$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: oQitJcYWgbOQpKkRIyE3ZHkyNcLvSA/AG+AHdKWOenY= Subject key identifier: BA:A6:AA:8D:3B:C9:10:48:7D:5D:C2:52:81:43:12:48:71:F3:0F:AC Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019A4E86401869ECD630D1044AC3DB637486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0F66 Signing time: Tue 04 Nov 2025 11:00:12 +0000 Manifest this update: Tue 04 Nov 2025 11:00:12 +0000 Manifest next update: Wed 05 Nov 2025 11:00:12 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 3: RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa (hash: NRK1tkj307QIWrwEzdrVKBHZ1usXN/uxhPlhLwB47SM=) 4: Sp_AwQEQ502wSAdDoXALwwjuTq0.roa (hash: x3326z+EE69lKq3xqRD9lBhKqDvCEycDJkLt0CfCGyI=) 5: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 6: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 7: Wzt-Ou1QVSJEG5lh6mPjN_ZX0o8.roa (hash: KIeE4BRemOsByP9NZcIanx6wVETopkaYtA+bHc7KopI=) 8: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 9: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: 5qPT/8TRLSEKmqWpcOhS53ZGvzyt1r7F4TJkK0wm20Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:40:18:69:ec:d6:30:d1:04:4a:c3:db:63:74:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Nov 4 11:00:12 2025 GMT Not After : Nov 5 11:00:12 2025 GMT Subject: CN=baa6aa8d3bc910487d5dc2528143124871f30fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:58:2a:9d:d9:b9:a9:d1:d1:bb:2c:63:6f: b1:10:0c:90:c0:81:db:8e:67:61:6f:0c:d3:51:6c: 02:3f:82:75:d0:46:1e:b4:8b:8b:93:e3:61:ee:c7: 66:79:1b:0f:f3:37:17:7e:79:2f:33:49:50:f6:16: 7a:9e:a1:24:b1:27:5e:a9:d8:bd:81:c2:3a:ac:86: e2:26:b0:44:7e:a3:02:4d:ad:df:52:52:13:b8:66: 96:21:87:66:8f:f8:74:29:dd:68:a0:ee:ac:a1:6d: a2:f1:a6:2a:19:13:ba:48:87:81:f1:40:88:d9:46: 6e:97:68:41:60:99:8a:74:e8:52:bf:41:57:0c:d4: c6:9d:5c:9e:58:59:b5:a8:f9:21:e4:aa:a1:7f:2f: 7b:c5:b4:fa:6d:75:e0:e1:68:09:71:fe:c9:1a:21: e5:d5:69:53:d4:93:f0:bd:bf:6f:1f:ea:1c:fe:9a: 5d:47:09:80:40:36:10:10:4d:0e:da:2b:9a:b8:79: 07:0b:c5:84:e0:43:bb:b5:f8:a7:c6:74:99:1c:69: a6:98:4b:ac:79:ca:3e:96:12:87:40:ec:00:4d:86: 24:fc:fb:7b:87:06:c7:92:64:96:b8:ab:43:0e:94: 4f:44:39:9c:78:6b:9c:4d:7e:13:ed:ff:99:c7:01: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:AA:8D:3B:C9:10:48:7D:5D:C2:52:81:43:12:48:71:F3:0F:AC X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:42:ef:db:09:8a:1f:16:88:52:b4:d0:6a:f5:93:e8:3a:76: 3c:0c:2b:06:67:8d:ca:63:6f:73:d6:a6:8c:e5:1b:8f:10:76: 2b:90:c6:7b:e3:b5:fb:9a:2b:08:66:c8:12:f9:46:ed:79:0e: 85:e3:c2:3b:8f:9b:cf:d5:bf:6f:2e:92:2a:d2:d5:27:a3:65: 9b:c6:40:8c:11:63:87:ce:ef:cc:5a:42:9c:0c:e4:98:63:b0: b5:60:96:99:23:c7:f6:f5:a4:da:74:83:d0:24:f1:76:84:2b: 6f:19:80:12:3d:89:18:7a:d9:8e:5f:f7:66:ec:91:6c:7c:71: 35:25:0a:9c:19:65:c3:d6:85:70:5c:ba:95:a0:92:88:ac:77: 0c:bc:90:de:7e:f4:5a:78:e3:e9:09:8e:55:4b:14:93:e2:1d: 04:fd:e0:54:09:f0:f5:17:ed:a1:46:79:b5:b2:fb:19:b2:40: 49:50:e0:48:bc:69:e8:f3:2d:f8:95:8e:c7:37:27:67:99:55: 4c:3a:ee:64:61:5e:14:1d:be:70:90:78:ea:9b:4e:32:4f:c5: 1b:d6:f5:02:66:b3:cb:c7:7a:50:67:f2:e2:2f:6b:c3:d1:9e: 9c:3b:b2:83:31:95:bf:9e:20:79:a6:71:08:1d:db:b9:97:bd: ea:18:05:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhkAYaezWMNEESsPbY3SGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMTA0MTEwMDEyWhcNMjUxMTA1MTEwMDEyWjAzMTEwLwYDVQQD EyhiYWE2YWE4ZDNiYzkxMDQ4N2Q1ZGMyNTI4MTQzMTI0ODcxZjMwZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE5YKp3ZuanR0bssY2+xEAyQwIHb jmdhbwzTUWwCP4J10EYetIuLk+Nh7sdmeRsP8zcXfnkvM0lQ9hZ6nqEksSdeqdi9 gcI6rIbiJrBEfqMCTa3fUlITuGaWIYdmj/h0Kd1ooO6soW2i8aYqGRO6SIeB8UCI 2UZul2hBYJmKdOhSv0FXDNTGnVyeWFm1qPkh5Kqhfy97xbT6bXXg4WgJcf7JGiHl 1WlT1JPwvb9vH+oc/ppdRwmAQDYQEE0O2iuauHkHC8WE4EO7tfinxnSZHGmmmEus eco+lhKHQOwATYYk/Pt7hwbHkmSWuKtDDpRPRDmceGucTX4T7f+ZxwFlwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqmqo07yRBIfV3CUoFDEkhx8w+sMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASELv2wmK HxaIUrTQavWT6Dp2PAwrBmeNymNvc9amjOUbjxB2K5DGe+O1+5orCGbIEvlG7XkO hePCO4+bz9W/by6SKtLVJ6Nlm8ZAjBFjh87vzFpCnAzkmGOwtWCWmSPH9vWk2nSD 0CTxdoQrbxmAEj2JGHrZjl/3ZuyRbHxxNSUKnBllw9aFcFy6laCSiKx3DLyQ3n70 Wnjj6QmOVUsUk+IdBP3gVAnw9RftoUZ5tbL7GbJASVDgSLxp6PMt+JWOxzcnZ5lV TDruZGFeFB2+cJB46ptOMk/FG9b1Amazy8d6UGfy4i9rw9GenDuygzGVv54geaZx CB3buZe96hgFUw== -----END CERTIFICATE-----Generated at Tue Nov 4 20:49:53 2025 by rpki-client