$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: B7KkH+ZcuKB6nwfyOY+UNEbD4zlv6txTMcwEcZbuoTo= Subject key identifier: 42:D1:52:BA:9B:DE:15:69:EF:61:81:3E:78:9C:DE:BF:CC:DE:98:90 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019A21ADA992E9BE45D3106C3D7BC1DFBA15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0F39 Signing time: Sun 26 Oct 2025 18:00:20 +0000 Manifest this update: Sun 26 Oct 2025 18:00:20 +0000 Manifest next update: Mon 27 Oct 2025 18:00:20 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: zxxTqF++M5WNVHsQ72E9B64uItMnN3ghX3B8ql+5WRc=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:ad:a9:92:e9:be:45:d3:10:6c:3d:7b:c1:df:ba:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Oct 26 18:00:20 2025 GMT Not After : Oct 27 18:00:20 2025 GMT Subject: CN=42d152ba9bde1569ef61813e789cdebfccde9890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:7f:19:18:07:4e:4e:8c:15:6a:2b:dc:04: 8c:23:e7:a5:7f:3e:6e:4e:13:fb:9b:f3:16:27:66: 0d:d7:e6:91:ef:e1:18:e0:87:9f:01:ee:ae:45:8a: b2:a5:7c:4d:83:5f:28:d4:ab:dd:f3:9b:14:c6:76: b9:11:08:a4:e9:d0:63:b1:10:ac:a1:e2:f6:f9:48: 8e:5d:4a:dc:e2:6c:d3:31:16:68:0e:c1:72:10:62: 7a:32:53:01:cf:27:cf:a6:07:6e:70:b2:80:ae:57: a1:36:b0:20:e4:41:d0:61:5f:f8:6d:16:84:78:4c: 6b:b1:52:c5:a3:0d:2d:38:8c:1d:42:57:84:bb:c3: 6e:59:bf:b3:39:3e:8e:65:31:fa:0f:a7:de:c6:58: 52:b2:5d:fd:1a:ec:f2:8e:9f:00:5f:b9:01:fa:50: 04:99:fd:82:84:73:ab:45:98:3e:6b:b9:e9:19:c0: 90:e5:e7:5a:2f:17:93:c1:e6:22:9d:ad:da:08:4e: 6f:a1:47:69:35:8f:d6:c0:be:f5:61:bc:4b:af:95: 10:c0:ed:1c:8c:05:45:fa:c1:ee:56:ed:79:15:b8: dd:ec:bf:dd:d7:b0:52:ab:44:6c:62:03:8d:5f:71: 34:df:39:2c:19:e8:30:46:19:cf:92:ce:e0:9a:73: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:52:BA:9B:DE:15:69:EF:61:81:3E:78:9C:DE:BF:CC:DE:98:90 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:df:d1:fa:6d:7f:bd:5e:84:83:ea:ea:8a:a4:0a:b8:1c:48: 0b:64:0a:0d:3d:8e:f8:de:aa:38:c4:2b:9f:59:0d:47:86:e4: 87:41:13:38:c4:9c:cf:60:f3:3e:43:8d:39:2e:28:a2:de:9e: 90:c8:4f:8e:e0:6f:89:40:8d:f8:58:59:e5:3f:5d:06:3c:84: 25:f3:b9:68:ed:0c:90:1d:66:20:31:ef:9c:31:97:9f:f9:ec: f7:a3:91:0a:37:49:95:2e:5a:25:b6:59:e2:b2:8f:2b:50:84: a2:07:78:cd:50:cf:3c:93:66:a4:b4:e6:50:fe:d3:c4:24:11: d0:6d:4a:6c:5d:b2:3e:6c:12:95:5c:87:e7:43:df:e8:c2:78: bb:06:d7:8b:6d:73:7c:9d:c9:0d:ae:80:e6:c9:e6:ff:3f:e0: 57:3f:4b:53:37:30:5c:a1:51:02:5b:7f:c3:ff:3b:fa:10:42: 8a:0b:f5:a6:3d:fc:21:23:87:12:4b:19:cb:02:ac:df:db:2f: 0d:d2:36:c9:21:a0:57:64:70:2f:6b:53:39:a4:a2:53:7d:33: 33:a8:72:1d:cb:90:1a:4b:16:f7:90:01:f7:42:9f:40:1e:b9: 3d:1d:c7:54:c2:b7:82:00:cd:53:e9:3a:c2:43:49:5c:c8:a8: 7f:aa:e5:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohramS6b5F0xBsPXvB37oVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUxMDI2MTgwMDIwWhcNMjUxMDI3MTgwMDIwWjAzMTEwLwYDVQQD Eyg0MmQxNTJiYTliZGUxNTY5ZWY2MTgxM2U3ODljZGViZmNjZGU5ODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LZ/GRgHTk6MFWor3ASMI+elfz5u ThP7m/MWJ2YN1+aR7+EY4IefAe6uRYqypXxNg18o1Kvd85sUxna5EQik6dBjsRCs oeL2+UiOXUrc4mzTMRZoDsFyEGJ6MlMBzyfPpgducLKArlehNrAg5EHQYV/4bRaE eExrsVLFow0tOIwdQleEu8NuWb+zOT6OZTH6D6fexlhSsl39Guzyjp8AX7kB+lAE mf2ChHOrRZg+a7npGcCQ5edaLxeTweYina3aCE5voUdpNY/WwL71YbxLr5UQwO0c jAVF+sHuVu15Fbjd7L/d17BSq0RsYgONX3E03zksGegwRhnPks7gmnNeWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELRUrqb3hVp72GBPnic3r/M3piQMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet/R+m1/ vV6Eg+rqiqQKuBxIC2QKDT2O+N6qOMQrn1kNR4bkh0ETOMScz2DzPkONOS4oot6e kMhPjuBviUCN+FhZ5T9dBjyEJfO5aO0MkB1mIDHvnDGXn/ns96ORCjdJlS5aJbZZ 4rKPK1CEogd4zVDPPJNmpLTmUP7TxCQR0G1KbF2yPmwSlVyH50Pf6MJ4uwbXi21z fJ3JDa6A5snm/z/gVz9LUzcwXKFRAlt/w/87+hBCigv1pj38ISOHEksZywKs39sv DdI2ySGgV2RwL2tTOaSiU30zM6hyHcuQGksW95AB90KfQB65PR3HVMK3ggDNU+k6 wkNJXMiof6rl5A== -----END CERTIFICATE-----Generated at Sun Oct 26 20:47:05 2025 by rpki-client