$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: zGcKxfFF8i9mZOf22PQwuNEKu9OUvuM1XDycQ/dwd+g= Subject key identifier: 18:9E:13:81:AF:88:78:04:A8:3E:BC:CA:69:D3:56:02:1F:52:63:00 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019A288BA323D09431097098F43104B441D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1707 Signing time: Tue 28 Oct 2025 02:00:31 +0000 Manifest this update: Tue 28 Oct 2025 02:00:31 +0000 Manifest next update: Wed 29 Oct 2025 02:00:31 +0000 Files and hashes: 1: 0TepxYDRCJ_5cWsq1YkkvURL6hE.roa (hash: jbUg3WZRyt3dAqtU/8wDqNaiICIVnpJ/MOPNwEWZYpE=) 2: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: gLldALl24znRD+hskkb8r/TgjzvTANGB4ByRZbyMVRk=) 3: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: dISl5Ukw4YQJK0H6aBRNMVHoUHY.roa (hash: HAxvloz4GQvfIeGFIns8AnRlOc6klJKO+6R8zX7/dw8=) 8: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 9: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) 11: zJBCvHs2wbJWJ0A5Rejmy7Aa7ak.roa (hash: KV1JiCfLEP0rU5d+WXfKUjD5DQXv37b4kuNAfak9GSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:8b:a3:23:d0:94:31:09:70:98:f4:31:04:b4:41:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Oct 28 02:00:31 2025 GMT Not After : Oct 29 02:00:31 2025 GMT Subject: CN=189e1381af887804a83ebcca69d356021f526300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:97:31:30:aa:10:56:5b:df:64:e1:20:ac: a0:c0:38:7c:24:38:b0:26:bb:f5:65:52:e4:0b:a5: 0f:b9:5b:cc:d5:1d:78:ec:d9:5c:e1:83:2d:5a:35: 6d:7e:24:14:09:55:ae:ea:53:1f:93:da:f2:fb:46: b7:53:50:ca:3e:88:f1:43:b4:10:4d:07:81:e4:db: eb:18:f7:99:30:c6:48:49:07:5e:97:f7:80:3d:9a: 25:47:d9:14:fb:fb:27:14:9e:be:57:28:5a:6f:f1: 7d:10:80:37:fe:e0:1f:d5:dd:ba:32:68:3d:26:19: 03:1e:9f:8a:9b:56:af:e1:ae:dc:c0:96:6a:2d:05: ea:c4:68:cc:16:25:5a:2a:c2:1e:4b:72:00:5a:b3: ed:c7:fc:66:47:22:83:9b:f6:9a:e0:c8:ef:25:15: 82:1f:7c:0f:4f:aa:63:5f:48:6c:99:2c:c7:b8:23: 34:a1:1e:5e:f1:c3:10:41:6e:79:9e:15:d4:a1:b9: f9:c3:63:82:a2:0f:07:d0:1a:40:7e:d8:c0:27:d5: 01:7c:4f:e4:00:50:8d:e1:68:e2:90:fb:5d:e6:6e: 64:41:ff:82:23:de:3c:e0:8b:9d:68:5c:0d:16:1a: 85:71:39:1d:dd:bb:51:ec:c1:a4:90:0a:8a:38:d8: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9E:13:81:AF:88:78:04:A8:3E:BC:CA:69:D3:56:02:1F:52:63:00 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e3:22:69:92:73:2a:71:12:7f:fe:c7:e1:35:29:39:e1:67: 65:a7:04:1f:ac:b9:da:e6:79:95:d3:8d:0c:e8:49:97:94:bc: e2:92:c9:54:9d:30:38:09:a6:0b:89:8e:76:10:03:12:e0:a8: 89:da:74:89:32:df:88:d7:66:b5:7e:c3:f7:1f:68:21:96:a1: 42:44:74:21:4f:9a:00:52:f2:b4:ba:50:49:c3:2d:73:c2:bf: f3:40:ba:4e:54:72:3c:e6:dc:1c:38:e9:1c:f1:7d:f4:0a:05: a6:21:69:38:fe:f1:0f:28:25:5a:e7:77:e2:70:e7:34:fb:05: ae:0f:b8:7f:a0:a1:38:2d:7f:7f:9f:ef:5b:ef:f4:97:2e:df: e6:f0:df:12:09:eb:e8:f2:9b:5f:74:75:d7:be:9d:bd:ee:f6: b9:07:39:2a:32:cd:2c:7e:db:f6:1a:c1:41:00:48:1b:fd:19: 65:72:b5:73:a2:84:13:4b:99:4d:ea:f0:d8:ce:d0:46:b8:a3: 1a:4e:6f:31:01:6c:a1:33:46:c9:09:01:a3:b4:4b:1d:42:ea: ac:b9:b8:2c:10:5d:b6:b5:c6:11:36:88:eb:81:8c:e2:a6:3b: 7e:2b:1b:ff:4c:32:4d:16:e8:3d:50:57:a8:0b:3d:a2:32:d3: 6f:db:74:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZooi6Mj0JQxCXCY9DEEtEHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUxMDI4MDIwMDMxWhcNMjUxMDI5MDIwMDMxWjAzMTEwLwYDVQQD EygxODllMTM4MWFmODg3ODA0YTgzZWJjY2E2OWQzNTYwMjFmNTI2MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb+XMTCqEFZb32ThIKygwDh8JDiw Jrv1ZVLkC6UPuVvM1R147Nlc4YMtWjVtfiQUCVWu6lMfk9ry+0a3U1DKPojxQ7QQ TQeB5NvrGPeZMMZISQdel/eAPZolR9kU+/snFJ6+Vyhab/F9EIA3/uAf1d26Mmg9 JhkDHp+Km1av4a7cwJZqLQXqxGjMFiVaKsIeS3IAWrPtx/xmRyKDm/aa4MjvJRWC H3wPT6pjX0hsmSzHuCM0oR5e8cMQQW55nhXUobn5w2OCog8H0BpAftjAJ9UBfE/k AFCN4WjikPtd5m5kQf+CI9484IudaFwNFhqFcTkd3btR7MGkkAqKONhYvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBieE4GviHgEqD68ymnTVgIfUmMAMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+MiaZJz KnESf/7H4TUpOeFnZacEH6y52uZ5ldONDOhJl5S84pLJVJ0wOAmmC4mOdhADEuCo idp0iTLfiNdmtX7D9x9oIZahQkR0IU+aAFLytLpQScMtc8K/80C6TlRyPObcHDjp HPF99AoFpiFpOP7xDyglWud34nDnNPsFrg+4f6ChOC1/f5/vW+/0ly7f5vDfEgnr 6PKbX3R1176dve72uQc5KjLNLH7b9hrBQQBIG/0ZZXK1c6KEE0uZTerw2M7QRrij Gk5vMQFsoTNGyQkBo7RLHULqrLm4LBBdtrXGETaI64GM4qY7fisb/0wyTRboPVBX qAs9ojLTb9t0kg== -----END CERTIFICATE-----Generated at Tue Oct 28 04:45:19 2025 by rpki-client