$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: MmbFNzzsNCwTtd1J5ITfxI81hVbzjVIoGiwOuXnWODU= Subject key identifier: D5:3E:FD:F3:E6:F6:1C:5A:06:36:43:9F:C8:A5:1A:5C:E9:97:68:F2 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 0198357106B2452CFFC7991420A6B2B1C0C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 0487 Signing time: Wed 23 Jul 2025 04:00:56 +0000 Manifest this update: Wed 23 Jul 2025 04:00:56 +0000 Manifest next update: Thu 24 Jul 2025 04:00:56 +0000 Files and hashes: 1: 02vGpL6-3nXJHwSBvN9lXUgbi74.roa (hash: ksLKWo621jduGsOvhJ7s2q3Q8Y3l+tWFD99a19w6yRA=) 2: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (hash: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=) 3: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 4: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 5: 2OgvSkU6B3coTq_XrBtLh7r9aYI.roa (hash: 9oJ/pbxCoLxAu6aotf+D4FzsANtrhZV2j6G9rrhrP7Q=) 6: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: WThf99PGRSfPhnYL4BRh7S2ZhzahstsC4SCBizDsbpc=) 7: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 8: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 9: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 10: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:71:06:b2:45:2c:ff:c7:99:14:20:a6:b2:b1:c0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jul 23 04:00:56 2025 GMT Not After : Jul 24 04:00:56 2025 GMT Subject: CN=d53efdf3e6f61c5a0636439fc8a51a5ce99768f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:9d:65:06:c0:f2:c7:50:33:e9:13:6c:d7: 4f:c0:70:34:bc:49:ac:3b:30:37:5e:80:ae:1d:08: ac:0b:a0:f0:9e:f2:41:09:18:8f:8e:e1:24:d5:4d: 87:89:cd:83:b9:8c:cd:29:52:88:a7:ff:08:dc:a4: 29:46:87:66:4c:82:f4:56:74:82:58:03:61:69:09: 37:c1:55:5a:ed:b8:8d:7b:29:9f:2b:40:a6:6a:47: e8:93:d3:11:b0:33:f8:46:bc:2f:b9:a4:fb:3b:18: 71:02:94:e6:09:cd:24:8e:da:ee:8a:6b:8f:f5:77: 8e:f0:85:bd:9f:bb:ba:7e:e1:e3:42:0b:9f:57:1b: 4d:bd:0f:7b:10:b4:07:b7:33:13:ee:3e:87:41:98: 17:ee:5a:a1:8b:75:a9:e9:8d:49:f6:95:88:e8:50: 5e:00:db:12:87:d5:fb:2e:7c:98:87:b3:c5:9d:e3: c2:98:e8:3e:2d:db:4c:bc:7b:ec:91:49:c1:a6:48: 18:9d:fe:7d:49:e3:66:ea:5d:ba:cf:a3:4f:33:25: 18:14:c8:37:94:16:2b:ca:75:cf:96:74:a5:28:5e: 35:3a:9a:9b:90:72:ce:dc:f7:6d:68:14:9f:48:11: 31:b8:d9:f2:4c:50:25:5b:45:16:75:a7:c1:85:4c: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:FD:F3:E6:F6:1C:5A:06:36:43:9F:C8:A5:1A:5C:E9:97:68:F2 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d0:fe:4a:3c:23:e5:fc:fd:a3:3a:2a:5e:24:9f:6e:f6:ec: be:ac:f7:4a:79:86:8b:8b:a7:f3:89:e1:fa:30:10:59:0c:32: 4b:27:44:fe:2f:be:0c:be:b2:c1:1c:f6:a1:c2:09:13:76:6a: 48:d8:97:12:c0:5c:60:e8:14:e0:ed:5c:14:fc:49:b4:73:03: fa:4d:65:47:20:af:5f:4a:cf:5e:89:8e:ce:b4:fc:35:20:64: 51:c9:ac:57:9b:58:bd:22:fd:0b:7b:da:5d:29:b6:b2:b3:e6: 9a:04:d0:78:30:59:15:78:d0:e1:6b:81:e7:90:4c:d6:fa:a8: a6:f7:61:3a:49:38:4c:ec:73:c5:bc:0a:24:40:82:bb:84:db: 7d:72:0c:55:21:ec:9b:a0:4a:d8:e7:0f:2c:7c:24:df:3a:d2: 80:67:88:ec:c8:4d:18:72:9e:6b:6d:88:28:25:2a:69:05:e7: 2a:2c:91:c1:d3:90:92:b2:91:1a:d1:be:fe:6d:d6:48:ea:4d: 32:71:3c:ef:64:73:4a:cc:26:45:25:2a:88:e7:2d:52:22:30: d5:51:4b:0b:c0:d8:1b:4c:3e:f9:4a:14:43:38:7a:94:49:b3: 6b:c5:49:60:76:a7:b8:a3:c0:fa:e4:f0:26:71:53:9c:33:61: 76:bd:7c:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cQayRSz/x5kUIKayscDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUwNzIzMDQwMDU2WhcNMjUwNzI0MDQwMDU2WjAzMTEwLwYDVQQD EyhkNTNlZmRmM2U2ZjYxYzVhMDYzNjQzOWZjOGE1MWE1Y2U5OTc2OGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzudZQbA8sdQM+kTbNdPwHA0vEms OzA3XoCuHQisC6DwnvJBCRiPjuEk1U2Hic2DuYzNKVKIp/8I3KQpRodmTIL0VnSC WANhaQk3wVVa7biNeymfK0Cmakfok9MRsDP4RrwvuaT7OxhxApTmCc0kjtruimuP 9XeO8IW9n7u6fuHjQgufVxtNvQ97ELQHtzMT7j6HQZgX7lqhi3Wp6Y1J9pWI6FBe ANsSh9X7LnyYh7PFnePCmOg+LdtMvHvskUnBpkgYnf59SeNm6l26z6NPMyUYFMg3 lBYrynXPlnSlKF41OpqbkHLO3PdtaBSfSBExuNnyTFAlW0UWdafBhUxCjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNU+/fPm9hxaBjZDn8ilGlzpl2jyMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASND+Sjwj 5fz9ozoqXiSfbvbsvqz3SnmGi4un84nh+jAQWQwySydE/i++DL6ywRz2ocIJE3Zq SNiXEsBcYOgU4O1cFPxJtHMD+k1lRyCvX0rPXomOzrT8NSBkUcmsV5tYvSL9C3va XSm2srPmmgTQeDBZFXjQ4WuB55BM1vqopvdhOkk4TOxzxbwKJECCu4TbfXIMVSHs m6BK2OcPLHwk3zrSgGeI7MhNGHKea22IKCUqaQXnKiyRwdOQkrKRGtG+/m3WSOpN MnE872RzSswmRSUqiOctUiIw1VFLC8DYG0w++UoUQzh6lEmza8VJYHanuKPA+uTw JnFTnDNhdr18Ig== -----END CERTIFICATE-----Generated at Wed Jul 23 06:16:42 2025 by rpki-client