$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: EBAdgUhMd0q3s/1/XOFwbUjXiYFp9yFo1L5nQWcwUjw= Subject key identifier: 36:63:D6:00:1B:8F:8E:17:56:39:E1:6F:05:D9:A6:7D:EC:F2:B2:38 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019921E7BC4BCB0A86124382912EF8FA904F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0EDE Signing time: Sun 07 Sep 2025 02:00:59 +0000 Manifest this update: Sun 07 Sep 2025 02:00:59 +0000 Manifest next update: Mon 08 Sep 2025 02:00:59 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: /cVnm4Dl9n3CYv4hC8p2lt5ulw4X7MysN2c9ehHvsDA=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: W8-PwKMzVrW65-R2fHKjqVUbX54.roa (hash: C0sW97okII2QoOOpXdKP/WHxFbjbFOar+kEl1869pAo=) 8: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 9: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 10: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 11: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:21:e7:bc:4b:cb:0a:86:12:43:82:91:2e:f8:fa:90:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Sep 7 02:00:59 2025 GMT Not After : Sep 8 02:00:59 2025 GMT Subject: CN=3663d6001b8f8e175639e16f05d9a67decf2b238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:43:f4:d6:cb:c6:5b:92:19:bc:49:57:2a: bd:ea:d5:70:23:b6:be:ed:69:fe:b8:b3:9b:dc:19: eb:a0:89:31:f7:41:41:e3:c4:52:05:a2:2a:4d:ae: 81:96:15:80:ce:eb:31:2c:c1:d9:f3:8e:d3:90:e5: 3b:b1:79:d7:e0:3d:52:10:15:5d:51:39:32:0c:77: dd:20:0c:ec:7a:9a:59:36:73:ea:a7:8c:16:fa:bd: dc:28:dc:02:b4:cb:38:cb:ab:ee:3f:b1:cd:58:4e: ff:d2:4b:93:f0:41:2c:28:76:45:b7:6b:30:4e:2f: 25:87:00:49:58:67:2b:0a:c1:14:52:df:f8:ba:d3: 90:cc:33:33:d2:1e:d6:a2:02:40:26:8a:26:f6:59: 83:08:bb:76:7f:e8:b5:42:9d:df:fe:82:6b:b7:16: 7f:39:c5:38:d8:62:da:a0:ea:26:58:10:dd:f1:cc: a7:ed:74:93:03:fc:58:ae:62:dc:7b:72:0f:b3:e7: 25:a2:8f:4b:9a:8b:f5:ea:41:44:ca:02:ec:20:1a: 9e:78:f7:ba:d4:45:06:5c:0c:3c:2b:c6:cc:57:80: c1:4c:c2:65:b5:aa:74:8d:d9:dd:11:49:37:8c:8b: 07:5f:22:7e:9c:c3:80:dd:9f:54:48:a4:51:12:d6: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:63:D6:00:1B:8F:8E:17:56:39:E1:6F:05:D9:A6:7D:EC:F2:B2:38 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:28:1d:db:6d:18:60:e6:0f:a8:98:2d:5a:a3:dd:ae:e8:25: 99:39:49:f3:dc:eb:6f:d3:1a:3f:0a:19:b5:1b:2e:bf:81:d8: 15:98:09:6c:72:5e:28:9c:99:7a:08:03:68:e1:f2:70:fd:36: 1f:17:96:34:00:ca:98:d5:90:03:bf:97:4c:b4:72:4b:87:22: 9d:8d:1d:08:c7:d8:03:a5:a3:97:2a:06:d6:b4:2e:03:9b:90: c7:04:67:6f:72:a0:f4:bf:e7:de:c5:5a:8f:7c:53:0c:e3:61: 52:51:71:1c:69:02:36:8e:85:8b:c2:8b:16:24:7f:7d:ef:06: 27:82:0e:e2:f2:27:94:65:29:96:00:6c:bd:1f:4a:b5:46:f5: dd:7d:dd:62:9c:91:4a:b0:52:99:03:1f:8c:ae:5b:4e:3f:15: de:ef:5a:8b:59:82:2a:a8:08:e0:1b:ed:32:1d:72:4c:af:55: 36:bb:d9:7d:38:3e:3e:29:dd:14:7d:cf:b1:1c:57:cf:e8:61: 27:a5:27:1e:66:30:32:9e:fc:48:d7:a7:fb:52:f8:22:5c:fc: 9b:4a:22:3c:5c:ed:97:61:85:99:8c:46:19:51:d4:03:76:a1: 8e:fd:38:ca:ec:55:30:d0:51:75:20:b8:00:83:5a:05:d2:2f: c2:95:ec:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkh57xLywqGEkOCkS74+pBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwOTA3MDIwMDU5WhcNMjUwOTA4MDIwMDU5WjAzMTEwLwYDVQQD EygzNjYzZDYwMDFiOGY4ZTE3NTYzOWUxNmYwNWQ5YTY3ZGVjZjJiMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8dD9NbLxluSGbxJVyq96tVwI7a+ 7Wn+uLOb3BnroIkx90FB48RSBaIqTa6BlhWAzusxLMHZ847TkOU7sXnX4D1SEBVd UTkyDHfdIAzseppZNnPqp4wW+r3cKNwCtMs4y6vuP7HNWE7/0kuT8EEsKHZFt2sw Ti8lhwBJWGcrCsEUUt/4utOQzDMz0h7WogJAJoom9lmDCLt2f+i1Qp3f/oJrtxZ/ OcU42GLaoOomWBDd8cyn7XSTA/xYrmLce3IPs+cloo9Lmov16kFEygLsIBqeePe6 1EUGXAw8K8bMV4DBTMJltap0jdndEUk3jIsHXyJ+nMOA3Z9USKRREtYu2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZj1gAbj44XVjnhbwXZpn3s8rI4MB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCgd220Y YOYPqJgtWqPdruglmTlJ89zrb9MaPwoZtRsuv4HYFZgJbHJeKJyZeggDaOHycP02 HxeWNADKmNWQA7+XTLRyS4cinY0dCMfYA6WjlyoG1rQuA5uQxwRnb3Kg9L/n3sVa j3xTDONhUlFxHGkCNo6Fi8KLFiR/fe8GJ4IO4vInlGUplgBsvR9KtUb13X3dYpyR SrBSmQMfjK5bTj8V3u9ai1mCKqgI4BvtMh1yTK9VNrvZfTg+PindFH3PsRxXz+hh J6UnHmYwMp78SNen+1L4Ilz8m0oiPFztl2GFmYxGGVHUA3ahjv04yuxVMNBRdSC4 AINaBdIvwpXsCA== -----END CERTIFICATE-----Generated at Sun Sep 7 12:26:57 2025 by rpki-client