$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: 4PEoK76z+2tR6OemwmSwo/veAVDIaAP0G3Gp8MoyobI= Subject key identifier: 94:B9:60:B8:17:BF:F5:DE:E6:FB:0C:E1:9C:00:C2:8D:03:90:1A:D8 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 01984A09EBB535DAB467774AAF651C8244CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 10FD Signing time: Sun 27 Jul 2025 04:00:20 +0000 Manifest this update: Sun 27 Jul 2025 04:00:20 +0000 Manifest next update: Mon 28 Jul 2025 04:00:20 +0000 Files and hashes: 1: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=) 2: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 3: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 4: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: +5GT3+Uycs3LI3Echi6+/nHza6D6FE8RgsAvAh7PSww=) 6: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 8: TegvrcGr9hvS3QzCUzNC4Vk9MNo.roa (hash: dGQ+Dmdb8WOfaB6xqwKHrQFmTJRWT1NHWnYcNG0jTyw=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=) 12: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 13: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 14: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 15: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 17: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=) 18: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:09:eb:b5:35:da:b4:67:77:4a:af:65:1c:82:44:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jul 27 04:00:20 2025 GMT Not After : Jul 28 04:00:20 2025 GMT Subject: CN=94b960b817bff5dee6fb0ce19c00c28d03901ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:af:c8:26:5c:e3:6a:58:d9:91:62:de:78: 54:f8:be:e3:0d:2b:31:5e:1c:49:bd:6f:79:fa:b7: 13:2a:82:96:8b:1e:aa:51:01:aa:ca:aa:e7:f9:03: 1b:1a:bc:f5:21:73:b0:fd:bf:3b:cb:61:4e:8d:c7: d0:db:5b:6e:2c:64:97:97:51:78:f2:fd:b5:d2:e9: 9b:de:88:87:db:76:c8:32:de:42:ce:c2:90:f7:9a: be:27:72:85:eb:05:26:48:89:bf:5f:a3:e6:97:55: 19:ba:6c:e5:9b:0a:64:64:8b:e2:5e:02:d9:dc:cb: cb:ed:4d:fb:04:17:43:b5:b4:c2:a6:dc:9a:3f:e7: 0d:6b:6a:32:64:5c:19:83:b7:bd:5c:b2:57:3b:ea: b6:5b:a1:5b:a6:8c:5e:cc:05:d1:1e:09:4c:fd:4a: 63:47:32:8d:74:46:aa:c3:ff:17:3f:76:ee:53:70: 5a:b4:2c:fe:9d:95:84:1c:6f:d1:00:e2:b5:15:94: d1:52:05:cc:82:63:ba:6b:63:56:3c:14:d3:fd:a5: d3:55:bf:ad:a5:b9:1c:87:30:a9:89:cd:af:11:6a: f9:00:08:18:23:5a:2d:63:05:48:bc:a0:5c:1b:ba: 51:59:80:78:3b:85:03:b6:d2:55:80:a9:a1:71:53: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B9:60:B8:17:BF:F5:DE:E6:FB:0C:E1:9C:00:C2:8D:03:90:1A:D8 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:29:02:10:98:99:98:4e:cc:6c:42:31:f6:b3:cc:68:a2:90: 5d:8b:da:6b:6e:7b:96:6c:70:e2:b3:7b:c7:65:22:aa:d6:66: 54:f3:ba:75:81:58:9c:6a:a4:b7:13:cd:a5:50:1b:f9:a0:84: e4:a5:52:04:56:11:1d:4e:ed:52:ec:05:84:1b:84:85:88:fe: 30:32:fe:4b:eb:18:15:38:c6:0c:07:cb:d8:2a:75:4c:a3:98: df:8e:3a:6d:92:04:53:30:7b:0a:78:f4:40:c7:b7:f8:35:18: e3:4a:db:ca:58:5d:9c:7b:ca:67:07:79:a2:b8:bd:e8:ab:56: 4e:c6:59:3c:a4:62:15:0a:4e:6f:57:42:74:57:ca:ad:01:12: 12:ec:81:03:09:45:78:6a:21:2c:8c:ee:8a:79:75:2d:2a:c8: b0:fd:bb:64:a2:49:b8:d0:62:fc:4c:e4:93:28:d4:ca:b3:49: b3:6e:fd:72:a4:a4:2c:27:a4:40:61:2a:49:cc:d9:64:93:01: 3d:48:51:56:7e:85:29:9d:fe:17:88:bf:82:f4:10:e8:5d:d1: 55:2b:63:0a:e1:84:88:d0:02:69:3f:81:5e:bf:01:85:05:3b: 87:94:d8:a7:85:da:45:54:b1:c7:86:ea:c5:f6:b8:7f:45:0b: 89:f1:da:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKCeu1Ndq0Z3dKr2UcgkTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwNzI3MDQwMDIwWhcNMjUwNzI4MDQwMDIwWjAzMTEwLwYDVQQD Eyg5NGI5NjBiODE3YmZmNWRlZTZmYjBjZTE5YzAwYzI4ZDAzOTAxYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEuvyCZc42pY2ZFi3nhU+L7jDSsx XhxJvW95+rcTKoKWix6qUQGqyqrn+QMbGrz1IXOw/b87y2FOjcfQ21tuLGSXl1F4 8v210umb3oiH23bIMt5CzsKQ95q+J3KF6wUmSIm/X6Pml1UZumzlmwpkZIviXgLZ 3MvL7U37BBdDtbTCptyaP+cNa2oyZFwZg7e9XLJXO+q2W6FbpoxezAXRHglM/Upj RzKNdEaqw/8XP3buU3BatCz+nZWEHG/RAOK1FZTRUgXMgmO6a2NWPBTT/aXTVb+t pbkchzCpic2vEWr5AAgYI1otYwVIvKBcG7pRWYB4O4UDttJVgKmhcVNBMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS5YLgXv/Xe5vsM4ZwAwo0DkBrYMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASkCEJiZ mE7MbEIx9rPMaKKQXYvaa257lmxw4rN7x2UiqtZmVPO6dYFYnGqktxPNpVAb+aCE 5KVSBFYRHU7tUuwFhBuEhYj+MDL+S+sYFTjGDAfL2Cp1TKOY3446bZIEUzB7Cnj0 QMe3+DUY40rbylhdnHvKZwd5ori96KtWTsZZPKRiFQpOb1dCdFfKrQESEuyBAwlF eGohLIzuinl1LSrIsP27ZKJJuNBi/EzkkyjUyrNJs279cqSkLCekQGEqSczZZJMB PUhRVn6FKZ3+F4i/gvQQ6F3RVStjCuGEiNACaT+BXr8BhQU7h5TYp4XaRVSxx4bq xfa4f0ULifHaTA== -----END CERTIFICATE-----Generated at Sun Jul 27 10:02:22 2025 by rpki-client