$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: cfQY1b+/M//S7qmHwsI/ayyzgeLG7VnPpTuIWhJ6nRQ= Subject key identifier: 12:7C:BE:F5:2A:70:55:F5:9C:B7:A5:B8:86:E1:16:F2:5F:B0:50:2D Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019931FFC8D6A09E65B20679A72997E14D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0946 Signing time: Wed 10 Sep 2025 05:01:10 +0000 Manifest this update: Wed 10 Sep 2025 05:01:10 +0000 Manifest next update: Thu 11 Sep 2025 05:01:10 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: fdIOUOD2HItyok88RMyUG+3uPzsJhkDl8pkjnp3bD0g=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:ff:c8:d6:a0:9e:65:b2:06:79:a7:29:97:e1:4d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Sep 10 05:01:10 2025 GMT Not After : Sep 11 05:01:10 2025 GMT Subject: CN=127cbef52a7055f59cb7a5b886e116f25fb0502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:f2:e4:70:cd:3c:06:cb:a6:9e:45:e4:60: 6a:de:65:10:01:83:81:6d:98:7f:ca:30:24:38:3a: 0f:df:c7:70:34:48:c1:6f:21:33:44:f8:e0:5e:c7: c7:76:5e:be:47:1b:f1:c8:41:cd:3b:43:41:a2:27: be:1b:d2:2f:e9:03:36:bd:57:d1:d3:27:7c:ef:44: a2:5f:53:d5:5f:9f:30:2c:d7:85:4b:29:8f:c6:ff: e7:fd:4c:75:82:5f:28:52:17:32:d0:3d:92:99:a7: 7f:fe:cf:72:3f:65:34:fa:ae:73:cf:fe:d1:b5:80: 49:ab:1c:a0:69:87:81:17:2d:ea:0d:a8:4f:16:6b: f2:0f:b1:79:07:98:94:14:02:28:06:68:4a:62:54: e8:97:33:13:f2:2b:c3:83:b4:97:e4:c1:3b:ac:3f: 9b:80:1f:06:e2:93:d9:61:25:b5:c9:bc:54:a3:e8: 9a:0d:09:79:38:e5:d9:58:95:2b:8e:00:70:d6:7c: fb:53:b8:aa:34:2a:1d:55:d7:99:95:14:77:44:6b: 2d:4c:11:1e:cc:67:6d:e7:34:c6:a7:20:4a:3c:af: 34:88:d5:5d:22:da:10:b3:2d:4c:36:82:62:f9:a3: 29:69:29:ba:d0:98:48:92:b8:49:7a:55:de:cf:3d: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7C:BE:F5:2A:70:55:F5:9C:B7:A5:B8:86:E1:16:F2:5F:B0:50:2D X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:98:96:5c:bc:1c:bd:c5:8d:51:89:9b:cd:e0:d3:62:43:d8: cc:df:31:31:73:cb:4b:74:85:8e:6b:49:e7:d3:dd:9d:d5:00: 1a:f3:26:57:ab:a5:9a:18:4c:74:6a:da:1b:c3:cc:66:4a:e9: ad:bf:64:a3:79:99:bf:34:c5:4b:1f:b1:f5:8a:c4:fc:f2:c3: a6:17:26:a9:42:57:84:91:9c:0d:8f:93:b6:67:0e:65:c0:24: 39:04:9e:7f:da:fb:6c:f2:63:26:c6:99:8e:2a:84:1a:5b:f5: 16:77:75:a7:e3:46:9f:2f:15:fc:e6:8d:ea:3a:7c:a8:a0:99: 65:93:6c:80:f7:cd:c2:76:75:ac:38:42:a1:b0:90:c7:3c:e2: 6e:a5:70:d9:c1:c4:a1:a1:a3:c9:e5:18:c9:b2:d8:d5:f1:8a: ba:05:df:ca:47:f3:04:be:6d:c7:b1:7d:54:96:40:f8:aa:8e: 15:d4:c7:57:7d:3c:5b:86:5f:9c:62:9d:b4:df:b3:14:cb:50: 40:60:96:7f:68:ab:ad:ab:74:d4:f1:9c:09:eb:82:06:5a:ef: d1:5c:c6:e1:af:ca:d6:2a:9b:81:5d:2b:63:1f:25:00:c7:e5: 23:e1:d8:f4:47:a9:0d:cb:f0:b0:8a:90:90:d8:62:53:6e:50: 90:16:2b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkx/8jWoJ5lsgZ5pymX4U0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUwOTEwMDUwMTEwWhcNMjUwOTExMDUwMTEwWjAzMTEwLwYDVQQD EygxMjdjYmVmNTJhNzA1NWY1OWNiN2E1Yjg4NmUxMTZmMjVmYjA1MDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIXy5HDNPAbLpp5F5GBq3mUQAYOB bZh/yjAkODoP38dwNEjBbyEzRPjgXsfHdl6+RxvxyEHNO0NBoie+G9Iv6QM2vVfR 0yd870SiX1PVX58wLNeFSymPxv/n/Ux1gl8oUhcy0D2Smad//s9yP2U0+q5zz/7R tYBJqxygaYeBFy3qDahPFmvyD7F5B5iUFAIoBmhKYlTolzMT8ivDg7SX5ME7rD+b gB8G4pPZYSW1ybxUo+iaDQl5OOXZWJUrjgBw1nz7U7iqNCodVdeZlRR3RGstTBEe zGdt5zTGpyBKPK80iNVdItoQsy1MNoJi+aMpaSm60JhIkrhJelXezz0s2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ8vvUqcFX1nLeluIbhFvJfsFAtMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZiWXLwc vcWNUYmbzeDTYkPYzN8xMXPLS3SFjmtJ59PdndUAGvMmV6ulmhhMdGraG8PMZkrp rb9ko3mZvzTFSx+x9YrE/PLDphcmqUJXhJGcDY+TtmcOZcAkOQSef9r7bPJjJsaZ jiqEGlv1Fnd1p+NGny8V/OaN6jp8qKCZZZNsgPfNwnZ1rDhCobCQxzzibqVw2cHE oaGjyeUYybLY1fGKugXfykfzBL5tx7F9VJZA+KqOFdTHV308W4ZfnGKdtN+zFMtQ QGCWf2irrat01PGcCeuCBlrv0VzG4a/K1iqbgV0rYx8lAMflI+HY9EepDcvwsIqQ kNhiU25QkBYrkQ== -----END CERTIFICATE-----Generated at Wed Sep 10 14:48:03 2025 by rpki-client