$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: 8AxEEHgsZ2EaBHXY08+B+G2qPT/mzbJDg3EH0XJb+Fc= Subject key identifier: D2:CB:9A:89:70:02:29:CB:FE:40:F3:90:35:2F:BF:74:AF:8C:D3:55 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 01992E5A211E8FB9847120875989F6CD75E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0EBB Signing time: Tue 09 Sep 2025 12:01:22 +0000 Manifest this update: Tue 09 Sep 2025 12:01:22 +0000 Manifest next update: Wed 10 Sep 2025 12:01:22 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: J3c/uBJfFqfW8uX3H6E0JlBhvmJZ1E0slkw/YN2sxMQ=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:5a:21:1e:8f:b9:84:71:20:87:59:89:f6:cd:75:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Sep 9 12:01:22 2025 GMT Not After : Sep 10 12:01:22 2025 GMT Subject: CN=d2cb9a89700229cbfe40f390352fbf74af8cd355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:7c:b9:ee:6b:10:14:b7:bb:67:68:00:73: d0:50:b6:9d:28:d8:4b:bc:23:63:77:40:14:04:ba: 5e:88:19:4e:8d:5c:46:66:2c:41:ac:3b:f5:b3:c7: 04:9e:16:d7:60:78:5e:43:24:c5:e7:ed:86:e2:24: be:6d:d9:fb:8a:b5:cb:9e:6d:ef:e5:19:7b:b0:36: 50:4e:78:2a:0a:cb:56:8b:09:73:0c:ab:0a:7a:58: de:12:38:84:96:3b:5f:f4:a1:c6:ba:01:e6:48:a7: be:13:64:68:2f:65:82:7c:49:5e:5e:03:9e:df:96: 49:51:b6:e9:ee:3e:f6:36:2b:44:15:12:e8:97:47: 70:c3:ff:be:c6:42:17:d3:a2:d6:8b:33:6b:c9:c3: 17:de:4d:ad:cf:6f:fd:63:2b:0f:57:a5:28:8b:26: 16:6e:51:13:64:b4:a5:1f:31:27:56:0f:f8:c9:07: ab:55:59:86:1a:fc:6c:b7:ee:c4:4c:28:45:f6:0a: 40:f1:88:37:ca:69:eb:ea:7b:cd:70:6b:1a:04:ea: 54:32:94:bb:a0:0d:41:28:1b:7a:e7:46:60:e7:58: 02:6e:52:12:b0:c0:af:cf:ec:dd:2b:37:d9:b4:94: e9:4c:97:e7:a3:9b:eb:02:d4:50:9b:10:df:3e:91: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CB:9A:89:70:02:29:CB:FE:40:F3:90:35:2F:BF:74:AF:8C:D3:55 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e1:69:d8:f4:27:98:87:44:0a:c6:71:2f:e5:93:ae:b1:28: 60:85:8b:fe:c0:97:1c:7b:98:5f:fd:e1:71:49:8c:32:73:da: 1e:e2:a8:0b:30:e2:53:e3:31:8a:1b:04:dc:1d:f3:12:06:99: a8:96:ce:0a:bb:46:ab:8f:71:9c:61:45:e2:c8:5b:a2:47:82: 8f:95:d4:bd:aa:bd:75:1b:61:86:29:3d:5f:8f:d0:92:f1:6a: 05:48:93:bd:d0:40:fd:db:02:dc:4e:70:21:b2:2e:a5:8d:71: f6:92:8c:76:11:f8:f3:30:a4:9b:7f:7a:a5:18:86:c2:b0:b6: 38:9c:47:c3:8e:84:74:63:d9:fb:be:30:ce:ac:01:8f:06:8e: ab:81:9d:49:10:7d:9e:5c:2a:9f:ae:3f:80:95:6b:66:32:37: 72:2e:54:5d:65:61:91:ff:74:11:39:36:95:09:f9:75:04:a7: b6:90:7b:cd:9d:98:d7:cb:5e:93:c4:ae:f3:30:21:d3:05:50: 36:d6:2b:34:99:3e:15:ab:65:f2:0f:e3:6c:eb:5c:d8:5b:e3: fd:b6:33:49:fa:81:de:62:ba:0c:f5:99:30:a6:81:57:d7:65: e6:f5:bc:67:b9:f2:77:4b:22:4b:24:2c:67:b8:df:08:c5:e9: 74:10:84:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkuWiEej7mEcSCHWYn2zXXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwOTA5MTIwMTIyWhcNMjUwOTEwMTIwMTIyWjAzMTEwLwYDVQQD EyhkMmNiOWE4OTcwMDIyOWNiZmU0MGYzOTAzNTJmYmY3NGFmOGNkMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0R8ue5rEBS3u2doAHPQULadKNhL vCNjd0AUBLpeiBlOjVxGZixBrDv1s8cEnhbXYHheQyTF5+2G4iS+bdn7irXLnm3v 5Rl7sDZQTngqCstWiwlzDKsKeljeEjiEljtf9KHGugHmSKe+E2RoL2WCfEleXgOe 35ZJUbbp7j72NitEFRLol0dww/++xkIX06LWizNrycMX3k2tz2/9YysPV6UoiyYW blETZLSlHzEnVg/4yQerVVmGGvxst+7ETChF9gpA8Yg3ymnr6nvNcGsaBOpUMpS7 oA1BKBt650Zg51gCblISsMCvz+zdKzfZtJTpTJfno5vrAtRQmxDfPpHZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLLmolwAinL/kDzkDUvv3SvjNNVMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeFp2PQn mIdECsZxL+WTrrEoYIWL/sCXHHuYX/3hcUmMMnPaHuKoCzDiU+MxihsE3B3zEgaZ qJbOCrtGq49xnGFF4shbokeCj5XUvaq9dRthhik9X4/QkvFqBUiTvdBA/dsC3E5w IbIupY1x9pKMdhH48zCkm396pRiGwrC2OJxHw46EdGPZ+74wzqwBjwaOq4GdSRB9 nlwqn64/gJVrZjI3ci5UXWVhkf90ETk2lQn5dQSntpB7zZ2Y18tek8Su8zAh0wVQ NtYrNJk+Fatl8g/jbOtc2Fvj/bYzSfqB3mK6DPWZMKaBV9dl5vW8Z7nyd0siSyQs Z7jfCMXpdBCE8g== -----END CERTIFICATE-----Generated at Tue Sep 9 18:53:34 2025 by rpki-client