$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: zxmS52szvWYXT7yssg6MTq1JSWVx7Yr20RxptE18IDM= Subject key identifier: 06:6E:C9:C3:0B:89:FB:95:73:B9:48:FB:60:EF:53:BA:35:5B:BB:11 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 0199FE470820310EDEEA3911F0EE49F6E75A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 11E0 Signing time: Sun 19 Oct 2025 21:01:31 +0000 Manifest this update: Sun 19 Oct 2025 21:01:31 +0000 Manifest next update: Mon 20 Oct 2025 21:01:31 +0000 Files and hashes: 1: 0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa (hash: Kf+VRZglvL6Y3KqIp6jRgRnsTLA4/6Z1kOM3rWbawXY=) 2: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=) 3: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 4: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 5: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 6: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 1BJJ4ndDxajVuI8xEq2yktcX5f8QZP9GiHuSoHK+MGU=) 7: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 8: GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa (hash: YmXLiGi1pP0XJ9TfEfzlqfyfGLBGlCS0068r1YP0kds=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (hash: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=) 11: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 12: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=) 13: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 14: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 15: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:47:08:20:31:0e:de:ea:39:11:f0:ee:49:f6:e7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Oct 19 21:01:31 2025 GMT Not After : Oct 20 21:01:31 2025 GMT Subject: CN=066ec9c30b89fb9573b948fb60ef53ba355bbb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:7c:d3:4e:26:a5:42:02:51:e3:6e:75:b8: be:26:42:73:24:2c:58:3b:7e:b3:bc:2a:b0:00:be: 35:c9:31:0f:bc:1a:d6:07:0a:3e:4f:6f:5e:d7:7b: 0a:5d:e2:84:ec:4a:c7:2b:22:ce:94:97:87:52:2d: 73:fd:b9:57:0b:0d:df:64:0b:7e:3c:09:e7:5d:76: fa:66:c0:cb:78:43:d5:17:f6:f7:e5:58:27:a3:7e: e3:7f:ad:83:df:da:aa:1d:89:22:44:a2:1e:e8:28: 35:55:fb:83:8b:9d:9e:b6:f9:3f:6b:56:a6:c4:ac: 08:5d:3e:ff:74:d1:75:0c:1f:dd:a1:38:52:91:96: 1d:e3:13:b6:4e:50:02:49:2f:6e:aa:5e:8b:08:a1: 33:39:2b:77:6f:63:7d:2c:3e:fc:44:0f:28:14:2e: 65:b0:32:15:bb:ef:d2:df:f9:5b:10:06:97:51:0a: e2:f9:12:ea:c1:c9:e9:17:03:95:06:7e:b3:0d:8f: 1f:b6:13:56:bf:60:fa:a8:c5:b9:e4:d3:56:04:ad: 4e:5c:ef:93:82:b7:b0:cf:3b:98:3f:be:de:37:b5: 73:34:c3:2c:32:16:68:15:87:f8:8f:3b:82:1b:54: 86:e5:fd:5d:04:58:4c:b2:3c:0a:49:cf:5f:bb:05: dc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6E:C9:C3:0B:89:FB:95:73:B9:48:FB:60:EF:53:BA:35:5B:BB:11 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:51:71:4c:75:8c:ab:3b:2d:c4:a1:85:d3:ec:c3:e6:bd:8c: 1d:f0:42:a2:e6:09:cd:67:b4:32:4e:0e:a2:1b:e8:1d:f2:cd: e9:30:f8:c5:94:91:9d:36:89:b8:4b:3d:18:fd:3a:66:b8:fa: d1:03:ad:c0:57:03:be:cf:aa:f8:e1:0d:6c:a0:af:e9:43:c7: cd:92:8e:4e:f1:32:1f:37:29:d8:5d:18:29:31:37:dc:15:4c: 73:37:de:2e:30:4a:fb:b1:34:71:46:b5:ab:e6:70:7b:d9:c5: 6f:c1:85:f3:f6:02:64:2d:a7:64:fa:7f:0b:05:2f:78:f9:84: 18:6b:d7:55:cf:0e:e8:e6:37:71:d6:e7:c5:25:90:92:5e:d5: 29:ab:1a:5c:80:b4:a2:f8:d3:06:e6:fc:9b:25:23:87:30:fa: 0f:e4:83:d9:55:27:21:1c:79:ce:2b:95:10:23:c0:e0:4a:42: d2:22:58:0f:ef:a4:56:4e:e3:01:90:c5:0f:22:9d:b2:e9:9d: 1b:c7:47:40:b0:e5:b9:d8:7c:d0:47:94:41:da:d4:72:fc:3c: 7b:20:f7:24:21:9c:89:c4:b4:43:19:43:d0:38:9a:97:62:fe: 02:75:01:52:d0:b5:78:fc:cb:c3:e0:f0:0b:0f:14:9c:d7:f3: c8:54:a5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+RwggMQ7e6jkR8O5J9udaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUxMDE5MjEwMTMxWhcNMjUxMDIwMjEwMTMxWjAzMTEwLwYDVQQD EygwNjZlYzljMzBiODlmYjk1NzNiOTQ4ZmI2MGVmNTNiYTM1NWJiYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis58004mpUICUeNudbi+JkJzJCxY O36zvCqwAL41yTEPvBrWBwo+T29e13sKXeKE7ErHKyLOlJeHUi1z/blXCw3fZAt+ PAnnXXb6ZsDLeEPVF/b35Vgno37jf62D39qqHYkiRKIe6Cg1VfuDi52etvk/a1am xKwIXT7/dNF1DB/doThSkZYd4xO2TlACSS9uql6LCKEzOSt3b2N9LD78RA8oFC5l sDIVu+/S3/lbEAaXUQri+RLqwcnpFwOVBn6zDY8fthNWv2D6qMW55NNWBK1OXO+T grewzzuYP77eN7VzNMMsMhZoFYf4jzuCG1SG5f1dBFhMsjwKSc9fuwXcBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZuycMLifuVc7lI+2DvU7o1W7sRMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFFxTHWM qzstxKGF0+zD5r2MHfBCouYJzWe0Mk4OohvoHfLN6TD4xZSRnTaJuEs9GP06Zrj6 0QOtwFcDvs+q+OENbKCv6UPHzZKOTvEyHzcp2F0YKTE33BVMczfeLjBK+7E0cUa1 q+Zwe9nFb8GF8/YCZC2nZPp/CwUvePmEGGvXVc8O6OY3cdbnxSWQkl7VKasaXIC0 ovjTBub8myUjhzD6D+SD2VUnIRx5ziuVECPA4EpC0iJYD++kVk7jAZDFDyKdsumd G8dHQLDludh80EeUQdrUcvw8eyD3JCGcicS0QxlD0Dial2L+AnUBUtC1ePzLw+Dw Cw8UnNfzyFSl1A== -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:35 2025 by rpki-client