$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: jUJFccP3ZlRdB6bpkNGUNuDRCki0Xc8qCHCIwlQCZaQ= Subject key identifier: B4:9D:3F:B8:78:F4:E6:8E:13:44:8F:84:4C:60:B1:F7:41:73:8C:22 Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 01974BC4610B9A54B7C4A5F5215E07AD315E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 09CA Signing time: Sat 07 Jun 2025 19:00:50 +0000 Manifest this update: Sat 07 Jun 2025 19:00:50 +0000 Manifest next update: Sun 08 Jun 2025 19:00:50 +0000 Files and hashes: 1: 7hJlVvAGbCOpuMIAbRPmhI1LyJk.roa (hash: kwYrJ2B8iMONESsXhh99M7N/9TNCRx/vPINN+t9MxVk=) 2: SUOAfAQ0XA-NwcRtQiSTfyb4Wy8.roa (hash: e05e72W3+Ol/fZOV0pLIuKL4jo9MMxa/XkoeJUlntxg=) 3: TiEA9Nu2FjMVNVi_yHMgYwzLbr0.roa (hash: Tll4LKnun0VoyN+6bo73x6XxD7PysP5fIYKZ9UnMf54=) 4: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 5: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=) 6: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=) 7: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: YTBgSGabOqzyUdBwkHZhkWhXPspAGMNVd5kPIt6KzB0=) 8: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=) 9: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=) 10: jUEYHb-GuhXwiI1SopLXVRt5GiY.roa (hash: N8zIemkmgk5a0TVxAU9OTz5oZOkNeALYs1e0nI4AZAE=) 11: zrOybo8OUdo1YWpvdexahXHtucc.roa (hash: EWyOKZff8iXaRwsSXU+RwbJXdez1LiNZod4BRpq2JDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:c4:61:0b:9a:54:b7:c4:a5:f5:21:5e:07:ad:31:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: Jun 7 19:00:50 2025 GMT Not After : Jun 8 19:00:50 2025 GMT Subject: CN=b49d3fb878f4e68e13448f844c60b1f741738c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:8d:6b:85:24:10:1e:df:ac:28:22:2a:92: 32:eb:bb:49:10:93:c8:35:fa:67:83:fd:bb:5c:53: 1d:6c:58:d0:ac:6a:bd:52:db:e7:a7:3d:ed:b8:72: c4:e2:1c:86:c5:e6:79:d1:26:4d:20:7c:85:11:1c: 3b:fe:46:9a:d6:6b:77:c2:5d:8e:c1:ab:9a:ad:d8: 84:87:22:8d:15:48:e4:13:3a:7a:09:db:3e:8c:21: 2c:7f:10:c1:22:0d:e3:4f:4c:1c:67:d3:b7:2c:29: f4:fd:68:12:88:86:41:be:9e:8e:12:69:9a:89:b1: ff:b9:7b:1f:f9:d9:8a:dc:24:32:ba:b4:63:17:d9: 39:e8:60:95:94:8d:c7:db:5a:97:fd:7e:0a:fc:00: b6:98:d3:e5:1e:ec:e8:13:0c:11:90:92:10:50:1e: 29:0d:c1:e1:0a:d8:91:76:36:8e:5f:70:7e:0f:3b: e7:51:8b:10:a0:5e:57:11:f5:67:0d:ed:4d:f9:50: 6a:09:02:96:12:69:93:6e:2b:39:41:4c:51:7f:d3: 32:88:ed:29:7e:92:87:51:4e:01:d2:cb:8e:85:ee: 3a:f5:1a:11:f6:9d:00:39:5c:29:91:e7:36:98:a1: 57:98:69:72:d9:39:a0:73:ce:7c:b6:64:74:b5:21: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9D:3F:B8:78:F4:E6:8E:13:44:8F:84:4C:60:B1:F7:41:73:8C:22 X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:7a:de:21:9d:bc:bf:4e:64:4d:ba:c4:72:d8:e3:1f:66:19: 64:87:ea:b0:82:c4:03:3c:52:cd:e8:67:d3:49:d4:5d:59:60: 96:93:db:0b:75:89:88:91:f5:ba:51:7e:3b:02:f7:ba:9f:71: 49:2c:c7:9c:b3:33:97:b6:3e:25:1e:f7:1a:a2:a3:06:a5:06: dd:d7:61:83:be:d5:87:4b:50:02:49:0e:02:31:45:ce:24:b1: 0b:c1:12:a3:d1:c6:e8:cc:aa:4d:62:83:82:a0:da:75:2f:a3: 79:b7:7f:ed:36:2a:06:8e:79:ee:34:76:7c:7b:a8:fe:2c:29: 07:53:cd:51:1b:7a:73:34:f4:04:ae:d2:2b:cf:da:c2:55:e4: bb:f7:b0:70:0a:9c:db:d4:00:fe:db:8a:cd:23:85:df:90:d3: 17:2b:4a:08:93:61:19:74:c1:33:1a:55:bb:3b:16:ec:44:02: 23:dd:26:78:7c:0a:50:4c:8a:71:d5:4f:f3:5b:3e:d3:a6:66: 9a:41:a2:b8:28:d4:3a:9b:48:ea:e5:e1:69:cc:81:e9:6b:26: e6:0c:b2:9e:a7:a5:8a:de:92:6b:03:b3:cf:7d:36:da:1f:fe: 32:69:23:9d:f1:4b:97:4e:73:7b:c8:e9:6f:cf:ae:1c:37:fd: c5:1a:cc:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLxGELmlS3xKX1IV4HrTFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUwNjA3MTkwMDUwWhcNMjUwNjA4MTkwMDUwWjAzMTEwLwYDVQQD EyhiNDlkM2ZiODc4ZjRlNjhlMTM0NDhmODQ0YzYwYjFmNzQxNzM4YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JKNa4UkEB7frCgiKpIy67tJEJPI Nfpng/27XFMdbFjQrGq9Utvnpz3tuHLE4hyGxeZ50SZNIHyFERw7/kaa1mt3wl2O wauardiEhyKNFUjkEzp6Cds+jCEsfxDBIg3jT0wcZ9O3LCn0/WgSiIZBvp6OEmma ibH/uXsf+dmK3CQyurRjF9k56GCVlI3H21qX/X4K/AC2mNPlHuzoEwwRkJIQUB4p DcHhCtiRdjaOX3B+DzvnUYsQoF5XEfVnDe1N+VBqCQKWEmmTbis5QUxRf9MyiO0p fpKHUU4B0suOhe469RoR9p0AOVwpkec2mKFXmGly2Tmgc858tmR0tSGTyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSdP7h49OaOE0SPhExgsfdBc4wiMB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXreIZ28 v05kTbrEctjjH2YZZIfqsILEAzxSzehn00nUXVlglpPbC3WJiJH1ulF+OwL3up9x SSzHnLMzl7Y+JR73GqKjBqUG3ddhg77Vh0tQAkkOAjFFziSxC8ESo9HG6MyqTWKD gqDadS+jebd/7TYqBo557jR2fHuo/iwpB1PNURt6czT0BK7SK8/awlXku/ewcAqc 29QA/tuKzSOF35DTFytKCJNhGXTBMxpVuzsW7EQCI90meHwKUEyKcdVP81s+06Zm mkGiuCjUOptI6uXhacyB6Wsm5gyynqelit6SawOzz3022h/+MmkjnfFLl05ze8jp b8+uHDf9xRrMbw== -----END CERTIFICATE-----Generated at Sun Jun 8 06:11:15 2025 by rpki-client