$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: HRNnh05jrv9dC6laPZafsrGj6m2z4P8RClbmeCMErVk= Subject key identifier: 0C:9E:2B:27:36:25:E0:9A:AE:8F:CE:4A:9A:92:19:6C:34:28:2A:45 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019A27AFB5CBC32A212307BAEC3F33056328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0EE3 Signing time: Mon 27 Oct 2025 22:00:17 +0000 Manifest this update: Mon 27 Oct 2025 22:00:17 +0000 Manifest next update: Tue 28 Oct 2025 22:00:17 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: 4raUFAd60Z7hH8NInGCVxLDscgXNRhk8j2CRrmC74Z4=) 7: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 8: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (hash: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 21:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:27:af:b5:cb:c3:2a:21:23:07:ba:ec:3f:33:05:63:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Oct 27 22:00:17 2025 GMT Not After : Oct 28 22:00:17 2025 GMT Subject: CN=0c9e2b273625e09aae8fce4a9a92196c34282a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:ba:92:aa:f0:f3:34:2c:c8:63:b3:e5:94: 3b:58:46:31:76:b4:e0:fb:4c:ca:2a:7c:35:af:b1: f2:8b:bf:de:2d:a4:c6:9b:29:24:8f:8a:6c:5d:84: a3:a5:12:b7:7e:24:6c:6e:e8:c5:3e:ae:94:e2:93: 6f:c7:8c:cb:97:92:17:f7:11:4a:8a:56:4c:f2:35: 1a:34:aa:95:ca:34:ec:7e:30:5a:e5:f4:ed:64:a8: fc:27:d1:b1:16:60:36:6c:ff:0c:41:0b:70:79:95: 6c:c5:a0:c7:5d:db:3c:8e:f0:03:96:6e:8f:0c:b4: 11:3a:60:83:25:71:b6:9d:fa:df:24:92:89:f7:cf: bf:4b:bb:9e:28:4b:ff:d0:99:f1:2d:fd:60:ce:3e: b9:b5:ae:b3:84:52:ed:22:ec:48:dc:cd:2e:f6:ab: 96:e8:42:c7:1b:fc:49:82:6d:8e:6d:30:59:ff:12: d1:3f:11:42:7e:2f:4e:af:76:f6:5f:cb:6f:a0:72: a4:f7:4f:0a:53:36:f3:c8:7b:6b:dd:fc:3d:c7:d5: bf:88:a4:61:26:6d:e9:07:3b:af:14:ec:07:01:7b: e1:29:d4:a4:fb:2a:f2:26:1f:11:39:f2:34:5d:e7: 00:78:85:aa:03:a0:d1:56:4d:ab:5c:cf:b2:47:6c: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9E:2B:27:36:25:E0:9A:AE:8F:CE:4A:9A:92:19:6C:34:28:2A:45 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:00:0d:0b:02:7b:1f:7f:86:35:57:fd:62:0c:4d:89:5f:fa: 10:74:26:11:29:f5:d2:b0:8c:80:71:ad:5b:ae:95:8e:5a:12: c9:5a:8f:aa:c6:24:21:1a:f8:67:b0:c5:3c:51:07:af:06:e2: 4c:62:3c:8d:2c:5a:19:10:2f:89:24:82:3e:e8:63:dc:34:a8: c4:dd:4a:70:96:17:39:2a:94:87:d3:5a:53:58:d5:8b:a0:ac: 08:64:c6:6f:b3:f9:89:92:ad:9e:52:80:1e:47:f9:05:1b:68: 44:fd:6e:44:3b:3d:fc:6f:c4:37:26:4e:58:c6:94:af:31:1f: fa:65:a7:3d:ba:22:99:2a:ca:e3:b3:49:f6:08:dd:2d:fe:06: 4a:b8:e8:4d:ea:d4:5e:fa:22:75:0f:a8:7c:45:51:ca:ba:be: b5:94:49:ed:75:fe:40:11:42:db:ff:88:ae:08:d8:04:1c:f6: 98:32:e8:ae:c2:b5:88:f7:86:6a:40:dd:2a:51:31:65:6b:c2: 95:8d:17:11:bb:39:18:35:a0:05:c2:58:4d:e6:c9:83:d6:04: f2:29:ed:fb:4f:58:a6:84:22:56:77:30:7e:a8:e0:90:c6:d1: 3a:fa:f6:4d:55:2e:00:fd:76:19:4c:6a:ef:b1:d2:b3:ec:ba: cc:ef:9a:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZonr7XLwyohIwe67D8zBWMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUxMDI3MjIwMDE3WhcNMjUxMDI4MjIwMDE3WjAzMTEwLwYDVQQD EygwYzllMmIyNzM2MjVlMDlhYWU4ZmNlNGE5YTkyMTk2YzM0MjgyYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSy6kqrw8zQsyGOz5ZQ7WEYxdrTg +0zKKnw1r7Hyi7/eLaTGmykkj4psXYSjpRK3fiRsbujFPq6U4pNvx4zLl5IX9xFK ilZM8jUaNKqVyjTsfjBa5fTtZKj8J9GxFmA2bP8MQQtweZVsxaDHXds8jvADlm6P DLQROmCDJXG2nfrfJJKJ98+/S7ueKEv/0JnxLf1gzj65ta6zhFLtIuxI3M0u9quW 6ELHG/xJgm2ObTBZ/xLRPxFCfi9Or3b2X8tvoHKk908KUzbzyHtr3fw9x9W/iKRh Jm3pBzuvFOwHAXvhKdSk+yryJh8ROfI0XecAeIWqA6DRVk2rXM+yR2zY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyeKyc2JeCaro/OSpqSGWw0KCpFMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAANCwJ7 H3+GNVf9YgxNiV/6EHQmESn10rCMgHGtW66VjloSyVqPqsYkIRr4Z7DFPFEHrwbi TGI8jSxaGRAviSSCPuhj3DSoxN1KcJYXOSqUh9NaU1jVi6CsCGTGb7P5iZKtnlKA Hkf5BRtoRP1uRDs9/G/ENyZOWMaUrzEf+mWnPboimSrK47NJ9gjdLf4GSrjoTerU XvoidQ+ofEVRyrq+tZRJ7XX+QBFC2/+IrgjYBBz2mDLorsK1iPeGakDdKlExZWvC lY0XEbs5GDWgBcJYTebJg9YE8int+09YpoQiVncwfqjgkMbROvr2TVUuAP12GUxq 77HSs+y6zO+aEw== -----END CERTIFICATE-----Generated at Tue Oct 28 02:38:20 2025 by rpki-client