$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: uh/JrwenmEkPhCtZw8nKrJh0yVV4WtsQiT2Z77bPNQQ= Subject key identifier: 9C:F4:C5:0F:A9:F0:F0:6F:F8:34:EF:50:A2:AF:8C:A2:20:C2:0A:54 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 0196507EF328405EAC07001F7242B041D8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0CE5 Signing time: Sun 20 Apr 2025 00:00:19 +0000 Manifest this update: Sun 20 Apr 2025 00:00:19 +0000 Manifest next update: Mon 21 Apr 2025 00:00:19 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: 9m0rhwEVWbej0vh7rGdWpghBj9t5YncgoX8EjcK88uc=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:50:7e:f3:28:40:5e:ac:07:00:1f:72:42:b0:41:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Apr 20 00:00:19 2025 GMT Not After : Apr 21 00:00:19 2025 GMT Subject: CN=9cf4c50fa9f0f06ff834ef50a2af8ca220c20a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:02:d7:3f:2f:c3:8f:5e:d9:5d:5b:f7:8c: d1:91:70:9a:d5:e8:14:3b:46:fc:52:31:51:89:5d: c8:08:b1:88:6a:d7:d7:ff:d6:b2:6f:7c:c7:60:11: bf:b3:79:a8:b8:32:66:85:e5:ea:8d:c8:9c:e4:a8: a1:6f:cf:1d:d0:d5:29:70:8d:58:59:03:c5:09:9f: 78:73:1d:dc:b1:0b:5d:f5:94:9f:41:ea:81:33:65: 0f:67:f5:5a:81:8b:41:dc:25:26:d7:cc:2c:34:e4: 92:30:09:3e:6a:d5:8d:86:4a:04:68:60:88:85:a1: a4:9d:cd:be:f3:aa:64:1c:11:85:a3:41:b5:36:d3: e2:2e:e9:6c:0f:02:ba:01:d6:ef:40:a3:c3:64:63: 90:78:07:86:6e:79:bb:38:e7:b5:a5:c7:ad:a9:c2: ad:ac:3d:6d:02:e6:a5:fd:fd:45:2d:b0:ce:c0:99: 47:21:53:71:48:93:9b:4e:fd:00:98:37:8e:33:64: 01:2d:48:49:92:e7:33:3a:9a:c4:e0:77:a1:af:62: ec:09:9c:25:fe:48:7c:2c:05:04:ff:f3:20:57:0f: 44:a8:15:dd:12:2e:f4:45:05:db:a8:86:e0:14:c9: 58:71:1a:79:aa:6e:75:ca:ba:20:3a:b8:e7:01:e6: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:C5:0F:A9:F0:F0:6F:F8:34:EF:50:A2:AF:8C:A2:20:C2:0A:54 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:27:bc:50:67:bd:c5:57:d7:e0:6f:4c:1f:d9:7b:3e:bc:76: f9:46:23:af:f3:85:da:6d:99:f5:40:1c:33:84:a1:c0:db:d6: 5d:36:a1:10:ed:3e:43:b5:46:3d:dc:38:f1:7f:2c:b9:67:72: 91:33:33:00:bc:0e:6b:86:96:68:54:ff:8c:c8:27:a8:23:98: 95:78:a2:79:2f:6f:c8:fa:c9:76:59:d1:49:6c:4c:bf:5e:37: a9:e8:07:2f:75:b1:15:2e:fe:73:23:ee:2b:29:3b:b4:81:77: cd:cc:8f:9a:84:7a:52:0e:14:af:0d:ae:4a:c1:13:d2:79:e8: 64:a5:41:6d:b8:e1:cf:c2:5c:61:9b:30:23:2a:54:07:37:37: 5b:4a:bc:28:48:84:27:37:24:9b:70:ce:d4:6b:a3:54:28:b7: ae:e0:f5:b9:0d:64:2a:17:88:7e:1f:b9:7e:c2:57:8d:4a:50: df:be:26:f0:13:c7:16:dd:f6:a4:c3:45:4e:51:be:88:86:ed: a9:e1:92:cc:63:52:ed:a3:32:99:7b:7a:ef:f0:c9:d3:16:61: 1a:60:31:fa:ae:72:cd:62:e3:2d:7e:a3:b6:65:c8:d5:b1:09: c7:04:a3:ba:c2:1e:f7:4c:6b:c8:fa:0c:a0:11:f0:a2:ef:c5: da:99:4d:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZQfvMoQF6sBwAfckKwQdjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwNDIwMDAwMDE5WhcNMjUwNDIxMDAwMDE5WjAzMTEwLwYDVQQD Eyg5Y2Y0YzUwZmE5ZjBmMDZmZjgzNGVmNTBhMmFmOGNhMjIwYzIwYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim4C1z8vw49e2V1b94zRkXCa1egU O0b8UjFRiV3ICLGIatfX/9ayb3zHYBG/s3mouDJmheXqjcic5Kihb88d0NUpcI1Y WQPFCZ94cx3csQtd9ZSfQeqBM2UPZ/VagYtB3CUm18wsNOSSMAk+atWNhkoEaGCI haGknc2+86pkHBGFo0G1NtPiLulsDwK6AdbvQKPDZGOQeAeGbnm7OOe1pcetqcKt rD1tAual/f1FLbDOwJlHIVNxSJObTv0AmDeOM2QBLUhJkuczOprE4Hehr2LsCZwl /kh8LAUE//MgVw9EqBXdEi70RQXbqIbgFMlYcRp5qm51yrogOrjnAeYNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz0xQ+p8PBv+DTvUKKvjKIgwgpUMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdie8UGe9 xVfX4G9MH9l7Prx2+UYjr/OF2m2Z9UAcM4ShwNvWXTahEO0+Q7VGPdw48X8suWdy kTMzALwOa4aWaFT/jMgnqCOYlXiieS9vyPrJdlnRSWxMv143qegHL3WxFS7+cyPu Kyk7tIF3zcyPmoR6Ug4Urw2uSsET0nnoZKVBbbjhz8JcYZswIypUBzc3W0q8KEiE Jzckm3DO1GujVCi3ruD1uQ1kKheIfh+5fsJXjUpQ374m8BPHFt32pMNFTlG+iIbt qeGSzGNS7aMymXt67/DJ0xZhGmAx+q5yzWLjLX6jtmXI1bEJxwSjusIe90xryPoM oBHwou/F2plN8Q== -----END CERTIFICATE-----Generated at Sun Apr 20 04:58:11 2025 by rpki-client