$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: 15Q19zGjtZy1HduqqKZ2M4Pk6PZVg4v6LT0LDWvOiKs= Subject key identifier: 30:EA:E3:A0:DF:B4:CB:35:3D:B9:89:9F:FB:BB:F4:69:81:9D:EF:45 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 0196AA67B3CE4F7704E41A2081CAFCC423E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1024 Signing time: Wed 07 May 2025 11:00:44 +0000 Manifest this update: Wed 07 May 2025 11:00:44 +0000 Manifest next update: Thu 08 May 2025 11:00:44 +0000 Files and hashes: 1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 9XyU5C9QV5w+VFwY7wMCNataEge4Wc1wSK4sRSjmFcw=) 5: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 6: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=) 7: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=) 8: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 12: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 13: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 14: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 15: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 16: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:aa:67:b3:ce:4f:77:04:e4:1a:20:81:ca:fc:c4:23:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: May 7 11:00:44 2025 GMT Not After : May 8 11:00:44 2025 GMT Subject: CN=30eae3a0dfb4cb353db9899ffbbbf469819def45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:30:7d:47:0f:50:13:bd:fc:6c:a7:08:d4: 10:cf:36:7d:64:27:68:64:ff:75:57:26:4c:73:4f: 15:62:93:8f:1d:5f:2d:c2:ff:e6:33:58:36:fe:28: 39:a1:1c:45:47:14:b5:24:cf:b9:e6:df:35:a5:49: 8a:96:6c:17:a8:39:65:66:4b:a5:96:20:37:d2:45: a3:d1:93:11:95:10:d9:aa:4e:a7:14:13:66:c3:37: db:c6:58:d6:17:c1:18:3b:8e:54:c8:5c:ec:6d:e1: 4b:e2:91:f1:a5:bd:30:fe:60:e6:2f:0d:80:31:6d: db:87:f6:46:af:10:1e:c8:37:20:81:d9:b6:34:2e: 7c:d0:5a:08:4b:73:37:bf:f0:74:8b:f3:4b:a0:65: 34:27:84:0d:9e:49:6c:4a:b2:9a:3c:f0:29:22:c2: f0:07:2b:ca:f3:58:bd:57:9d:3d:e9:ec:b7:30:26: 1e:c1:13:d6:3d:42:b8:63:f5:51:b5:26:35:cb:5c: d1:32:cb:e4:2a:04:42:93:95:0c:5b:86:7e:4b:7a: 2b:52:24:92:eb:e7:fa:88:d2:78:1d:93:e3:36:96: 92:dc:e3:d5:05:f2:cd:19:01:9b:ad:11:62:95:57: ae:1e:c9:2a:32:08:6b:8e:49:26:d9:96:fc:f1:bf: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EA:E3:A0:DF:B4:CB:35:3D:B9:89:9F:FB:BB:F4:69:81:9D:EF:45 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:61:f0:51:dd:57:1b:70:35:e6:3c:8a:ab:3f:00:0a:65:a4: 90:7d:d0:01:5a:39:85:d1:9c:00:c3:18:43:7b:a0:18:a1:89: 50:f4:9e:69:1c:4c:2f:3a:6e:9c:02:c4:20:95:64:31:7c:10: 6e:f8:27:12:5a:53:19:85:ef:aa:51:d2:32:63:29:58:02:66: 74:eb:02:9e:67:49:a1:57:c4:74:0a:0d:09:ed:e3:74:e1:84: 32:92:bf:9d:df:38:7d:d5:4a:37:dc:53:f3:07:62:f3:33:37: 93:21:0a:e7:d1:ea:dd:23:2c:60:55:cf:53:1a:f5:9b:ec:86: 9d:4c:cf:bb:c2:76:e8:fc:b3:4a:22:0d:60:5b:09:da:db:38: 2c:fa:3f:59:6a:f8:6f:0e:30:3f:70:04:0e:c8:73:bd:cb:57: 22:e2:f7:74:e4:93:91:bb:65:a0:64:1f:f4:10:e8:93:1a:14: 42:c1:c5:89:82:16:5a:d7:d0:f7:19:e3:b4:03:d6:69:eb:b2: d8:9c:c0:24:96:ce:2e:fb:1f:77:0e:fa:2f:c7:ed:c3:78:2e: a4:d0:58:88:56:30:61:2a:d7:a2:36:f0:af:f8:1b:7d:11:32: 25:41:82:0f:f7:51:e3:0d:fb:a6:4f:03:05:f0:00:12:8b:5b: a9:e3:21:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaqZ7POT3cE5Boggcr8xCPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwNTA3MTEwMDQ0WhcNMjUwNTA4MTEwMDQ0WjAzMTEwLwYDVQQD EygzMGVhZTNhMGRmYjRjYjM1M2RiOTg5OWZmYmJiZjQ2OTgxOWRlZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1YwfUcPUBO9/GynCNQQzzZ9ZCdo ZP91VyZMc08VYpOPHV8twv/mM1g2/ig5oRxFRxS1JM+55t81pUmKlmwXqDllZkul liA30kWj0ZMRlRDZqk6nFBNmwzfbxljWF8EYO45UyFzsbeFL4pHxpb0w/mDmLw2A MW3bh/ZGrxAeyDcggdm2NC580FoIS3M3v/B0i/NLoGU0J4QNnklsSrKaPPApIsLw ByvK81i9V5096ey3MCYewRPWPUK4Y/VRtSY1y1zRMsvkKgRCk5UMW4Z+S3orUiSS 6+f6iNJ4HZPjNpaS3OPVBfLNGQGbrRFilVeuHskqMghrjkkm2Zb88b88UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDq46DftMs1PbmJn/u79GmBne9FMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2HwUd1X G3A15jyKqz8ACmWkkH3QAVo5hdGcAMMYQ3ugGKGJUPSeaRxMLzpunALEIJVkMXwQ bvgnElpTGYXvqlHSMmMpWAJmdOsCnmdJoVfEdAoNCe3jdOGEMpK/nd84fdVKN9xT 8wdi8zM3kyEK59Hq3SMsYFXPUxr1m+yGnUzPu8J26PyzSiINYFsJ2ts4LPo/WWr4 bw4wP3AEDshzvctXIuL3dOSTkbtloGQf9BDokxoUQsHFiYIWWtfQ9xnjtAPWaeuy 2JzAJJbOLvsfdw76L8ftw3gupNBYiFYwYSrXojbwr/gbfREyJUGCD/dR4w37pk8D BfAAEotbqeMhfA== -----END CERTIFICATE-----Generated at Wed May 7 16:52:06 2025 by rpki-client