$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: uYqU5Csg42w1Hx3df74Fu4PYfxo2QUp6AXXPLYYO/OM= Subject key identifier: 45:FE:22:08:F8:9F:72:29:C2:DB:21:2B:F9:FF:33:60:A6:3D:94:4D Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019A6D6D12C88EE3E19EB9EAEDA0CE510F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1727 Signing time: Mon 10 Nov 2025 11:00:56 +0000 Manifest this update: Mon 10 Nov 2025 11:00:56 +0000 Manifest next update: Tue 11 Nov 2025 11:00:56 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: m8etNL9gqHa2F6bP5phcxkacbkuQO0mCHgrq4mFZsJc=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Nov 2025 08:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:6d:12:c8:8e:e3:e1:9e:b9:ea:ed:a0:ce:51:0f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Nov 10 11:00:56 2025 GMT Not After : Nov 11 11:00:56 2025 GMT Subject: CN=45fe2208f89f7229c2db212bf9ff3360a63d944d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:f9:84:01:9a:61:09:03:1e:03:ed:1a:4a: 14:41:c9:ef:97:90:da:9f:75:4e:2f:00:96:8e:46: 35:1c:c0:a5:38:03:ef:40:90:82:f6:17:59:63:59: 81:33:78:62:cd:6d:3c:17:87:6f:96:0c:da:c6:c0: fc:14:36:ba:32:42:d9:d2:f3:c1:b7:4c:d9:9c:7f: f6:17:c6:29:91:75:e5:57:2e:3a:85:d8:b1:f5:d2: 1b:c1:58:08:f7:61:02:13:56:1c:2c:94:0a:72:2d: 94:bd:b3:82:b1:4a:67:42:dc:c5:2d:ed:a7:c1:51: ac:51:2c:df:6a:5d:41:57:f3:a7:72:5a:1d:c8:69: ca:58:7a:2b:23:30:8b:93:b1:98:13:08:d9:03:37: e6:91:82:34:c9:a0:8b:ce:49:7e:79:94:d8:f8:99: 6f:47:b8:ed:ca:6c:b1:89:96:70:68:66:4b:a7:b2: b3:13:2d:5a:4f:e1:b8:79:1e:cc:3c:35:9d:5b:31: 46:85:ef:a4:00:35:e1:18:a1:7b:db:9e:96:6f:06: 10:1d:23:dd:11:5a:0a:93:75:28:72:31:50:d8:ab: cb:7d:ef:35:80:84:8e:79:a5:b6:f9:34:41:57:d7: 41:28:e4:a9:43:c5:b2:7e:f0:77:4a:a5:d8:45:49: 92:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:22:08:F8:9F:72:29:C2:DB:21:2B:F9:FF:33:60:A6:3D:94:4D X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1a:55:8a:db:f9:22:24:23:d8:d9:b4:45:8b:4d:53:45:75: 9b:9f:6f:ee:70:df:50:18:98:4b:70:c9:f4:0f:8a:38:c0:42: e6:26:7a:b6:ff:ba:95:ef:21:d8:d9:6c:35:4e:5c:1a:66:ea: 2a:27:37:b1:18:3c:c4:13:ed:c4:71:91:43:d2:22:cb:ef:0c: e7:ba:0b:f2:c6:29:e0:d5:82:14:6b:0e:a5:54:a3:f7:b3:59: ea:bb:c5:ad:54:ce:d8:41:2f:52:7a:61:65:61:ff:63:c0:c2: 09:3f:8e:6f:e0:07:bc:b9:2d:f6:d8:71:a0:7f:7c:2f:bf:5f: d0:f4:f9:ed:ff:9b:26:5e:cb:a5:b1:1a:ab:4f:9b:75:05:6b: db:aa:6f:46:2e:88:ad:be:1e:6b:68:85:d5:48:6d:36:59:04: 76:e6:00:a6:1c:d7:01:5a:20:b5:58:03:5b:df:b5:82:7b:32: 25:01:f7:b9:34:e7:f5:e1:dc:c5:0c:b9:5c:66:ce:41:34:22: f0:10:6b:fd:58:8a:73:11:a0:b7:1b:1a:98:c5:11:6c:60:0e: 4d:f8:b0:a1:04:85:45:15:2f:9a:ee:b5:3f:8a:eb:18:67:29: 7b:60:ff:12:35:da:c7:5a:4d:fc:a1:09:74:50:d5:e0:9b:33: 49:c8:3e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZptbRLIjuPhnrnq7aDOUQ9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMTEwMTEwMDU2WhcNMjUxMTExMTEwMDU2WjAzMTEwLwYDVQQD Eyg0NWZlMjIwOGY4OWY3MjI5YzJkYjIxMmJmOWZmMzM2MGE2M2Q5NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7r5hAGaYQkDHgPtGkoUQcnvl5Da n3VOLwCWjkY1HMClOAPvQJCC9hdZY1mBM3hizW08F4dvlgzaxsD8FDa6MkLZ0vPB t0zZnH/2F8YpkXXlVy46hdix9dIbwVgI92ECE1YcLJQKci2UvbOCsUpnQtzFLe2n wVGsUSzfal1BV/OnclodyGnKWHorIzCLk7GYEwjZAzfmkYI0yaCLzkl+eZTY+Jlv R7jtymyxiZZwaGZLp7KzEy1aT+G4eR7MPDWdWzFGhe+kADXhGKF7256WbwYQHSPd EVoKk3UocjFQ2KvLfe81gISOeaW2+TRBV9dBKOSpQ8WyfvB3SqXYRUmSRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEX+Igj4n3IpwtshK/n/M2CmPZRNMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRpVitv5 IiQj2Nm0RYtNU0V1m59v7nDfUBiYS3DJ9A+KOMBC5iZ6tv+6le8h2NlsNU5cGmbq Kic3sRg8xBPtxHGRQ9Iiy+8M57oL8sYp4NWCFGsOpVSj97NZ6rvFrVTO2EEvUnph ZWH/Y8DCCT+Ob+AHvLkt9thxoH98L79f0PT57f+bJl7LpbEaq0+bdQVr26pvRi6I rb4ea2iF1UhtNlkEduYAphzXAVogtVgDW9+1gnsyJQH3uTTn9eHcxQy5XGbOQTQi 8BBr/ViKcxGgtxsamMURbGAOTfiwoQSFRRUvmu61P4rrGGcpe2D/EjXax1pN/KEJ dFDV4JszScg+fg== -----END CERTIFICATE-----Generated at Mon Nov 10 13:16:17 2025 by rpki-client