$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: Oy+kEivG5CtNb1j2x58xx0w3fnLnO9HARToTVk4kMeU= Subject key identifier: A3:DC:B4:CF:57:B5:7C:FB:73:10:DA:C5:74:A9:AB:36:99:6C:0A:FB Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 01992CA22EB7C0AB1367ED1F9FA5333F4197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 1687 Signing time: Tue 09 Sep 2025 04:00:50 +0000 Manifest this update: Tue 09 Sep 2025 04:00:50 +0000 Manifest next update: Wed 10 Sep 2025 04:00:50 +0000 Files and hashes: 1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=) 2: DIuSabtBbR2nQm3WZSy9ze7IVZg.roa (hash: 2rVX0GGpPvWmCFxQ7xML0aabrAFCH5UZoizKMnJ47/I=) 3: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=) 4: HyUq2HM4kVyO5I9xjv23WW5w1ic.roa (hash: OoUZqAFbwPuNe3DMemRAFjc9wb0LotNFxJCnVpSwfHc=) 5: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=) 6: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=) 7: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=) 8: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=) 9: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=) 10: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=) 11: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=) 12: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: MjxFymzmWLfh9RCyAR/bS9jk6ThMJSK8/7R49oc/xo4=) 13: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:a2:2e:b7:c0:ab:13:67:ed:1f:9f:a5:33:3f:41:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Sep 9 04:00:50 2025 GMT Not After : Sep 10 04:00:50 2025 GMT Subject: CN=a3dcb4cf57b57cfb7310dac574a9ab36996c0afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:10:14:eb:a6:59:94:e1:ac:bc:a0:a2:1f: 15:b5:9a:24:a0:ea:6b:91:f4:40:61:45:69:cb:e9: 10:20:a3:61:21:40:31:b7:6b:01:92:75:74:af:cc: a5:9a:d1:08:5b:5d:94:90:fa:0e:2f:29:f2:63:a3: da:e9:c3:e6:cd:db:25:37:d5:5b:da:8f:61:34:35: 7b:c2:c0:35:ee:37:37:52:fb:69:b8:bc:66:c3:ea: 7d:73:7c:bb:1b:27:68:7c:09:8f:ac:b5:d6:b2:40: 20:8e:60:ee:bd:e5:a7:c6:c4:fd:65:be:0c:05:98: 1e:4a:27:8f:26:27:63:8d:8e:bc:c3:1b:58:29:9b: 03:d7:2b:bc:78:06:8e:33:ed:bb:c0:5c:52:3d:9c: 3a:29:fa:0c:68:af:63:7e:7e:df:56:2b:2b:ae:b2: d0:59:bc:59:30:c4:79:23:87:89:8b:49:62:68:65: bc:5c:64:93:38:ed:9e:b5:73:85:d6:f6:65:3f:9c: e4:25:65:45:a8:71:90:4a:1f:c3:5e:d3:14:ed:60: 98:80:85:6b:28:22:48:66:8f:c8:73:2b:b0:79:8e: 3b:dd:2e:84:21:2a:04:a7:58:68:eb:ed:65:bc:bf: b9:bb:6a:e8:82:ea:6e:a1:68:ca:ad:14:c2:b4:b0: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DC:B4:CF:57:B5:7C:FB:73:10:DA:C5:74:A9:AB:36:99:6C:0A:FB X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1f:05:02:84:26:5f:fd:4c:fc:3f:6b:15:73:b4:3e:3f:51: 45:78:09:9a:2e:99:03:16:3b:60:e2:47:f8:87:a6:ac:58:b0: 06:46:66:4c:61:02:24:83:92:f8:f1:6d:8f:47:99:73:c4:7a: f1:02:85:a1:c3:d3:ab:4c:b2:82:72:59:5b:1e:de:b5:f7:61: 28:90:23:d6:fc:c8:f6:58:8a:b6:d5:1a:4f:bc:5b:26:42:bd: 84:6e:ca:34:de:08:12:8b:c2:1c:d3:ad:bf:44:b0:e5:dc:96: 4c:89:06:92:29:e1:03:64:ca:5a:b3:1c:46:85:fd:a5:ca:28: 77:98:0d:bc:16:bc:87:ca:e9:5c:12:b7:d6:3a:fd:d0:7a:e3: 19:40:6a:46:9e:aa:e3:e1:5b:01:df:cf:7a:42:e4:d6:fe:ee: d0:dc:75:3e:c2:a7:6e:c2:cd:fa:a5:de:0a:3c:ae:35:30:f3: 9c:8a:ba:cb:97:d6:85:e2:db:8c:4d:22:bd:c7:0e:7e:ee:9d: 07:9e:12:19:2e:f6:bc:4a:13:60:99:ae:bb:a6:18:f3:e7:0a: 40:c5:c0:28:4b:00:d4:c5:07:8d:0a:cb:6d:52:d4:d0:c2:38: 9a:c1:e0:44:a3:15:ad:08:72:8e:7f:ca:0f:1c:f0:06:ef:a9: d3:71:18:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksoi63wKsTZ+0fn6UzP0GXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjUwOTA5MDQwMDUwWhcNMjUwOTEwMDQwMDUwWjAzMTEwLwYDVQQD EyhhM2RjYjRjZjU3YjU3Y2ZiNzMxMGRhYzU3NGE5YWIzNjk5NmMwYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUsQFOumWZThrLygoh8VtZokoOpr kfRAYUVpy+kQIKNhIUAxt2sBknV0r8ylmtEIW12UkPoOLynyY6Pa6cPmzdslN9Vb 2o9hNDV7wsA17jc3UvtpuLxmw+p9c3y7GydofAmPrLXWskAgjmDuveWnxsT9Zb4M BZgeSiePJidjjY68wxtYKZsD1yu8eAaOM+27wFxSPZw6KfoMaK9jfn7fVisrrrLQ WbxZMMR5I4eJi0liaGW8XGSTOO2etXOF1vZlP5zkJWVFqHGQSh/DXtMU7WCYgIVr KCJIZo/IcyuweY473S6EISoEp1ho6+1lvL+5u2rogupuoWjKrRTCtLCP6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPctM9XtXz7cxDaxXSpqzaZbAr7MB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqx8FAoQm X/1M/D9rFXO0Pj9RRXgJmi6ZAxY7YOJH+IemrFiwBkZmTGECJIOS+PFtj0eZc8R6 8QKFocPTq0yygnJZWx7etfdhKJAj1vzI9liKttUaT7xbJkK9hG7KNN4IEovCHNOt v0Sw5dyWTIkGkinhA2TKWrMcRoX9pcood5gNvBa8h8rpXBK31jr90HrjGUBqRp6q 4+FbAd/PekLk1v7u0Nx1PsKnbsLN+qXeCjyuNTDznIq6y5fWheLbjE0ivccOfu6d B54SGS72vEoTYJmuu6YY8+cKQMXAKEsA1MUHjQrLbVLU0MI4msHgRKMVrQhyjn/K DxzwBu+p03EY6A== -----END CERTIFICATE-----Generated at Tue Sep 9 12:45:54 2025 by rpki-client