0:09:0f:78: 12:5f:ab:bf:90:b1:e7:d1:c7:b4:62:74:6b:a7:f0:47:5d:b9: 56:db:19:72:e1:0f:fe:a5:45:10:eb:f7:80:6b:88:cb:31:af: 6f:ba:89:61:5d:46:24:26:ea:01:ef:dd:94:98:3b:5b:d2:d1: a9:0a:da:07:c9:ea:a6:1f:8e:87:76:aa:c7:46:ae:aa:fb:81: 17:5c:36:5c:94:a2:3a:8b:d5:16:31:dc:33:65:fb:bc:b6:be: 46:40:3b:6f:11:f6:22:c1:27:4d:dc:d3:6f:d6:20:16:de:a5: aa:95:7a:ff:4c:a9:e2:86:30:6c:4d:62:79:c3:d2:27:2e:c1: e2:8e:69:1d:f2:a7:34:c6:eb:77:14:dc:54:2e:49:6c:65:ac: dd:59:b8:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhXjyIxnE46phopMGzVLr60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUwNzI5MTkwMDU0WhcNMjUwNzMwMTkwMDU0WjAzMTEwLwYDVQQD EygxYTdmN2FhNzZjNDk3ZDY3OWZlNTEwZTM0MjJjMWE1OTg1ZTJiNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUxMTIrfdqsFOaL+39kjBUHjSn4r eUiShn1Psfpf7FBxAe9nkAlSrIZVTXwkcasFhzmMrdxefTfrbM/RQqe9kcT+bTAn KLLwBDIKY3U4bP15Msvpsbyfu7ByDVj374PqvIBPj7cUB7IR8GezfJm+iWxUT5oB 47QJqbL9FJbYegwuiXIwMPqebmYhBsxPeXqQuLx1xf2OEsKR7qU/4vRnrfuUfvho PQW1yeQY7ZrLGOMhrQAaF+PVKDgtMil9WSITWSdxlSX8VE7a9G1XPiQYb7WHIeu4 c04nJ7WTvxOoGjjmZkmKthR6fSCaWZHtA+st+Q7N+o289g7ekZyETFgpqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp/eqdsSX1nn+UQ40IsGlmF4reXMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxpEC7Pd fKlUflQXe1IaQglik04h+YuXgtwLbpo/B1/ZbBSpPcuWPw2o3bnSBS5mw3BXApy2 vBd+tgmeCkEPCu7qfx2RFS6xlsSssaNC9QJzfhjWy71bCFbQx6IOFz2UB6QOEs2m RtnQCQ94El+rv5Cx59HHtGJ0a6fwR125VtsZcuEP/qVFEOv3gGuIyzGvb7qJYV1G JCbqAe/dlJg7W9LRqQraB8nqph+Oh3aqx0auqvuBF1w2XJSiOovVFjHcM2X7vLa+ RkA7bxH2IsEnTdzTb9YgFt6lqpV6/0yp4oYwbE1iecPSJy7B4o5pHfKnNMbrdxTc VC5JbGWs3Vm4/Q== -----END CERTIFICATE-----Generated at Wed Jul 30 04:15:49 2025 by rpki-client