$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: 9ul6/0UCkF/4RpRtjappFaaA3qEs7V1/vPCdZuu/8CU= Subject key identifier: B3:07:41:47:FC:20:18:B0:A4:4B:49:A0:FB:41:BD:CA:41:BF:C8:30 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 01992FA3947ABB4CB99B612346E213FD4D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1685 Signing time: Tue 09 Sep 2025 18:01:13 +0000 Manifest this update: Tue 09 Sep 2025 18:01:13 +0000 Manifest next update: Wed 10 Sep 2025 18:01:13 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: fZfW4ip4kfL8oSVRS1MBSd+cHDjf4EPqWqdcB4Ee2DU=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) 10: zJBCvHs2wbJWJ0A5Rejmy7Aa7ak.roa (hash: KV1JiCfLEP0rU5d+WXfKUjD5DQXv37b4kuNAfak9GSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:a3:94:7a:bb:4c:b9:9b:61:23:46:e2:13:fd:4d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Sep 9 18:01:13 2025 GMT Not After : Sep 10 18:01:13 2025 GMT Subject: CN=b3074147fc2018b0a44b49a0fb41bdca41bfc830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:dc:ef:bb:21:e1:7d:df:79:97:d5:0f:35: 44:0f:f4:87:3f:ce:74:21:c7:0b:58:fa:00:44:bf: 7f:a0:d5:e0:e8:89:1f:49:51:73:b8:df:d9:c4:0e: d9:89:f9:06:46:67:94:25:eb:2d:f5:d9:6f:b1:9a: 74:36:ca:0e:b8:cf:fc:fd:d7:71:ff:00:06:72:8b: 4b:f0:17:92:24:bc:57:65:f3:46:95:cb:a7:96:dd: 32:0f:ac:33:d1:0f:54:1d:8e:66:31:91:bf:a1:07: af:8c:73:26:c8:62:1e:4a:d6:de:de:d5:e6:d4:58: d2:a1:3e:c1:16:6a:77:f5:47:fb:bc:e8:4e:5c:5f: a6:fa:23:df:c2:b7:7b:f0:4d:cd:0a:6f:ea:c6:55: 4d:58:ee:e7:aa:32:b4:bc:ce:5e:ae:f4:c6:b2:d9: 75:47:e6:a1:bd:bb:86:03:e9:06:0d:3d:46:3a:d3: 43:03:e1:91:5b:ac:75:17:09:5a:2a:3b:81:a9:3f: 34:ab:cc:11:14:5b:77:85:81:df:fb:4b:c5:4e:dd: 66:4b:2d:8e:95:f7:b0:93:bd:f4:94:5c:21:ef:2f: 76:8a:d7:f8:7e:0d:b1:33:10:0e:44:0c:7c:05:a4: 2f:79:20:8d:35:56:d0:0c:6e:c8:5e:27:3d:01:5f: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:41:47:FC:20:18:B0:A4:4B:49:A0:FB:41:BD:CA:41:BF:C8:30 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:a3:6b:b6:af:6d:ac:84:fb:6f:80:30:52:28:90:a1:71: c5:3f:21:eb:ed:c2:85:63:ff:26:07:a5:22:5d:8c:f2:e7:00: 14:b8:eb:d5:c9:c4:af:ed:95:ad:2b:9f:eb:84:23:cd:ad:dd: 68:c8:97:9d:b4:f0:c8:02:ff:2e:ff:cb:d5:5e:45:ff:a6:0b: 53:b0:5d:d5:5d:f6:cd:1c:61:51:e1:f8:6b:11:b0:33:47:87: 26:97:f6:93:64:ad:53:b6:19:5e:2a:51:b2:7c:78:0f:62:0d: d7:66:7b:69:d3:91:eb:79:8f:7c:94:18:7e:d6:ce:99:b5:ec: 61:1e:b8:9b:e7:81:5b:3d:d6:05:05:44:48:40:c3:99:23:08: 1c:a4:50:05:a3:ae:81:bb:06:ab:b2:d1:ce:ea:6c:36:70:c7: 93:32:36:96:01:98:9e:00:8f:71:cf:8c:c4:3d:b0:d6:da:33: 18:3a:e8:a4:4b:63:37:c7:aa:a8:b7:c5:a5:5f:b6:53:eb:fe: dc:59:82:4f:70:a0:f1:83:2b:5a:09:bc:d1:cd:44:4a:b2:df: a6:f3:95:59:84:29:c9:75:e4:4c:ff:2d:01:52:91:3b:52:95: 64:2f:7c:24:39:49:bb:b4:d8:df:1f:f1:ec:d9:28:0b:be:79: 91:c4:ca:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvo5R6u0y5m2EjRuIT/U2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwOTA5MTgwMTEzWhcNMjUwOTEwMTgwMTEzWjAzMTEwLwYDVQQD EyhiMzA3NDE0N2ZjMjAxOGIwYTQ0YjQ5YTBmYjQxYmRjYTQxYmZjODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBXc77sh4X3feZfVDzVED/SHP850 IccLWPoARL9/oNXg6IkfSVFzuN/ZxA7ZifkGRmeUJest9dlvsZp0NsoOuM/8/ddx /wAGcotL8BeSJLxXZfNGlcunlt0yD6wz0Q9UHY5mMZG/oQevjHMmyGIeStbe3tXm 1FjSoT7BFmp39Uf7vOhOXF+m+iPfwrd78E3NCm/qxlVNWO7nqjK0vM5ervTGstl1 R+ahvbuGA+kGDT1GOtNDA+GRW6x1FwlaKjuBqT80q8wRFFt3hYHf+0vFTt1mSy2O lfewk730lFwh7y92itf4fg2xMxAORAx8BaQveSCNNVbQDG7IXic9AV9/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMHQUf8IBiwpEtJoPtBvcpBv8gwMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCmja7av bayE+2+AMFIokKFxxT8h6+3ChWP/JgelIl2M8ucAFLjr1cnEr+2VrSuf64Qjza3d aMiXnbTwyAL/Lv/L1V5F/6YLU7Bd1V32zRxhUeH4axGwM0eHJpf2k2StU7YZXipR snx4D2IN12Z7adOR63mPfJQYftbOmbXsYR64m+eBWz3WBQVESEDDmSMIHKRQBaOu gbsGq7LRzupsNnDHkzI2lgGYngCPcc+MxD2w1tozGDropEtjN8eqqLfFpV+2U+v+ 3FmCT3Cg8YMrWgm80c1ESrLfpvOVWYQpyXXkTP8tAVKRO1KVZC98JDlJu7TY3x/x 7NkoC755kcTK2g== -----END CERTIFICATE-----Generated at Tue Sep 9 23:05:23 2025 by rpki-client