$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: U1thTm9JfHsrAsP/lL6l+qMNVRE3s1MNxL2rxUqncKg= Subject key identifier: 2D:A9:E8:8A:78:46:F3:81:2B:F0:CB:B9:9D:A2:D2:F0:8F:ED:3B:C7 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019A1B0745572541EEAF87180497E5EFA06F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0F5F Signing time: Sat 25 Oct 2025 11:00:52 +0000 Manifest this update: Sat 25 Oct 2025 11:00:52 +0000 Manifest next update: Sun 26 Oct 2025 11:00:52 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: kvtHXEDpElStD/pJYoieXFvze3FuXGxAPR6MoAfz2wE=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: W8-PwKMzVrW65-R2fHKjqVUbX54.roa (hash: C0sW97okII2QoOOpXdKP/WHxFbjbFOar+kEl1869pAo=) 8: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 9: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 10: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 11: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1b:07:45:57:25:41:ee:af:87:18:04:97:e5:ef:a0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Oct 25 11:00:52 2025 GMT Not After : Oct 26 11:00:52 2025 GMT Subject: CN=2da9e88a7846f3812bf0cbb99da2d2f08fed3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:c0:8a:03:83:fc:e8:f2:95:7a:10:da:40: 65:b0:3d:77:d2:5a:59:cb:3e:16:8c:b2:db:49:c5: 1b:36:c4:4b:05:25:8d:be:c6:c0:71:a6:97:75:bf: 56:e9:3b:a7:d7:23:f7:20:03:d7:36:8c:d4:60:49: ea:7e:b6:11:05:0f:6a:3c:ed:18:62:bd:e2:2b:b7: 2b:77:ac:10:e8:fb:5c:d7:c0:cc:ae:c9:04:aa:36: 5b:11:18:a9:c6:71:90:c4:93:22:4a:3c:6a:a5:4c: 96:3a:e4:65:e0:97:e9:3f:2c:e5:ea:45:97:eb:dc: 77:e9:74:29:4c:0b:a9:e2:12:8a:f4:8c:88:0d:4f: a1:ec:f4:b2:8e:22:06:72:d3:14:72:6c:33:07:fb: b0:cc:d9:07:48:76:47:27:fd:0d:01:47:60:8b:68: 14:a7:03:e9:04:16:76:a9:75:fc:ac:75:7b:7a:52: 08:cf:97:27:01:67:66:5c:31:0a:8d:f4:0a:24:5b: e9:91:73:35:6b:a4:b3:38:7d:90:f6:6e:f4:64:19: 0a:41:ff:8b:24:f3:85:09:74:3d:9a:97:4a:ee:34: 6b:f9:03:44:bf:11:4b:df:80:d7:a9:00:51:89:23: 15:7b:ed:96:e6:16:49:60:78:24:56:d1:5b:a2:61: 44:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:E8:8A:78:46:F3:81:2B:F0:CB:B9:9D:A2:D2:F0:8F:ED:3B:C7 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0a:c2:9e:c2:f8:d2:e2:7b:81:fa:fe:b8:6b:96:a4:91:9b: 7e:cd:42:9e:5d:e9:bd:c4:82:ce:d6:8d:d9:8b:26:44:ee:b1: 9d:40:92:ec:d6:fc:e5:e7:98:fd:4a:5c:07:ff:7c:45:21:09: 6f:58:9c:84:27:2a:5d:40:62:71:ce:82:58:fc:a4:27:32:5a: 66:69:a6:4f:4d:36:a6:04:cd:08:cc:7d:ec:6e:fe:74:8c:54: 32:4b:de:33:e1:5b:77:b9:93:c7:66:bc:64:36:74:37:bf:41: 5e:ec:a7:03:c4:7d:2f:79:00:df:20:16:4a:31:2a:4c:d0:92: fe:f8:be:96:29:8e:66:68:b6:05:ad:1a:d9:2e:82:e4:76:d0: 17:15:26:b0:44:dc:92:06:31:bf:29:a5:82:bf:f2:ca:e2:57: e0:fd:dd:b1:90:e7:4c:35:ac:bc:7b:31:2a:38:e5:d8:2c:35: 00:30:9c:00:81:37:01:ed:29:5a:05:05:e7:6d:1c:54:da:b8: 4f:b4:68:94:7c:cc:da:0b:43:ea:6b:39:fe:d6:94:b5:56:f2: 68:f3:b0:7a:88:29:00:c7:a5:3d:33:d5:8a:c6:50:4e:4f:9e: 96:26:f0:33:73:e0:1f:1d:ae:b2:e4:bf:b4:43:a7:6b:42:74: 59:95:4b:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZobB0VXJUHur4cYBJfl76BvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUxMDI1MTEwMDUyWhcNMjUxMDI2MTEwMDUyWjAzMTEwLwYDVQQD EygyZGE5ZTg4YTc4NDZmMzgxMmJmMGNiYjk5ZGEyZDJmMDhmZWQzYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr7AigOD/OjylXoQ2kBlsD130lpZ yz4WjLLbScUbNsRLBSWNvsbAcaaXdb9W6Tun1yP3IAPXNozUYEnqfrYRBQ9qPO0Y Yr3iK7crd6wQ6Ptc18DMrskEqjZbERipxnGQxJMiSjxqpUyWOuRl4JfpPyzl6kWX 69x36XQpTAup4hKK9IyIDU+h7PSyjiIGctMUcmwzB/uwzNkHSHZHJ/0NAUdgi2gU pwPpBBZ2qXX8rHV7elIIz5cnAWdmXDEKjfQKJFvpkXM1a6SzOH2Q9m70ZBkKQf+L JPOFCXQ9mpdK7jRr+QNEvxFL34DXqQBRiSMVe+2W5hZJYHgkVtFbomFEIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2p6Ip4RvOBK/DLuZ2i0vCP7TvHMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXArCnsL4 0uJ7gfr+uGuWpJGbfs1Cnl3pvcSCztaN2YsmRO6xnUCS7Nb85eeY/UpcB/98RSEJ b1ichCcqXUBicc6CWPykJzJaZmmmT002pgTNCMx97G7+dIxUMkveM+Fbd7mTx2a8 ZDZ0N79BXuynA8R9L3kA3yAWSjEqTNCS/vi+limOZmi2Ba0a2S6C5HbQFxUmsETc kgYxvymlgr/yyuJX4P3dsZDnTDWsvHsxKjjl2Cw1ADCcAIE3Ae0pWgUF520cVNq4 T7RolHzM2gtD6ms5/taUtVbyaPOweogpAMelPTPVisZQTk+elibwM3PgHx2usuS/ tEOna0J0WZVLbQ== -----END CERTIFICATE-----Generated at Sat Oct 25 18:30:48 2025 by rpki-client