$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: arflvJnqvCgYwF2MuIhbifxsczDEjEcjHZyOAjGKVW0= Subject key identifier: 89:D7:E1:1D:1C:65:B8:9A:E6:B5:0A:05:18:A1:86:13:E3:72:0D:26 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01974554164017A7A5B059FE18DB338A06D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0F46 Signing time: Fri 06 Jun 2025 13:00:27 +0000 Manifest this update: Fri 06 Jun 2025 13:00:27 +0000 Manifest next update: Sat 07 Jun 2025 13:00:27 +0000 Files and hashes: 1: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 2: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: AIwY/JTH/rylHS6F+2iE7TXbVMhvecZQ0osX6023Ph4=) 4: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 5: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 6: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 7: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 8: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 9: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 10: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 11: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 12: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (hash: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:54:16:40:17:a7:a5:b0:59:fe:18:db:33:8a:06:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jun 6 13:00:27 2025 GMT Not After : Jun 7 13:00:27 2025 GMT Subject: CN=89d7e11d1c65b89ae6b50a0518a18613e3720d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:f8:ce:f3:7c:fb:29:37:14:8f:4c:6f:38: 42:d5:e8:ed:12:12:20:4d:9a:a5:8c:f1:19:78:bd: 96:07:d5:22:1f:da:1b:15:c9:a9:5a:55:e3:e7:e0: c7:58:b0:5d:d6:ae:7f:69:25:2f:03:68:f8:3f:b7: db:66:7f:8b:bc:ae:ba:f4:c2:5a:74:48:c9:a2:c2: 7c:e6:42:cf:5c:6b:26:db:7c:41:dc:52:26:bb:a8: 24:69:9c:82:6e:6f:bb:32:30:a8:28:9e:67:f7:19: ae:26:12:49:8d:bc:24:2a:4c:18:1b:af:53:1a:15: c8:88:f9:1d:f1:c8:bb:bf:6c:6f:9d:fb:5e:be:58: d1:57:42:ff:8d:6a:22:cc:de:6e:0d:5a:fa:74:6c: 44:7a:f7:58:2e:b8:ab:8b:14:7d:16:4c:98:80:1e: 8a:0a:fc:03:ce:f6:0e:8d:0f:92:34:98:4a:b5:bc: a3:44:ab:e8:fa:20:4d:e3:d7:ba:2d:fc:ad:04:ab: 41:ea:01:79:66:92:a8:a8:72:4b:89:7e:94:be:ae: 03:48:8c:bf:57:db:0c:ce:b9:69:23:aa:64:2e:6f: 7e:dd:b3:3a:55:2c:6e:9c:bd:16:c5:25:32:16:87: 40:19:fe:81:89:b2:c1:33:3a:be:e8:4d:6e:c0:c8: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D7:E1:1D:1C:65:B8:9A:E6:B5:0A:05:18:A1:86:13:E3:72:0D:26 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bf:3a:3c:75:cd:e0:df:61:dd:12:f3:1d:41:f9:81:64:cc: 47:29:0c:8a:20:63:02:71:96:67:5c:6e:23:f6:89:80:7a:19: 87:ef:d2:aa:ad:32:8f:b5:21:42:10:8e:4a:a9:09:51:f1:16: 19:b2:dc:19:bf:ba:47:f5:36:97:07:d6:02:a7:24:c8:52:ca: 65:8b:c0:17:32:dc:27:df:52:82:d8:80:cc:b7:8f:ce:5d:b1: 31:29:4b:9f:aa:2d:04:07:0b:59:ae:c5:af:77:16:7d:06:87: 08:cc:7d:8b:61:3d:9a:8d:93:e2:70:25:78:3c:4b:a8:48:6e: 17:98:3b:95:22:6e:dc:d6:f7:be:bd:9a:cc:0f:6a:a0:b1:6a: f5:1c:f4:41:c9:fd:80:77:48:b5:a4:e1:13:6e:44:86:4d:5e: b1:da:0d:a6:cb:20:49:77:07:65:25:8d:67:6d:a9:18:d8:e7: cd:74:2c:07:60:03:ae:82:40:a5:e1:c6:44:66:0a:88:16:2c: ac:2e:c1:1a:b3:21:b9:f1:70:78:24:12:15:6e:89:19:f7:dc: 02:c3:4e:b9:9d:5d:a0:cc:5c:e2:b8:3d:09:2c:68:93:6b:0e: a8:c0:b1:81:93:b3:e8:d0:9c:de:e9:c3:f4:b0:11:6e:ce:58: fa:8d:c9:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFVBZAF6elsFn+GNszigbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNjA2MTMwMDI3WhcNMjUwNjA3MTMwMDI3WjAzMTEwLwYDVQQD Eyg4OWQ3ZTExZDFjNjViODlhZTZiNTBhMDUxOGExODYxM2UzNzIwZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5P4zvN8+yk3FI9MbzhC1ejtEhIg TZqljPEZeL2WB9UiH9obFcmpWlXj5+DHWLBd1q5/aSUvA2j4P7fbZn+LvK669MJa dEjJosJ85kLPXGsm23xB3FImu6gkaZyCbm+7MjCoKJ5n9xmuJhJJjbwkKkwYG69T GhXIiPkd8ci7v2xvnftevljRV0L/jWoizN5uDVr6dGxEevdYLririxR9FkyYgB6K CvwDzvYOjQ+SNJhKtbyjRKvo+iBN49e6LfytBKtB6gF5ZpKoqHJLiX6Uvq4DSIy/ V9sMzrlpI6pkLm9+3bM6VSxunL0WxSUyFodAGf6BibLBMzq+6E1uwMg1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInX4R0cZbia5rUKBRihhhPjcg0mMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJr86PHXN 4N9h3RLzHUH5gWTMRykMiiBjAnGWZ1xuI/aJgHoZh+/Sqq0yj7UhQhCOSqkJUfEW GbLcGb+6R/U2lwfWAqckyFLKZYvAFzLcJ99SgtiAzLePzl2xMSlLn6otBAcLWa7F r3cWfQaHCMx9i2E9mo2T4nAleDxLqEhuF5g7lSJu3Nb3vr2azA9qoLFq9Rz0Qcn9 gHdItaThE25Ehk1esdoNpssgSXcHZSWNZ22pGNjnzXQsB2ADroJApeHGRGYKiBYs rC7BGrMhufFweCQSFW6JGffcAsNOuZ1doMxc4rg9CSxok2sOqMCxgZOz6NCc3unD 9LARbs5Y+o3J8g== -----END CERTIFICATE-----Generated at Fri Jun 6 23:37:26 2025 by rpki-client