$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: UcG/6pG21iyqLcfpprlLMUdgldcCiMPbnzxnfxxZTMc= Subject key identifier: E4:D7:B1:B0:58:37:9F:AE:61:7B:AE:13:43:EB:2B:D6:F6:7E:57:67 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0197C2A4CAD077B71402E534BC5BBCC19CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0C22 Signing time: Mon 30 Jun 2025 21:01:09 +0000 Manifest this update: Mon 30 Jun 2025 21:01:09 +0000 Manifest next update: Tue 01 Jul 2025 21:01:09 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: sVIwnCN3yv9QseY1uXWU7tANJTA9O3o6TarHmruGNuY=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 9: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: UYEZb-NB4LxQf23HXvgumhETuh8.roa (hash: 8WWVRhvoeVKe5QD2G/CV3zdyhFyySnvvIH3sDj2uAKc=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 16: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 17: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 18: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 19: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 20: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 21: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 14:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c2:a4:ca:d0:77:b7:14:02:e5:34:bc:5b:bc:c1:9c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jun 30 21:01:09 2025 GMT Not After : Jul 1 21:01:09 2025 GMT Subject: CN=e4d7b1b058379fae617bae1343eb2bd6f67e5767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:d5:e6:94:cb:31:f6:d5:44:64:cd:09:50: b1:d9:f1:70:b5:f0:a0:08:6a:26:5c:82:82:c2:34: d5:f0:00:d7:2e:11:13:77:27:40:1b:68:94:a1:3d: 9b:1e:de:a9:3e:1e:df:0b:d1:33:c6:d0:40:1e:70: 1e:6b:6b:51:64:e5:68:0a:3e:b2:6d:a9:ff:a5:16: 80:61:f9:38:ab:a9:ca:ef:85:22:1a:be:c9:c0:4f: 4c:bb:f0:3b:0c:d2:f9:28:92:df:eb:1a:51:94:70: f7:31:3a:07:b5:ac:0e:c4:a6:57:f0:19:0d:20:9d: 8a:05:5c:df:5b:12:9b:3d:14:42:d5:c9:66:db:d2: 5a:86:2b:e1:28:cc:3e:25:9d:45:d2:4d:4f:4a:a2: aa:ad:87:de:9e:25:b3:a2:47:40:41:d1:6d:fa:ef: 14:4a:b3:6b:0f:5b:2b:e1:12:df:56:0e:f1:9e:96: a4:eb:a4:1a:82:04:e8:85:ab:10:f1:8f:37:ac:a4: f9:c0:91:b9:ed:bd:ea:b7:6f:fa:b6:9e:0c:ad:10: 5c:09:d6:02:de:7d:13:bf:a5:10:1c:d1:9f:03:16: 1e:95:f7:1e:2d:4f:04:a9:fc:56:24:c3:22:8e:93: 0d:5c:ad:92:10:e2:0a:70:64:66:10:ff:60:8a:81: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D7:B1:B0:58:37:9F:AE:61:7B:AE:13:43:EB:2B:D6:F6:7E:57:67 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:67:4b:2a:ae:31:a4:5e:8b:12:ab:de:e1:5c:9f:e3:8e:50: 60:ee:fc:7d:b1:a8:e7:31:a7:f7:b1:d4:02:6b:dc:65:0d:5c: c6:db:bf:b8:b0:f4:a8:f9:d6:1e:97:64:9d:19:eb:00:57:88: 52:da:08:31:19:2a:c1:76:26:bb:db:4a:0a:2b:a8:26:4a:5f: c8:4b:fc:69:b6:15:73:c6:98:c4:85:50:6a:88:c5:40:f1:79: 83:c7:d7:f9:69:e4:4c:16:9f:2a:de:80:51:6b:62:82:42:3d: 13:ad:c1:e8:7d:20:c5:32:14:fa:73:46:64:9b:57:02:f5:da: 9f:20:0e:4e:7c:22:e9:6e:4c:c2:a9:2e:e1:a0:1a:5d:0a:40: e6:d5:c1:8c:d2:0a:93:18:22:e6:da:a3:3b:dd:bb:0a:01:33: dd:b3:7b:b0:ec:c3:1d:a0:82:c0:35:05:9a:e6:ed:19:8f:43: bf:b7:29:b1:b4:38:26:93:81:a5:f3:1d:c4:9e:0c:41:fb:37: 9d:03:87:52:16:a7:ac:86:6d:4b:18:64:a8:bf:e6:e6:bc:24: 60:50:6e:bf:77:5f:05:bd:86:be:6a:c6:4b:de:08:20:7f:fb: 2d:88:46:c1:30:fe:cc:bb:ab:cd:94:f1:e8:fa:30:b0:7f:8d: ae:01:43:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfCpMrQd7cUAuU0vFu8wZzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwNjMwMjEwMTA5WhcNMjUwNzAxMjEwMTA5WjAzMTEwLwYDVQQD EyhlNGQ3YjFiMDU4Mzc5ZmFlNjE3YmFlMTM0M2ViMmJkNmY2N2U1NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z7V5pTLMfbVRGTNCVCx2fFwtfCg CGomXIKCwjTV8ADXLhETdydAG2iUoT2bHt6pPh7fC9EzxtBAHnAea2tRZOVoCj6y ban/pRaAYfk4q6nK74UiGr7JwE9Mu/A7DNL5KJLf6xpRlHD3MToHtawOxKZX8BkN IJ2KBVzfWxKbPRRC1clm29JahivhKMw+JZ1F0k1PSqKqrYfeniWzokdAQdFt+u8U SrNrD1sr4RLfVg7xnpak66QaggTohasQ8Y83rKT5wJG57b3qt2/6tp4MrRBcCdYC 3n0Tv6UQHNGfAxYelfceLU8EqfxWJMMijpMNXK2SEOIKcGRmEP9gioFn5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTXsbBYN5+uYXuuE0PrK9b2fldnMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGdLKq4x pF6LEqve4Vyf445QYO78fbGo5zGn97HUAmvcZQ1cxtu/uLD0qPnWHpdknRnrAFeI UtoIMRkqwXYmu9tKCiuoJkpfyEv8abYVc8aYxIVQaojFQPF5g8fX+WnkTBafKt6A UWtigkI9E63B6H0gxTIU+nNGZJtXAvXanyAOTnwi6W5Mwqku4aAaXQpA5tXBjNIK kxgi5tqjO927CgEz3bN7sOzDHaCCwDUFmubtGY9Dv7cpsbQ4JpOBpfMdxJ4MQfs3 nQOHUhanrIZtSxhkqL/m5rwkYFBuv3dfBb2GvmrGS94IIH/7LYhGwTD+zLurzZTx 6PowsH+NrgFDOg== -----END CERTIFICATE-----Generated at Tue Jul 1 00:20:31 2025 by rpki-client