$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: 7UoqmjTDSFJnNOXKRqMJuuRWLqLzsu97YQB07RSwm64= Subject key identifier: BF:AC:9B:6C:3D:A4:D1:80:25:DE:56:49:CD:88:7F:13:8D:50:44:B2 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01992CA264F5DEFC1BBEFBC2404F58A760B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0E61 Signing time: Tue 09 Sep 2025 04:01:04 +0000 Manifest this update: Tue 09 Sep 2025 04:01:04 +0000 Manifest next update: Wed 10 Sep 2025 04:01:04 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: SGKteIpUjlIR8iY9iDilhes3+ay6Ba7hwG3SAkECIe0=) 7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:a2:64:f5:de:fc:1b:be:fb:c2:40:4f:58:a7:60:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Sep 9 04:01:04 2025 GMT Not After : Sep 10 04:01:04 2025 GMT Subject: CN=bfac9b6c3da4d18025de5649cd887f138d5044b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:ea:ac:87:d7:04:6d:f2:67:58:bf:44:e2: 2c:6d:15:b0:92:f2:e4:72:31:03:a0:d9:a6:a2:f2: c9:0e:97:2c:c1:41:82:69:f9:d8:4f:7d:b2:0a:cf: bb:43:f2:18:fc:13:d5:a3:3c:82:59:55:71:ad:7e: 78:cb:3e:8a:28:56:09:a7:6c:3c:11:a1:d5:52:1c: a6:bf:75:66:35:d6:56:e8:37:ee:fd:43:11:e9:b1: 97:42:be:bc:46:0b:fa:00:02:ed:a8:9a:da:33:49: a2:95:a0:e8:56:15:c3:b9:c1:48:f4:c3:e5:4c:42: 04:79:ce:07:00:cc:e1:89:28:45:99:1b:85:ab:f2: 31:01:c1:af:04:f7:d6:86:a4:7c:9e:d0:2b:06:94: e2:99:6d:8b:7f:7d:fb:03:a6:6d:e7:fa:c9:18:00: f2:40:57:28:79:5a:9a:70:d4:bd:9f:92:b3:2b:66: da:db:88:2e:2d:29:26:bc:92:76:d4:46:ab:a8:fd: 9a:46:e5:f7:37:ba:94:84:77:9c:e1:88:7d:da:15: e8:75:5f:e6:c3:35:59:f6:f0:78:98:f2:74:4f:5e: ca:bb:da:d3:68:9d:27:a4:8a:bf:a8:ab:31:cd:d5: 08:eb:0e:d0:bb:57:12:f2:8b:fe:ce:79:27:e5:b2: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AC:9B:6C:3D:A4:D1:80:25:DE:56:49:CD:88:7F:13:8D:50:44:B2 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:02:19:73:2f:52:4a:05:87:1e:91:b8:82:a9:49:73:93:b8: b2:d3:97:e9:41:9e:02:37:0b:37:70:c4:5a:3a:93:d9:08:8c: 9a:4b:bc:ad:9e:3b:84:3a:b0:29:83:27:15:12:bb:f0:13:0e: 82:9a:43:04:41:97:0f:8b:ad:cf:ef:08:7f:dd:83:0e:a8:99: 2e:e9:04:3d:fb:73:2a:3c:05:b5:1b:cb:b8:bf:cc:98:58:66: 5d:67:2d:c8:8a:4d:42:e2:ae:73:e6:e1:5a:79:31:da:fd:5c: 51:8e:35:6b:cb:e9:5a:4b:c9:3d:78:bc:66:02:5b:8d:97:66: f0:5d:fa:38:5f:7b:f9:74:53:9e:20:ae:df:08:4a:0a:ab:75: 5f:f3:d7:dc:f3:31:13:e6:b1:2f:68:98:0f:4c:fb:b7:58:3c: ba:35:81:ba:55:28:24:4b:45:d3:1b:f5:94:b3:d4:6a:42:74: 05:96:8d:db:26:12:3c:41:16:cb:2e:a0:3e:d0:4d:75:c3:cd: 5d:2e:d9:55:20:5a:c4:54:1c:c1:41:7d:7b:70:9e:e0:e8:f9: f2:55:d4:d4:4c:b3:c8:fa:98:ab:14:79:8f:0a:88:75:dd:b8: db:9a:eb:dd:50:a1:e0:8a:93:8f:ee:e7:c1:ca:2b:58:e1:43: 0e:bf:72:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksomT13vwbvvvCQE9Yp2C5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwOTA5MDQwMTA0WhcNMjUwOTEwMDQwMTA0WjAzMTEwLwYDVQQD EyhiZmFjOWI2YzNkYTRkMTgwMjVkZTU2NDljZDg4N2YxMzhkNTA0NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7XqrIfXBG3yZ1i/ROIsbRWwkvLk cjEDoNmmovLJDpcswUGCafnYT32yCs+7Q/IY/BPVozyCWVVxrX54yz6KKFYJp2w8 EaHVUhymv3VmNdZW6Dfu/UMR6bGXQr68Rgv6AALtqJraM0milaDoVhXDucFI9MPl TEIEec4HAMzhiShFmRuFq/IxAcGvBPfWhqR8ntArBpTimW2Lf337A6Zt5/rJGADy QFcoeVqacNS9n5KzK2ba24guLSkmvJJ21EarqP2aRuX3N7qUhHec4Yh92hXodV/m wzVZ9vB4mPJ0T17Ku9rTaJ0npIq/qKsxzdUI6w7Qu1cS8ov+znkn5bLwSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+sm2w9pNGAJd5WSc2IfxONUESyMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQIZcy9S SgWHHpG4gqlJc5O4stOX6UGeAjcLN3DEWjqT2QiMmku8rZ47hDqwKYMnFRK78BMO gppDBEGXD4utz+8If92DDqiZLukEPftzKjwFtRvLuL/MmFhmXWctyIpNQuKuc+bh Wnkx2v1cUY41a8vpWkvJPXi8ZgJbjZdm8F36OF97+XRTniCu3whKCqt1X/PX3PMx E+axL2iYD0z7t1g8ujWBulUoJEtF0xv1lLPUakJ0BZaN2yYSPEEWyy6gPtBNdcPN XS7ZVSBaxFQcwUF9e3Ce4Oj58lXU1EyzyPqYqxR5jwqIdd2425rr3VCh4IqTj+7n wcorWOFDDr9yvg== -----END CERTIFICATE-----Generated at Tue Sep 9 07:47:58 2025 by rpki-client