$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: XU+p67olvsAva9Qln0jSoZMJUZtH3pB3WsiRtnSAOaw= Subject key identifier: DD:A3:9B:BC:F6:1B:3E:37:4E:35:35:78:0B:46:41:AE:9F:2E:BB:02 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019A533F33516F46321BBBD2A5FAB0B0565C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 172F Signing time: Wed 05 Nov 2025 09:00:42 +0000 Manifest this update: Wed 05 Nov 2025 09:00:42 +0000 Manifest next update: Thu 06 Nov 2025 09:00:42 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: FjqdIa1oZXfaxR6FPwA8v0OhW/EtsRAgj3fwnnb0/Lo=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: bMezNCNwdlOYbtIsPbacYgXs4mE.roa (hash: fCSTVZLdEaGUz9Qyuwvw4wOBBUSjrK0cS/P0VURH6XA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:3f:33:51:6f:46:32:1b:bb:d2:a5:fa:b0:b0:56:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Nov 5 09:00:42 2025 GMT Not After : Nov 6 09:00:42 2025 GMT Subject: CN=dda39bbcf61b3e374e3535780b4641ae9f2ebb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:77:ae:0b:3e:b6:12:88:f9:0d:4e:6d:3f: f7:a2:de:fb:13:47:54:a6:fd:54:66:f3:45:35:9b: bf:34:36:01:b9:88:ca:61:80:ae:4a:20:7b:25:ee: 1e:88:6a:4a:6e:46:c8:6c:b1:c4:bb:72:f7:ba:89: cb:94:f2:31:d1:3e:a9:db:bd:d1:49:43:22:ff:c7: 75:31:30:c3:a3:c2:e4:cb:22:b1:4f:b3:bf:4a:71: aa:70:51:cb:68:96:12:f5:39:e8:51:f7:ca:53:55: 52:cf:1b:15:d3:55:45:ba:48:f1:18:bb:10:86:c8: a8:5c:d1:25:9a:76:25:f7:61:39:e8:95:3e:e4:de: e6:52:49:6e:6c:42:eb:23:31:02:3c:f1:e7:6d:54: b5:83:6f:22:e3:db:4b:5c:79:dc:0c:10:a9:bb:12: bb:e1:0c:54:73:5b:31:fc:d9:36:26:f3:e6:e1:8a: d8:52:58:19:6c:81:f8:3c:12:f5:04:b5:8e:74:ce: 34:47:83:6b:4e:47:a0:a1:7e:94:85:f6:e8:9c:ed: 8c:c1:fe:12:be:1c:32:b4:47:dd:33:87:b8:b6:11: 27:98:e9:ee:67:42:df:e8:fd:9f:0b:9c:e8:b2:48: c7:c6:25:f9:f8:ff:27:3d:2e:fc:fd:c2:9c:d0:8f: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A3:9B:BC:F6:1B:3E:37:4E:35:35:78:0B:46:41:AE:9F:2E:BB:02 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:86:dd:87:27:b4:81:a8:50:45:04:3a:5b:25:1c:a1:ec: 9d:5a:4a:0d:7a:fc:94:7b:b9:14:66:11:8e:d2:d3:c8:88:3f: fe:b7:0b:ce:ed:42:26:36:85:35:28:f1:da:9e:a4:72:ef:b2: f2:7f:1d:46:98:e7:6d:ab:2d:ec:e5:dd:77:40:da:7a:05:84: 1d:a9:84:b7:3d:fa:8e:7c:02:b2:80:c9:9e:90:e9:fc:a5:e8: d4:74:5a:7d:4a:34:9c:2d:7c:14:62:70:df:d7:a7:31:97:de: f0:a2:f7:a3:ee:3c:79:74:3a:19:f8:a8:f3:38:b1:a1:f7:67: 83:1a:9d:c5:44:0e:a2:ce:dd:e8:2f:8e:39:dd:4f:b7:0c:9e: a6:a2:c7:2b:fc:47:72:23:17:3c:f6:38:69:f1:ae:b6:da:0d: 30:bd:db:02:6c:ac:c4:85:52:c0:75:6b:49:cd:a2:34:64:83: 6c:3f:70:3f:dd:67:c2:d6:bb:69:dd:1d:9a:64:c6:44:c2:32: 2d:3a:6f:56:e3:e8:f0:ef:ba:d1:2e:a3:2b:8d:96:94:27:37: 70:eb:d2:55:d6:9d:f5:c6:74:17:f6:02:e6:50:98:4f:8b:6f: 50:e7:55:52:e4:fa:d9:f6:1a:0e:c5:fa:87:c8:43:50:d1:4c: d1:87:24:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTPzNRb0YyG7vSpfqwsFZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUxMTA1MDkwMDQyWhcNMjUxMTA2MDkwMDQyWjAzMTEwLwYDVQQD EyhkZGEzOWJiY2Y2MWIzZTM3NGUzNTM1NzgwYjQ2NDFhZTlmMmViYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbV3rgs+thKI+Q1ObT/3ot77E0dU pv1UZvNFNZu/NDYBuYjKYYCuSiB7Je4eiGpKbkbIbLHEu3L3uonLlPIx0T6p273R SUMi/8d1MTDDo8LkyyKxT7O/SnGqcFHLaJYS9TnoUffKU1VSzxsV01VFukjxGLsQ hsioXNElmnYl92E56JU+5N7mUklubELrIzECPPHnbVS1g28i49tLXHncDBCpuxK7 4QxUc1sx/Nk2JvPm4YrYUlgZbIH4PBL1BLWOdM40R4NrTkegoX6UhfbonO2Mwf4S vhwytEfdM4e4thEnmOnuZ0Lf6P2fC5zoskjHxiX5+P8nPS78/cKc0I8boQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2jm7z2Gz43TjU1eAtGQa6fLrsCMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYViG3Ycn tIGoUEUEOlslHKHsnVpKDXr8lHu5FGYRjtLTyIg//rcLzu1CJjaFNSjx2p6kcu+y 8n8dRpjnbast7OXdd0DaegWEHamEtz36jnwCsoDJnpDp/KXo1HRafUo0nC18FGJw 39enMZfe8KL3o+48eXQ6Gfio8zixofdngxqdxUQOos7d6C+OOd1PtwyepqLHK/xH ciMXPPY4afGuttoNML3bAmysxIVSwHVrSc2iNGSDbD9wP91nwta7ad0dmmTGRMIy LTpvVuPo8O+60S6jK42WlCc3cOvSVdad9cZ0F/YC5lCYT4tvUOdVUuT62fYaDsX6 h8hDUNFM0YckQg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:18:27 2025 by rpki-client