$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: E+6BuLJddC5j5cA2Oo9L1wZcJ9kWv/NlDUuQYRbt3Uc= Subject key identifier: 01:53:DB:BA:45:D4:C4:1A:FA:A3:E2:F9:AC:61:DA:54:F2:3C:4B:5B Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019933B70F79FFFCEC50B401B474F0CC81B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1177 Signing time: Wed 10 Sep 2025 13:00:58 +0000 Manifest this update: Wed 10 Sep 2025 13:00:58 +0000 Manifest next update: Thu 11 Sep 2025 13:00:58 +0000 Files and hashes: 1: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=) 2: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 3: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 4: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: LWrcpufx6DbeG9V4dGBDM13Pz0FUVVB1JwEcqFuUX+g=) 6: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 8: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 9: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (hash: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=) 12: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 13: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 14: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 15: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:33:b7:0f:79:ff:fc:ec:50:b4:01:b4:74:f0:cc:81:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Sep 10 13:00:58 2025 GMT Not After : Sep 11 13:00:58 2025 GMT Subject: CN=0153dbba45d4c41afaa3e2f9ac61da54f23c4b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:75:bc:35:f7:a3:4d:ae:ab:25:8c:8c:06: a7:6c:10:1d:b5:a6:a2:26:2a:b6:05:c6:2e:ca:a5: c5:8d:26:a4:af:2c:32:7c:12:0f:95:7f:8d:c4:f6: 57:38:a3:f8:e0:3d:97:34:bc:4c:48:8e:9b:29:ae: 76:c4:75:a5:5b:a6:ef:a0:be:08:41:f7:1b:4b:6b: 5f:b7:67:82:5c:51:ea:cb:ae:0c:b0:50:56:3e:77: e5:a5:35:5e:ad:56:f9:31:0e:44:c1:31:24:66:b0: 0c:5d:cc:9e:0e:02:bf:41:8e:75:25:6f:fd:1f:0c: 07:53:c7:ae:71:4e:99:8a:00:0b:7b:0e:ad:c5:18: 92:1b:08:a9:a7:50:1e:c5:b1:a0:e1:13:73:42:19: 20:64:b8:bb:41:a8:04:d1:a6:96:88:2a:2f:10:5f: 84:ea:7b:43:5a:9d:79:6a:57:df:c7:7a:69:ad:40: 80:43:4e:45:a7:16:6c:3f:31:19:1d:28:bb:8d:5b: 61:7d:4c:84:f3:15:44:cd:8c:57:eb:c1:17:fa:4b: 17:b4:02:26:43:67:ed:65:2c:45:7d:fa:b7:1f:42: 56:ec:bb:78:ec:11:d9:e3:56:7a:72:15:87:2d:5c: 56:fd:fd:d1:a3:a8:b3:bd:bb:0b:17:6e:d5:2e:a5: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:53:DB:BA:45:D4:C4:1A:FA:A3:E2:F9:AC:61:DA:54:F2:3C:4B:5B X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:55:b4:79:cd:c2:97:cf:d2:72:28:b2:9b:42:cd:45:89:37: 6a:d2:51:64:e5:ae:3f:82:0f:e7:0e:97:6d:72:96:08:8c:f1: 86:75:bb:d6:f6:82:eb:c5:6c:f5:b6:01:b1:e0:03:79:bb:1f: 2e:f7:63:f7:a2:ee:7f:9e:fe:1a:cf:41:90:2c:46:8f:e1:02: e9:10:4b:d9:8d:ec:ca:d5:68:83:aa:1a:e5:79:cb:e4:26:d3: 08:ee:ee:0a:d7:66:5f:59:f1:cc:fa:ad:0a:f5:8e:c9:8c:cd: 33:9c:3b:8e:90:cb:48:b4:66:51:e5:91:80:99:17:f2:7a:5b: 6a:91:30:1d:96:9a:28:3d:1f:7a:28:ee:02:f6:22:3e:60:0c: c9:48:9a:1c:84:4e:cd:68:34:f4:4e:a4:9f:13:61:d8:5e:f4: f2:5e:f3:a0:3a:1c:a4:a0:3b:4c:46:0c:16:33:3a:ce:79:c4: 51:85:89:fb:fe:b0:d6:90:93:96:71:3f:6b:9b:f3:03:c6:34: b0:37:c5:d1:e3:e1:b9:93:38:5a:ed:d5:d4:a6:f2:af:ff:f6: 26:e9:69:c4:0b:aa:58:94:32:7b:92:07:ac:bf:7b:0b:9b:36: 0d:03:e4:f6:72:05:d5:a6:74:81:c8:99:51:32:9d:bc:cb:1b: d0:9f:e1:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkztw95//zsULQBtHTwzIG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwOTEwMTMwMDU4WhcNMjUwOTExMTMwMDU4WjAzMTEwLwYDVQQD EygwMTUzZGJiYTQ1ZDRjNDFhZmFhM2UyZjlhYzYxZGE1NGYyM2M0YjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoV1vDX3o02uqyWMjAanbBAdtaai Jiq2BcYuyqXFjSakrywyfBIPlX+NxPZXOKP44D2XNLxMSI6bKa52xHWlW6bvoL4I QfcbS2tft2eCXFHqy64MsFBWPnflpTVerVb5MQ5EwTEkZrAMXcyeDgK/QY51JW/9 HwwHU8eucU6ZigALew6txRiSGwipp1AexbGg4RNzQhkgZLi7QagE0aaWiCovEF+E 6ntDWp15alffx3pprUCAQ05FpxZsPzEZHSi7jVthfUyE8xVEzYxX68EX+ksXtAIm Q2ftZSxFffq3H0JW7Lt47BHZ41Z6chWHLVxW/f3Ro6izvbsLF27VLqV61wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFT27pF1MQa+qPi+axh2lTyPEtbMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1W0ec3C l8/Sciiym0LNRYk3atJRZOWuP4IP5w6XbXKWCIzxhnW71vaC68Vs9bYBseADebsf Lvdj96Luf57+Gs9BkCxGj+EC6RBL2Y3sytVog6oa5XnL5CbTCO7uCtdmX1nxzPqt CvWOyYzNM5w7jpDLSLRmUeWRgJkX8npbapEwHZaaKD0feijuAvYiPmAMyUiaHIRO zWg09E6knxNh2F708l7zoDocpKA7TEYMFjM6znnEUYWJ+/6w1pCTlnE/a5vzA8Y0 sDfF0ePhuZM4Wu3V1Kbyr//2JulpxAuqWJQye5IHrL97C5s2DQPk9nIF1aZ0gciZ UTKdvMsb0J/hmA== -----END CERTIFICATE-----Generated at Wed Sep 10 22:56:59 2025 by rpki-client