$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: AVD9XeJvGooHrcvGWwMeLRmzcmXTge8ExQ6TOqeZSKE= Subject key identifier: 47:7B:C6:AE:34:B9:96:07:B7:F1:88:46:C4:F1:57:47:7E:AF:F1:3C Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 0198D515BC47C692DA0828AE7E174AB71BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1146 Signing time: Sat 23 Aug 2025 04:00:28 +0000 Manifest this update: Sat 23 Aug 2025 04:00:28 +0000 Manifest next update: Sun 24 Aug 2025 04:00:28 +0000 Files and hashes: 1: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=) 2: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 3: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 4: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: QkwuW1i1k03/MKn+5RU+oha9nmfhgHIbPAVKua7Aqrw=) 6: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 8: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 9: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (hash: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=) 12: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 13: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 14: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 15: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:bc:47:c6:92:da:08:28:ae:7e:17:4a:b7:1b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Aug 23 04:00:28 2025 GMT Not After : Aug 24 04:00:28 2025 GMT Subject: CN=477bc6ae34b99607b7f18846c4f157477eaff13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:1b:92:24:8f:f2:27:eb:3c:51:cf:46:96: 50:2c:80:18:7a:84:ed:bc:3e:5f:cf:ce:60:79:c4: 61:2d:74:d3:3c:19:c4:fe:0f:af:08:d1:0d:ad:98: e1:57:81:93:0d:ee:94:ec:7f:9e:c4:47:5b:06:da: 4a:94:1c:a6:ac:e9:43:0a:b0:3e:f7:6a:5a:47:86: 4b:2f:0b:c1:cb:45:58:02:9f:05:d7:9c:29:37:71: 30:ba:13:a5:55:fe:42:b6:19:15:30:c0:f5:36:75: 4b:59:8e:9a:b8:a7:34:3c:10:33:68:b4:c4:b9:a1: 46:bc:c6:16:c4:25:60:48:09:3d:5c:1e:53:ad:bc: f9:32:86:46:c2:66:04:cd:03:4d:d1:78:38:f3:a1: 01:05:52:9c:9c:98:2b:a1:53:c5:77:d9:a9:8f:98: 47:f4:dc:c9:95:44:c1:18:be:92:cb:dd:40:ff:b4: 50:7f:e6:8b:db:82:e9:28:d4:0e:12:12:25:7b:00: e4:cd:60:60:56:c6:82:d1:3d:33:aa:b1:87:7d:35: 7a:cb:28:cf:93:76:39:6d:5e:2b:23:39:f1:96:67: 22:04:cb:e7:c3:93:d5:87:f1:66:aa:4d:4f:81:a2: cd:cf:90:2b:e2:a9:fb:4c:50:42:c2:9a:2d:48:78: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:C6:AE:34:B9:96:07:B7:F1:88:46:C4:F1:57:47:7E:AF:F1:3C X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d6:27:cc:4f:e8:51:af:27:1f:20:29:78:9d:7a:5a:3f:2d: 25:3e:4c:20:f4:eb:ec:7d:1f:81:09:62:22:61:65:f0:3f:82: f7:30:93:0d:ad:0a:e6:fa:d0:6c:24:ef:8d:26:6e:4f:8a:98: 3a:05:8d:19:f2:13:3a:b1:82:be:ba:cc:50:62:10:0a:c0:be: 74:d3:09:5f:2e:73:ac:4e:29:59:70:4c:5d:63:4a:83:55:06: e4:51:ea:72:69:c7:cc:6b:70:98:cf:11:04:66:3d:c0:ee:a4: 11:70:15:e5:ef:81:bb:e3:1a:82:eb:6d:76:cf:37:1e:ad:d1: 85:fc:2a:36:78:e6:84:81:57:d4:e6:da:4d:20:a4:ec:b6:55: 99:60:bc:ac:34:c2:a8:61:22:45:81:5b:61:ba:f4:ba:ea:8b: 66:00:0f:87:c4:38:9c:42:8e:33:3f:fe:74:8c:e7:f7:d9:42: 54:6d:ee:76:62:5b:de:5a:8c:cb:0c:be:df:59:e3:7e:e7:57: 66:78:b3:f6:7a:2a:59:81:e8:ad:77:67:7e:9d:8f:64:42:d4: 24:80:ca:2a:21:34:bd:62:16:d4:45:a8:cf:56:8b:89:80:7a: ba:f5:9d:3a:29:d6:51:be:a6:ff:b0:81:15:5b:67:bf:df:d8: 4b:a6:62:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFbxHxpLaCCiufhdKtxvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwODIzMDQwMDI4WhcNMjUwODI0MDQwMDI4WjAzMTEwLwYDVQQD Eyg0NzdiYzZhZTM0Yjk5NjA3YjdmMTg4NDZjNGYxNTc0NzdlYWZmMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CwbkiSP8ifrPFHPRpZQLIAYeoTt vD5fz85gecRhLXTTPBnE/g+vCNENrZjhV4GTDe6U7H+exEdbBtpKlBymrOlDCrA+ 92paR4ZLLwvBy0VYAp8F15wpN3EwuhOlVf5CthkVMMD1NnVLWY6auKc0PBAzaLTE uaFGvMYWxCVgSAk9XB5Trbz5MoZGwmYEzQNN0Xg486EBBVKcnJgroVPFd9mpj5hH 9NzJlUTBGL6Sy91A/7RQf+aL24LpKNQOEhIlewDkzWBgVsaC0T0zqrGHfTV6yyjP k3Y5bV4rIznxlmciBMvnw5PVh/Fmqk1PgaLNz5Ar4qn7TFBCwpotSHhTHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd7xq40uZYHt/GIRsTxV0d+r/E8MB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtYnzE/o Ua8nHyApeJ16Wj8tJT5MIPTr7H0fgQliImFl8D+C9zCTDa0K5vrQbCTvjSZuT4qY OgWNGfITOrGCvrrMUGIQCsC+dNMJXy5zrE4pWXBMXWNKg1UG5FHqcmnHzGtwmM8R BGY9wO6kEXAV5e+Bu+Maguttds83Hq3RhfwqNnjmhIFX1ObaTSCk7LZVmWC8rDTC qGEiRYFbYbr0uuqLZgAPh8Q4nEKOMz/+dIzn99lCVG3udmJb3lqMywy+31njfudX Zniz9noqWYHorXdnfp2PZELUJIDKKiE0vWIW1EWoz1aLiYB6uvWdOinWUb6m/7CB FVtnv9/YS6ZiNQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:33:25 2025 by rpki-client