$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: Wu9DW1dr9Xvg2aXHoi6MKlCb3OOU4wMfxI2Y4DDsxWA= Subject key identifier: 0B:13:26:4A:10:03:C6:58:DD:D8:FB:55:85:F0:4A:FA:8A:B7:F2:D4 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 0197364F511DEFCC07FD5F74EBF547C741A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 0E66 Signing time: Tue 03 Jun 2025 15:00:57 +0000 Manifest this update: Tue 03 Jun 2025 15:00:57 +0000 Manifest next update: Wed 04 Jun 2025 15:00:57 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: dJvRmEeMvCvUNhH5dFcV70/+9LKxgrz6hzxTYDeXIPg=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:36:4f:51:1d:ef:cc:07:fd:5f:74:eb:f5:47:c7:41:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jun 3 15:00:57 2025 GMT Not After : Jun 4 15:00:57 2025 GMT Subject: CN=0b13264a1003c658ddd8fb5585f04afa8ab7f2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:b1:84:6e:b2:7b:2c:79:be:72:63:38:20: a0:6c:41:29:ae:13:37:fb:47:a9:fe:c7:cc:74:51: 54:51:c4:7f:bb:86:94:6e:79:77:ec:fa:93:ff:49: 11:11:ee:e4:9c:cb:56:c8:4f:cb:18:ad:cf:c6:c8: 0c:01:d2:f7:4b:df:41:e8:5f:98:cc:a9:ac:e4:0a: ba:ca:a8:63:29:f1:aa:84:7f:a6:ea:6c:11:8f:b1: dc:23:3d:81:2c:31:7c:95:5a:95:ca:34:5c:ce:dc: fa:36:0b:ad:9f:7a:e3:c0:91:25:30:4f:1f:e2:6c: c5:df:29:5c:57:41:ea:8a:c0:96:8d:bc:c5:f5:20: a7:e2:79:6e:89:f9:37:9e:2a:5e:6d:8e:8a:51:63: b5:b5:6d:b0:36:37:be:a1:ca:93:f9:31:88:ab:52: d2:65:5e:db:bb:84:aa:6a:74:b9:14:a0:4f:12:6d: f0:0a:37:d9:35:df:d8:69:d2:4c:9d:d8:62:39:18: 33:ed:ee:99:90:ed:c9:a8:5e:13:59:83:30:f9:c1: cb:ff:10:ac:f9:36:ce:40:b5:13:b8:6d:a7:8a:db: c9:77:ec:c7:d2:a5:57:6a:cf:92:19:7a:31:35:db: 79:b4:b0:67:bf:b3:e8:ee:c7:36:a0:71:ed:74:29: 7e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:26:4A:10:03:C6:58:DD:D8:FB:55:85:F0:4A:FA:8A:B7:F2:D4 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:55:0b:64:49:fc:e4:b1:0c:81:a2:bb:60:32:78:b4:fc:23: bd:77:69:01:e7:eb:fb:e9:d1:cc:58:d0:bb:99:1f:8a:03:3a: 52:75:47:a0:4d:c0:ee:fa:c6:7b:ad:d7:ab:67:a8:8d:21:8d: 8b:fb:19:db:54:4f:a2:3f:f1:1f:b0:c4:7b:f7:3d:c1:a4:66: c2:e2:d0:ae:fa:62:eb:32:b5:c6:f3:c8:c6:ce:b4:ec:fc:6d: 5a:f7:44:36:f1:c4:14:36:7c:50:f9:0a:c5:33:b8:25:31:b3: fc:6c:38:f9:90:68:2c:30:57:43:9b:15:22:f5:08:7b:d3:46: 08:fd:ed:fe:6e:d5:53:08:6c:90:51:32:3d:65:54:25:59:3e: 0c:13:43:60:b5:f5:b5:5e:71:9e:da:59:da:0e:ed:23:49:90: df:a3:4f:b2:68:c4:90:89:14:ae:e6:63:c4:2b:19:f7:bd:26: c1:90:f0:eb:99:f8:90:d8:5e:54:8f:41:79:cc:f6:84:57:fc: a8:49:18:1e:6c:f3:4b:12:95:e1:9c:cd:53:38:f9:eb:10:3f: 41:d0:c7:d5:8b:49:84:a8:e6:1b:a8:30:77:29:b5:cc:af:d0: 29:fd:bd:db:ff:31:82:11:d2:cc:fc:c2:ca:25:43:41:79:72: f1:2e:3f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc2T1Ed78wH/V906/VHx0GlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUwNjAzMTUwMDU3WhcNMjUwNjA0MTUwMDU3WjAzMTEwLwYDVQQD EygwYjEzMjY0YTEwMDNjNjU4ZGRkOGZiNTU4NWYwNGFmYThhYjdmMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouuxhG6yeyx5vnJjOCCgbEEprhM3 +0ep/sfMdFFUUcR/u4aUbnl37PqT/0kREe7knMtWyE/LGK3PxsgMAdL3S99B6F+Y zKms5Aq6yqhjKfGqhH+m6mwRj7HcIz2BLDF8lVqVyjRcztz6Ngutn3rjwJElME8f 4mzF3ylcV0HqisCWjbzF9SCn4nluifk3nipebY6KUWO1tW2wNje+ocqT+TGIq1LS ZV7bu4SqanS5FKBPEm3wCjfZNd/YadJMndhiORgz7e6ZkO3JqF4TWYMw+cHL/xCs +TbOQLUTuG2nitvJd+zH0qVXas+SGXoxNdt5tLBnv7Po7sc2oHHtdCl+tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsTJkoQA8ZY3dj7VYXwSvqKt/LUMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1ULZEn8 5LEMgaK7YDJ4tPwjvXdpAefr++nRzFjQu5kfigM6UnVHoE3A7vrGe63Xq2eojSGN i/sZ21RPoj/xH7DEe/c9waRmwuLQrvpi6zK1xvPIxs607PxtWvdENvHEFDZ8UPkK xTO4JTGz/Gw4+ZBoLDBXQ5sVIvUIe9NGCP3t/m7VUwhskFEyPWVUJVk+DBNDYLX1 tV5xntpZ2g7tI0mQ36NPsmjEkIkUruZjxCsZ970mwZDw65n4kNheVI9Becz2hFf8 qEkYHmzzSxKV4ZzNUzj56xA/QdDH1YtJhKjmG6gwdym1zK/QKf292/8xghHSzPzC yiVDQXly8S4/fA== -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:21 2025 by rpki-client