$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: CpzpOCL4dvvL5uiWGtDrS3VUTxRChFV0/APkD55LDLw= Subject key identifier: C8:80:B9:80:D5:30:9F:E3:BA:24:6E:5A:33:91:96:8C:E8:52:DA:62 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019853B1D898F59DD1A2140DA5C84DE7C03E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 161E Signing time: Tue 29 Jul 2025 01:00:20 +0000 Manifest this update: Tue 29 Jul 2025 01:00:20 +0000 Manifest next update: Wed 30 Jul 2025 01:00:20 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: Vk1JBxHAong8L9HAY4ejqtfA48/5Yl8ZYmo5NeyBM5M=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:53:b1:d8:98:f5:9d:d1:a2:14:0d:a5:c8:4d:e7:c0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jul 29 01:00:20 2025 GMT Not After : Jul 30 01:00:20 2025 GMT Subject: CN=c880b980d5309fe3ba246e5a3391968ce852da62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:20:06:22:1d:80:1c:84:8a:82:5a:98:a5: 30:88:f1:c6:5c:4f:bb:09:7e:94:d9:75:d6:f9:53: fc:61:be:52:ca:e5:70:0f:2e:6a:6c:55:51:6a:d2: d2:0a:92:fc:e4:65:69:14:56:83:1b:93:c5:3c:60: b5:81:7d:1a:57:bd:6f:84:64:e0:f0:27:0d:4e:17: 66:27:86:e5:41:eb:c3:81:1c:61:07:d4:5c:03:06: 82:fa:9d:eb:af:c4:3f:7f:2b:5c:f8:58:47:1c:b9: d6:c5:1c:42:bb:f8:16:71:48:63:7b:ee:73:4c:68: 3f:d3:92:33:66:a3:3b:9e:41:2b:5f:02:18:00:e0: 8f:38:b7:8f:10:3f:c4:06:a7:93:20:66:80:a4:54: 39:9e:60:61:0a:53:17:79:6e:a7:29:b7:24:bf:49: 72:c4:00:7d:de:a7:ed:54:2f:7a:45:15:fa:56:d1: 77:74:55:cd:7f:99:a7:73:e0:7d:f5:06:90:fc:dc: 37:ad:ee:43:4e:4e:ce:cc:3a:b4:ba:dc:48:91:81: e7:a1:11:f0:6a:a4:3b:fb:60:57:a3:ea:e7:da:47: e8:04:b8:8a:ea:a7:5b:b2:51:8a:94:41:57:50:ee: 7e:d3:09:c2:7c:e8:1e:a4:77:33:bc:6a:2d:ca:bd: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:80:B9:80:D5:30:9F:E3:BA:24:6E:5A:33:91:96:8C:E8:52:DA:62 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:93:93:78:0f:35:87:70:3d:17:dc:a7:fe:b7:8a:cf:e4:74: e0:05:d2:59:f5:ef:8e:f1:c9:29:27:49:78:f9:e2:d4:6e:52: 7f:9c:62:2a:c4:51:b8:78:93:c1:6a:fd:a3:05:6b:ae:26:b4: ae:18:77:cd:41:87:5e:a1:75:b3:0f:b8:ea:cb:37:91:86:a8: df:0a:7a:df:85:30:bf:76:b8:0b:cd:18:27:ec:5a:1a:49:00: bd:87:82:b9:5b:c7:5d:3f:f6:d8:0e:b9:e3:92:e0:9b:7a:b5: 90:c4:e7:4b:5e:8f:e1:be:aa:62:ac:87:70:c0:bb:77:72:84: 9d:a0:30:23:8f:11:5a:8a:ad:6d:32:fb:bb:2e:f2:f7:91:58: b5:46:38:97:11:92:e9:f3:85:2e:16:fb:f0:11:4f:22:2d:44: 54:6a:75:57:03:3a:18:83:2f:39:57:49:f3:a8:af:53:80:c4: ef:57:6d:6d:a2:24:9c:a8:7b:84:51:bc:2f:8d:eb:60:a6:f3: 9c:2d:d8:78:bc:b7:64:35:52:9e:b0:dc:e5:25:8b:cc:c3:28: 7c:54:33:16:d6:ff:25:87:2b:cb:93:1e:00:7d:60:2c:68:bd: 8a:b0:e5:88:e4:dd:5b:4f:da:1b:fa:a8:d6:64:e9:8c:61:ad: c1:3c:3c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhTsdiY9Z3RohQNpchN58A+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNzI5MDEwMDIwWhcNMjUwNzMwMDEwMDIwWjAzMTEwLwYDVQQD EyhjODgwYjk4MGQ1MzA5ZmUzYmEyNDZlNWEzMzkxOTY4Y2U4NTJkYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcIgBiIdgByEioJamKUwiPHGXE+7 CX6U2XXW+VP8Yb5SyuVwDy5qbFVRatLSCpL85GVpFFaDG5PFPGC1gX0aV71vhGTg 8CcNThdmJ4blQevDgRxhB9RcAwaC+p3rr8Q/fytc+FhHHLnWxRxCu/gWcUhje+5z TGg/05IzZqM7nkErXwIYAOCPOLePED/EBqeTIGaApFQ5nmBhClMXeW6nKbckv0ly xAB93qftVC96RRX6VtF3dFXNf5mnc+B99QaQ/Nw3re5DTk7OzDq0utxIkYHnoRHw aqQ7+2BXo+rn2kfoBLiK6qdbslGKlEFXUO5+0wnCfOgepHczvGotyr3STwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiAuYDVMJ/juiRuWjORlozoUtpiMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpOTeA81 h3A9F9yn/reKz+R04AXSWfXvjvHJKSdJePni1G5Sf5xiKsRRuHiTwWr9owVrria0 rhh3zUGHXqF1sw+46ss3kYao3wp634Uwv3a4C80YJ+xaGkkAvYeCuVvHXT/22A65 45Lgm3q1kMTnS16P4b6qYqyHcMC7d3KEnaAwI48RWoqtbTL7uy7y95FYtUY4lxGS 6fOFLhb78BFPIi1EVGp1VwM6GIMvOVdJ86ivU4DE71dtbaIknKh7hFG8L43rYKbz nC3YeLy3ZDVSnrDc5SWLzMMofFQzFtb/JYcry5MeAH1gLGi9irDliOTdW0/aG/qo 1mTpjGGtwTw83g== -----END CERTIFICATE-----Generated at Tue Jul 29 03:30:51 2025 by rpki-client