$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: +QfQtpgWHbJ604Rw2Wsjt9kgfiKGs2TG/l8dC9/hk9U= Subject key identifier: DF:9B:D8:90:EC:49:BF:01:36:B3:E1:BE:CA:6F:9A:7F:99:A8:DB:DB Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 0199FC219BBE2760D5C0AC9BA9107AE59F7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 16F0 Signing time: Sun 19 Oct 2025 11:01:24 +0000 Manifest this update: Sun 19 Oct 2025 11:01:24 +0000 Manifest next update: Mon 20 Oct 2025 11:01:24 +0000 Files and hashes: 1: 0TepxYDRCJ_5cWsq1YkkvURL6hE.roa (hash: jbUg3WZRyt3dAqtU/8wDqNaiICIVnpJ/MOPNwEWZYpE=) 2: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: 3QzyQQfIM1WF/iYwspIRPG/i88zgL6IcbkdG963GYDk=) 3: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: dISl5Ukw4YQJK0H6aBRNMVHoUHY.roa (hash: HAxvloz4GQvfIeGFIns8AnRlOc6klJKO+6R8zX7/dw8=) 8: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 9: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) 11: zJBCvHs2wbJWJ0A5Rejmy7Aa7ak.roa (hash: KV1JiCfLEP0rU5d+WXfKUjD5DQXv37b4kuNAfak9GSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:9b:be:27:60:d5:c0:ac:9b:a9:10:7a:e5:9f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Oct 19 11:01:24 2025 GMT Not After : Oct 20 11:01:24 2025 GMT Subject: CN=df9bd890ec49bf0136b3e1beca6f9a7f99a8dbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:00:b0:ff:10:eb:a1:7c:a4:db:83:2b:a2:92: ad:fc:de:8c:41:1c:78:26:3d:bc:ef:99:2f:2b:a9: 78:37:9b:eb:bd:85:b1:9b:18:8b:b2:73:a0:9b:32: bb:95:14:68:1c:29:0f:08:4c:16:02:6d:36:0e:dc: d1:8d:b9:10:e5:43:eb:ee:08:bc:5e:48:09:11:de: 62:10:85:54:d1:e6:e1:ef:3a:c0:51:fd:3f:23:e8: 9f:2a:ef:57:5d:67:2f:73:a1:d5:4f:e2:c8:35:2f: cd:f7:7b:8b:e8:72:8f:77:af:2e:1e:ad:4b:d5:9c: 61:3b:7f:38:be:dc:cc:e9:2b:5b:f7:de:59:59:c4: 77:19:49:b4:6b:fc:56:ec:24:7e:e5:c8:ef:77:b3: 05:29:e1:2a:9c:51:81:90:a3:c1:9c:5c:2d:3d:8f: 78:03:cf:de:11:80:1a:e8:07:8c:9f:2f:ee:f3:7d: 73:96:2c:ac:bf:ff:39:c4:7e:19:a7:02:ba:eb:73: 4c:ea:6a:3b:c7:d4:87:2d:da:73:94:6b:28:af:da: 21:3f:f5:88:69:e6:6b:b5:d7:0d:4c:72:96:63:c8: b1:8c:ba:4e:d6:7b:5f:53:fb:7e:76:da:2a:b0:a0: 8e:11:82:d1:50:6b:36:c1:6d:1c:02:72:20:8a:ac: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9B:D8:90:EC:49:BF:01:36:B3:E1:BE:CA:6F:9A:7F:99:A8:DB:DB X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:73:27:03:a5:fb:59:d8:b7:e1:f5:3d:ad:84:2e:85:91:ae: 8e:ee:e9:14:93:31:b1:87:18:0c:67:ce:5c:29:8c:c1:32:5a: 69:ec:d0:8b:71:2c:59:bb:50:dd:79:c6:7b:70:0f:49:de:f9: dc:01:99:ec:b0:ce:0b:02:d2:97:68:e9:92:aa:b2:fa:30:95: e9:a5:c8:7c:b5:ba:ce:f1:3b:89:db:b1:da:2b:8f:81:35:04: 8a:ab:08:59:6a:fd:a2:34:6e:6a:71:f7:4d:7e:eb:96:3c:05: d7:87:18:ab:24:0c:4c:58:ca:a2:0c:b5:c6:3b:bf:a3:56:ab: 8c:f7:b8:26:de:1c:80:8f:f5:15:1f:b1:22:43:13:c9:68:26: 05:4f:95:ff:2f:31:2d:0b:9a:f9:55:c7:83:2f:8e:cd:55:54: 4a:10:3b:3a:e9:f1:f1:10:84:f0:f0:6f:54:52:e9:9a:71:1e: 14:5a:c8:28:53:13:15:ca:fb:f3:7b:55:a3:35:8c:46:f9:15: 25:b9:9f:d5:74:d1:e5:c7:ce:52:35:6d:00:3a:f8:50:51:8b: 94:35:b2:fd:1d:5a:2f:02:50:e4:d6:be:cc:f1:ed:16:0a:b1: e2:ae:90:53:cf:08:3b:09:2b:c5:72:2c:55:d8:12:a0:20:5c: c6:5a:1f:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IZu+J2DVwKybqRB65Z9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUxMDE5MTEwMTI0WhcNMjUxMDIwMTEwMTI0WjAzMTEwLwYDVQQD EyhkZjliZDg5MGVjNDliZjAxMzZiM2UxYmVjYTZmOWE3Zjk5YThkYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QCw/xDroXyk24MropKt/N6MQRx4 Jj2875kvK6l4N5vrvYWxmxiLsnOgmzK7lRRoHCkPCEwWAm02DtzRjbkQ5UPr7gi8 XkgJEd5iEIVU0ebh7zrAUf0/I+ifKu9XXWcvc6HVT+LINS/N93uL6HKPd68uHq1L 1ZxhO384vtzM6Stb995ZWcR3GUm0a/xW7CR+5cjvd7MFKeEqnFGBkKPBnFwtPY94 A8/eEYAa6AeMny/u831zliysv/85xH4ZpwK663NM6mo7x9SHLdpzlGsor9ohP/WI aeZrtdcNTHKWY8ixjLpO1ntfU/t+dtoqsKCOEYLRUGs2wW0cAnIgiqyl0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+b2JDsSb8BNrPhvspvmn+ZqNvbMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXMnA6X7 Wdi34fU9rYQuhZGuju7pFJMxsYcYDGfOXCmMwTJaaezQi3EsWbtQ3XnGe3APSd75 3AGZ7LDOCwLSl2jpkqqy+jCV6aXIfLW6zvE7idux2iuPgTUEiqsIWWr9ojRuanH3 TX7rljwF14cYqyQMTFjKogy1xju/o1arjPe4Jt4cgI/1FR+xIkMTyWgmBU+V/y8x LQua+VXHgy+OzVVUShA7Ounx8RCE8PBvVFLpmnEeFFrIKFMTFcr783tVozWMRvkV Jbmf1XTR5cfOUjVtADr4UFGLlDWy/R1aLwJQ5Na+zPHtFgqx4q6QU88IOwkrxXIs VdgSoCBcxlofMQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:32:22 2025 by rpki-client