$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: y10ORdlSwTa8YYokk2YK5zzpkrKMDMkIXi9fOa9/5Mg= Subject key identifier: 19:A4:22:01:82:88:78:E6:99:1D:8F:7A:11:40:94:2E:D0:99:99:8B Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019922C3658D6A77BBFF7F8040E1B4956254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 0504 Signing time: Sun 07 Sep 2025 06:00:54 +0000 Manifest this update: Sun 07 Sep 2025 06:00:54 +0000 Manifest next update: Mon 08 Sep 2025 06:00:54 +0000 Files and hashes: 1: 0SzEGCd4Y4GXrSmqRphsK1wj9Ak.roa (hash: VlJpTf0fdyW8U0zR40zsjcftXZSZcHJsBj61k0lcS5Q=) 2: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 3: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 4: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=) 5: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: 1CQzxRDYpkQ5CPMTRC6k8teRe7PGKM1AtYrKiO2mkl0=) 6: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=) 7: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 8: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=) 9: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 10: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 11: v_SKShFDpQLE97FIfb9dU2f7gTw.roa (hash: oAcmeVOLuoyrXmmJm/ud/VikfiniUaev/5ojXR6Otro=) 12: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:c3:65:8d:6a:77:bb:ff:7f:80:40:e1:b4:95:62:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Sep 7 06:00:54 2025 GMT Not After : Sep 8 06:00:54 2025 GMT Subject: CN=19a42201828878e6991d8f7a1140942ed099998b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:dc:db:71:c5:01:06:1d:09:e0:d5:cc:1d: ea:f6:78:ff:8b:5c:63:7b:c5:5a:a2:cf:bc:03:f1: 7c:e2:d4:84:d6:51:07:a0:04:7c:57:fe:a3:a2:50: 00:2e:1e:0e:30:25:e0:53:dc:3a:6b:de:40:ee:9d: e6:70:91:87:de:3a:fc:0a:cd:c2:e8:14:ed:4e:8e: d2:d0:42:23:9c:a9:fe:df:d3:61:08:75:0c:bc:62: 41:98:02:cb:ab:b7:85:22:65:20:d7:7d:05:07:1a: e2:be:ae:a6:be:13:54:92:dc:99:49:f7:75:20:3e: c6:59:42:66:9d:dd:a4:45:42:70:b0:99:15:b8:1f: 64:da:40:d0:d8:69:32:5f:8d:43:20:d2:04:0f:e9: 6d:88:9c:55:a8:d7:99:7d:85:79:40:d3:12:08:91: 7e:58:05:d9:b3:cd:e0:52:c1:c3:c5:3d:c4:38:c0: c6:c9:47:4d:fe:5e:2f:74:03:fc:37:72:71:a1:df: f7:18:7f:cb:df:5a:03:eb:50:a4:88:5d:d2:00:61: 7b:fb:b7:ba:8c:c2:70:40:ac:da:0c:5c:36:75:b1: 87:9a:ff:3b:61:4a:b6:b3:2c:0a:0e:e6:19:61:49: c6:71:71:a2:21:9f:84:7d:30:14:57:36:02:a4:7f: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A4:22:01:82:88:78:E6:99:1D:8F:7A:11:40:94:2E:D0:99:99:8B X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0a:c2:4c:19:5b:43:2c:11:85:0c:e7:8f:e7:9a:b9:a4:77: 6c:37:fd:84:2c:b3:53:4a:c2:ff:f6:34:5f:3f:a0:99:2e:49: 7a:35:a8:9b:c8:61:4f:71:38:a8:46:c0:75:a0:d9:24:73:52: 75:2f:5c:2b:bc:a1:11:84:37:de:02:0d:6c:db:8b:5d:fb:e0: 54:0d:79:d7:e1:88:e4:71:3b:aa:c1:98:9c:44:37:4f:8a:1b: 97:9a:5b:1a:3e:b6:61:ce:f0:54:85:d3:83:31:64:42:b6:82: 4b:40:f1:9f:39:ac:94:22:b1:c1:14:ae:17:2a:34:be:51:8e: 96:83:79:cc:c0:3a:4f:5a:80:2e:c6:39:49:a4:67:7e:ec:2f: fd:81:91:7a:19:78:c8:f5:36:14:be:9c:e6:88:0c:a4:3b:f8: 96:5a:c5:d4:8a:31:2d:7e:c7:f8:d6:9e:a6:13:71:65:6a:98: 72:da:38:db:b6:ca:42:3d:e3:bb:26:8c:61:ac:44:47:1e:76: a8:ea:6e:2d:c9:b9:a2:97:c4:f8:2f:10:9b:88:df:35:b2:4a: 2a:ec:bd:01:8f:44:3e:89:3c:19:d3:82:45:81:c8:3e:18:64: bb:34:f9:2c:9b:00:cf:ec:7b:5f:3e:b7:22:3d:ba:61:5c:74: 5f:d7:1e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiw2WNane7/3+AQOG0lWJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUwOTA3MDYwMDU0WhcNMjUwOTA4MDYwMDU0WjAzMTEwLwYDVQQD EygxOWE0MjIwMTgyODg3OGU2OTkxZDhmN2ExMTQwOTQyZWQwOTk5OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodfc23HFAQYdCeDVzB3q9nj/i1xj e8Vaos+8A/F84tSE1lEHoAR8V/6jolAALh4OMCXgU9w6a95A7p3mcJGH3jr8Cs3C 6BTtTo7S0EIjnKn+39NhCHUMvGJBmALLq7eFImUg130FBxrivq6mvhNUktyZSfd1 ID7GWUJmnd2kRUJwsJkVuB9k2kDQ2GkyX41DINIED+ltiJxVqNeZfYV5QNMSCJF+ WAXZs83gUsHDxT3EOMDGyUdN/l4vdAP8N3Jxod/3GH/L31oD61CkiF3SAGF7+7e6 jMJwQKzaDFw2dbGHmv87YUq2sywKDuYZYUnGcXGiIZ+EfTAUVzYCpH+3VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmkIgGCiHjmmR2PehFAlC7QmZmLMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgrCTBlb QywRhQznj+eauaR3bDf9hCyzU0rC//Y0Xz+gmS5JejWom8hhT3E4qEbAdaDZJHNS dS9cK7yhEYQ33gINbNuLXfvgVA151+GI5HE7qsGYnEQ3T4obl5pbGj62Yc7wVIXT gzFkQraCS0DxnzmslCKxwRSuFyo0vlGOloN5zMA6T1qALsY5SaRnfuwv/YGRehl4 yPU2FL6c5ogMpDv4llrF1IoxLX7H+NaephNxZWqYcto427bKQj3juyaMYaxERx52 qOpuLcm5opfE+C8Qm4jfNbJKKuy9AY9EPok8GdOCRYHIPhhkuzT5LJsAz+x7Xz63 Ij26YVx0X9ceLg== -----END CERTIFICATE-----Generated at Sun Sep 7 14:54:06 2025 by rpki-client