$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: jPt9kL2wLihR3v1w3PxBznTEc4g9i23z818Q9+G6zO0= Subject key identifier: 90:C7:BE:19:27:EE:76:DD:8F:2E:21:7C:F1:41:02:34:3B:1F:52:1F Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019A25F8143282B663B22A2CF751BBBE580F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 058C Signing time: Mon 27 Oct 2025 14:00:06 +0000 Manifest this update: Mon 27 Oct 2025 14:00:06 +0000 Manifest next update: Tue 28 Oct 2025 14:00:06 +0000 Files and hashes: 1: 1-NKP1CHafre4vU52sp4fnXcS8v8.roa (hash: v+mjhqPc9zglY03U3cT2GrpVZ5JmbXCgiLV04tLH5QM=) 2: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (hash: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=) 3: AWQr6v7bqgNhObGwcUZZPxZgTwc.roa (hash: n7DDrfy5/5YOwq4RESmuSdVx+Pa2q1xl7MiHeeR3d4Y=) 4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: HmHMK3prL+aJADPf4Oxp2rG7qob9MVsQ7lUrEpR6ku8=) 5: GHxZUkY9bOorEwdWJVU5TnZ_i1E.roa (hash: V/ninTsb+HPXbupGZSjlT5J8bNup37ea3EAw10ow9dg=) 6: MOue30ip0rzsnXS5CsnOkdZdXEo.roa (hash: AVvn57WEsROh6+ARUTdz4PZV+wl5iy2QvdVKr8ej4JA=) 7: Wbs0VJkcKc0wPaUZr1NgrKtuldI.roa (hash: WCN9qi9r+Hm8rm9TUPQoS3r8Tkkj6NM9JqBneLGhwx0=) 8: lJA6yomITaf8wUh3Uq65gLqCvU4.roa (hash: 3uGM8CcXIJfvqbJA7catsbvaS3T0ce5UavP7oPRys/c=) 9: pc8KquVkf7Bjvabr2oO_2AB4Js4.roa (hash: bRnqKdovtszgM8jGx0ckj/Q6NzvUm1MzmoZsUpk8Ya0=) 10: tEG80p8s8oQ4Tptfq4VMliOqn5c.roa (hash: AqmsaqOT5QryNjeyheANv5QRaGt08lj8LeFrC8xbJ8k=) 11: v_SKShFDpQLE97FIfb9dU2f7gTw.roa (hash: oAcmeVOLuoyrXmmJm/ud/VikfiniUaev/5ojXR6Otro=) 12: w8IXiteojLyAl2hPnvm-kFaTy-o.roa (hash: MErj7Qr+atEWhbQkpkCUmfKPYXJ0Re72UrCAJYB++AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 14:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:f8:14:32:82:b6:63:b2:2a:2c:f7:51:bb:be:58:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Oct 27 14:00:06 2025 GMT Not After : Oct 28 14:00:06 2025 GMT Subject: CN=90c7be1927ee76dd8f2e217cf14102343b1f521f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:ed:2a:7d:35:0e:c0:1e:d3:70:77:81:b6: 65:20:91:cc:33:4a:c2:4c:8d:76:3c:11:3b:36:32: 1a:95:b5:8c:23:18:d1:38:0a:4f:52:34:30:bb:df: e3:81:58:aa:40:30:43:2e:58:a8:b8:d5:40:c1:c7: e0:7e:bc:87:c8:d4:74:f8:2e:0e:f3:27:d8:70:07: 74:0b:11:9b:cd:81:ff:30:50:23:28:13:e1:92:a5: f3:80:8e:42:85:3d:55:3c:53:e4:4c:8e:e7:37:a1: ad:8e:a5:1b:08:7a:1c:3f:07:09:8a:d4:bc:f0:c5: 11:12:82:ce:58:3e:eb:2c:59:46:42:e4:32:ae:36: c3:c6:8c:3e:8f:b4:ed:80:76:d9:a7:bf:da:7f:1e: 67:5b:7f:9e:07:13:7e:a0:9d:69:44:48:1c:38:92: fc:ae:c2:a8:bb:a0:da:97:ff:04:49:82:7c:ce:98: c2:65:a8:c8:a0:8b:e2:b0:eb:4a:64:50:d2:89:84: d4:d0:3f:f0:ae:04:ab:23:b0:9f:38:c5:86:4c:67: 08:f3:5c:07:7e:88:50:cb:9f:7d:c4:8b:d9:9d:f4: d6:48:8a:1b:f1:5e:50:a2:ae:c2:28:57:44:ab:42: fe:23:fc:d6:e8:f8:51:bc:ab:0b:e9:30:37:9d:66: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C7:BE:19:27:EE:76:DD:8F:2E:21:7C:F1:41:02:34:3B:1F:52:1F X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fa:96:2d:03:9f:d9:98:b7:37:90:b6:65:96:7c:0d:4b:f0: e5:7c:77:6a:dc:23:20:35:68:28:79:2a:10:f1:6d:a4:f9:18: 00:7f:4b:cf:f0:f3:45:d4:9c:e4:85:16:1a:03:fd:c9:4c:11: 53:0c:8a:7a:56:2f:f8:e7:81:0d:e4:66:fc:53:2a:af:e1:3e: 0c:9e:89:9a:93:e4:3c:6d:1b:37:31:20:8f:af:fc:be:db:5c: d3:94:e0:d3:98:42:6b:d5:3b:33:83:11:8a:de:4d:44:c0:22: 73:7b:8d:75:32:ba:bf:72:ef:cb:48:94:fa:44:d8:17:82:71: f8:93:8d:8c:67:25:e4:35:24:8a:ce:d7:e9:76:37:9f:67:4a: 1a:38:cd:49:2a:12:92:dd:ee:59:5d:de:0c:5b:bb:72:25:41: 44:27:4f:0f:70:f4:bd:c9:ac:2b:47:05:92:92:42:a5:ad:d2: 56:08:e4:60:0c:f2:c0:da:d0:0e:b0:84:15:cf:b9:8f:02:83: 7f:57:0e:36:15:08:aa:d3:06:dd:c8:61:85:df:5a:5c:05:ea: a4:24:c9:6d:48:d1:e9:39:05:d0:d9:15:a9:ff:4a:06:ca:d2: c1:11:1b:df:88:10:42:a8:5d:8b:af:e5:e1:0f:4b:ac:c4:f2: ad:34:83:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZol+BQygrZjsios91G7vlgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUxMDI3MTQwMDA2WhcNMjUxMDI4MTQwMDA2WjAzMTEwLwYDVQQD Eyg5MGM3YmUxOTI3ZWU3NmRkOGYyZTIxN2NmMTQxMDIzNDNiMWY1MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWTtKn01DsAe03B3gbZlIJHMM0rC TI12PBE7NjIalbWMIxjROApPUjQwu9/jgViqQDBDLliouNVAwcfgfryHyNR0+C4O 8yfYcAd0CxGbzYH/MFAjKBPhkqXzgI5ChT1VPFPkTI7nN6GtjqUbCHocPwcJitS8 8MUREoLOWD7rLFlGQuQyrjbDxow+j7TtgHbZp7/afx5nW3+eBxN+oJ1pREgcOJL8 rsKou6Dal/8ESYJ8zpjCZajIoIvisOtKZFDSiYTU0D/wrgSrI7CfOMWGTGcI81wH fohQy599xIvZnfTWSIob8V5Qoq7CKFdEq0L+I/zW6PhRvKsL6TA3nWZljwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDHvhkn7nbdjy4hfPFBAjQ7H1IfMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfqWLQOf 2Zi3N5C2ZZZ8DUvw5Xx3atwjIDVoKHkqEPFtpPkYAH9Lz/DzRdSc5IUWGgP9yUwR UwyKelYv+OeBDeRm/FMqr+E+DJ6JmpPkPG0bNzEgj6/8vttc05Tg05hCa9U7M4MR it5NRMAic3uNdTK6v3Lvy0iU+kTYF4Jx+JONjGcl5DUkis7X6XY3n2dKGjjNSSoS kt3uWV3eDFu7ciVBRCdPD3D0vcmsK0cFkpJCpa3SVgjkYAzywNrQDrCEFc+5jwKD f1cONhUIqtMG3chhhd9aXAXqpCTJbUjR6TkF0NkVqf9KBsrSwREb34gQQqhdi6/l 4Q9LrMTyrTSDYA== -----END CERTIFICATE-----Generated at Mon Oct 27 19:22:19 2025 by rpki-client