$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: pNTZD9qFfvweYdFqTgMZyarE07kyYnIKHLfONEP6wNg= Subject key identifier: 99:07:60:00:68:51:09:9E:29:2E:79:87:65:29:B1:23:14:99:8C:0F Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 01973E08911F3C8BD14B942F19D7FC95A80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0BDC Signing time: Thu 05 Jun 2025 03:00:38 +0000 Manifest this update: Thu 05 Jun 2025 03:00:38 +0000 Manifest next update: Fri 06 Jun 2025 03:00:38 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=) 6: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: 2TjQZ6D5jv0dpxQX22wTcabVpRCtoIbtIvQ3rWgjRQQ=) 7: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 8: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 9: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: UYEZb-NB4LxQf23HXvgumhETuh8.roa (hash: 8WWVRhvoeVKe5QD2G/CV3zdyhFyySnvvIH3sDj2uAKc=) 12: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 13: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 14: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 15: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 16: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 17: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 18: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 19: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 20: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 21: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3e:08:91:1f:3c:8b:d1:4b:94:2f:19:d7:fc:95:a8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jun 5 03:00:38 2025 GMT Not After : Jun 6 03:00:38 2025 GMT Subject: CN=990760006851099e292e79876529b12314998c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:c1:59:23:eb:eb:b2:3a:c2:08:9a:c5:cc: 43:21:62:6a:f4:d0:33:fa:1d:59:fd:8f:80:78:ff: 6f:df:5f:75:84:98:03:5b:ec:a2:41:fe:1a:c6:7f: 0c:95:43:07:d5:47:48:ce:32:3b:4c:35:e0:9b:fb: 37:f4:15:8c:93:a8:97:b3:cb:29:d4:54:a2:4e:2b: 73:3a:57:e6:7a:e3:da:96:97:41:3e:e4:eb:31:d8: 49:e0:d5:83:5f:7f:fe:10:b3:cb:57:8b:7b:dd:55: 17:9f:20:05:00:10:13:0e:6c:14:a1:d4:3d:16:e7: 32:e5:62:1b:01:09:cc:f8:2d:ff:08:84:c7:a1:1f: c8:52:7e:24:b7:ac:2a:27:02:5d:4c:6d:7a:50:9d: 22:3b:3c:56:30:73:8e:d7:d5:4c:66:88:58:a2:e8: 43:d4:69:f5:05:64:c4:72:3f:0b:6e:d8:20:31:e0: be:e2:5a:65:97:ba:7b:15:c6:c1:1f:26:71:0e:31: 9d:ce:7b:5b:d4:29:05:c2:c4:15:b1:9a:93:3b:fe: 88:d6:a6:4f:17:dc:02:57:d6:73:84:42:6a:50:4f: f8:f9:f0:da:ee:cd:f8:97:b4:d4:0d:a4:07:59:cc: e0:2c:85:4c:03:6b:ad:82:f2:69:e2:c3:87:59:d5: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:60:00:68:51:09:9E:29:2E:79:87:65:29:B1:23:14:99:8C:0F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:46:02:10:2c:07:91:73:8d:7c:ab:f1:ae:49:bb:fc:3d:13: 78:77:93:e9:e2:c0:d4:ff:38:5c:10:eb:9c:c0:ae:1c:5a:6c: 14:69:da:b8:94:73:c6:a6:91:00:d3:8b:d9:8c:9b:11:67:4e: 2e:1b:01:26:1b:5c:0a:8d:63:7a:26:3f:31:8a:9f:f1:24:52: 77:61:b9:63:d9:f6:b3:17:c4:4f:a8:d5:66:15:db:a0:eb:cc: 16:48:92:04:d8:f4:6f:f7:d5:e9:63:3a:7f:3f:9a:6e:46:0f: 3f:8e:f9:11:61:a8:d7:86:c0:74:de:2f:15:60:f7:97:7e:fd: cf:a6:14:ad:c9:9f:58:a0:ac:8a:53:b3:fb:a9:51:8b:bf:90: a5:a6:f5:42:ec:16:d0:23:29:f2:78:a3:b6:2e:3f:a5:69:61: d2:22:2d:c3:f3:d5:dc:f5:cb:54:fb:02:dd:05:b1:34:dc:9c: a5:71:66:16:cc:2c:36:76:5c:97:cf:8c:4f:75:b0:41:9b:14: 1e:62:39:71:c3:9a:81:65:c5:1f:2e:8f:44:6b:6c:47:2e:d9: 7c:2c:82:89:ae:72:f2:11:e6:c3:81:1b:26:a3:e3:b4:bd:3e: 8b:dd:17:76:c7:d8:1b:a3:43:6e:e0:e7:17:4d:f3:bb:f1:56: 11:5e:43:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc+CJEfPIvRS5QvGdf8lagPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwNjA1MDMwMDM4WhcNMjUwNjA2MDMwMDM4WjAzMTEwLwYDVQQD Eyg5OTA3NjAwMDY4NTEwOTllMjkyZTc5ODc2NTI5YjEyMzE0OTk4YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRnBWSPr67I6wgiaxcxDIWJq9NAz +h1Z/Y+AeP9v3191hJgDW+yiQf4axn8MlUMH1UdIzjI7TDXgm/s39BWMk6iXs8sp 1FSiTitzOlfmeuPalpdBPuTrMdhJ4NWDX3/+ELPLV4t73VUXnyAFABATDmwUodQ9 Fucy5WIbAQnM+C3/CITHoR/IUn4kt6wqJwJdTG16UJ0iOzxWMHOO19VMZohYouhD 1Gn1BWTEcj8LbtggMeC+4lpll7p7FcbBHyZxDjGdzntb1CkFwsQVsZqTO/6I1qZP F9wCV9ZzhEJqUE/4+fDa7s34l7TUDaQHWczgLIVMA2utgvJp4sOHWdXx6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkHYABoUQmeKS55h2UpsSMUmYwPMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEYCECwH kXONfKvxrkm7/D0TeHeT6eLA1P84XBDrnMCuHFpsFGnauJRzxqaRANOL2YybEWdO LhsBJhtcCo1jeiY/MYqf8SRSd2G5Y9n2sxfET6jVZhXboOvMFkiSBNj0b/fV6WM6 fz+abkYPP475EWGo14bAdN4vFWD3l379z6YUrcmfWKCsilOz+6lRi7+Qpab1QuwW 0CMp8nijti4/pWlh0iItw/PV3PXLVPsC3QWxNNycpXFmFswsNnZcl8+MT3WwQZsU HmI5ccOagWXFHy6PRGtsRy7ZfCyCia5y8hHmw4EbJqPjtL0+i90XdsfYG6NDbuDn F03zu/FWEV5DYA== -----END CERTIFICATE-----Generated at Thu Jun 5 06:54:17 2025 by rpki-client