$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft File: DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json) Hash identifier: NLDD1Luw8iwEptXBm/Eec/3DO/60b8KxubIfzvVi2Tg= Subject key identifier: 1D:4C:02:87:46:CA:38:B1:38:AD:32:D2:88:A4:77:05:8B:68:F4:D2 Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Certificate serial: 01967831935B3451FA624DC2F57E429349DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft Manifest number: 1008 Signing time: Sun 27 Apr 2025 17:00:36 +0000 Manifest this update: Sun 27 Apr 2025 17:00:36 +0000 Manifest next update: Mon 28 Apr 2025 17:00:36 +0000 Files and hashes: 1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=) 2: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=) 3: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=) 4: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: 6Ja0UyCaI3HyrDl218uPcZZz33BTU4OBq7t6WoKk+8Q=) 5: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=) 6: PUVo5ST7GwSNOno6GEB7-_75840.roa (hash: cD6D5iZgvHwEh63NtvZYi1ih3mUJsM/67jxgu3bl/KM=) 7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=) 8: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=) 9: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=) 10: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=) 11: j-BmNE1PL8fJEwiUUtO9Mv28nV0.roa (hash: z6EQyduvcoZf7YV0u5wyMfuoZtiWFaeEgvTRcTy87Qk=) 12: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=) 13: kh0epdLNSddiQFDfyRWlWNSgNTc.roa (hash: hMYh6cNkenwqAq3pUFKO3vM0qKRLjOoLvXbL/3HS8fo=) 14: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=) 15: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=) 16: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:31:93:5b:34:51:fa:62:4d:c2:f5:7e:42:93:49:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Validity Not Before: Apr 27 17:00:36 2025 GMT Not After : Apr 28 17:00:36 2025 GMT Subject: CN=1d4c028746ca38b138ad32d288a477058b68f4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:f5:65:0c:41:b7:ac:1a:0c:78:59:0c:09: 8f:0a:69:87:a0:77:f8:fd:97:cb:3a:12:83:5e:f0: 66:fb:ee:37:8f:a8:43:30:e3:b5:ff:ef:ed:54:a7: 40:db:d1:47:88:70:1a:79:ed:80:ec:97:8d:f1:c8: eb:90:89:38:4a:5c:44:21:14:09:dc:7f:f7:d8:36: 9b:85:61:f2:0a:fa:0a:b5:f3:85:6a:52:2f:7a:75: ab:1f:fb:bf:17:86:cc:17:38:c9:39:0b:01:9e:23: d2:1f:1f:64:0f:ae:33:26:69:7e:7f:73:d7:cb:99: af:fe:23:15:dd:2c:79:57:af:46:bc:60:c4:2c:d0: 4e:f2:b4:63:85:0f:6a:fd:5d:cd:bc:de:79:79:f8: 85:a1:66:77:5b:fc:32:84:28:b8:12:8e:c0:79:e5: ee:ef:9e:af:42:b4:57:36:da:35:c7:aa:17:97:74: de:d5:a2:12:27:99:2c:0c:64:2c:9f:96:8b:02:82: 77:d5:92:66:46:e1:e0:cb:94:dc:d4:87:49:c8:4b: 78:f3:0c:51:9f:38:ca:8b:e9:1b:cb:bd:96:5e:c5: 51:99:f5:f6:fb:84:39:59:6c:87:e8:75:4c:0e:d5: 4c:4b:df:11:b5:b4:88:90:1e:c4:08:06:a2:88:97: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4C:02:87:46:CA:38:B1:38:AD:32:D2:88:A4:77:05:8B:68:F4:D2 X509v3 Authority Key Identifier: keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e1:e5:6f:d8:b3:cc:3b:5c:b0:fc:78:b8:db:2d:15:43:d5: 3a:c0:ef:bd:98:5a:63:82:ca:83:f2:22:d5:c8:cc:9a:eb:27: d4:06:93:93:7c:5d:7c:d3:48:d4:e6:28:8a:09:2f:9f:18:72: 6b:73:ac:b8:34:0d:9f:f5:9f:8a:b4:ec:37:55:20:c2:9a:db: e5:7f:5c:7f:95:e8:57:e0:ed:55:15:25:97:a6:bc:6f:f3:ae: 7f:24:51:69:9f:bf:22:2e:49:a3:35:9e:cf:ad:a9:c8:3e:e3: cc:e6:2e:4b:e6:12:35:04:e0:ee:c2:93:19:ae:76:b7:46:c8: 65:af:20:87:f0:ff:a7:d2:21:35:63:ea:d7:c1:1a:25:1a:53: 3c:7e:e5:b3:41:8d:6d:12:9e:e9:a0:c1:8a:08:0e:02:23:5d: d5:bc:22:72:c7:8f:79:6e:21:5b:6f:65:43:dc:d7:4a:79:58: 98:76:ef:80:36:dd:a4:27:7f:7f:5a:8a:de:7f:9c:53:44:75: c5:06:4d:e7:e1:98:e4:86:08:51:59:58:28:94:73:68:35:2c: bc:ac:1b:74:1a:c6:d1:19:fe:7f:50:81:b5:7e:e6:62:da:39: 83:b3:f7:4d:84:fd:1a:38:5e:ff:14:bd:81:64:63:ac:ff:32: be:29:6d:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ4MZNbNFH6Yk3C9X5Ck0ncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm ZjA4NjEwHhcNMjUwNDI3MTcwMDM2WhcNMjUwNDI4MTcwMDM2WjAzMTEwLwYDVQQD EygxZDRjMDI4NzQ2Y2EzOGIxMzhhZDMyZDI4OGE0NzcwNThiNjhmNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvP1ZQxBt6waDHhZDAmPCmmHoHf4 /ZfLOhKDXvBm++43j6hDMOO1/+/tVKdA29FHiHAaee2A7JeN8cjrkIk4SlxEIRQJ 3H/32DabhWHyCvoKtfOFalIvenWrH/u/F4bMFzjJOQsBniPSHx9kD64zJml+f3PX y5mv/iMV3Sx5V69GvGDELNBO8rRjhQ9q/V3NvN55efiFoWZ3W/wyhCi4Eo7AeeXu 756vQrRXNto1x6oXl3Te1aISJ5ksDGQsn5aLAoJ31ZJmRuHgy5Tc1IdJyEt48wxR nzjKi+kby72WXsVRmfX2+4Q5WWyH6HVMDtVMS98RtbSIkB7ECAaiiJfKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1MAodGyjixOK0y0oikdwWLaPTSMB8GA1UdIwQY MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuHlb9iz zDtcsPx4uNstFUPVOsDvvZhaY4LKg/Ii1cjMmusn1AaTk3xdfNNI1OYoigkvnxhy a3OsuDQNn/WfirTsN1Ugwprb5X9cf5XoV+DtVRUll6a8b/OufyRRaZ+/Ii5JozWe z62pyD7jzOYuS+YSNQTg7sKTGa52t0bIZa8gh/D/p9IhNWPq18EaJRpTPH7ls0GN bRKe6aDBiggOAiNd1bwicsePeW4hW29lQ9zXSnlYmHbvgDbdpCd/f1qK3n+cU0R1 xQZN5+GY5IYIUVlYKJRzaDUsvKwbdBrG0Rn+f1CBtX7mYto5g7P3TYT9Gjhe/xS9 gWRjrP8yviltbQ== -----END CERTIFICATE-----Generated at Mon Apr 28 00:02:17 2025 by rpki-client