$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: ckSEomIH2ckGpUff7r+vhxQ9NvkGOFfXmkBH4tQwakA= Subject key identifier: 77:27:B1:A8:30:DB:C3:48:44:F9:26:DB:7A:D2:28:46:2F:54:C9:3F Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01995AFAED5ACA5E5181A1135276F2EFA049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 16AE Signing time: Thu 18 Sep 2025 04:00:17 +0000 Manifest this update: Thu 18 Sep 2025 04:00:17 +0000 Manifest next update: Fri 19 Sep 2025 04:00:17 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: GUZqbJwc0xsReJ+9PUhd61DgZ8CouLgqEYpXqyhQaz0=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: Uiw61tAGScQnApLWlufCVA66z9Y.roa (hash: Hw7/m9xgxiAFyXzRbWhOIkj9ycttPoKqdmlv3b1i5TA=) 8: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5a:fa:ed:5a:ca:5e:51:81:a1:13:52:76:f2:ef:a0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Sep 18 04:00:17 2025 GMT Not After : Sep 19 04:00:17 2025 GMT Subject: CN=7727b1a830dbc34844f926db7ad228462f54c93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:87:c6:bf:93:e4:04:87:b7:09:3d:be:2a: 64:60:82:90:03:fa:dc:4b:55:20:76:02:39:16:7a: 2a:c1:85:6d:ec:c2:f8:58:4a:77:9d:f5:df:ea:5d: 71:1e:5e:cd:40:40:24:1e:8d:44:f3:30:6a:e5:84: 51:ac:ed:bc:74:2d:dc:c8:ce:35:fd:f5:3b:db:c5: 46:c5:53:e1:23:d8:ce:84:7d:b8:24:c7:a0:f6:5c: a8:f0:c0:b6:52:43:ee:8f:d4:36:db:30:64:7f:36: 05:ed:f3:dc:1e:fd:f0:67:ff:50:eb:a6:8c:2b:c6: 6b:d0:dd:d5:ba:5a:6d:be:b3:7c:f1:c8:0d:6a:b9: 6d:c2:cc:f9:3c:60:b6:2d:db:75:03:33:5b:04:ae: eb:eb:a7:a4:ab:96:f3:de:b2:c8:fd:55:89:d3:d1: 80:05:dd:81:f6:9f:77:03:f1:b9:b8:c1:a3:fb:13: ad:aa:86:06:ff:25:7e:9b:8f:a6:6e:82:b2:a7:6c: 37:84:e4:d0:e7:a1:86:fe:c3:15:a2:88:23:3e:bf: ce:29:e4:26:53:ca:e3:d9:ca:29:ed:a7:2c:af:66: 5a:22:14:2e:44:d1:af:b9:0a:14:37:5b:5f:3a:1a: bf:81:09:e4:79:62:99:21:07:48:13:a5:1f:c0:d1: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:27:B1:A8:30:DB:C3:48:44:F9:26:DB:7A:D2:28:46:2F:54:C9:3F X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:76:69:02:03:35:1c:29:5c:2f:10:2e:50:71:c3:69:c7:9b: e3:82:d7:40:db:90:dc:f1:58:bf:bc:45:d5:bc:af:66:c0:f7: 3b:73:a2:fb:3d:43:6f:b7:e5:c8:bd:de:a8:0d:24:0c:db:1e: f1:29:4f:cb:91:af:80:80:ec:2b:ab:fe:ff:49:26:ad:d0:7b: e9:bd:d0:35:86:55:17:b5:15:fb:dc:c2:64:55:d1:35:41:73: c7:ea:f6:f3:a5:21:51:b1:13:8e:ea:d4:e5:8e:f3:80:bb:0a: 6b:8a:55:f0:bd:eb:64:f2:62:3d:7a:8c:8c:70:06:79:19:08: 3d:c8:84:86:54:fa:20:cb:6d:be:7d:89:d7:07:cb:20:94:fd: a3:97:5c:b9:30:f8:a6:56:04:53:43:9f:88:f0:c3:e1:41:62: 4e:ee:a7:3a:95:de:e7:7b:f4:15:15:8d:ed:47:a2:2f:6d:6a: 86:e4:da:56:cb:b6:05:7e:f5:44:02:3b:60:d3:77:a5:64:95: 80:a5:63:db:18:5e:f8:3f:4f:32:da:43:a9:ff:e4:57:1d:9f: c3:62:b0:0b:27:7f:1d:2b:b0:f7:86:5a:a4:62:28:3c:4d:d7: ae:33:5c:4c:7b:14:53:44:1b:ac:ef:38:19:c3:01:99:bc:78: 1a:12:a4:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZla+u1ayl5RgaETUnby76BJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwOTE4MDQwMDE3WhcNMjUwOTE5MDQwMDE3WjAzMTEwLwYDVQQD Eyg3NzI3YjFhODMwZGJjMzQ4NDRmOTI2ZGI3YWQyMjg0NjJmNTRjOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7GHxr+T5ASHtwk9vipkYIKQA/rc S1UgdgI5FnoqwYVt7ML4WEp3nfXf6l1xHl7NQEAkHo1E8zBq5YRRrO28dC3cyM41 /fU728VGxVPhI9jOhH24JMeg9lyo8MC2UkPuj9Q22zBkfzYF7fPcHv3wZ/9Q66aM K8Zr0N3VulptvrN88cgNarltwsz5PGC2Ldt1AzNbBK7r66ekq5bz3rLI/VWJ09GA Bd2B9p93A/G5uMGj+xOtqoYG/yV+m4+mboKyp2w3hOTQ56GG/sMVoogjPr/OKeQm U8rj2cop7acsr2ZaIhQuRNGvuQoUN1tfOhq/gQnkeWKZIQdIE6UfwNG/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcnsagw28NIRPkm23rSKEYvVMk/MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHZpAgM1 HClcLxAuUHHDaceb44LXQNuQ3PFYv7xF1byvZsD3O3Oi+z1Db7flyL3eqA0kDNse 8SlPy5GvgIDsK6v+/0kmrdB76b3QNYZVF7UV+9zCZFXRNUFzx+r286UhUbETjurU 5Y7zgLsKa4pV8L3rZPJiPXqMjHAGeRkIPciEhlT6IMttvn2J1wfLIJT9o5dcuTD4 plYEU0OfiPDD4UFiTu6nOpXe53v0FRWN7UeiL21qhuTaVsu2BX71RAI7YNN3pWSV gKVj2xhe+D9PMtpDqf/kVx2fw2KwCyd/HSuw94ZapGIoPE3XrjNcTHsUU0QbrO84 GcMBmbx4GhKkmw== -----END CERTIFICATE-----Generated at Thu Sep 18 14:29:49 2025 by rpki-client