$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: vmxw77a99qRcHzADCLjISylYUVXT7zf8QVYLxwAdqyw= Subject key identifier: 1C:A6:45:63:99:BF:EB:99:92:D4:5F:8B:F2:C6:EA:15:F5:9F:10:EA Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019A4D743DEC29A436F1B4E3043D31145D87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 1757 Signing time: Tue 04 Nov 2025 06:00:54 +0000 Manifest this update: Tue 04 Nov 2025 06:00:54 +0000 Manifest next update: Wed 05 Nov 2025 06:00:54 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: RDx3Dv2ooGDkrckw9t4Zkx6nV5jIhveij5ltJpvXOoM=) 8: pDp2CToPzzYDQ1WhaCtd0HG6Gtc.roa (hash: gA5JjiJRsXhS8LWEfP0H0OvEaHq8p+EbMF4HPnV2enw=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:3d:ec:29:a4:36:f1:b4:e3:04:3d:31:14:5d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Nov 4 06:00:54 2025 GMT Not After : Nov 5 06:00:54 2025 GMT Subject: CN=1ca6456399bfeb9992d45f8bf2c6ea15f59f10ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:a3:bf:e8:24:c4:e2:c0:69:d4:0a:0c:28: 8c:98:38:40:b9:d0:e8:8e:5c:0c:30:49:20:1f:1f: 57:e2:c8:7f:82:73:da:c0:d3:13:9f:63:77:ed:51: f1:fe:15:2b:81:01:c5:15:80:90:b7:3f:a3:c1:0f: c5:39:16:45:ce:91:df:07:03:25:80:5d:78:c5:11: ca:1d:0f:52:05:40:cc:a6:a6:1f:6d:3a:92:6f:c6: e0:a5:7e:61:79:1c:fd:63:41:76:47:90:3d:db:10: 70:a6:a9:70:11:6e:41:96:4c:97:a0:25:46:28:79: 4f:7c:a3:1a:aa:57:70:bc:1d:30:b3:29:66:c8:3d: 17:31:93:b5:c1:88:c5:13:f3:a2:ee:cb:81:d7:7f: 91:30:e5:94:10:a6:0a:e7:db:e3:34:e5:9c:ef:b4: a0:a7:c0:3a:f4:bb:5c:2e:ca:1a:3d:fa:00:dd:7d: 40:85:a1:91:43:63:aa:b9:9d:bb:ce:69:8a:b1:90: dd:8e:c9:84:8a:e0:86:db:e3:81:85:9d:6d:88:99: cd:97:54:96:e8:b6:4e:56:a2:10:4c:1d:b2:00:30: 1d:f2:18:78:26:04:ab:23:7f:a2:7f:50:3a:a4:8a: f5:33:11:76:c6:c9:74:f9:d0:8e:ca:6e:a6:51:53: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A6:45:63:99:BF:EB:99:92:D4:5F:8B:F2:C6:EA:15:F5:9F:10:EA X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:02:e4:dc:f1:c5:84:c1:a3:2e:49:23:72:08:c2:bc:17:99: 0e:cf:b1:9f:f5:64:13:11:0b:bd:65:a9:d9:41:b7:87:26:eb: 84:92:90:94:2b:67:7f:2c:e8:61:6b:d6:5e:bc:8c:61:d3:09: 5b:34:76:44:ad:8f:41:9c:f2:b8:93:94:12:0b:45:88:5b:d9: 7d:47:f1:26:47:e2:3a:8a:7d:51:44:ce:b2:97:ed:d0:13:3f: 8b:d2:e4:10:9a:6b:1d:55:bc:25:f2:0d:12:60:9d:68:a8:53: 00:2a:fc:74:b4:ee:b8:2c:50:3a:21:6e:25:87:11:ad:5b:c3: b0:06:0a:81:01:9a:9d:dd:40:e4:04:9e:29:26:7b:a7:81:28: ed:f8:6b:a5:c5:9a:04:41:be:df:c8:b4:08:81:e1:4b:54:67: 65:5b:f1:d1:48:c1:af:e2:df:b7:50:fd:70:a8:f6:cd:2e:ee: 4b:e2:4f:e4:f4:82:1c:05:99:f1:3b:c2:68:fa:da:a7:2b:51: ee:00:ff:ae:98:63:86:b4:90:a3:f5:11:1a:5e:fd:b9:d1:3e: a2:07:ca:2a:9e:17:f7:fb:ed:35:4a:03:5c:91:82:d5:6e:e8: 54:9a:06:f8:3e:09:41:5c:6b:cf:09:7b:b1:01:0f:49:36:60: ce:a8:65:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdD3sKaQ28bTjBD0xFF2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUxMTA0MDYwMDU0WhcNMjUxMTA1MDYwMDU0WjAzMTEwLwYDVQQD EygxY2E2NDU2Mzk5YmZlYjk5OTJkNDVmOGJmMmM2ZWExNWY1OWYxMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2emjv+gkxOLAadQKDCiMmDhAudDo jlwMMEkgHx9X4sh/gnPawNMTn2N37VHx/hUrgQHFFYCQtz+jwQ/FORZFzpHfBwMl gF14xRHKHQ9SBUDMpqYfbTqSb8bgpX5heRz9Y0F2R5A92xBwpqlwEW5BlkyXoCVG KHlPfKMaqldwvB0wsylmyD0XMZO1wYjFE/Oi7suB13+RMOWUEKYK59vjNOWc77Sg p8A69LtcLsoaPfoA3X1AhaGRQ2OquZ27zmmKsZDdjsmEiuCG2+OBhZ1tiJnNl1SW 6LZOVqIQTB2yADAd8hh4JgSrI3+if1A6pIr1MxF2xsl0+dCOym6mUVODVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBymRWOZv+uZktRfi/LG6hX1nxDqMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgLk3PHF hMGjLkkjcgjCvBeZDs+xn/VkExELvWWp2UG3hybrhJKQlCtnfyzoYWvWXryMYdMJ WzR2RK2PQZzyuJOUEgtFiFvZfUfxJkfiOop9UUTOspft0BM/i9LkEJprHVW8JfIN EmCdaKhTACr8dLTuuCxQOiFuJYcRrVvDsAYKgQGand1A5ASeKSZ7p4Eo7fhrpcWa BEG+38i0CIHhS1RnZVvx0UjBr+Lft1D9cKj2zS7uS+JP5PSCHAWZ8TvCaPrapytR 7gD/rphjhrSQo/URGl79udE+ogfKKp4X9/vtNUoDXJGC1W7oVJoG+D4JQVxrzwl7 sQEPSTZgzqhlhQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:12:29 2025 by rpki-client