$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: J3RUfO0mjb/BUmJpDo8dUQhtSpMEHAwSh2bdCxe1TKU= Subject key identifier: D7:08:BC:F1:FC:0D:CD:BA:86:C4:8C:81:FE:72:01:20:EA:95:E3:BE Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 0197B8C5F01F308EFD86BA7363840E0E1FE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 10B0 Signing time: Sat 28 Jun 2025 23:01:09 +0000 Manifest this update: Sat 28 Jun 2025 23:01:09 +0000 Manifest next update: Sun 29 Jun 2025 23:01:09 +0000 Files and hashes: 1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: z1dJ/pGy0dEvt1tc/n74uV6bBIMUWyQ+5pmGtYEAvms=) 5: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 6: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=) 7: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=) 8: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 12: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 13: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 14: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 15: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 16: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:c5:f0:1f:30:8e:fd:86:ba:73:63:84:0e:0e:1f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jun 28 23:01:09 2025 GMT Not After : Jun 29 23:01:09 2025 GMT Subject: CN=d708bcf1fc0dcdba86c48c81fe720120ea95e3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:68:fc:48:c5:ea:00:45:b4:74:92:aa:b9:8a: ec:dc:35:32:c4:3c:05:4a:31:cb:b3:82:8b:5d:e1: 14:76:25:81:fd:c9:ed:30:0a:a1:53:e8:8c:eb:19: d3:c8:f9:06:87:89:9b:25:7a:94:33:10:dd:c8:fa: 10:19:ab:a8:b1:5e:6e:a2:ea:e2:8c:3c:95:c3:7f: 08:e4:b2:ab:d1:0d:10:a2:c2:52:88:79:6b:9e:61: ab:89:64:2c:41:5d:f1:cc:f0:42:ca:cb:1a:48:3e: 15:ac:ac:f1:6f:49:33:53:0c:ae:51:2f:d7:eb:0c: d9:17:97:45:00:55:7a:cc:60:0d:1e:e5:91:5b:c0: 91:38:a6:27:b0:72:d1:07:3e:6c:7e:c4:3d:b9:51: 96:c4:d2:3a:b8:61:26:6c:1d:bc:87:e6:30:96:46: 9c:6e:af:b6:de:79:61:1f:4f:7e:22:58:85:8d:00: 3e:30:45:3a:5e:6d:53:37:c7:0d:38:2b:e9:2b:a3: 6e:59:6f:29:1a:d4:7b:1c:2a:aa:16:31:d6:dd:fe: be:91:b4:d9:57:09:73:e7:98:5c:a7:2a:d5:ae:33: 89:f0:49:64:c3:18:e9:ba:d2:c4:1c:e5:2c:95:85: c0:e6:36:13:dd:bf:13:d5:be:40:19:a3:8e:6d:46: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:08:BC:F1:FC:0D:CD:BA:86:C4:8C:81:FE:72:01:20:EA:95:E3:BE X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a6:6b:08:0d:11:05:f2:c9:10:4b:f4:f5:f7:79:51:77:ad: 90:f0:55:e7:29:f4:83:1d:e8:aa:17:5c:18:4e:6e:8f:c9:97: fa:74:6c:f4:22:1e:6d:b3:3b:91:cb:3e:92:be:4e:a3:16:ce: b4:7a:d6:49:aa:4f:cb:03:06:6a:ea:2a:7c:4d:0a:37:45:13: 2a:6a:e0:22:74:b6:ca:4d:48:09:ab:da:28:78:71:f3:8d:26: 7f:b8:23:11:32:47:ef:c5:16:20:7d:34:ad:f0:42:b3:fc:66: e4:af:c2:6d:42:a5:d4:53:cb:f8:26:e3:3d:57:f6:ed:7a:2f: b4:55:47:20:ce:8a:95:f0:af:99:a6:0e:6f:ea:f8:43:40:7c: b0:fa:27:56:17:59:d9:d6:d2:5b:1b:d3:57:54:1c:c5:77:c5: a7:71:78:d7:69:50:16:7f:ee:fc:d6:d3:cd:3e:bb:86:a6:b1: 52:17:0a:aa:ca:b0:13:f3:b2:dc:65:73:2d:6b:c6:c4:ec:6e: 2b:41:98:ab:d3:a0:9b:01:4e:bd:d1:0f:20:68:8d:1f:b0:25: 9e:cd:39:4a:42:56:18:3d:89:db:40:73:6e:6a:bd:db:8f:e9: bc:39:fa:0b:dc:8e:4d:03:6d:d8:63:7d:14:bf:5d:75:03:cf: b6:de:3d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4xfAfMI79hrpzY4QODh/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwNjI4MjMwMTA5WhcNMjUwNjI5MjMwMTA5WjAzMTEwLwYDVQQD EyhkNzA4YmNmMWZjMGRjZGJhODZjNDhjODFmZTcyMDEyMGVhOTVlM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62j8SMXqAEW0dJKquYrs3DUyxDwF SjHLs4KLXeEUdiWB/cntMAqhU+iM6xnTyPkGh4mbJXqUMxDdyPoQGauosV5uouri jDyVw38I5LKr0Q0QosJSiHlrnmGriWQsQV3xzPBCyssaSD4VrKzxb0kzUwyuUS/X 6wzZF5dFAFV6zGANHuWRW8CROKYnsHLRBz5sfsQ9uVGWxNI6uGEmbB28h+Ywlkac bq+23nlhH09+IliFjQA+MEU6Xm1TN8cNOCvpK6NuWW8pGtR7HCqqFjHW3f6+kbTZ Vwlz55hcpyrVrjOJ8ElkwxjputLEHOUslYXA5jYT3b8T1b5AGaOObUZOXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcIvPH8Dc26hsSMgf5yASDqleO+MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaZrCA0R BfLJEEv09fd5UXetkPBV5yn0gx3oqhdcGE5uj8mX+nRs9CIebbM7kcs+kr5OoxbO tHrWSapPywMGauoqfE0KN0UTKmrgInS2yk1ICavaKHhx840mf7gjETJH78UWIH00 rfBCs/xm5K/CbUKl1FPL+CbjPVf27XovtFVHIM6KlfCvmaYOb+r4Q0B8sPonVhdZ 2dbSWxvTV1QcxXfFp3F412lQFn/u/NbTzT67hqaxUhcKqsqwE/Oy3GVzLWvGxOxu K0GYq9OgmwFOvdEPIGiNH7Alns05SkJWGD2J20Bzbmq924/pvDn6C9yOTQNt2GN9 FL9ddQPPtt49kw== -----END CERTIFICATE-----Generated at Sun Jun 29 07:55:06 2025 by rpki-client