$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: /4tNeHfLfibBC9EM99i7VdXQyLG3zNW7dvi+kI89IBI= Subject key identifier: 68:85:EE:27:CF:D7:9B:93:F3:08:66:90:05:28:26:4F:84:41:55:E0 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 01996058F0FBB9F707504AA7186B8AD6DC5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 09E4 Signing time: Fri 19 Sep 2025 05:01:05 +0000 Manifest this update: Fri 19 Sep 2025 05:01:05 +0000 Manifest next update: Sat 20 Sep 2025 05:01:05 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (hash: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: 95D1rcAkQ8fSGYiVr1LZLtEd+Kk+K4yovGBKd3yJpcQ=) 7: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 8: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 9: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 10: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 11: cJ1rW8VClyRweGHbeEMtWBhnXAQ.roa (hash: xDtfcFeuvoc7H53dx6XMFpyYCc4Qq+FPUImWBrlN+70=) 12: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 13: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 14: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 15: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:60:58:f0:fb:b9:f7:07:50:4a:a7:18:6b:8a:d6:dc:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Sep 19 05:01:05 2025 GMT Not After : Sep 20 05:01:05 2025 GMT Subject: CN=6885ee27cfd79b93f30866900528264f844155e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:76:05:60:d5:57:68:d6:94:3d:59:c8:63: 31:e7:e0:13:6d:8d:db:b7:71:3f:ec:66:a3:4d:eb: 42:e8:e3:96:79:4a:4b:ff:77:ac:e7:a5:a6:d0:3c: 80:e7:d4:21:0b:77:3c:07:3b:c5:8a:6a:98:7a:18: 2e:db:04:b9:9b:dc:80:52:80:bc:f5:7c:02:09:ed: 19:00:87:4c:a2:bf:2c:70:cc:f8:9f:c6:3c:55:6d: 8e:aa:dc:a6:1d:b0:f5:64:dc:c2:c8:96:20:97:82: fe:49:1f:df:c7:07:8d:a8:73:c8:89:d5:e5:41:ae: 7e:58:98:f9:6c:75:06:74:b3:e9:88:07:f1:7c:73: 02:ef:82:5c:32:fc:9b:21:4d:66:1e:ad:eb:8e:87: c8:44:9f:68:01:34:bd:98:08:54:20:cc:c4:e8:ae: 28:50:9b:ac:ad:a9:a6:c1:9e:70:12:86:f3:84:aa: 07:63:e6:2f:e8:5b:82:bc:53:f5:4e:67:ff:d7:48: 58:91:d5:ba:7a:75:59:a2:86:e0:f0:45:26:8a:ad: 28:83:8b:ab:3b:bc:8f:7c:37:ce:98:05:41:4a:e2: ca:e5:a2:a6:ae:4d:55:58:ce:25:60:8c:95:a9:2a: 47:74:c8:e7:ff:e2:1c:59:c0:8c:4b:44:a1:c5:23: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:85:EE:27:CF:D7:9B:93:F3:08:66:90:05:28:26:4F:84:41:55:E0 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:07:a2:a5:79:d5:82:36:6b:64:1c:67:df:05:f3:63:21:58: 48:c2:27:bd:f5:8d:b1:83:4d:19:4a:33:e3:52:bd:fc:3c:66: 51:75:90:bc:a9:1e:9f:86:2d:7b:5f:0c:c0:a3:ed:63:10:56: cd:a1:fe:40:54:6b:b1:fc:e7:56:79:ae:8f:d4:69:1c:a3:7f: 49:78:da:ec:ec:71:c1:3b:86:09:d0:fa:e3:97:ef:d9:69:62: 23:23:6c:67:fd:40:f4:aa:b9:4a:30:2e:ed:49:44:57:b4:1c: eb:2b:87:f9:d9:47:bc:15:39:a4:86:17:2b:9d:d1:c1:d7:93: 20:b8:35:ff:be:1b:d5:99:d4:51:01:19:7f:8b:0e:09:3c:8c: ce:d7:58:25:8d:65:9f:23:28:46:74:53:74:b0:7d:7c:47:39: 40:e0:e9:5d:9b:cb:5a:a8:1d:89:90:99:69:99:6d:5a:ea:b8: e7:ce:7b:2a:77:59:18:ac:89:88:53:22:70:81:8e:57:15:1e: 6a:d5:13:b2:d9:fe:67:f2:48:7f:7e:51:bb:aa:07:38:50:a3: 4e:44:8d:c9:b2:9a:d5:5d:87:c2:f8:26:9e:d5:5c:5f:b2:1d: b4:e2:a4:96:dd:6a:89:9e:3a:67:11:f6:da:20:c1:40:74:9d: fc:f2:dd:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlgWPD7ufcHUEqnGGuK1txeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUwOTE5MDUwMTA1WhcNMjUwOTIwMDUwMTA1WjAzMTEwLwYDVQQD Eyg2ODg1ZWUyN2NmZDc5YjkzZjMwODY2OTAwNTI4MjY0Zjg0NDE1NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFp2BWDVV2jWlD1ZyGMx5+ATbY3b t3E/7GajTetC6OOWeUpL/3es56Wm0DyA59QhC3c8BzvFimqYehgu2wS5m9yAUoC8 9XwCCe0ZAIdMor8scMz4n8Y8VW2OqtymHbD1ZNzCyJYgl4L+SR/fxweNqHPIidXl Qa5+WJj5bHUGdLPpiAfxfHMC74JcMvybIU1mHq3rjofIRJ9oATS9mAhUIMzE6K4o UJusrammwZ5wEobzhKoHY+Yv6FuCvFP1Tmf/10hYkdW6enVZoobg8EUmiq0og4ur O7yPfDfOmAVBSuLK5aKmrk1VWM4lYIyVqSpHdMjn/+IcWcCMS0ShxSOJjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiF7ifP15uT8whmkAUoJk+EQVXgMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhweipXnV gjZrZBxn3wXzYyFYSMInvfWNsYNNGUoz41K9/DxmUXWQvKken4Yte18MwKPtYxBW zaH+QFRrsfznVnmuj9RpHKN/SXja7OxxwTuGCdD645fv2WliIyNsZ/1A9Kq5SjAu 7UlEV7Qc6yuH+dlHvBU5pIYXK53RwdeTILg1/74b1ZnUUQEZf4sOCTyMztdYJY1l nyMoRnRTdLB9fEc5QODpXZvLWqgdiZCZaZltWuq45857KndZGKyJiFMicIGOVxUe atUTstn+Z/JIf35Ru6oHOFCjTkSNybKa1V2HwvgmntVcX7IdtOKklt1qiZ46ZxH2 2iDBQHSd/PLd7A== -----END CERTIFICATE-----Generated at Fri Sep 19 13:55:47 2025 by rpki-client