$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: kMre90Fyoh8dONfAg5Mjrh6448JbORH3LKDokNQtd3Y= Subject key identifier: D4:04:FC:DC:DE:07:B6:98:D2:23:34:3D:32:AD:6C:D4:97:D7:A0:B8 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 01995566B41D3C3F4C29CFE27ADC0BF77227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1696 Signing time: Wed 17 Sep 2025 02:00:17 +0000 Manifest this update: Wed 17 Sep 2025 02:00:17 +0000 Manifest next update: Thu 18 Sep 2025 02:00:17 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: T3CX7/gsH//m6+csQSrPxjVC0F7DMPBJwshp+XD/8o8=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:55:66:b4:1d:3c:3f:4c:29:cf:e2:7a:dc:0b:f7:72:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Sep 17 02:00:17 2025 GMT Not After : Sep 18 02:00:17 2025 GMT Subject: CN=d404fcdcde07b698d223343d32ad6cd497d7a0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:d0:73:14:41:57:7e:08:a8:40:42:74:28: 95:1d:92:5d:13:37:a4:6e:18:8f:c4:b8:03:4f:43: 51:f0:0e:35:d1:38:bc:c1:45:e7:9b:e6:62:fc:4e: 4d:c5:1b:d4:f4:57:77:0a:d4:cb:e8:5c:0b:99:53: 3a:b9:97:9d:1e:0b:fe:4c:94:3f:87:f4:05:28:08: 72:0b:15:e7:f4:b0:e3:f2:2c:e2:0d:62:b4:b7:c7: 08:92:8b:49:fb:5e:34:4f:c1:38:1a:ef:04:10:46: f7:0a:53:f6:9c:9a:9a:23:ed:aa:60:65:b9:6d:ee: 7e:ef:8f:b1:a2:6d:d3:32:aa:c3:2a:f1:98:c4:c0: a4:b9:0c:d9:9b:8b:c7:79:8c:0b:40:87:82:29:a5: bd:a7:47:46:e1:42:11:40:19:c1:1c:84:28:60:e6: 4f:3d:15:1f:e4:51:e9:77:f9:bb:b6:8d:5f:85:66: 1c:33:c5:b0:fb:64:8d:c5:14:db:f3:76:80:a8:00: 2b:fd:e5:81:b3:fb:6e:0d:95:4f:3c:a8:f1:4c:3b: 18:14:bc:f8:3f:f7:4b:6b:62:4c:9f:46:a9:34:1b: 9a:79:d0:f9:b6:8d:2f:34:a2:26:4e:c1:96:f0:84: ca:c9:ed:9c:14:0d:00:a4:68:1c:d6:2d:59:b0:16: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:04:FC:DC:DE:07:B6:98:D2:23:34:3D:32:AD:6C:D4:97:D7:A0:B8 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fb:96:85:b6:58:bd:e3:0b:76:9d:ea:f8:b5:2b:76:bd:cf: b6:7e:64:97:09:1b:74:2b:a3:0a:6c:6b:cf:c2:1e:60:ec:b1: d7:90:b4:c8:84:35:b6:ba:21:ff:0c:cf:1d:1d:37:be:49:56: ba:bd:c3:ee:74:e2:a9:3b:0c:74:6f:37:a6:33:d8:3b:f6:08: 5b:12:ee:9f:e1:f6:e6:d9:55:92:c5:6f:83:ee:db:63:6d:63: 85:68:7a:94:7b:8f:ff:24:18:e7:f2:d7:b1:b4:57:18:20:bc: e9:bb:a4:82:d5:26:21:df:c0:4a:7c:3c:0f:42:8a:70:33:f1: 00:22:26:25:65:57:b0:d8:ca:04:d9:43:ef:1f:b9:fa:38:c5: 00:2e:90:6b:7a:d6:f6:0d:58:c0:2c:65:d5:d7:75:3d:fe:08: 5b:f9:95:43:80:4a:9f:b3:38:ee:cb:c0:63:75:b5:4a:ec:0a: 0c:ff:6e:11:74:93:09:23:86:d3:3e:83:d8:b7:a5:ba:1b:6b: c1:74:7e:1b:70:dc:55:47:92:59:35:17:4b:7e:d6:03:78:9f: 2d:ad:ad:36:aa:d9:67:ef:92:b8:c2:9f:58:6f:39:b5:b2:6d: 50:58:35:43:28:9b:bf:fa:a2:ff:21:94:56:67:52:2a:dc:5f: 22:75:ac:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlVZrQdPD9MKc/ietwL93InMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUwOTE3MDIwMDE3WhcNMjUwOTE4MDIwMDE3WjAzMTEwLwYDVQQD EyhkNDA0ZmNkY2RlMDdiNjk4ZDIyMzM0M2QzMmFkNmNkNDk3ZDdhMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNLQcxRBV34IqEBCdCiVHZJdEzek bhiPxLgDT0NR8A410Ti8wUXnm+Zi/E5NxRvU9Fd3CtTL6FwLmVM6uZedHgv+TJQ/ h/QFKAhyCxXn9LDj8iziDWK0t8cIkotJ+140T8E4Gu8EEEb3ClP2nJqaI+2qYGW5 be5+74+xom3TMqrDKvGYxMCkuQzZm4vHeYwLQIeCKaW9p0dG4UIRQBnBHIQoYOZP PRUf5FHpd/m7to1fhWYcM8Ww+2SNxRTb83aAqAAr/eWBs/tuDZVPPKjxTDsYFLz4 P/dLa2JMn0apNBuaedD5to0vNKImTsGW8ITKye2cFA0ApGgc1i1ZsBa2kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQE/NzeB7aY0iM0PTKtbNSX16C4MB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPuWhbZY veMLdp3q+LUrdr3Ptn5klwkbdCujCmxrz8IeYOyx15C0yIQ1troh/wzPHR03vklW ur3D7nTiqTsMdG83pjPYO/YIWxLun+H25tlVksVvg+7bY21jhWh6lHuP/yQY5/LX sbRXGCC86bukgtUmId/ASnw8D0KKcDPxACImJWVXsNjKBNlD7x+5+jjFAC6Qa3rW 9g1YwCxl1dd1Pf4IW/mVQ4BKn7M47svAY3W1SuwKDP9uEXSTCSOG0z6D2Leluhtr wXR+G3DcVUeSWTUXS37WA3ifLa2tNqrZZ++SuMKfWG85tbJtUFg1Qyibv/qi/yGU VmdSKtxfInWsyA== -----END CERTIFICATE-----Generated at Wed Sep 17 05:53:13 2025 by rpki-client