$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: 2KjF+BNckMLLPcKZKMZk/6/8dyit3mWUNr72D0awm9Q= Subject key identifier: 4C:94:36:ED:B8:7B:F9:BB:FD:95:F2:13:7F:F4:AA:C7:68:6F:42:31 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 0198903527EA84767F27D34AA740F2C2743A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 1661 Signing time: Sat 09 Aug 2025 19:00:59 +0000 Manifest this update: Sat 09 Aug 2025 19:00:59 +0000 Manifest next update: Sun 10 Aug 2025 19:00:59 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: gAEdDHN920RFGK/lFRrqo2kIFpW8ewyT9tX2Uo35sW8=) 6: bv4tcwtbryxLyYhV6XTH39AB-vY.roa (hash: Xi6BhRdiZvjQrRH2s9UR2MhITflZG1sNqXTRu0wxscs=) 7: q3Xp_E_gaYD_JXYTbg7HGV6canw.roa (hash: b+gA385XvxluW48qw8QZOuyt+uhVo8dkYYb5rX3BC0I=) 8: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 9: rgX-hjZzP11zMV1Ss9yk5s0hpP4.roa (hash: FEjTW0DqzWf2eGcKYZInTkY5n6SwvMFRvxDiX/jjxsA=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: wbrCWR_cVe_TXaWmFcux22egTcg.roa (hash: sFYCXmhjjVhaC9+7fn5FtqITfOd6Kw8Gm3v8ZVp9JGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:90:35:27:ea:84:76:7f:27:d3:4a:a7:40:f2:c2:74:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Aug 9 19:00:59 2025 GMT Not After : Aug 10 19:00:59 2025 GMT Subject: CN=4c9436edb87bf9bbfd95f2137ff4aac7686f4231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:fb:64:4f:21:1f:71:f8:ec:66:44:70:07: fa:0f:01:e0:55:e2:64:0c:3c:19:2d:95:aa:33:e5: 18:e1:ec:9b:91:44:f3:3c:e4:fe:41:2c:0b:7a:10: 31:b5:26:1f:a2:12:fc:79:0e:d2:83:62:b5:aa:70: ab:7c:de:3d:86:d3:7d:ee:d2:2c:de:e2:83:ce:ad: 60:7f:93:ef:99:02:ab:e3:5d:42:26:d2:23:e2:6f: 8d:ce:c0:d8:8c:b9:15:bb:e4:ff:7d:20:2c:69:b3: ea:dd:8c:c6:4a:54:04:81:e5:51:08:09:f1:5a:88: 9c:ea:ba:e4:89:d2:34:d6:3f:64:6d:ce:c0:58:36: a0:5f:29:75:93:bb:d4:14:92:b9:bd:fc:d9:c6:54: e1:fb:14:a0:23:39:9c:33:f6:77:e7:37:12:e2:48: 6b:38:85:9d:1d:51:b1:e8:2d:c5:68:f8:f6:18:70: 30:8d:f0:85:a6:5e:65:68:d0:fb:24:43:9f:bd:c7: e8:a9:c6:c5:32:0c:f0:dd:9d:b2:ee:9a:e2:8f:45: 68:c4:0e:32:b0:70:fa:a6:df:79:9b:ad:3c:2b:62: 9e:23:c4:6c:95:f1:4e:4f:8c:43:fc:1f:a8:f5:20: f2:a6:92:54:58:b0:57:1c:a5:87:fc:82:29:23:3e: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:36:ED:B8:7B:F9:BB:FD:95:F2:13:7F:F4:AA:C7:68:6F:42:31 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:59:43:a2:e4:ac:23:4e:38:08:09:68:8b:3b:9b:1a:73:75: 51:70:e4:c3:32:a1:95:0f:ae:47:c8:8c:f3:98:69:39:a5:f2: e2:ac:23:17:a7:51:53:58:8c:38:ae:eb:a8:c2:ec:1f:46:0c: 9b:1c:25:5e:83:f9:05:77:3f:b8:a2:28:1f:08:c7:df:de:4d: 87:f6:8e:60:87:90:aa:a8:35:fd:4b:32:b6:3f:d6:24:86:c0: 2e:bc:f2:ed:33:ba:e0:e3:b8:be:90:31:93:ac:86:3a:fd:c1: ee:31:f0:67:5c:58:e4:8b:05:4c:b2:e9:31:88:e5:32:40:2d: 1c:0c:2d:e6:d1:92:4a:95:5f:9d:70:54:fd:32:f3:42:17:dc: 22:6e:4e:41:18:8a:d6:9a:a6:5b:27:dd:77:c1:50:02:68:39: 62:ba:f1:4f:f2:18:62:ef:8e:b8:8b:ee:29:93:9d:6a:a5:2d: 40:53:0e:84:b4:0e:10:87:79:d0:ca:23:8c:2d:4b:2c:31:d6: ed:0e:8d:09:29:c0:7f:56:4d:f9:90:93:1a:ad:48:3a:2c:88: eb:aa:83:32:b1:8b:e7:69:2e:a2:56:3c:d8:fe:cf:e8:6c:d0: ce:4d:c3:d8:64:b0:2e:7f:dd:46:80:bd:49:e5:06:12:3a:1f: 43:ed:2e:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiQNSfqhHZ/J9NKp0DywnQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUwODA5MTkwMDU5WhcNMjUwODEwMTkwMDU5WjAzMTEwLwYDVQQD Eyg0Yzk0MzZlZGI4N2JmOWJiZmQ5NWYyMTM3ZmY0YWFjNzY4NmY0MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uv7ZE8hH3H47GZEcAf6DwHgVeJk DDwZLZWqM+UY4eybkUTzPOT+QSwLehAxtSYfohL8eQ7Sg2K1qnCrfN49htN97tIs 3uKDzq1gf5PvmQKr411CJtIj4m+NzsDYjLkVu+T/fSAsabPq3YzGSlQEgeVRCAnx Woic6rrkidI01j9kbc7AWDagXyl1k7vUFJK5vfzZxlTh+xSgIzmcM/Z35zcS4khr OIWdHVGx6C3FaPj2GHAwjfCFpl5laND7JEOfvcfoqcbFMgzw3Z2y7prij0VoxA4y sHD6pt95m608K2KeI8RslfFOT4xD/B+o9SDyppJUWLBXHKWH/IIpIz6nSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyUNu24e/m7/ZXyE3/0qsdob0IxMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVlDouSs I044CAloizubGnN1UXDkwzKhlQ+uR8iM85hpOaXy4qwjF6dRU1iMOK7rqMLsH0YM mxwlXoP5BXc/uKIoHwjH395Nh/aOYIeQqqg1/Usytj/WJIbALrzy7TO64OO4vpAx k6yGOv3B7jHwZ1xY5IsFTLLpMYjlMkAtHAwt5tGSSpVfnXBU/TLzQhfcIm5OQRiK 1pqmWyfdd8FQAmg5YrrxT/IYYu+OuIvuKZOdaqUtQFMOhLQOEId50MojjC1LLDHW 7Q6NCSnAf1ZN+ZCTGq1IOiyI66qDMrGL52kuolY82P7P6GzQzk3D2GSwLn/dRoC9 SeUGEjofQ+0uNw== -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:45 2025 by rpki-client