$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: oaa5NB5Y3IK8wBH1VovtFkHFMEqBiPIDLJTYuGZLEZA= Subject key identifier: FB:A0:36:37:E9:0E:DD:3A:94:9E:00:31:EE:D5:0F:45:31:1E:77:2C Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019848528559B4D31F9369D65F183AA341BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 08CD Signing time: Sat 26 Jul 2025 20:00:24 +0000 Manifest this update: Sat 26 Jul 2025 20:00:24 +0000 Manifest next update: Sun 27 Jul 2025 20:00:24 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: S04uxkgRyRKnAPgxZTvVtCLcc+BLBKG2p3wPolJH8hU=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 15:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:52:85:59:b4:d3:1f:93:69:d6:5f:18:3a:a3:41:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Jul 26 20:00:24 2025 GMT Not After : Jul 27 20:00:24 2025 GMT Subject: CN=fba03637e90edd3a949e0031eed50f45311e772c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:44:36:ed:f6:ee:39:58:a0:d5:07:78:b4: b8:65:1c:e5:44:d3:e5:69:45:86:80:9b:20:d1:82: 9a:dc:8d:f8:30:91:7c:00:aa:aa:81:68:b5:b4:65: 00:53:da:8a:6d:45:b7:52:7c:59:3c:5d:1d:06:9c: 86:15:52:2c:ca:d4:e3:9b:9e:ff:a9:91:de:c1:20: 3a:c6:8b:6c:45:3b:89:bd:ba:7d:52:18:e0:fc:e8: 5c:d8:ee:9f:b3:34:e4:9b:76:e0:06:63:ae:e9:9e: a5:3a:ea:c1:5f:76:87:a6:17:3d:51:64:6a:e7:ed: 60:79:82:b4:6d:81:66:57:70:fe:f2:e8:62:11:b2: 13:a2:14:64:31:70:f6:24:01:6a:0f:7a:8b:62:ef: c2:c7:56:48:b4:58:60:5f:e6:b3:c7:65:ad:11:b0: d0:8e:b3:11:c0:9e:f6:6d:d2:18:65:b0:a2:fe:26: 1c:c7:24:13:a2:a7:12:2e:81:4b:be:0d:73:d9:59: 7d:da:42:b5:bc:a6:83:92:a4:65:1b:59:62:7f:89: 44:c3:5d:2d:b6:5f:62:08:69:c1:cd:65:e5:3b:59: c0:94:44:35:47:f3:e7:4a:d5:91:26:26:1e:10:e6: 7f:d7:8b:60:32:39:a1:08:5a:89:c2:8f:ec:47:64: e9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:36:37:E9:0E:DD:3A:94:9E:00:31:EE:D5:0F:45:31:1E:77:2C X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:6b:56:ef:94:b3:6f:a8:3f:ec:a3:68:f9:a7:f3:da:69: ac:73:15:85:89:e0:66:21:a4:df:78:3b:4f:ed:ab:f2:a9:76: 60:98:7d:f5:b8:2a:33:9e:3a:fe:67:87:74:87:6f:9a:1c:d0: e8:cd:4f:eb:3e:55:d4:69:ed:07:41:0d:52:f7:3b:d1:01:0c: 43:c5:c3:b2:3c:16:24:5f:93:88:6f:33:81:65:ab:7c:4e:c9: f9:88:a5:99:87:17:d2:0b:ff:bf:7c:c2:5f:ed:7f:1c:6a:3c: 04:3c:9e:78:90:85:d4:a8:8e:4c:72:ce:66:e2:13:b7:33:9a: 97:6e:9b:9f:c2:e1:ea:1e:1f:98:49:ce:67:15:be:c9:f9:3b: b0:bf:27:5f:da:fb:f0:1e:ba:54:62:d9:66:48:f8:f2:34:a6: 37:e3:5f:9b:39:4a:4d:88:21:30:f7:66:00:74:4b:ae:00:43: 34:5c:16:ef:d2:eb:22:59:dc:8d:10:8c:aa:14:f8:9e:88:74: ed:03:f8:18:67:5e:b3:99:76:37:2a:df:b2:a2:ca:91:8c:e7: 69:2a:60:fe:47:e8:2b:44:7b:65:57:5d:25:d3:e0:29:96:4f: 96:15:e1:0c:5b:e9:65:14:ec:f3:fd:3c:2a:fc:6f:01:5f:46: 90:2c:e9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIUoVZtNMfk2nWXxg6o0G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUwNzI2MjAwMDI0WhcNMjUwNzI3MjAwMDI0WjAzMTEwLwYDVQQD EyhmYmEwMzYzN2U5MGVkZDNhOTQ5ZTAwMzFlZWQ1MGY0NTMxMWU3NzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7dENu327jlYoNUHeLS4ZRzlRNPl aUWGgJsg0YKa3I34MJF8AKqqgWi1tGUAU9qKbUW3UnxZPF0dBpyGFVIsytTjm57/ qZHewSA6xotsRTuJvbp9Uhjg/Ohc2O6fszTkm3bgBmOu6Z6lOurBX3aHphc9UWRq 5+1geYK0bYFmV3D+8uhiEbITohRkMXD2JAFqD3qLYu/Cx1ZItFhgX+azx2WtEbDQ jrMRwJ72bdIYZbCi/iYcxyQToqcSLoFLvg1z2Vl92kK1vKaDkqRlG1lif4lEw10t tl9iCGnBzWXlO1nAlEQ1R/PnStWRJiYeEOZ/14tgMjmhCFqJwo/sR2TpXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPugNjfpDt06lJ4AMe7VD0UxHncsMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCxrVu+U s2+oP+yjaPmn89pprHMVhYngZiGk33g7T+2r8ql2YJh99bgqM546/meHdIdvmhzQ 6M1P6z5V1GntB0ENUvc70QEMQ8XDsjwWJF+TiG8zgWWrfE7J+YilmYcX0gv/v3zC X+1/HGo8BDyeeJCF1KiOTHLOZuITtzOal26bn8Lh6h4fmEnOZxW+yfk7sL8nX9r7 8B66VGLZZkj48jSmN+NfmzlKTYghMPdmAHRLrgBDNFwW79LrIlncjRCMqhT4noh0 7QP4GGdes5l2NyrfsqLKkYznaSpg/kfoK0R7ZVddJdPgKZZPlhXhDFvpZRTs8/08 KvxvAV9GkCzpxA== -----END CERTIFICATE-----Generated at Sat Jul 26 23:58:14 2025 by rpki-client