$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: px0oTQuFTVMYyDT2dejjw5w6mUTA7fVT0aOfBPXGljA= Subject key identifier: DE:A9:62:6A:D9:A8:D0:58:9C:D2:06:69:62:60:F1:82:BF:A8:5F:C0 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 0198D73BBCD9C601521389BCC4CBAF7E114C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0917 Signing time: Sat 23 Aug 2025 14:01:13 +0000 Manifest this update: Sat 23 Aug 2025 14:01:13 +0000 Manifest next update: Sun 24 Aug 2025 14:01:13 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: HQHeF2Vokvei89tByb1LV4AILuS9GOoIW8jRAOmNcNY=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:bc:d9:c6:01:52:13:89:bc:c4:cb:af:7e:11:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Aug 23 14:01:13 2025 GMT Not After : Aug 24 14:01:13 2025 GMT Subject: CN=dea9626ad9a8d0589cd206696260f182bfa85fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ec:53:44:ac:69:95:f9:9a:40:ef:9a:71:79: 94:3f:ea:71:39:82:9e:66:e6:24:69:77:54:89:8f: 14:d8:12:24:c8:93:10:97:1b:2e:e2:b4:da:aa:33: 77:c7:8f:3d:81:72:8b:e7:df:d5:f8:59:f0:6e:09: 8e:c8:b6:41:00:8d:82:fb:b0:d9:b0:80:7a:e7:0a: 4f:22:85:35:9e:f4:06:61:34:d3:20:49:bf:70:74: c2:21:e8:4f:63:ee:bd:c6:02:be:06:43:c1:40:1a: 62:ac:de:ae:f4:a5:cc:34:63:c9:92:0a:06:e5:96: 4d:b9:98:a8:ea:ad:b5:6e:06:69:bd:cd:0f:fd:44: 8a:45:0e:e6:a7:81:d2:ab:41:1a:ea:b9:ac:e0:16: cc:ce:32:bf:f1:9e:25:bf:0f:b5:9a:fa:08:b5:05: c8:e3:88:fb:4b:c9:0d:c8:0e:09:c4:e3:20:f2:bb: 17:cd:11:fb:c2:c4:ba:d3:9e:3d:53:b3:07:e4:9f: d3:f4:32:be:65:66:13:eb:96:c0:82:37:3c:a0:c8: d2:4c:e3:1c:c8:34:6d:04:a4:cb:53:ce:b4:4f:8e: ae:2d:eb:7d:84:0d:4a:96:48:b1:f3:31:e2:e9:65: da:31:77:70:1f:51:7b:69:3a:71:37:50:48:5c:1f: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A9:62:6A:D9:A8:D0:58:9C:D2:06:69:62:60:F1:82:BF:A8:5F:C0 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:73:17:37:b9:df:c0:82:98:c1:1a:ac:eb:6b:79:41:74: 2d:df:84:81:a5:13:a1:4c:4d:ff:83:ab:d1:41:b2:a9:4e:de: 60:48:59:b4:c9:6a:9b:40:ae:91:cb:37:21:33:da:6f:4f:80: eb:f7:4c:d6:de:37:47:eb:96:46:e2:7d:6e:43:0a:37:0b:94: fd:44:9d:37:10:d8:44:c3:7a:33:4a:f8:1d:13:2a:10:76:bd: bd:df:c8:b0:52:0b:4d:31:92:69:8d:4f:29:ba:7d:05:5c:41: 48:ef:b4:bf:46:5f:d1:60:1b:83:8b:e2:39:14:47:d0:96:59: 56:70:9b:bb:95:37:c1:8a:b7:b4:78:42:de:e5:b0:0b:98:4f: 14:a2:d0:be:88:f9:f6:07:a0:97:c4:2f:2e:39:44:84:22:00: 3b:84:51:49:9a:38:5b:6e:e3:53:bb:60:20:a0:b0:e9:27:d3: 6a:97:d5:6a:db:30:16:d9:94:8a:cd:b9:41:a4:b4:f1:b6:ad: c8:8f:f6:ee:0c:bd:43:bb:67:4e:87:9c:f1:35:2e:2a:73:ad: 6a:cd:33:fe:83:4e:75:4f:80:ab:de:90:41:dc:8b:f3:fd:39: bc:5f:12:85:96:77:bd:ad:37:17:fd:18:ba:dd:90:69:1b:bf: d8:d8:05:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXO7zZxgFSE4m8xMuvfhFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUwODIzMTQwMTEzWhcNMjUwODI0MTQwMTEzWjAzMTEwLwYDVQQD EyhkZWE5NjI2YWQ5YThkMDU4OWNkMjA2Njk2MjYwZjE4MmJmYTg1ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OxTRKxplfmaQO+acXmUP+pxOYKe ZuYkaXdUiY8U2BIkyJMQlxsu4rTaqjN3x489gXKL59/V+FnwbgmOyLZBAI2C+7DZ sIB65wpPIoU1nvQGYTTTIEm/cHTCIehPY+69xgK+BkPBQBpirN6u9KXMNGPJkgoG 5ZZNuZio6q21bgZpvc0P/USKRQ7mp4HSq0Ea6rms4BbMzjK/8Z4lvw+1mvoItQXI 44j7S8kNyA4JxOMg8rsXzRH7wsS60549U7MH5J/T9DK+ZWYT65bAgjc8oMjSTOMc yDRtBKTLU860T46uLet9hA1Klkix8zHi6WXaMXdwH1F7aTpxN1BIXB+89QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6pYmrZqNBYnNIGaWJg8YK/qF/AMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6VzFze5 38CCmMEarOtreUF0Ld+EgaUToUxN/4Or0UGyqU7eYEhZtMlqm0Cukcs3ITPab0+A 6/dM1t43R+uWRuJ9bkMKNwuU/USdNxDYRMN6M0r4HRMqEHa9vd/IsFILTTGSaY1P Kbp9BVxBSO+0v0Zf0WAbg4viORRH0JZZVnCbu5U3wYq3tHhC3uWwC5hPFKLQvoj5 9gegl8QvLjlEhCIAO4RRSZo4W27jU7tgIKCw6SfTapfVatswFtmUis25QaS08bat yI/27gy9Q7tnToec8TUuKnOtas0z/oNOdU+Aq96QQdyL8/05vF8ShZZ3va03F/0Y ut2QaRu/2NgFGA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:47 2025 by rpki-client