$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: uWjSJUUt3vzG/QS6amMPDYw5KOjn89UltBGtHjjSt0Y= Subject key identifier: FC:1D:8A:A4:CA:75:C8:06:C3:C9:C2:71:45:6E:04:62:96:4D:F6:4B Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019844ACE4EEDD4A2CB8DADEF552A4BA675A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1608 Signing time: Sat 26 Jul 2025 03:00:38 +0000 Manifest this update: Sat 26 Jul 2025 03:00:38 +0000 Manifest next update: Sun 27 Jul 2025 03:00:38 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: uZpEt7ZroaTR/ZRRmu3guQfoWouAsEjsbMBUD8lntLY=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:ac:e4:ee:dd:4a:2c:b8:da:de:f5:52:a4:ba:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jul 26 03:00:38 2025 GMT Not After : Jul 27 03:00:38 2025 GMT Subject: CN=fc1d8aa4ca75c806c3c9c271456e0462964df64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:fd:81:01:58:d6:ec:34:af:38:b6:57:e3: 62:bc:9c:07:e8:b9:7f:f3:3c:3c:a3:7d:e0:42:18: a6:d0:c8:e6:34:dc:c6:73:ff:ea:95:b0:ef:45:32: 5d:0f:45:05:6f:3f:a4:05:5f:88:41:39:1f:27:30: 79:2e:13:3c:b2:cb:88:b5:ac:fd:91:da:c8:51:e6: 00:85:cf:1b:f2:79:ed:c6:0e:24:bd:e4:7f:a6:3d: 32:f5:db:0b:a8:7c:6b:90:9e:c7:b9:dd:52:cf:73: 51:35:74:38:4f:51:02:d9:e4:f7:59:40:6f:92:24: da:17:7d:12:ff:f8:22:51:7e:c2:54:88:87:25:c5: 66:1c:4a:dd:c1:b8:02:d9:58:24:83:89:35:19:3f: b4:b9:a0:47:31:89:eb:c3:32:2a:dd:73:e8:0f:35: 0f:a3:aa:62:16:71:12:de:51:72:af:4e:f3:45:7b: 00:b2:6b:a6:5f:8c:f7:ec:23:a0:f3:c5:18:7c:9c: 34:e5:e4:c9:84:43:f7:23:9f:2c:09:b1:c5:3c:ba: 0c:ab:2c:a0:de:66:24:1f:b9:36:50:11:b4:62:8c: c2:2b:a7:b7:10:71:5b:5a:7a:14:de:7e:8a:2f:7f: 16:38:78:16:94:07:d3:87:df:d5:dc:bd:73:60:58: fc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1D:8A:A4:CA:75:C8:06:C3:C9:C2:71:45:6E:04:62:96:4D:F6:4B X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b5:92:42:79:af:6d:d4:95:77:76:a8:88:b9:22:e3:98:7b: c7:cf:09:6d:af:fe:52:c9:d3:57:9e:5a:91:d6:17:e8:80:6e: 51:cf:f5:bc:92:b0:52:a7:1e:38:2a:7f:50:1c:2c:df:9c:87: d3:fe:66:0d:f8:f9:9f:65:e9:51:8c:d3:72:da:82:b5:90:de: d7:a6:c0:70:2f:42:fe:02:28:4d:8d:96:d4:66:e0:22:72:b5: 8d:d1:4e:39:12:75:da:89:c9:a8:d5:cd:50:be:ee:73:0f:bb: ce:4a:4a:1e:7e:3c:59:4a:7d:91:a0:1b:f8:0f:19:a4:5e:c0: d4:0b:dd:c8:63:86:82:eb:23:1f:87:af:d3:bf:92:2b:b4:62: 3e:97:07:73:9b:00:c7:c2:51:a8:01:47:9c:1e:7b:fa:da:32: 25:3b:0e:a8:ce:9c:bc:5e:48:bf:4c:02:39:c4:74:5a:ac:7c: 68:68:df:ef:c5:26:b8:aa:e4:83:5d:34:b5:cc:0b:33:ff:b4: 64:e5:4b:f5:e7:2f:33:2f:4e:8c:eb:4a:2b:4c:72:3c:06:f5: 19:c6:7f:1d:56:4f:ee:9e:53:fe:89:0a:16:dc:b1:68:48:6a: 8f:02:c2:4a:d1:8f:f6:ab:b3:66:03:2f:98:7b:ed:fd:32:ad: 18:40:23:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhErOTu3UosuNre9VKkumdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwNzI2MDMwMDM4WhcNMjUwNzI3MDMwMDM4WjAzMTEwLwYDVQQD EyhmYzFkOGFhNGNhNzVjODA2YzNjOWMyNzE0NTZlMDQ2Mjk2NGRmNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogn9gQFY1uw0rzi2V+NivJwH6Ll/ 8zw8o33gQhim0MjmNNzGc//qlbDvRTJdD0UFbz+kBV+IQTkfJzB5LhM8ssuItaz9 kdrIUeYAhc8b8nntxg4kveR/pj0y9dsLqHxrkJ7Hud1Sz3NRNXQ4T1EC2eT3WUBv kiTaF30S//giUX7CVIiHJcVmHErdwbgC2Vgkg4k1GT+0uaBHMYnrwzIq3XPoDzUP o6piFnES3lFyr07zRXsAsmumX4z37COg88UYfJw05eTJhEP3I58sCbHFPLoMqyyg 3mYkH7k2UBG0YozCK6e3EHFbWnoU3n6KL38WOHgWlAfTh9/V3L1zYFj8BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwdiqTKdcgGw8nCcUVuBGKWTfZLMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLWSQnmv bdSVd3aoiLki45h7x88Jba/+UsnTV55akdYX6IBuUc/1vJKwUqceOCp/UBws35yH 0/5mDfj5n2XpUYzTctqCtZDe16bAcC9C/gIoTY2W1GbgInK1jdFOORJ12onJqNXN UL7ucw+7zkpKHn48WUp9kaAb+A8ZpF7A1AvdyGOGgusjH4ev07+SK7RiPpcHc5sA x8JRqAFHnB57+toyJTsOqM6cvF5Iv0wCOcR0Wqx8aGjf78UmuKrkg100tcwLM/+0 ZOVL9ecvMy9OjOtKK0xyPAb1GcZ/HVZP7p5T/okKFtyxaEhqjwLCStGP9quzZgMv mHvt/TKtGEAj4g== -----END CERTIFICATE-----Generated at Sat Jul 26 11:58:39 2025 by rpki-client