$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: PdLSVu5lFtGai/h41LObLEGmnHr+kqEIXi+xW6PUGTk= Subject key identifier: 03:D4:1A:53:0E:D1:97:69:84:D7:5E:71:43:C3:CF:EA:78:55:5B:D6 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 01973C880B0D87E52E7B3A058F1B574471BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 1385 Signing time: Wed 04 Jun 2025 20:00:38 +0000 Manifest this update: Wed 04 Jun 2025 20:00:38 +0000 Manifest next update: Thu 05 Jun 2025 20:00:38 +0000 Files and hashes: 1: 0hFTuA6AYFpULfZQK-DJnDN4HTE.roa (hash: ZWH8sUTXV7vc3XiT9tGW1AKcmChi4TaSnZLt2D9dIPY=) 2: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=) 3: 5w999aY5B-VWAa6ftaNr618pG0E.roa (hash: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=) 4: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: U4KhGhEOtUI+14xE7j6g7qmgGr2J3afNsp/sIl8x7JI=) 5: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=) 6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=) 7: L7V7oBMQWuhH90NOYH_atbAnsH8.roa (hash: plj3XbX2925ks8hdutOLpZj2760YVYJf0gs36tgJmEI=) 8: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=) 9: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=) 10: Yz2WA4YrokT5MNylkkePaMrbf2o.roa (hash: ziXl9mNJzbObSVi2cK+BC9zmxuWzXdJmKO6shLQNMdA=) 11: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=) 12: aVCML_0qfO6OM-B-v0Xw0SaCLis.roa (hash: gzLeZf6vO+ZM/QBYI1anl4lUtsGtfB7flnqVi3ieG9w=) 13: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=) 14: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=) 15: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=) 16: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=) 17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:88:0b:0d:87:e5:2e:7b:3a:05:8f:1b:57:44:71:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jun 4 20:00:38 2025 GMT Not After : Jun 5 20:00:38 2025 GMT Subject: CN=03d41a530ed1976984d75e7143c3cfea78555bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:6a:b0:ef:99:8e:cd:55:a1:01:0d:1b:38: 07:14:4f:7a:a8:a1:e0:32:79:b7:f8:15:b3:17:a0: 4d:74:56:e9:2e:08:5a:16:59:ad:76:86:d3:27:05: 61:db:7b:89:2b:f9:be:dc:36:6c:32:86:7c:f4:e7: cc:16:7b:90:8d:dd:12:61:5f:0d:6d:ee:ef:75:64: f0:ab:ea:fa:93:19:2a:c2:29:9f:99:15:63:e1:0d: 55:5b:5d:f0:4f:7f:a0:31:44:eb:b8:99:d5:6b:8f: e8:44:2b:ca:6c:b9:df:2c:2d:7e:a4:9f:ae:69:d1: 89:6f:ce:30:fe:90:8f:de:a7:03:10:a3:f7:84:f6: 5a:d7:d4:7f:e0:97:2e:01:17:bd:7f:2f:fe:e4:91: 3f:e2:ba:94:33:56:bf:f5:2f:8c:eb:78:36:cc:6b: d2:8c:18:4a:dd:e7:82:ba:01:24:5c:e3:94:07:c1: cf:81:2e:68:e1:75:48:83:35:de:2b:9e:0a:34:46: d4:56:f1:63:9c:49:17:ab:76:0c:a6:a3:ae:3a:9a: 0a:7a:01:bf:7c:57:a8:87:64:b4:5b:e0:38:e7:18: f1:68:9b:5b:db:92:7e:3b:21:65:16:3b:73:aa:8d: e3:8c:da:97:e7:85:9a:cc:c9:fc:43:24:8d:8c:f4: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D4:1A:53:0E:D1:97:69:84:D7:5E:71:43:C3:CF:EA:78:55:5B:D6 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a8:43:b5:d4:c2:a2:f7:da:3a:86:69:43:0b:94:f4:d6:14: ce:7f:bc:98:e7:a0:a8:9c:c3:da:76:c9:71:2c:2e:8f:9a:d4: 3d:72:4a:3c:bd:a7:7f:72:73:71:3c:02:04:e7:be:b7:e5:c8: 45:4a:f4:bb:0c:ad:cd:4f:2e:4d:96:4b:41:62:db:ae:a5:5d: 62:3f:09:f5:42:de:b9:5e:15:09:80:44:29:9d:f5:7b:42:ac: 88:db:ec:ba:b6:1e:e2:9b:d0:44:f6:92:c5:bb:ff:dc:94:bd: 8f:36:b5:02:75:91:18:e1:8e:fa:2c:b4:e4:98:ca:b9:b7:e4: 5b:d8:99:0f:46:03:98:82:2e:f2:11:a6:7d:72:08:5d:4b:1d: 3c:64:97:b7:d6:54:5a:25:38:f2:d3:1f:c2:48:a2:f3:fe:91: 1d:b1:32:28:51:c9:2d:e8:a8:6c:cb:c1:cd:2e:fd:c8:e1:18: 25:56:4b:86:1b:7b:e5:36:97:72:7d:09:18:61:36:cb:2f:90: 93:3a:03:bf:72:18:37:5c:a2:06:0d:b3:fe:bb:9a:b1:a1:c6: 0f:4b:9f:81:51:00:81:df:e3:6d:9e:a1:21:b1:91:aa:fc:31: 29:ac:c9:ea:3b:6b:8e:48:24:bb:1a:93:ea:6e:49:46:0d:ef: 55:f0:35:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8iAsNh+UuezoFjxtXRHG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjUwNjA0MjAwMDM4WhcNMjUwNjA1MjAwMDM4WjAzMTEwLwYDVQQD EygwM2Q0MWE1MzBlZDE5NzY5ODRkNzVlNzE0M2MzY2ZlYTc4NTU1YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeZqsO+Zjs1VoQENGzgHFE96qKHg Mnm3+BWzF6BNdFbpLghaFlmtdobTJwVh23uJK/m+3DZsMoZ89OfMFnuQjd0SYV8N be7vdWTwq+r6kxkqwimfmRVj4Q1VW13wT3+gMUTruJnVa4/oRCvKbLnfLC1+pJ+u adGJb84w/pCP3qcDEKP3hPZa19R/4JcuARe9fy/+5JE/4rqUM1a/9S+M63g2zGvS jBhK3eeCugEkXOOUB8HPgS5o4XVIgzXeK54KNEbUVvFjnEkXq3YMpqOuOpoKegG/ fFeoh2S0W+A45xjxaJtb25J+OyFlFjtzqo3jjNqX54WazMn8QySNjPQ3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPUGlMO0ZdphNdecUPDz+p4VVvWMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6hDtdTC ovfaOoZpQwuU9NYUzn+8mOegqJzD2nbJcSwuj5rUPXJKPL2nf3JzcTwCBOe+t+XI RUr0uwytzU8uTZZLQWLbrqVdYj8J9ULeuV4VCYBEKZ31e0KsiNvsurYe4pvQRPaS xbv/3JS9jza1AnWRGOGO+iy05JjKubfkW9iZD0YDmIIu8hGmfXIIXUsdPGSXt9ZU WiU48tMfwkii8/6RHbEyKFHJLeiobMvBzS79yOEYJVZLhht75TaXcn0JGGE2yy+Q kzoDv3IYN1yiBg2z/ruasaHGD0ufgVEAgd/jbZ6hIbGRqvwxKazJ6jtrjkgkuxqT 6m5JRg3vVfA16w== -----END CERTIFICATE-----Generated at Thu Jun 5 05:25:20 2025 by rpki-client