$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: pkWY+pPR8SryTV+akxHSIW3ftL2rFffOKnvUuhOEN1s= Subject key identifier: 62:BA:44:86:8D:96:52:56:C8:88:79:67:39:50:F1:21:42:A2:EB:17 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 0197B7B38300E344A6B55C7EB3304D5E4B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 15BF Signing time: Sat 28 Jun 2025 18:01:24 +0000 Manifest this update: Sat 28 Jun 2025 18:01:24 +0000 Manifest next update: Sun 29 Jun 2025 18:01:24 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: drEwEZztY7b/yAQqxXrfxfDwN75g02i9QFsCI+W+9Q8=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:83:00:e3:44:a6:b5:5c:7e:b3:30:4d:5e:4b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jun 28 18:01:24 2025 GMT Not After : Jun 29 18:01:24 2025 GMT Subject: CN=62ba44868d965256c88879673950f12142a2eb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ba:d6:b8:26:bf:ff:64:8f:f8:43:6b:79:fb: 7e:7b:39:eb:03:46:93:41:2b:a3:b1:b2:e4:47:95: 24:5e:ea:f3:48:a8:87:5d:59:21:87:fa:af:f5:09: 4d:68:bc:45:19:c8:f1:fc:8a:1a:8b:67:47:68:25: e5:a3:e1:b8:41:da:80:47:fc:00:5b:ef:e3:e3:32: 44:ba:a7:6a:6f:85:71:2f:0d:5d:a9:42:6e:a5:2c: df:91:73:59:2c:91:b2:8d:83:42:04:62:af:04:8f: 34:52:b1:74:36:c3:a8:03:34:98:0d:c5:21:b7:fd: d3:b8:0c:fc:42:9e:47:c3:d3:2a:08:26:79:11:1d: 02:61:71:4f:81:ff:a5:46:ed:d4:08:6d:1d:af:4e: 9f:fe:96:1f:ac:cc:04:d2:10:9f:6e:f3:27:77:e5: ea:9c:79:4e:5a:03:28:6b:9a:c8:ac:31:be:27:1e: 58:6e:6c:1c:4e:26:1f:8b:7d:55:23:1f:81:92:f6: 95:49:a6:f8:41:6d:31:b4:c3:2c:4d:59:19:31:ca: 8d:50:74:1b:84:7c:4a:2b:57:94:1b:76:5a:e0:02: 59:f9:c9:ad:12:d5:49:71:17:b9:f1:35:4c:0b:91: 57:05:cf:fe:29:fd:84:12:5e:85:3b:3e:c7:14:46: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:44:86:8D:96:52:56:C8:88:79:67:39:50:F1:21:42:A2:EB:17 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ef:e6:a5:0f:b2:7b:62:96:a6:d6:39:c0:0c:02:54:16:ac: 0a:af:4d:30:ce:b0:d9:dd:35:d7:b1:94:9c:14:bd:b2:33:16: ae:56:6b:c9:d1:b2:96:a4:38:c5:75:cb:03:58:cf:79:ae:d3: e3:06:05:1f:6e:a4:0f:e7:07:20:4c:aa:a9:f8:5f:4e:78:3a: ef:87:25:be:18:54:e9:d0:f4:72:0d:ee:4f:89:c0:de:e1:ea: a3:51:72:51:67:46:80:d0:5e:fb:0e:f0:c4:f0:d0:6f:82:b5: 2f:ea:9e:e7:10:bc:f1:97:09:32:c9:26:9c:60:e2:eb:49:61: f7:8b:8c:98:53:50:85:35:05:2a:37:14:77:b1:50:2c:8a:02: 5f:9b:83:cc:92:07:bb:85:c7:da:92:a7:b8:36:d9:a8:26:29: 79:31:e5:c0:13:01:23:fd:ce:2d:16:27:d7:a0:e3:39:28:82: 0b:dc:dc:59:42:12:be:d7:0b:4b:26:2a:b8:44:4e:58:6a:f2: 7d:7a:16:e1:ee:28:b8:c0:d3:3e:15:4b:ab:a9:d9:1a:f4:41: ae:c3:4d:ea:3b:20:0f:db:ef:b4:90:dd:3e:c8:1e:99:8a:9a: 65:06:4d:3a:43:72:59:f7:81:0b:2c:15:f9:a9:f3:9b:7d:d7: 02:f1:71:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s4MA40SmtVx+szBNXktLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwNjI4MTgwMTI0WhcNMjUwNjI5MTgwMTI0WjAzMTEwLwYDVQQD Eyg2MmJhNDQ4NjhkOTY1MjU2Yzg4ODc5NjczOTUwZjEyMTQyYTJlYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37rWuCa//2SP+ENreft+eznrA0aT QSujsbLkR5UkXurzSKiHXVkhh/qv9QlNaLxFGcjx/Ioai2dHaCXlo+G4QdqAR/wA W+/j4zJEuqdqb4VxLw1dqUJupSzfkXNZLJGyjYNCBGKvBI80UrF0NsOoAzSYDcUh t/3TuAz8Qp5Hw9MqCCZ5ER0CYXFPgf+lRu3UCG0dr06f/pYfrMwE0hCfbvMnd+Xq nHlOWgMoa5rIrDG+Jx5YbmwcTiYfi31VIx+BkvaVSab4QW0xtMMsTVkZMcqNUHQb hHxKK1eUG3Za4AJZ+cmtEtVJcRe58TVMC5FXBc/+Kf2EEl6FOz7HFEYEqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK6RIaNllJWyIh5ZzlQ8SFCousXMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+/mpQ+y e2KWptY5wAwCVBasCq9NMM6w2d0117GUnBS9sjMWrlZrydGylqQ4xXXLA1jPea7T 4wYFH26kD+cHIEyqqfhfTng674clvhhU6dD0cg3uT4nA3uHqo1FyUWdGgNBe+w7w xPDQb4K1L+qe5xC88ZcJMskmnGDi60lh94uMmFNQhTUFKjcUd7FQLIoCX5uDzJIH u4XH2pKnuDbZqCYpeTHlwBMBI/3OLRYn16DjOSiCC9zcWUISvtcLSyYquEROWGry fXoW4e4ouMDTPhVLq6nZGvRBrsNN6jsgD9vvtJDdPsgemYqaZQZNOkNyWfeBCywV +anzm33XAvFxtg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:22:27 2025 by rpki-client