$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: gPXSCjZKsWTRIElrQ7G0x2z8ltahSnRnICwINlHTrV0= Subject key identifier: EB:F9:B5:A9:2A:D7:BA:D9:91:6D:D3:B2:DD:55:29:1C:17:03:B5:34 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 0199239F4F1AF1F96850D1C9A5B151F0F431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 103E Signing time: Sun 07 Sep 2025 10:01:06 +0000 Manifest this update: Sun 07 Sep 2025 10:01:06 +0000 Manifest next update: Mon 08 Sep 2025 10:01:06 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 3: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: RMC6RzxwO4g8IM8ks0HDObH6Rs8EyAAzJ0/iKjediWU=) 5: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 6: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 7: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 8: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 9: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 10: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 11: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 12: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:9f:4f:1a:f1:f9:68:50:d1:c9:a5:b1:51:f0:f4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Sep 7 10:01:06 2025 GMT Not After : Sep 8 10:01:06 2025 GMT Subject: CN=ebf9b5a92ad7bad9916dd3b2dd55291c1703b534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:f3:58:43:ab:f1:b7:7d:90:93:4d:fd:fc: c2:e3:1d:d5:dc:14:d8:bb:e3:3f:c1:22:58:c3:f3: 57:93:09:c3:1e:4e:c9:2d:a0:93:46:f3:06:34:fd: 4d:e2:7e:a2:e6:c7:c9:59:5e:c5:d3:f0:a1:25:7c: 3c:df:a6:39:97:0d:de:a7:e6:3b:49:90:21:24:33: d7:5c:de:df:5f:f4:f5:aa:59:7c:04:c8:5b:6f:42: f9:78:8a:9e:42:fe:99:13:82:e5:66:82:74:5c:5f: 38:77:37:5c:35:86:56:df:8c:dd:e8:f9:42:25:30: 4e:52:cf:b8:6a:55:64:fa:42:f6:78:59:41:17:bf: a0:d4:a2:58:2f:ed:4b:0b:84:58:d1:46:f9:91:ed: e6:50:07:a1:fc:5b:cb:2a:81:12:96:9c:e5:9b:cb: fd:c3:24:d4:35:d1:48:42:c6:5d:99:2a:8a:00:a6: 17:a0:71:30:1e:17:ab:70:a0:a0:bb:69:c7:e7:fc: c5:c7:3d:1e:e9:d9:21:ab:77:30:ed:15:1d:4a:35: d3:6c:51:94:2a:5c:f4:22:69:39:90:1c:d1:e0:8c: 26:a3:ef:c8:e4:0d:1a:ab:92:f4:cd:e8:26:3b:e9: 52:88:cc:74:03:7e:62:a3:8f:79:c7:cb:23:e4:68: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F9:B5:A9:2A:D7:BA:D9:91:6D:D3:B2:DD:55:29:1C:17:03:B5:34 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c6:aa:48:0c:42:90:91:05:bc:d8:cd:34:47:ca:b9:14:54: ca:a0:79:5e:06:56:96:54:d4:f3:01:5e:07:bd:04:c1:bb:e9: a2:4d:09:c7:c4:b5:70:4e:f7:0b:c4:03:da:17:c3:28:9d:84: 76:54:d7:84:7f:a3:a7:e2:34:f3:0b:a4:c5:4c:ae:69:b9:2c: 4b:8e:fc:27:b2:41:2e:ef:36:e4:30:de:18:8b:10:b7:e1:32: 6e:4e:48:7f:7c:29:58:4d:ea:76:55:c8:65:af:29:83:a0:00: f0:f7:a6:74:ae:9b:3d:e4:48:2a:d1:d2:1c:61:e3:fd:58:20: ca:be:8a:c4:d8:1e:44:4c:62:bf:30:c2:b2:d0:34:38:81:e6: dd:cb:e6:3c:a3:d2:b2:18:8e:44:f5:e8:2f:00:88:52:b2:75: a8:03:01:81:99:bd:e1:17:27:e4:8a:a4:df:a1:7a:23:fd:33: b8:7e:44:bd:73:8d:e9:53:a3:04:4c:d0:50:39:cb:d0:08:1e: c5:a5:1f:68:8f:5d:f2:88:88:09:dc:07:ac:3e:d2:49:8d:53: 1e:62:e3:f5:69:04:b4:9e:bc:51:61:c2:8c:c2:cb:58:9e:43: 01:c6:68:b9:df:6c:69:1e:32:ee:c8:46:b4:71:85:a3:77:cd: c7:c8:37:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjn08a8floUNHJpbFR8PQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwOTA3MTAwMTA2WhcNMjUwOTA4MTAwMTA2WjAzMTEwLwYDVQQD EyhlYmY5YjVhOTJhZDdiYWQ5OTE2ZGQzYjJkZDU1MjkxYzE3MDNiNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgTzWEOr8bd9kJNN/fzC4x3V3BTY u+M/wSJYw/NXkwnDHk7JLaCTRvMGNP1N4n6i5sfJWV7F0/ChJXw836Y5lw3ep+Y7 SZAhJDPXXN7fX/T1qll8BMhbb0L5eIqeQv6ZE4LlZoJ0XF84dzdcNYZW34zd6PlC JTBOUs+4alVk+kL2eFlBF7+g1KJYL+1LC4RY0Ub5ke3mUAeh/FvLKoESlpzlm8v9 wyTUNdFIQsZdmSqKAKYXoHEwHhercKCgu2nH5/zFxz0e6dkhq3cw7RUdSjXTbFGU Klz0Imk5kBzR4Iwmo+/I5A0aq5L0zegmO+lSiMx0A35io495x8sj5GgtwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv5takq17rZkW3Tst1VKRwXA7U0MB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcaqSAxC kJEFvNjNNEfKuRRUyqB5XgZWllTU8wFeB70Ewbvpok0Jx8S1cE73C8QD2hfDKJ2E dlTXhH+jp+I08wukxUyuabksS478J7JBLu825DDeGIsQt+Eybk5If3wpWE3qdlXI Za8pg6AA8PemdK6bPeRIKtHSHGHj/Vggyr6KxNgeRExivzDCstA0OIHm3cvmPKPS shiORPXoLwCIUrJ1qAMBgZm94Rcn5Iqk36F6I/0zuH5EvXON6VOjBEzQUDnL0Age xaUfaI9d8oiICdwHrD7SSY1THmLj9WkEtJ68UWHCjMLLWJ5DAcZoud9saR4y7shG tHGFo3fNx8g38g== -----END CERTIFICATE-----Generated at Sun Sep 7 14:49:45 2025 by rpki-client