$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: uSKh5+bUi+uL1/L0i54sYSCsonKP13vDiHTVpd7tNB4= Subject key identifier: 13:1C:9A:8C:68:E8:B0:4D:20:DE:B0:4C:FD:7A:57:23:C0:4A:2F:11 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01974AE8EE3F687CB4B748CD6527B198D8B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1594 Signing time: Sat 07 Jun 2025 15:01:08 +0000 Manifest this update: Sat 07 Jun 2025 15:01:08 +0000 Manifest next update: Sun 08 Jun 2025 15:01:08 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: A0bqOeZOYffxU3NDtkc4mlZFzzwx0m8i9RPx6FboK54=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:e8:ee:3f:68:7c:b4:b7:48:cd:65:27:b1:98:d8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jun 7 15:01:08 2025 GMT Not After : Jun 8 15:01:08 2025 GMT Subject: CN=131c9a8c68e8b04d20deb04cfd7a5723c04a2f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:f9:fc:72:77:28:2a:8a:c7:b4:12:c9:de: 34:92:70:16:1b:0e:ff:b1:88:fa:b7:d8:5a:17:00: c4:70:5d:22:39:a0:7f:d3:3a:57:6b:5e:58:79:83: 0f:19:e7:20:19:a0:77:b1:5b:55:6e:3a:f3:e7:24: 1c:ad:60:0f:70:91:49:80:45:e1:a6:b2:b5:a4:64: 97:85:24:9a:a2:f4:86:08:2b:3a:27:75:37:9e:d3: 17:7d:40:d1:eb:79:f0:85:fa:be:45:ab:24:85:a8: 00:81:56:f1:4f:ac:2e:4d:9e:84:c1:20:28:9f:2d: 4b:06:16:71:0b:16:2e:e7:54:9e:51:e6:51:7c:a1: e2:fc:f3:3a:a9:e0:c0:7a:29:17:a6:e2:da:ef:1e: 64:ec:31:d6:68:05:a3:46:5b:df:ca:bd:fc:71:b9: f1:02:11:11:84:b9:79:6a:7f:d2:2c:2a:24:d7:69: 9e:5e:33:47:7c:2a:10:40:4d:dd:93:1c:58:c3:6d: 1c:4e:ef:06:c0:61:a2:86:20:d5:7d:79:dc:d5:f8: 79:c0:fa:29:19:56:7d:80:cc:b4:9c:20:9b:42:0f: 56:d4:92:a4:13:37:b9:7b:73:08:16:58:78:d8:6b: 47:4e:21:a2:e0:99:18:23:37:77:05:dd:83:e2:e6: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:9A:8C:68:E8:B0:4D:20:DE:B0:4C:FD:7A:57:23:C0:4A:2F:11 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:93:e2:92:a9:5e:bd:9f:d6:8d:e1:29:39:35:b7:54:bb:58: e1:2c:f1:9c:3d:41:90:fa:3f:9a:1f:be:ad:6b:11:f6:16:24: ec:ee:f1:f6:3b:65:28:5c:13:f7:21:a0:e2:b1:e0:8b:3c:54: 2b:de:b6:7d:48:fd:50:9b:fa:7d:97:b3:c8:0f:97:ff:1f:eb: fe:85:66:36:36:c2:ef:01:e8:77:37:f1:fd:5e:da:6e:fa:f0: 3c:c7:15:7d:20:a6:9e:b8:b3:ac:28:63:02:8a:ff:23:74:38: 39:17:04:7b:a6:c1:0b:6a:92:ad:b2:01:7f:9e:00:40:e2:1c: ad:42:cd:c5:2d:7c:e2:4b:eb:a1:8f:d4:a5:91:1b:4b:22:6e: 15:2a:ea:75:55:6a:ff:78:94:ea:fe:2d:7c:71:bd:8f:fb:ae: db:3d:ac:35:e1:66:6f:f4:05:7f:34:96:5d:25:0d:7a:c7:8c: 42:b8:56:30:48:f9:33:30:05:b7:3b:e4:79:13:62:af:29:fd: bd:5f:a9:6a:cc:9d:16:d4:7c:6a:b2:98:ee:e2:1d:84:9a:ef: fb:b2:56:43:8c:93:3f:32:93:36:97:9c:ef:8f:95:7a:94:17: c3:c4:81:09:2f:91:64:74:4d:2c:2d:0e:65:27:d4:53:cf:72: d1:83:13:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdK6O4/aHy0t0jNZSexmNi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNjA3MTUwMTA4WhcNMjUwNjA4MTUwMTA4WjAzMTEwLwYDVQQD EygxMzFjOWE4YzY4ZThiMDRkMjBkZWIwNGNmZDdhNTcyM2MwNGEyZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMn5/HJ3KCqKx7QSyd40knAWGw7/ sYj6t9haFwDEcF0iOaB/0zpXa15YeYMPGecgGaB3sVtVbjrz5yQcrWAPcJFJgEXh prK1pGSXhSSaovSGCCs6J3U3ntMXfUDR63nwhfq+RaskhagAgVbxT6wuTZ6EwSAo ny1LBhZxCxYu51SeUeZRfKHi/PM6qeDAeikXpuLa7x5k7DHWaAWjRlvfyr38cbnx AhERhLl5an/SLCok12meXjNHfCoQQE3dkxxYw20cTu8GwGGihiDVfXnc1fh5wPop GVZ9gMy0nCCbQg9W1JKkEze5e3MIFlh42GtHTiGi4JkYIzd3Bd2D4uZj8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMcmoxo6LBNIN6wTP16VyPASi8RMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZPikqle vZ/WjeEpOTW3VLtY4SzxnD1BkPo/mh++rWsR9hYk7O7x9jtlKFwT9yGg4rHgizxU K962fUj9UJv6fZezyA+X/x/r/oVmNjbC7wHodzfx/V7abvrwPMcVfSCmnrizrChj Aor/I3Q4ORcEe6bBC2qSrbIBf54AQOIcrULNxS184kvroY/UpZEbSyJuFSrqdVVq /3iU6v4tfHG9j/uu2z2sNeFmb/QFfzSWXSUNeseMQrhWMEj5MzAFtzvkeRNiryn9 vV+pasydFtR8arKY7uIdhJrv+7JWQ4yTPzKTNpec74+VepQXw8SBCS+RZHRNLC0O ZSfUU89y0YMT8g== -----END CERTIFICATE-----Generated at Sun Jun 8 00:30:18 2025 by rpki-client