$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: hshwxAFfW6nSTgROLVkE0/x/8f9so8gf2a8DbG3fN0E= Subject key identifier: 8E:14:F9:37:8F:97:1B:6A:E6:EF:CC:92:A3:26:A8:36:44:79:04:2C Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 0199FCC65C5E0B9004F8187CD1A3C2A5E456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 09AF Signing time: Sun 19 Oct 2025 14:01:22 +0000 Manifest this update: Sun 19 Oct 2025 14:01:22 +0000 Manifest next update: Mon 20 Oct 2025 14:01:22 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: J6bwfzzyeErdaIIMBdPMTSHtbEgNJf5bxCiUjD1/AVk=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:5c:5e:0b:90:04:f8:18:7c:d1:a3:c2:a5:e4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Oct 19 14:01:22 2025 GMT Not After : Oct 20 14:01:22 2025 GMT Subject: CN=8e14f9378f971b6ae6efcc92a326a8364479042c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:84:a7:48:82:9f:87:e8:1d:a6:4e:7a:b4: 11:42:1a:74:9d:c9:af:ab:54:9c:d8:1e:36:2e:41: 6a:f5:1d:ac:35:4b:e9:e4:2c:16:eb:dd:0b:84:96: 72:09:a5:21:be:58:8b:1b:28:6f:e0:2e:cf:0a:c2: c0:c6:af:86:d8:22:ed:ba:f3:f6:5d:be:0a:86:bf: 43:c7:1a:d4:ba:6b:d5:3b:e6:13:96:31:63:e9:fa: bc:79:60:9a:17:d6:6e:7b:a2:f0:03:a2:2b:38:58: 1d:3c:43:67:b8:bb:75:86:5e:05:65:c5:67:ae:12: e1:f3:c6:6c:eb:53:c6:5e:a8:f7:e5:3c:c1:52:dc: 08:d9:1a:d3:d4:ca:e1:18:47:00:37:2a:bd:d9:d1: 71:9d:12:eb:92:38:b7:8a:f9:16:66:d5:1c:95:31: 5f:6a:24:84:41:1d:30:a2:f0:2e:60:c3:35:7b:cb: c7:db:4a:8d:51:ef:bc:5a:e4:e1:38:e5:9c:0d:54: b4:63:74:76:7e:a2:5f:1e:50:b2:c4:fe:c8:95:34: 22:ab:5a:43:3c:d4:d0:f3:80:43:21:e5:30:52:38: 3c:2b:6f:a5:c0:b4:f4:dc:72:d4:13:ac:3d:56:7a: 78:83:76:1b:2d:f6:be:59:fd:37:84:d1:8d:99:11: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:14:F9:37:8F:97:1B:6A:E6:EF:CC:92:A3:26:A8:36:44:79:04:2C X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:51:21:66:7c:ff:ad:4f:fc:ae:f4:4f:0f:4a:e7:3c:6e:fa: cc:71:bc:a4:e8:ee:78:03:6e:a5:dc:9d:dd:65:30:2c:7c:0c: 0b:b3:25:c1:58:96:f0:f5:b8:03:03:31:8a:c8:63:c7:fa:c8: c2:ed:c4:5b:21:e0:63:be:13:f6:8f:a7:59:ea:ed:c6:5e:ff: 08:9f:d1:7b:a0:a4:6b:bd:7b:ee:ae:91:5a:4b:5e:a1:ca:d5: 93:d2:b8:66:89:b0:65:2f:76:7e:fd:3a:b1:7c:98:37:1d:e3: 11:6e:36:ef:ef:0c:46:1f:3f:44:9b:e9:ba:7f:7c:6e:f6:8e: be:64:d7:28:0e:c3:df:67:a9:e9:ec:f9:e7:08:06:43:3a:4c: 73:6a:a7:be:9e:c4:d5:9b:17:f4:ed:a9:7e:63:00:ae:24:26: 3b:9d:a2:da:df:9f:f1:47:31:17:a0:37:4b:52:ad:73:2f:7f: 6d:aa:45:fd:95:2c:ce:ff:49:d6:41:84:3e:fc:a9:43:3e:f9: da:6d:f3:2f:36:31:dd:2b:0e:b8:17:f6:55:36:f9:5d:c4:9d: 81:15:09:3c:9e:19:7b:60:5e:4e:b7:14:dd:a5:1e:29:00:86: 30:83:9f:5a:cf:8e:65:68:99:da:0a:c5:5d:fc:68:cd:5e:db: 8a:d5:fc:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xlxeC5AE+Bh80aPCpeRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMDE5MTQwMTIyWhcNMjUxMDIwMTQwMTIyWjAzMTEwLwYDVQQD Eyg4ZTE0ZjkzNzhmOTcxYjZhZTZlZmNjOTJhMzI2YTgzNjQ0NzkwNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6Ep0iCn4foHaZOerQRQhp0ncmv q1Sc2B42LkFq9R2sNUvp5CwW690LhJZyCaUhvliLGyhv4C7PCsLAxq+G2CLtuvP2 Xb4Khr9DxxrUumvVO+YTljFj6fq8eWCaF9Zue6LwA6IrOFgdPENnuLt1hl4FZcVn rhLh88Zs61PGXqj35TzBUtwI2RrT1MrhGEcANyq92dFxnRLrkji3ivkWZtUclTFf aiSEQR0wovAuYMM1e8vH20qNUe+8WuThOOWcDVS0Y3R2fqJfHlCyxP7IlTQiq1pD PNTQ84BDIeUwUjg8K2+lwLT03HLUE6w9Vnp4g3YbLfa+Wf03hNGNmRHLAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4U+TePlxtq5u/MkqMmqDZEeQQsMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFEhZnz/ rU/8rvRPD0rnPG76zHG8pOjueANupdyd3WUwLHwMC7MlwViW8PW4AwMxishjx/rI wu3EWyHgY74T9o+nWertxl7/CJ/Re6Cka7177q6RWkteocrVk9K4ZomwZS92fv06 sXyYNx3jEW427+8MRh8/RJvpun98bvaOvmTXKA7D32ep6ez55wgGQzpMc2qnvp7E 1ZsX9O2pfmMAriQmO52i2t+f8UcxF6A3S1Ktcy9/bapF/ZUszv9J1kGEPvypQz75 2m3zLzYx3SsOuBf2VTb5XcSdgRUJPJ4Ze2BeTrcU3aUeKQCGMIOfWs+OZWiZ2grF XfxozV7bitX8xA== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:48 2025 by rpki-client