$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: wxxaPg/ertN2VmT/jF+WxALdHjBbWz5f7gNpTzuoFQc= Subject key identifier: CB:BA:50:AE:36:DD:7C:B1:EC:02:7B:9C:99:8D:57:BE:85:90:A4:D4 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 0198C86DD9214ABCC3798EC3D2A96689A5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 164D Signing time: Wed 20 Aug 2025 17:01:38 +0000 Manifest this update: Wed 20 Aug 2025 17:01:38 +0000 Manifest next update: Thu 21 Aug 2025 17:01:38 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: u5jCqgvcDcM32i7nkHyyrW7KOp5jrhpwiK52P0v95Rk=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 17:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:c8:6d:d9:21:4a:bc:c3:79:8e:c3:d2:a9:66:89:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Aug 20 17:01:38 2025 GMT Not After : Aug 21 17:01:38 2025 GMT Subject: CN=cbba50ae36dd7cb1ec027b9c998d57be8590a4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:1c:6a:6a:66:c3:cb:94:ee:12:fe:76:af: 13:d9:b5:44:5e:c5:d2:01:a1:5e:e8:52:13:ac:84: 7e:3f:23:e7:d3:a0:7f:92:32:a4:44:6d:b2:af:18: c2:ab:da:61:bc:4a:e4:78:5c:70:fd:ae:cd:6c:1e: b4:d7:99:14:ee:8f:28:6d:a9:fe:17:80:54:8b:cb: 8a:56:c6:cb:65:06:39:30:ab:36:7c:02:37:44:53: 4f:04:40:49:ad:16:b7:ac:c8:a6:71:1a:69:58:12: e8:b8:61:cf:e7:bb:50:29:b9:c7:e0:1f:21:3c:f4: 3a:c5:1d:aa:64:43:b0:93:5c:1a:63:37:a0:f0:7a: 83:85:3c:37:39:55:5d:6f:0c:81:bc:fd:1a:e3:87: 32:c5:a5:91:30:9b:a8:86:39:1d:a5:aa:f5:00:84: 5b:fa:cd:33:09:8d:21:68:39:1b:23:a2:d1:fe:2e: 7c:aa:28:bc:33:af:b4:f5:28:96:ad:05:41:13:a8: 8e:4f:b3:5f:0e:28:e1:f3:70:db:34:5c:7f:04:a7: 0d:67:5e:fb:52:7c:94:c4:64:38:f9:bf:44:94:62: b7:f7:f4:2d:10:0d:d6:15:71:11:44:ff:52:d2:ce: 87:4e:c1:be:68:f8:6d:de:95:0c:0e:c5:04:04:62: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:50:AE:36:DD:7C:B1:EC:02:7B:9C:99:8D:57:BE:85:90:A4:D4 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:97:b4:d5:65:de:07:f4:3d:f7:c9:cc:24:bb:df:be:03:d8: d0:77:95:22:42:88:f7:6f:1f:9a:1a:66:ff:de:9a:89:e8:c0: 49:56:71:89:6e:5b:f9:b6:01:2c:58:40:35:62:04:db:89:bb: 80:b8:ea:5e:3a:7e:ec:79:14:19:fb:36:36:aa:e3:b4:db:83: b6:0a:91:00:75:78:76:32:97:c4:00:aa:7b:85:6d:9b:6e:03: 3e:78:68:7d:88:22:67:33:a8:5e:72:44:74:ea:e3:45:55:d8: 82:0b:38:15:69:eb:aa:29:4f:bb:d2:48:fc:35:c8:d9:87:3f: 47:c1:00:4c:48:d9:5a:05:61:94:6f:65:44:b7:56:be:b9:88: a7:34:a6:cb:fc:5c:b7:06:86:c0:72:5a:bc:8e:0e:6b:1e:2b: 7f:4f:a4:b4:3c:f7:79:be:78:1b:0a:39:47:40:32:1a:af:a0: f4:57:c2:dd:57:a4:d7:2e:41:58:6d:f2:7d:94:86:62:55:5d: 1a:9e:db:0b:1b:e8:47:5d:96:a5:0d:01:de:be:92:1e:55:81: 94:d6:5b:de:f4:f6:29:1e:cc:3d:ff:76:03:4c:58:eb:58:a8: 76:33:54:04:99:b0:54:48:e3:a2:73:c2:6a:1a:56:fe:6f:a5: c1:eb:ed:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjIbdkhSrzDeY7D0qlmiaW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUwODIwMTcwMTM4WhcNMjUwODIxMTcwMTM4WjAzMTEwLwYDVQQD EyhjYmJhNTBhZTM2ZGQ3Y2IxZWMwMjdiOWM5OThkNTdiZTg1OTBhNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Okcampmw8uU7hL+dq8T2bVEXsXS AaFe6FITrIR+PyPn06B/kjKkRG2yrxjCq9phvErkeFxw/a7NbB6015kU7o8oban+ F4BUi8uKVsbLZQY5MKs2fAI3RFNPBEBJrRa3rMimcRppWBLouGHP57tQKbnH4B8h PPQ6xR2qZEOwk1waYzeg8HqDhTw3OVVdbwyBvP0a44cyxaWRMJuohjkdpar1AIRb +s0zCY0haDkbI6LR/i58qii8M6+09SiWrQVBE6iOT7NfDijh83DbNFx/BKcNZ177 UnyUxGQ4+b9ElGK39/QtEA3WFXERRP9S0s6HTsG+aPht3pUMDsUEBGIy+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu6UK423Xyx7AJ7nJmNV76FkKTUMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5e01WXe B/Q998nMJLvfvgPY0HeVIkKI928fmhpm/96aiejASVZxiW5b+bYBLFhANWIE24m7 gLjqXjp+7HkUGfs2NqrjtNuDtgqRAHV4djKXxACqe4Vtm24DPnhofYgiZzOoXnJE dOrjRVXYggs4FWnrqilPu9JI/DXI2Yc/R8EATEjZWgVhlG9lRLdWvrmIpzSmy/xc twaGwHJavI4Oax4rf0+ktDz3eb54Gwo5R0AyGq+g9FfC3Vek1y5BWG3yfZSGYlVd Gp7bCxvoR12WpQ0B3r6SHlWBlNZb3vT2KR7MPf92A0xY61iodjNUBJmwVEjjonPC ahpW/m+lwevtnw== -----END CERTIFICATE-----Generated at Thu Aug 21 03:10:59 2025 by rpki-client