$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: Jl1xk7oaMEUeu2z4Nou4ytjxITccO1zXZlgnEKxvBGU= Subject key identifier: D8:C7:90:D0:0F:83:C4:F3:60:84:CA:DD:EB:E1:9D:9C:79:CB:05:12 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 01977609FBDB3BA551C99083E21F96ACD40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 159D Signing time: Mon 16 Jun 2025 00:00:55 +0000 Manifest this update: Mon 16 Jun 2025 00:00:55 +0000 Manifest next update: Tue 17 Jun 2025 00:00:55 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: /O+tGR1DvNZ9ru9o5jQP0RuA5JKto+Gn5Y42wHgq9+g=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:09:fb:db:3b:a5:51:c9:90:83:e2:1f:96:ac:d4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jun 16 00:00:55 2025 GMT Not After : Jun 17 00:00:55 2025 GMT Subject: CN=d8c790d00f83c4f36084caddebe19d9c79cb0512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:75:7d:24:99:88:b8:d2:a6:29:e9:bb:7e: 43:11:51:3c:52:d5:88:5f:74:cd:8a:77:83:34:25: 9d:2f:56:3f:b2:3c:8b:33:f8:b6:95:0a:1e:77:ad: 55:3b:31:63:7a:93:72:97:db:42:de:4d:9f:13:d3: ed:47:f7:d5:1e:5d:35:c8:99:89:a5:c1:5d:68:f4: e9:5a:a2:20:9b:89:63:a2:33:4f:12:d8:b9:dc:6e: 5f:06:25:e8:b5:d2:30:06:75:85:23:5a:95:63:df: 5b:c9:bd:2f:ef:e6:3b:f9:31:94:ec:8d:04:ca:73: 58:99:25:82:de:6a:f2:0f:ad:c7:f3:b4:77:52:29: 74:1e:70:16:90:44:24:24:61:24:01:ef:3e:91:cf: 22:8d:a8:50:b2:28:04:1d:9a:2a:00:87:36:ca:e7: 37:89:72:97:14:da:9c:b7:2f:b4:67:4d:05:3c:66: 0a:a2:66:79:b2:71:9f:94:13:1f:eb:1e:fd:82:14: 59:20:0a:c5:d0:de:d1:7e:1b:d6:81:9b:b5:b9:ac: 69:8e:98:0e:5f:09:e0:72:5a:fd:67:13:a8:77:86: 03:4a:5f:65:d2:85:77:41:42:9b:ae:bb:d6:82:9a: 43:05:17:86:c7:61:66:0b:2a:82:d5:f3:44:f7:3c: 7b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:90:D0:0F:83:C4:F3:60:84:CA:DD:EB:E1:9D:9C:79:CB:05:12 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0c:09:0e:79:ac:41:1c:eb:75:5b:44:3e:b9:11:a8:b3:a7: 8f:5b:b7:2a:89:2d:b3:18:c3:73:84:c0:fc:76:73:e5:95:1b: fc:8b:3e:b4:a8:68:18:38:18:ac:1f:65:f9:78:e7:77:d0:b9: 49:30:64:d8:f4:c9:ed:c1:ee:44:ec:c8:17:49:ef:2e:ba:41: 07:82:bf:ab:f5:3d:76:5f:c7:ef:95:89:87:16:2a:1f:7d:3c: 21:6b:02:3d:b3:62:81:f4:53:ae:e8:4d:60:72:3e:0b:25:d3: d0:c5:4a:67:12:f4:68:21:f3:0d:0c:0d:59:4b:2d:bf:c1:6a: c5:13:29:40:34:15:2b:00:93:8b:05:67:30:48:e5:6a:27:d4: 4d:3f:d1:aa:07:43:63:0b:a6:8c:22:8b:e4:77:8e:60:3c:80: b4:59:b4:60:5c:6f:85:86:50:76:e1:54:0b:0b:74:5c:4b:f6: 70:a2:7e:40:dc:ca:8b:18:7b:81:90:29:93:5c:7d:06:c3:9b: df:6b:99:2f:b5:7c:52:e0:33:dc:92:fb:16:37:d5:e7:82:37: 6f:92:64:ab:6c:9a:9c:8d:12:0c:90:a2:47:3b:72:01:87:50: 6f:97:2b:0c:5f:65:dc:a3:81:5a:19:ad:60:0e:42:d3:e9:cf: 6b:45:87:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2CfvbO6VRyZCD4h+WrNQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwNjE2MDAwMDU1WhcNMjUwNjE3MDAwMDU1WjAzMTEwLwYDVQQD EyhkOGM3OTBkMDBmODNjNGYzNjA4NGNhZGRlYmUxOWQ5Yzc5Y2IwNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBN1fSSZiLjSpinpu35DEVE8UtWI X3TNineDNCWdL1Y/sjyLM/i2lQoed61VOzFjepNyl9tC3k2fE9PtR/fVHl01yJmJ pcFdaPTpWqIgm4ljojNPEti53G5fBiXotdIwBnWFI1qVY99byb0v7+Y7+TGU7I0E ynNYmSWC3mryD63H87R3Uil0HnAWkEQkJGEkAe8+kc8ijahQsigEHZoqAIc2yuc3 iXKXFNqcty+0Z00FPGYKomZ5snGflBMf6x79ghRZIArF0N7RfhvWgZu1uaxpjpgO Xwngclr9ZxOod4YDSl9l0oV3QUKbrrvWgppDBReGx2FmCyqC1fNE9zx7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjHkNAPg8TzYITK3evhnZx5ywUSMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgwJDnms QRzrdVtEPrkRqLOnj1u3KoktsxjDc4TA/HZz5ZUb/Is+tKhoGDgYrB9l+Xjnd9C5 STBk2PTJ7cHuROzIF0nvLrpBB4K/q/U9dl/H75WJhxYqH308IWsCPbNigfRTruhN YHI+CyXT0MVKZxL0aCHzDQwNWUstv8FqxRMpQDQVKwCTiwVnMEjlaifUTT/RqgdD YwumjCKL5HeOYDyAtFm0YFxvhYZQduFUCwt0XEv2cKJ+QNzKixh7gZApk1x9BsOb 32uZL7V8UuAz3JL7FjfV54I3b5Jkq2yanI0SDJCiRztyAYdQb5crDF9l3KOBWhmt YA5C0+nPa0WHWQ== -----END CERTIFICATE-----Generated at Mon Jun 16 10:37:24 2025 by rpki-client