$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: pyQGJj9sE64DCvPa9vKNBY2MpgHEwWyWOmS4M3gvmbw= Subject key identifier: C3:AF:DC:4F:39:19:4D:56:19:75:A5:14:F4:55:00:C6:29:D1:35:45 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 019A24AF187821314117C607950B9957527F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 11F4 Signing time: Mon 27 Oct 2025 08:00:46 +0000 Manifest this update: Mon 27 Oct 2025 08:00:46 +0000 Manifest next update: Tue 28 Oct 2025 08:00:46 +0000 Files and hashes: 1: 0HwAhbsJ8G8t2z-3Pam96Qclp0Y.roa (hash: Kf+VRZglvL6Y3KqIp6jRgRnsTLA4/6Z1kOM3rWbawXY=) 2: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (hash: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=) 3: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 4: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 5: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 6: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: N5NZaYi4XvbUR6ccd/rNbWsum+RpdmS3cnXvowkiLIM=) 7: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 8: GEK4ZpqBhk_Uf2-g6CPQDmtCUt0.roa (hash: YmXLiGi1pP0XJ9TfEfzlqfyfGLBGlCS0068r1YP0kds=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: ZlysawxM1e6NofcVQHD9jSRfzmo.roa (hash: 2/MgDGIM49q026UnmASkkXoJYYD1r2cYQAo13OQnUSQ=) 11: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 12: cYq8l3NcenGiSFibcz6lsDHU5MU.roa (hash: HKcrI14U8StYBCCm7qa2rnM5VoMvwwlilJxfy4MxCLU=) 13: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 14: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 15: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 16: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 17: x2feWTktTwyBHKrOUzd6buDUjuU.roa (hash: ligBMajluKMyvklZAk4GV5Vw2Taqgg4c/vN04Ce3XMY=) 18: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:af:18:78:21:31:41:17:c6:07:95:0b:99:57:52:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Oct 27 08:00:46 2025 GMT Not After : Oct 28 08:00:46 2025 GMT Subject: CN=c3afdc4f39194d561975a514f45500c629d13545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:dd:5f:85:eb:fe:89:17:f7:f7:58:24:6a: 0c:bf:46:a9:46:1a:4c:1b:c9:55:43:a1:8c:7b:c6: 91:e0:ff:01:02:34:da:f8:1f:c0:ac:fd:cd:f0:09: 92:25:4e:e0:8c:12:e1:53:62:19:29:12:8e:fd:7f: 00:b3:0c:13:22:ef:80:90:25:06:2f:41:6d:8a:aa: 71:5c:37:b3:8c:a0:e9:d2:ca:33:ab:76:69:9a:9d: bc:e9:c6:de:bd:56:44:b6:12:ae:99:85:9b:4b:92: 0f:d4:b2:99:da:c2:af:76:ab:a2:96:a0:29:13:eb: 08:34:6e:5f:bb:e0:1b:15:b2:3f:95:ae:87:00:b5: c2:eb:27:19:fe:fb:a3:28:a4:02:a6:5a:f1:95:8f: 70:52:10:52:f7:4a:92:29:a0:23:49:04:f4:8c:45: 2a:3d:93:9e:4f:54:2e:a8:15:85:03:03:8d:60:86: 4c:5f:da:1b:f7:49:38:df:ce:2a:65:03:00:7c:91: 75:a5:16:f4:6a:ab:6a:ce:94:f9:72:53:7b:f0:63: 00:f6:f2:c5:24:67:28:b0:52:3a:4a:b8:e4:e8:a4: e8:7a:d4:32:71:43:8c:19:58:57:d3:15:f7:a0:b7: 9b:2e:71:d8:0f:57:3a:ee:3e:7f:3d:71:0d:0d:45: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AF:DC:4F:39:19:4D:56:19:75:A5:14:F4:55:00:C6:29:D1:35:45 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5c:13:9a:01:73:c8:5f:90:fd:3b:a1:c3:97:8a:c2:87:3c: 75:d6:03:13:00:4c:d7:34:31:dc:21:6d:06:1b:51:37:94:2e: 2c:4f:02:1e:d2:f5:31:ff:cd:3e:1d:96:0b:3e:5f:7d:48:74: a8:0a:8f:01:03:1b:01:dc:24:22:a3:d6:44:06:9e:88:b1:4b: c6:fe:91:41:ef:2f:ce:c5:46:ef:e3:7a:00:04:4a:b7:f2:fd: 60:2c:c2:57:15:17:17:42:ca:35:fc:fc:ab:fd:85:44:18:ac: e2:c0:b8:36:e8:fc:c2:c9:50:14:c2:66:d3:37:1d:a0:6b:08: 29:52:5a:8c:07:d4:f0:24:c3:e8:f3:d0:82:09:19:b2:21:99: 8b:fa:b0:19:f1:13:24:f0:ab:a7:7d:da:59:dd:82:0a:e4:54: a5:bc:33:8f:0d:78:54:7b:e9:d4:3d:02:ca:f3:cd:fc:0a:1a: e5:f7:a0:de:32:a5:13:34:e5:a9:48:c7:bd:29:3e:fc:ca:49: e9:30:4e:bc:17:4c:4b:85:1b:db:0e:db:80:e8:a9:f1:e5:b1: 70:5e:f4:41:8b:1f:58:71:1e:e6:ad:c5:7d:13:e1:6d:8b:f4: bc:0b:40:aa:c1:97:f9:81:4f:ec:a6:bc:31:bc:21:7c:30:62: 1e:20:56:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZokrxh4ITFBF8YHlQuZV1J/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUxMDI3MDgwMDQ2WhcNMjUxMDI4MDgwMDQ2WjAzMTEwLwYDVQQD EyhjM2FmZGM0ZjM5MTk0ZDU2MTk3NWE1MTRmNDU1MDBjNjI5ZDEzNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7DdX4Xr/okX9/dYJGoMv0apRhpM G8lVQ6GMe8aR4P8BAjTa+B/ArP3N8AmSJU7gjBLhU2IZKRKO/X8AswwTIu+AkCUG L0FtiqpxXDezjKDp0sozq3Zpmp286cbevVZEthKumYWbS5IP1LKZ2sKvdquilqAp E+sING5fu+AbFbI/la6HALXC6ycZ/vujKKQCplrxlY9wUhBS90qSKaAjSQT0jEUq PZOeT1QuqBWFAwONYIZMX9ob90k4384qZQMAfJF1pRb0aqtqzpT5clN78GMA9vLF JGcosFI6Srjk6KToetQycUOMGVhX0xX3oLebLnHYD1c67j5/PXENDUVTZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOv3E85GU1WGXWlFPRVAMYp0TVFMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlwTmgFz yF+Q/Tuhw5eKwoc8ddYDEwBM1zQx3CFtBhtRN5QuLE8CHtL1Mf/NPh2WCz5ffUh0 qAqPAQMbAdwkIqPWRAaeiLFLxv6RQe8vzsVG7+N6AARKt/L9YCzCVxUXF0LKNfz8 q/2FRBis4sC4Nuj8wslQFMJm0zcdoGsIKVJajAfU8CTD6PPQggkZsiGZi/qwGfET JPCrp33aWd2CCuRUpbwzjw14VHvp1D0CyvPN/Aoa5feg3jKlEzTlqUjHvSk+/MpJ 6TBOvBdMS4Ub2w7bgOip8eWxcF70QYsfWHEe5q3FfRPhbYv0vAtAqsGX+YFP7Ka8 MbwhfDBiHiBWmA== -----END CERTIFICATE-----Generated at Mon Oct 27 11:55:33 2025 by rpki-client