$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: FDBH0Beb+t3OY9sOIzsxPWYT5zmVOhIPGTXu6OJRdwc= Subject key identifier: 7C:6A:18:08:AD:8F:85:E8:56:7F:40:1D:10:D7:0C:FA:23:85:4D:2B Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 0197752E47F228145B936C309C773C627A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 108D Signing time: Sun 15 Jun 2025 20:00:56 +0000 Manifest this update: Sun 15 Jun 2025 20:00:56 +0000 Manifest next update: Mon 16 Jun 2025 20:00:56 +0000 Files and hashes: 1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: mmGskDc2lJanJpQ49WVNZG0AAX6PiAqLBnUK+MqkpyA=) 5: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (hash: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=) 6: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=) 7: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=) 8: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 9: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 10: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 11: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 12: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 13: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 14: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 15: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 16: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=) 17: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:2e:47:f2:28:14:5b:93:6c:30:9c:77:3c:62:7a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Jun 15 20:00:56 2025 GMT Not After : Jun 16 20:00:56 2025 GMT Subject: CN=7c6a1808ad8f85e8567f401d10d70cfa23854d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:c7:87:2f:3f:44:ae:01:d4:6e:e5:8e:49: ab:be:29:15:1d:fe:8a:24:98:d9:13:66:b2:73:87: df:b3:3c:ae:f9:af:18:2f:7e:ea:85:a5:01:7c:6d: 98:23:93:38:ef:da:9f:84:0b:d6:cf:25:26:28:0d: c5:37:66:9b:48:b8:f5:e5:5b:aa:66:17:48:7a:57: 1f:fb:88:c1:b8:4b:b4:29:9e:36:fc:dd:1e:2d:6a: 63:6c:46:76:48:b5:50:7b:df:5a:25:53:1d:03:02: 94:64:ec:9b:81:42:4b:13:0a:3b:46:e7:30:95:92: bf:57:8d:c6:e5:e3:f8:38:e9:45:d8:18:f0:e7:67: 15:a8:d4:6f:e3:cf:36:5b:b6:15:92:a3:aa:9e:5b: b0:60:95:3e:cf:6c:c5:a1:78:d9:5d:4b:7d:d9:34: 99:86:29:c6:ab:03:16:89:d1:31:07:31:f2:87:15: a5:7b:e2:d2:a5:2e:0c:83:9f:66:f9:d8:ee:20:b2: 18:2f:ac:b9:88:f3:26:5c:eb:53:3c:e3:e7:3e:aa: e9:8f:79:c2:36:ac:a3:4f:e1:12:ae:75:3f:92:03: d6:c3:45:84:ab:d9:13:f6:f8:fa:e1:5c:f4:de:07: 42:3f:29:25:b1:1d:13:48:a9:df:57:ec:c3:80:76: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6A:18:08:AD:8F:85:E8:56:7F:40:1D:10:D7:0C:FA:23:85:4D:2B X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bb:bc:24:f2:5e:66:e5:a5:20:1f:bf:b6:d7:9c:55:dd:e6: db:f4:12:cd:61:a1:93:76:4e:45:81:be:ad:31:21:1b:3d:06: 2f:7a:2f:66:34:47:2f:21:fd:de:aa:12:45:76:d6:0d:12:fe: 13:a5:bc:c6:89:aa:39:f4:8b:4c:5c:47:d3:1f:36:4d:23:7a: cc:04:fa:01:60:bf:7a:fe:46:a6:ee:18:3c:ff:b5:47:50:99: 72:9b:ce:ce:8e:d6:d9:8a:ce:2d:c8:e8:89:39:82:d9:27:cc: 20:2a:f8:e4:60:02:2f:91:23:7b:c4:a5:91:5d:ea:b3:64:8f: 45:b6:71:24:b7:d5:e5:ac:96:ee:67:ec:57:e8:a0:6a:5f:a5: e6:dd:74:e6:fa:97:19:45:14:06:de:6e:57:13:bc:d6:97:fd: bc:d3:1f:8e:6c:1e:63:a9:4b:68:86:7e:d6:3a:43:fa:e3:14: 10:cb:1b:b3:50:32:c3:70:40:4a:b4:af:13:e3:78:e1:71:9b: 9c:44:bc:14:6d:97:f7:1e:a9:64:6f:36:1a:5f:be:f4:c1:67: 64:7b:c4:5e:5e:ef:54:d0:53:6d:17:3c:96:88:aa:bf:27:5a: 6f:59:e8:0b:c8:55:32:06:ac:ce:14:c3:62:e9:c7:a8:51:ad: 1e:c9:48:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd1LkfyKBRbk2wwnHc8YnpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwNjE1MjAwMDU2WhcNMjUwNjE2MjAwMDU2WjAzMTEwLwYDVQQD Eyg3YzZhMTgwOGFkOGY4NWU4NTY3ZjQwMWQxMGQ3MGNmYTIzODU0ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hLHhy8/RK4B1G7ljkmrvikVHf6K JJjZE2ayc4ffszyu+a8YL37qhaUBfG2YI5M479qfhAvWzyUmKA3FN2abSLj15Vuq ZhdIelcf+4jBuEu0KZ42/N0eLWpjbEZ2SLVQe99aJVMdAwKUZOybgUJLEwo7Rucw lZK/V43G5eP4OOlF2Bjw52cVqNRv4882W7YVkqOqnluwYJU+z2zFoXjZXUt92TSZ hinGqwMWidExBzHyhxWle+LSpS4Mg59m+djuILIYL6y5iPMmXOtTPOPnPqrpj3nC NqyjT+ESrnU/kgPWw0WEq9kT9vj64Vz03gdCPyklsR0TSKnfV+zDgHZXMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxqGAitj4XoVn9AHRDXDPojhU0rMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLu8JPJe ZuWlIB+/ttecVd3m2/QSzWGhk3ZORYG+rTEhGz0GL3ovZjRHLyH93qoSRXbWDRL+ E6W8xomqOfSLTFxH0x82TSN6zAT6AWC/ev5Gpu4YPP+1R1CZcpvOzo7W2YrOLcjo iTmC2SfMICr45GACL5Eje8SlkV3qs2SPRbZxJLfV5ayW7mfsV+igal+l5t105vqX GUUUBt5uVxO81pf9vNMfjmweY6lLaIZ+1jpD+uMUEMsbs1Ayw3BASrSvE+N44XGb nES8FG2X9x6pZG82Gl++9MFnZHvEXl7vVNBTbRc8loiqvydab1noC8hVMgaszhTD YunHqFGtHslIYw== -----END CERTIFICATE-----Generated at Mon Jun 16 02:26:01 2025 by rpki-client