$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: +KAM8FtkKUIlTHIIqE5pzjYuxVaCdiQ5iRn52/rPkC4= Subject key identifier: C7:FC:24:03:E1:43:33:6E:18:66:F3:6D:ED:34:B3:57:61:21:A5:B9 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0198C97FD8DE4C7EB5023B54678419B5DC39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0CAC Signing time: Wed 20 Aug 2025 22:00:55 +0000 Manifest this update: Wed 20 Aug 2025 22:00:55 +0000 Manifest next update: Thu 21 Aug 2025 22:00:55 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: BBSGXQluVcLwpxObRPVMuR10olR8uGC0Wo5XQ8V0blo=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 9: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 10: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 11: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 18: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 19: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 20: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 21: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 22: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 23: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 24: ujQDG3VgRwepwoNtLrD2tcEZ4jU.roa (hash: 7YDxNcqLFt8ODygsXYaRPA4VdqPHb87Z3n4DnYrIpiI=) 25: zIb65ZJns3oX5PPTPawqhHAMsZU.roa (hash: 74NPwbbyglVnvRUeHdKO7hXqs4rc+5TCbIoFZCGC0Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:c9:7f:d8:de:4c:7e:b5:02:3b:54:67:84:19:b5:dc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Aug 20 22:00:55 2025 GMT Not After : Aug 21 22:00:55 2025 GMT Subject: CN=c7fc2403e143336e1866f36ded34b3576121a5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:5b:9e:82:da:c6:b2:d5:dc:b5:41:60:83: 91:c8:c2:6f:e1:7d:a4:84:9e:70:7b:d9:30:ad:e8: d7:5c:63:f1:73:c0:50:6e:3f:6c:46:f6:ba:27:3d: 0a:d7:24:af:38:b2:9b:40:de:95:26:c3:7e:19:cc: b2:14:13:b2:f8:a9:81:bd:19:7c:74:95:8b:bd:12: d4:87:a5:cb:ed:99:8f:83:7e:11:85:bb:b8:bf:b5: a1:ed:cc:ea:d8:87:48:6d:c9:52:9d:17:c8:fd:88: 19:9e:53:d4:71:62:3c:b4:bd:77:d0:be:7d:67:ed: 1f:c6:3a:f4:20:1e:3e:81:05:c7:c2:16:c2:16:c7: 26:65:b0:d7:7f:81:0b:d6:ac:bc:96:af:1f:09:cd: 53:3b:33:ac:28:bd:20:51:a4:fb:b3:35:f0:d2:2f: 3e:af:3c:0e:7b:7b:d9:74:bc:e6:5e:a7:fd:01:8b: 77:81:d5:9a:46:b9:42:b9:a7:f1:ae:57:3c:e9:f2: 8b:61:f0:bf:4c:9f:bc:d4:51:a0:a5:41:13:67:22: 7c:42:1f:db:77:18:34:6a:1c:6a:c4:27:af:a7:2d: e1:95:23:30:63:33:c9:50:b5:9a:1c:65:94:28:7e: cc:53:da:ac:75:aa:71:9e:95:d4:55:25:9a:87:8b: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FC:24:03:E1:43:33:6E:18:66:F3:6D:ED:34:B3:57:61:21:A5:B9 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1e:f7:59:22:96:ba:4e:30:6d:55:52:a9:2f:51:f2:f7:08: 82:4d:7d:e0:ea:c9:c2:8c:77:47:7b:fd:89:9a:8a:21:4c:19: 7d:16:24:95:77:8c:86:56:b6:b9:9c:6e:63:e4:9e:b5:a9:f5: e7:f6:fe:85:43:20:06:85:97:c6:8d:ad:21:50:1c:d6:05:7d: e8:58:35:5a:2f:8e:d7:f0:8a:af:7b:35:99:85:23:1e:59:a8: b2:91:b6:2d:38:44:5c:7c:bf:23:01:99:db:0b:df:f2:35:5f: 25:92:4b:e6:0e:0d:11:db:1e:0e:97:8b:e2:01:fc:4d:e6:0f: 2c:54:9e:16:6c:0c:81:e0:70:1e:bd:f3:4d:c8:ae:ed:d2:45: d6:d9:6d:bf:f1:9c:61:46:97:ec:fe:0f:a8:ec:2a:6e:1b:d0: 82:8a:10:80:d1:57:f5:e5:c7:1c:91:50:b8:aa:b5:60:9d:7b: b3:a2:75:81:57:c4:82:db:12:00:41:b7:00:d4:4d:7c:04:0b: a3:f7:a1:26:ac:2f:97:1e:60:bb:3f:6f:10:d7:78:f0:29:42: 3d:8f:de:4c:1e:fa:f5:18:d0:b8:1f:12:94:5b:3e:ce:d8:06: cb:6d:0a:c2:0c:6b:b8:d2:d7:60:2f:74:1b:28:33:a7:84:b4: 75:86:72:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjJf9jeTH61AjtUZ4QZtdw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwODIwMjIwMDU1WhcNMjUwODIxMjIwMDU1WjAzMTEwLwYDVQQD EyhjN2ZjMjQwM2UxNDMzMzZlMTg2NmYzNmRlZDM0YjM1NzYxMjFhNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYpbnoLaxrLV3LVBYIORyMJv4X2k hJ5we9kwrejXXGPxc8BQbj9sRva6Jz0K1ySvOLKbQN6VJsN+GcyyFBOy+KmBvRl8 dJWLvRLUh6XL7ZmPg34Rhbu4v7Wh7czq2IdIbclSnRfI/YgZnlPUcWI8tL130L59 Z+0fxjr0IB4+gQXHwhbCFscmZbDXf4EL1qy8lq8fCc1TOzOsKL0gUaT7szXw0i8+ rzwOe3vZdLzmXqf9AYt3gdWaRrlCuafxrlc86fKLYfC/TJ+81FGgpUETZyJ8Qh/b dxg0ahxqxCevpy3hlSMwYzPJULWaHGWUKH7MU9qsdapxnpXUVSWah4vAcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf8JAPhQzNuGGbzbe00s1dhIaW5MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx73WSKW uk4wbVVSqS9R8vcIgk194OrJwox3R3v9iZqKIUwZfRYklXeMhla2uZxuY+Setan1 5/b+hUMgBoWXxo2tIVAc1gV96Fg1Wi+O1/CKr3s1mYUjHlmospG2LThEXHy/IwGZ 2wvf8jVfJZJL5g4NEdseDpeL4gH8TeYPLFSeFmwMgeBwHr3zTciu7dJF1tltv/Gc YUaX7P4PqOwqbhvQgooQgNFX9eXHHJFQuKq1YJ17s6J1gVfEgtsSAEG3ANRNfAQL o/ehJqwvlx5guz9vENd48ClCPY/eTB769RjQuB8SlFs+ztgGy20KwgxruNLXYC90 Gygzp4S0dYZy+w== -----END CERTIFICATE-----Generated at Thu Aug 21 01:11:54 2025 by rpki-client