$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: ptVrX3KgN/6SLweht9tXZskKCo7ahvcb4svlqkfDiyw= Subject key identifier: 0B:91:FC:9C:A1:B1:C7:5B:61:62:E8:E3:DF:C1:D1:FB:41:DE:35:AF Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 0198880DDC1034A7AD668D4FBB1AEBCDC7FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0E76 Signing time: Fri 08 Aug 2025 05:01:06 +0000 Manifest this update: Fri 08 Aug 2025 05:01:06 +0000 Manifest next update: Sat 09 Aug 2025 05:01:06 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: 8R+/FeUQqeCinAQuHSaOFNPaJpR7M5L57hW6k0/kPLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:88:0d:dc:10:34:a7:ad:66:8d:4f:bb:1a:eb:cd:c7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Aug 8 05:01:06 2025 GMT Not After : Aug 9 05:01:06 2025 GMT Subject: CN=0b91fc9ca1b1c75b6162e8e3dfc1d1fb41de35af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:d1:ae:b3:19:22:9e:04:8a:fa:fb:59:cf: 92:15:70:4f:68:76:bf:25:37:fd:55:29:e3:33:19: 1b:d0:9b:26:16:c8:f7:e0:53:49:3a:a1:46:bd:2e: 0d:bc:2e:6f:b6:07:3e:3e:0a:3d:32:1b:49:8b:7b: ce:bf:a0:af:b9:9a:d9:35:27:fd:51:88:ea:0f:72: b3:20:b6:e6:dd:44:5e:22:77:80:ba:20:c8:f7:ae: 74:c4:79:ca:fd:a6:f0:c1:94:6e:6a:83:21:d0:cf: 19:a9:bb:5b:5d:a9:2d:4a:01:b0:1a:ca:4f:49:42: d1:28:83:e2:39:f9:f2:4f:27:08:80:80:b0:b8:2d: e3:90:66:d1:5e:a9:0e:a0:d1:46:9d:6d:d3:b6:85: fc:16:2f:ec:03:76:6c:af:e7:29:68:6f:9d:c9:d8: 5f:9b:81:b3:ff:d8:49:0f:8f:aa:79:d1:21:ac:50: dc:44:45:59:e2:6c:d3:ae:ec:bb:03:42:84:01:f5: 47:3b:6d:54:cd:76:ba:28:09:21:a3:8a:4a:62:b2: f7:05:b9:ab:13:28:c4:99:5e:b5:df:5f:8f:1a:28: dc:15:00:36:34:4b:d0:8c:ae:fd:73:af:f1:20:98: a9:e3:7b:a4:f2:05:66:0e:47:8f:51:88:aa:52:2d: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:91:FC:9C:A1:B1:C7:5B:61:62:E8:E3:DF:C1:D1:FB:41:DE:35:AF X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:a4:01:22:d6:de:51:43:7e:3a:46:c9:29:5f:7c:19:e9: bb:a3:60:1f:54:04:f7:49:1f:0e:d5:15:89:d9:49:15:84:52: ea:9f:1c:be:a1:a4:68:35:db:a5:f1:82:77:d1:bb:89:8f:a7: bf:78:07:a6:2a:71:6a:88:55:99:e6:d6:a5:c3:f0:11:c3:2b: 49:8a:b7:12:08:36:31:e9:e2:cb:a4:6e:ce:8e:ae:59:27:d0: 87:cd:34:07:6f:45:bc:cd:51:78:fd:f7:31:de:92:ed:c5:a6: ae:f2:43:35:bd:52:ac:d4:c5:ed:d9:f4:6a:25:0a:c7:87:c1: d1:9e:3b:4a:d8:bc:2d:b0:ba:9e:e8:3c:a5:c9:24:e7:8b:66: b2:2e:97:be:1f:f3:57:56:72:66:e1:d2:6d:3f:bd:aa:51:a4: 0b:cf:fe:6d:1b:da:34:eb:70:41:ce:45:9e:d0:0c:0c:43:f3: 3d:71:52:6c:a8:8e:a7:5b:b5:57:0d:6c:8f:ea:cd:04:90:52: c3:9e:9a:7b:fa:77:ef:dd:7c:e9:a1:e5:3e:62:ae:9e:b9:73: 50:43:38:0d:4c:1e:fc:f2:8e:ac:e8:60:30:fe:f4:5c:61:fc: 78:8a:5e:dd:53:66:58:17:56:56:0d:35:2d:a7:23:7c:3e:e1: 51:0b:c6:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiIDdwQNKetZo1Puxrrzcf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwODA4MDUwMTA2WhcNMjUwODA5MDUwMTA2WjAzMTEwLwYDVQQD EygwYjkxZmM5Y2ExYjFjNzViNjE2MmU4ZTNkZmMxZDFmYjQxZGUzNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gbRrrMZIp4Eivr7Wc+SFXBPaHa/ JTf9VSnjMxkb0JsmFsj34FNJOqFGvS4NvC5vtgc+Pgo9MhtJi3vOv6CvuZrZNSf9 UYjqD3KzILbm3UReIneAuiDI9650xHnK/abwwZRuaoMh0M8ZqbtbXaktSgGwGspP SULRKIPiOfnyTycIgICwuC3jkGbRXqkOoNFGnW3TtoX8Fi/sA3Zsr+cpaG+dydhf m4Gz/9hJD4+qedEhrFDcREVZ4mzTruy7A0KEAfVHO21UzXa6KAkho4pKYrL3Bbmr EyjEmV6131+PGijcFQA2NEvQjK79c6/xIJip43uk8gVmDkePUYiqUi2gtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuR/JyhscdbYWLo49/B0ftB3jWvMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAikASLW 3lFDfjpGySlffBnpu6NgH1QE90kfDtUVidlJFYRS6p8cvqGkaDXbpfGCd9G7iY+n v3gHpipxaohVmebWpcPwEcMrSYq3Egg2Meniy6Ruzo6uWSfQh800B29FvM1ReP33 Md6S7cWmrvJDNb1SrNTF7dn0aiUKx4fB0Z47Sti8LbC6nug8pckk54tmsi6Xvh/z V1ZyZuHSbT+9qlGkC8/+bRvaNOtwQc5FntAMDEPzPXFSbKiOp1u1Vw1sj+rNBJBS w56ae/p379186aHlPmKunrlzUEM4DUwe/PKOrOhgMP70XGH8eIpe3VNmWBdWVg01 LacjfD7hUQvG/A== -----END CERTIFICATE-----Generated at Fri Aug 8 12:59:20 2025 by rpki-client