$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: ZKLPtXPKBGfysZxQmCLpyRqKWCyMXYzG9L0KhSVfJIM= Subject key identifier: CB:75:BA:AE:97:EB:9D:C1:5C:82:AC:F0:B9:17:AF:47:E9:E5:E4:F7 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019A04ED2B0E63B3B109A53A39C649B47D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 0FDB Signing time: Tue 21 Oct 2025 04:00:43 +0000 Manifest this update: Tue 21 Oct 2025 04:00:43 +0000 Manifest next update: Wed 22 Oct 2025 04:00:43 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa (hash: F3Gen1bFVipiyLDRBWS2zGC6+19TslOL2dJD3LXtkbA=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: F9QtixmfO01u8EDac+cLYK4mENnZdhOk5Y0c15GQLh4=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:ed:2b:0e:63:b3:b1:09:a5:3a:39:c6:49:b4:7d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Oct 21 04:00:43 2025 GMT Not After : Oct 22 04:00:43 2025 GMT Subject: CN=cb75baae97eb9dc15c82acf0b917af47e9e5e4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:aa:06:1c:38:39:d6:99:ac:c4:cc:9a:82: 96:1c:e8:d4:69:33:1f:55:ff:95:53:7b:19:b6:99: b5:b7:a5:e5:b0:d6:8c:2c:59:b6:f3:01:f4:d7:65: 30:a3:49:4b:2a:2a:4c:b3:1d:47:96:5b:2c:ca:55: bd:ab:e0:fb:ed:35:6a:e3:d0:46:fe:28:33:a2:ae: fc:8e:40:4b:3e:44:7d:09:ce:d5:16:a4:b3:ac:2e: 43:e0:99:b8:0f:96:ff:26:ec:e0:63:30:60:28:8c: 18:c5:81:60:f1:bf:95:df:19:40:e8:88:c5:fa:6d: be:65:db:f6:ea:5d:a6:99:c5:c3:ba:40:f9:1e:79: 7e:cb:65:7b:d5:6c:1a:1a:01:0a:68:cb:2a:a9:51: 20:a8:84:77:6b:bb:89:ff:3a:22:78:1b:8f:84:80: 59:70:01:84:f1:2b:97:cc:65:89:0b:57:56:1a:e4: b5:9b:6b:fa:89:94:81:69:ab:86:35:78:b8:c0:62: 9b:85:b7:2b:62:3d:48:08:83:42:ba:36:29:2a:58: 06:e4:6c:ad:8f:b1:60:22:e7:f6:16:e8:8b:c4:04: f2:92:a8:7a:b1:5f:79:20:cf:ac:24:20:2b:72:c7: ca:e9:3a:7b:82:74:b1:2f:00:09:c8:8b:f0:9c:c0: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:75:BA:AE:97:EB:9D:C1:5C:82:AC:F0:B9:17:AF:47:E9:E5:E4:F7 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6a:b9:54:76:bf:60:45:60:23:b3:1d:a0:d3:d5:0d:e6:97: bb:dd:2e:ad:f0:4f:3e:fb:97:cd:f0:be:c8:36:c1:30:71:97: 14:a1:41:1c:d2:a5:fa:18:81:6f:89:5e:a5:95:f5:38:81:7f: 33:f8:8d:29:b0:43:c6:58:f4:00:a7:94:aa:e2:e0:54:65:aa: 5d:dd:be:fe:f5:f6:bd:15:e2:f2:58:cf:ff:43:23:f9:4c:a4: 29:9d:3b:43:b9:ec:af:47:2d:b1:03:8a:fb:eb:ea:63:70:9d: 6c:b4:bb:03:23:f8:d2:86:25:db:20:17:1a:f9:2c:d9:e6:a1: 5f:bd:4e:d8:3d:ea:f6:93:c8:5a:7e:85:71:bc:58:b3:34:f8: 13:d2:29:9e:c5:ce:fb:9e:8d:5e:85:b5:1c:02:ab:ac:91:be: 0c:ed:0b:30:78:af:4c:a7:b6:a1:35:27:d4:f2:50:ac:55:eb: 92:19:eb:44:5f:d1:06:e7:93:f0:e3:71:56:dc:52:c0:62:7c: 79:c8:dd:c5:20:d7:38:a4:ee:b8:ab:ce:b7:61:0d:af:db:48: ea:5b:b2:00:63:8e:84:22:49:b8:65:eb:58:89:23:2b:8a:2a: b8:a3:98:18:2e:e4:05:c9:a1:1c:34:c2:db:fe:c8:39:97:b2: ef:3a:89:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoE7SsOY7OxCaU6OcZJtH0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUxMDIxMDQwMDQzWhcNMjUxMDIyMDQwMDQzWjAzMTEwLwYDVQQD EyhjYjc1YmFhZTk3ZWI5ZGMxNWM4MmFjZjBiOTE3YWY0N2U5ZTVlNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkuqBhw4OdaZrMTMmoKWHOjUaTMf Vf+VU3sZtpm1t6XlsNaMLFm28wH012Uwo0lLKipMsx1HllssylW9q+D77TVq49BG /igzoq78jkBLPkR9Cc7VFqSzrC5D4Jm4D5b/JuzgYzBgKIwYxYFg8b+V3xlA6IjF +m2+Zdv26l2mmcXDukD5Hnl+y2V71WwaGgEKaMsqqVEgqIR3a7uJ/zoieBuPhIBZ cAGE8SuXzGWJC1dWGuS1m2v6iZSBaauGNXi4wGKbhbcrYj1ICINCujYpKlgG5Gyt j7FgIuf2FuiLxATykqh6sV95IM+sJCArcsfK6Tp7gnSxLwAJyIvwnMCWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt1uq6X653BXIKs8LkXr0fp5eT3MB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmq5VHa/ YEVgI7MdoNPVDeaXu90urfBPPvuXzfC+yDbBMHGXFKFBHNKl+hiBb4lepZX1OIF/ M/iNKbBDxlj0AKeUquLgVGWqXd2+/vX2vRXi8ljP/0Mj+UykKZ07Q7nsr0ctsQOK ++vqY3CdbLS7AyP40oYl2yAXGvks2eahX71O2D3q9pPIWn6FcbxYszT4E9IpnsXO +56NXoW1HAKrrJG+DO0LMHivTKe2oTUn1PJQrFXrkhnrRF/RBueT8ONxVtxSwGJ8 ecjdxSDXOKTuuKvOt2ENr9tI6luyAGOOhCJJuGXrWIkjK4oquKOYGC7kBcmhHDTC 2/7IOZey7zqJ8A== -----END CERTIFICATE-----Generated at Tue Oct 21 07:52:11 2025 by rpki-client