$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: EIK59acv521JJ4VJs/6C2/3zl20fwCiYf93cjrEIE/0= Subject key identifier: D2:20:40:A3:FD:0F:83:27:46:36:03:E8:24:B0:45:CA:EA:07:39:50 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0199586834C76C9EA1C6D0465ECB4E1C8F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0CFA Signing time: Wed 17 Sep 2025 16:00:48 +0000 Manifest this update: Wed 17 Sep 2025 16:00:48 +0000 Manifest next update: Thu 18 Sep 2025 16:00:48 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: qhcbjZjzDWfd9nkmkXNP/DuYDmKhu3v+CJ6sPs/Nyfo=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: gJaJMZFu2Xun5us_hvLQ2sX0jTI.roa (hash: z619KX2EhgVMmsrswd0EgoK+J2Yavf87i9QdahrdS84=) 18: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 19: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 20: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 21: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 15:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:58:68:34:c7:6c:9e:a1:c6:d0:46:5e:cb:4e:1c:8f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Sep 17 16:00:48 2025 GMT Not After : Sep 18 16:00:48 2025 GMT Subject: CN=d22040a3fd0f8327463603e824b045caea073950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:a3:09:df:00:09:d0:79:87:7b:e1:31:bc: 0b:54:e4:0b:39:b3:d6:bf:12:af:f1:d0:d6:78:62: c1:1e:a1:83:17:b0:a5:99:d3:aa:16:93:57:8b:57: cc:61:71:47:e7:c1:b9:ec:7a:2f:10:cf:b2:91:24: 50:d0:7f:7a:5b:2a:f4:17:07:d0:db:64:a0:e0:4d: 86:17:77:8b:9f:45:ed:6d:74:02:d7:f6:ed:0b:36: 9b:8b:d0:f9:c6:78:27:bb:f8:f6:cf:39:c1:39:62: 6b:af:ca:f4:d5:4d:37:01:86:5c:c0:ea:45:96:36: 91:63:53:f1:d0:7b:f2:9e:e9:99:a6:79:c6:f6:2e: a4:d7:df:02:33:26:b7:e8:e3:bf:95:1e:c1:11:6e: 5c:fd:39:23:2d:8e:21:0c:7e:cd:9c:c2:92:ec:c3: 53:21:9b:eb:bc:3c:5e:12:9a:9e:8c:6d:0a:fb:91: 00:a5:a2:34:29:d4:b3:d9:fa:50:c7:b6:d8:e4:1f: 5c:29:11:f1:43:5e:f3:4f:24:f0:b8:bf:0b:f5:69: 74:10:d7:ba:28:91:29:c6:89:8c:86:6d:f9:b1:30: 0f:19:d2:2d:5e:2c:93:f5:6f:4b:f9:a9:10:87:36: 74:25:60:69:d9:0c:bf:ab:b8:60:79:a9:82:ab:8a: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:20:40:A3:FD:0F:83:27:46:36:03:E8:24:B0:45:CA:EA:07:39:50 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:03:e8:2c:d4:6e:5e:a4:5b:48:e0:67:95:5a:51:17:bf:28: 96:ed:50:eb:b2:01:e6:c6:07:44:3f:70:07:6d:d1:6d:11:46: e8:6a:fe:1a:a6:e9:06:29:37:a1:9f:d9:ea:b8:20:e7:29:c4: 69:4d:be:de:9a:47:7d:a4:8e:8a:a1:85:8b:24:5e:16:4b:ff: a3:67:34:a8:df:13:9a:d3:c8:c9:4e:e5:8e:5f:ed:a2:96:5b: b0:4b:8e:44:c9:89:e1:c6:63:ac:d2:e9:57:f8:3d:d7:d9:61: e1:8e:72:2f:72:9d:20:24:90:b8:e7:fa:0d:dc:4f:78:4c:88: f4:24:74:35:ae:10:e0:79:a4:22:1b:e3:a3:67:d7:b5:fe:13: a0:e0:a0:f5:d8:75:bb:2d:69:e4:3f:03:cb:42:47:06:a1:34: b6:74:bd:23:2f:94:b5:2e:b1:08:ed:af:dc:b8:60:bc:c9:bc: 4b:b5:6c:82:5f:85:e5:ad:18:c7:83:43:73:ae:af:e3:36:50: 88:40:cd:e2:46:36:d3:7b:4a:dc:07:b3:25:bb:e0:50:bf:4b: e9:95:0b:25:39:bd:2f:c2:df:ca:83:c8:7a:65:41:b8:c6:ad: 10:d6:b0:0a:3d:13:19:79:01:17:02:cf:4e:ec:d6:81:84:04: b4:60:33:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlYaDTHbJ6hxtBGXstOHI9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwOTE3MTYwMDQ4WhcNMjUwOTE4MTYwMDQ4WjAzMTEwLwYDVQQD EyhkMjIwNDBhM2ZkMGY4MzI3NDYzNjAzZTgyNGIwNDVjYWVhMDczOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12KjCd8ACdB5h3vhMbwLVOQLObPW vxKv8dDWeGLBHqGDF7ClmdOqFpNXi1fMYXFH58G57HovEM+ykSRQ0H96Wyr0FwfQ 22Sg4E2GF3eLn0XtbXQC1/btCzabi9D5xngnu/j2zznBOWJrr8r01U03AYZcwOpF ljaRY1Px0HvynumZpnnG9i6k198CMya36OO/lR7BEW5c/TkjLY4hDH7NnMKS7MNT IZvrvDxeEpqejG0K+5EApaI0KdSz2fpQx7bY5B9cKRHxQ17zTyTwuL8L9Wl0ENe6 KJEpxomMhm35sTAPGdItXiyT9W9L+akQhzZ0JWBp2Qy/q7hgeamCq4qF5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIgQKP9D4MnRjYD6CSwRcrqBzlQMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQPoLNRu XqRbSOBnlVpRF78olu1Q67IB5sYHRD9wB23RbRFG6Gr+GqbpBik3oZ/Z6rgg5ynE aU2+3ppHfaSOiqGFiyReFkv/o2c0qN8TmtPIyU7ljl/topZbsEuORMmJ4cZjrNLp V/g919lh4Y5yL3KdICSQuOf6DdxPeEyI9CR0Na4Q4HmkIhvjo2fXtf4ToOCg9dh1 uy1p5D8Dy0JHBqE0tnS9Iy+UtS6xCO2v3LhgvMm8S7Vsgl+F5a0Yx4NDc66v4zZQ iEDN4kY203tK3AezJbvgUL9L6ZULJTm9L8LfyoPIemVBuMatENawCj0TGXkBFwLP TuzWgYQEtGAzxg== -----END CERTIFICATE-----Generated at Thu Sep 18 00:46:11 2025 by rpki-client