$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: 889OQ6m3sRAP5QPM1maWFfMziABS+Ze3ih2DUZs03K8= Subject key identifier: D6:33:C7:1F:98:C5:54:E1:E4:F6:0E:7F:75:1B:2D:F0:50:67:B2:B4 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 01992255B6829EA89ADA61B785FD4BF508A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 148F Signing time: Sun 07 Sep 2025 04:01:06 +0000 Manifest this update: Sun 07 Sep 2025 04:01:06 +0000 Manifest next update: Mon 08 Sep 2025 04:01:06 +0000 Files and hashes: 1: 1-FSCARn17wWw6WjvMiMGNYzthco.roa (hash: WzPC2hd+hE5fhExQNNOD10aWRIj2XENdQ2evH7suYjY=) 2: 4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa (hash: 9LRN3dhEIGXRSt5kx+/0cte7If5ewtrmgKSLFoQCoRA=) 3: 7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa (hash: j/PlTPWJXoAbzz7GDCcNEwPNZni/IbWZSAVFS2c7T/A=) 4: ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa (hash: R5pOTkBAAT7TRu9QQOKBqiaak7g3rRzRJ3OAgIJQHig=) 5: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: GmXZAJnfmIJ4X2z1ZHKL6GwaPEl5Zq8hLTvUgayFnqo=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: Lf1cCl1IpFmYHIudcOFMfjDfEHo.roa (hash: KjEuRJMPD034xqLQUzhOXBLOQ1h7H0ojX7rXNXHplxI=) 8: _hNjOcARC5ny-TPLISrm1ofTPfM.roa (hash: USSWK8fGx8ZYhYqn9tdxp5t4H5mEj6fREHx4NuHsuIs=) 9: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 10: ands1ewW_p4rUPNxNNwaH3t7Wgw.roa (hash: r0Kt8ppRm38RnP39fdx5wDLkfswfrhUk1HCm9MglBrU=) 11: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 12: u_qHWW7Hs6TG9DcD4BT0NhbWLvI.roa (hash: yQWdgUPHoOST9WB6Rg3EXAASM0wMNoAjl/d3+4N9/4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:55:b6:82:9e:a8:9a:da:61:b7:85:fd:4b:f5:08:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Sep 7 04:01:06 2025 GMT Not After : Sep 8 04:01:06 2025 GMT Subject: CN=d633c71f98c554e1e4f60e7f751b2df05067b2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:7d:86:24:cb:ce:ad:7e:62:f7:14:f7:77: 33:e0:b2:da:b9:5e:67:ac:d3:9b:3a:4f:cb:d5:8f: cf:da:a5:8c:4f:05:c5:f0:bd:59:9a:08:a4:5b:45: 59:17:d6:7d:c2:ec:f1:44:05:69:5d:53:07:71:1e: 53:cb:16:d1:70:98:8c:2a:3c:49:39:8a:3b:eb:97: 3b:d8:76:ed:a5:cc:f2:b4:b1:4d:0e:2c:31:9a:bc: e0:89:e1:3f:3e:cf:77:a5:72:cc:fd:49:6f:10:57: b2:de:08:ad:e0:51:7c:bf:8a:ed:4f:08:5e:b1:52: 08:ff:e4:e7:39:bc:29:d6:d3:54:0d:a9:7c:fc:f3: 22:b8:d3:b0:b6:8f:1c:c5:9a:76:a5:f5:f4:f1:f8: 2a:91:be:2e:e7:6c:f0:da:26:74:74:72:48:43:32: a7:b1:c6:37:53:0b:12:e8:e3:a5:a3:58:a3:55:2a: 63:2f:ed:b2:fa:42:47:50:dc:4e:a9:06:68:36:5c: 6d:b0:81:45:95:b9:92:03:15:2b:92:03:9b:06:b9: 54:9c:62:a1:ef:07:3f:1d:e5:6a:32:01:86:ac:09: f8:25:16:99:0c:a8:dc:a0:d5:7e:6f:9a:4e:fc:45: 9f:46:2c:c2:6b:9b:11:ac:df:ea:db:07:5d:b0:90: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:C7:1F:98:C5:54:E1:E4:F6:0E:7F:75:1B:2D:F0:50:67:B2:B4 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b3:bb:b0:7f:8e:06:d2:cf:3b:c9:93:96:6d:6f:6b:36:61: ee:65:5c:c4:c4:b3:6e:0b:5b:72:a3:e2:1b:89:2f:09:b1:39: 4a:8c:f7:74:18:2e:95:10:9a:01:52:be:a3:09:b0:13:94:a5: a7:c1:77:3d:7b:a8:c7:2d:6a:2c:6b:a1:53:a1:4c:b3:65:f2: db:92:b6:cf:06:29:5b:00:a3:8f:ea:38:a2:c4:be:1d:05:39: d0:2e:ec:5d:73:bc:25:7f:22:81:32:b3:4f:b4:b1:06:8b:59: 5e:eb:6a:ba:38:4a:86:8f:52:1f:b8:71:46:6e:7b:de:e0:2f: 53:fa:06:2c:00:5c:f5:37:e6:4d:dc:d1:85:2e:5c:ec:44:e6: a4:1c:18:a9:53:a7:ea:04:5d:f8:7f:be:c0:9e:c6:0a:18:fe: 29:3b:1b:3a:92:52:98:1b:8d:08:6a:5d:3c:9c:01:19:a6:73: f1:a2:3f:ce:c2:fe:93:22:2f:59:dc:95:fe:19:c1:68:df:d2: 95:94:ad:3b:cb:2f:b1:03:43:ea:6b:37:24:40:47:f3:77:6b: 9a:af:9b:5b:f3:ef:06:26:d8:55:97:47:1d:44:4f:c7:86:c0: d6:1e:b8:3e:ce:c0:d7:28:88:9f:e9:5b:cb:17:af:06:eb:b0: ba:5d:67:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiVbaCnqia2mG3hf1L9QijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwOTA3MDQwMTA2WhcNMjUwOTA4MDQwMTA2WjAzMTEwLwYDVQQD EyhkNjMzYzcxZjk4YzU1NGUxZTRmNjBlN2Y3NTFiMmRmMDUwNjdiMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDx9hiTLzq1+YvcU93cz4LLauV5n rNObOk/L1Y/P2qWMTwXF8L1ZmgikW0VZF9Z9wuzxRAVpXVMHcR5TyxbRcJiMKjxJ OYo765c72HbtpczytLFNDiwxmrzgieE/Ps93pXLM/UlvEFey3git4FF8v4rtTwhe sVII/+TnObwp1tNUDal8/PMiuNOwto8cxZp2pfX08fgqkb4u52zw2iZ0dHJIQzKn scY3UwsS6OOlo1ijVSpjL+2y+kJHUNxOqQZoNlxtsIFFlbmSAxUrkgObBrlUnGKh 7wc/HeVqMgGGrAn4JRaZDKjcoNV+b5pO/EWfRizCa5sRrN/q2wddsJBlLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYzxx+YxVTh5PYOf3UbLfBQZ7K0MB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbO7sH+O BtLPO8mTlm1vazZh7mVcxMSzbgtbcqPiG4kvCbE5Soz3dBgulRCaAVK+owmwE5Sl p8F3PXuoxy1qLGuhU6FMs2Xy25K2zwYpWwCjj+o4osS+HQU50C7sXXO8JX8igTKz T7SxBotZXutqujhKho9SH7hxRm573uAvU/oGLABc9TfmTdzRhS5c7ETmpBwYqVOn 6gRd+H++wJ7GChj+KTsbOpJSmBuNCGpdPJwBGaZz8aI/zsL+kyIvWdyV/hnBaN/S lZStO8svsQND6ms3JEBH83drmq+bW/PvBibYVZdHHURPx4bA1h64Ps7A1yiIn+lb yxevBuuwul1nLQ== -----END CERTIFICATE-----Generated at Sun Sep 7 13:49:20 2025 by rpki-client