$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: OfuZGScGp5I4CBoIan7C0u9T7S9bRB5HvdvQsbEISx0= Subject key identifier: 19:74:F6:27:80:54:36:4B:94:F8:B6:98:B9:D1:85:DD:AD:AE:3E:F0 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019776408780D8A9DB332DAE985DD3157486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 15A5 Signing time: Mon 16 Jun 2025 01:00:29 +0000 Manifest this update: Mon 16 Jun 2025 01:00:29 +0000 Manifest next update: Tue 17 Jun 2025 01:00:29 +0000 Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=) 2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=) 3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=) 4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=) 5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=) 6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=) 7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=) 8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=) 9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=) 10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=) 11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=) 12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: uQEhiGilOruqabYAHZ5qA6jEntneqhLKNGO27lRy5+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:40:87:80:d8:a9:db:33:2d:ae:98:5d:d3:15:74:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jun 16 01:00:29 2025 GMT Not After : Jun 17 01:00:29 2025 GMT Subject: CN=1974f6278054364b94f8b698b9d185ddadae3ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:1c:da:b2:87:84:b3:cb:3a:67:3e:07:0f: 88:04:67:c7:d3:07:ea:b2:f1:f7:c1:ef:55:2d:f3: b7:55:7c:e5:94:18:be:a2:1e:68:df:dc:82:86:05: 78:a0:1b:2c:c1:36:50:e5:ef:52:b3:bd:cc:50:41: 5f:29:70:87:8a:e3:59:82:43:ba:bc:c4:50:3e:e4: 0f:a3:79:6f:ec:4e:9d:54:b2:10:13:ca:19:9e:3f: ef:c9:4a:ac:dc:d5:2e:af:22:c5:7b:48:af:04:2a: ca:5f:ce:03:9d:f5:5d:aa:76:18:96:36:a7:67:82: 66:ab:91:01:b5:8a:92:16:76:fa:54:3f:58:da:53: 2c:a5:0a:3c:00:13:2d:8f:ab:d5:84:2c:22:f0:93: 62:47:fb:e3:51:fb:89:9d:13:6e:38:e3:22:54:76: cb:05:64:84:5c:eb:a8:30:35:bb:61:13:b0:e5:8d: 4e:c1:47:eb:7f:68:25:c0:0b:e7:98:31:46:44:e9: d8:c7:6a:bc:9f:cf:41:29:ec:e2:2d:d5:f5:b1:02: a5:3f:ed:e7:9f:0b:b4:5b:c5:66:5f:7a:8a:9e:f7: 36:6e:e0:01:8f:bd:53:e3:10:3d:42:d7:30:77:d6: 7e:fd:9e:64:74:9f:76:66:b6:f6:e6:41:28:77:02: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:F6:27:80:54:36:4B:94:F8:B6:98:B9:D1:85:DD:AD:AE:3E:F0 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:df:e9:f9:75:93:fb:56:5f:e1:12:c8:24:26:99:51:cc:7e: 49:ac:27:da:f9:2a:47:f4:6d:60:70:11:8d:b2:d4:40:8a:4e: a8:b7:6d:77:54:e6:43:85:f2:b9:4d:04:17:f1:c1:8e:47:f3: 72:c9:41:bb:2c:36:c5:fa:01:d7:58:52:fe:98:ce:09:70:25: 34:6c:38:7e:2d:5f:6c:46:b7:65:55:71:db:11:f9:dc:9f:77: 66:47:f8:18:54:bd:c0:4f:b3:c1:7b:26:be:50:cc:78:26:8e: bc:b2:b7:ef:56:1f:f5:35:4d:fb:28:cd:83:ab:a5:ac:48:85: b8:98:96:1f:69:79:7c:ad:61:28:03:e3:ea:36:12:92:26:d8: 26:31:83:b3:d7:92:7c:90:dd:1a:9e:3b:f9:11:08:53:a5:70: 1b:20:6e:b5:16:3f:ea:8f:27:20:e9:4b:c5:e8:58:b1:20:2c: 5a:06:ef:de:d5:3c:f3:c4:c6:5a:28:9c:56:02:2a:9b:1f:c6: 56:7e:2c:4d:66:d1:f1:d2:63:42:55:40:4b:f7:60:ad:dd:30: 29:71:a7:e6:71:34:ab:bc:b4:12:81:ce:ac:ed:ee:ed:5e:4e: 1e:9f:f5:d6:0c:96:10:d9:57:fe:70:7b:4c:b7:ab:db:a9:01: ce:31:ad:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2QIeA2KnbMy2umF3TFXSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjUwNjE2MDEwMDI5WhcNMjUwNjE3MDEwMDI5WjAzMTEwLwYDVQQD EygxOTc0ZjYyNzgwNTQzNjRiOTRmOGI2OThiOWQxODVkZGFkYWUzZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdoc2rKHhLPLOmc+Bw+IBGfH0wfq svH3we9VLfO3VXzllBi+oh5o39yChgV4oBsswTZQ5e9Ss73MUEFfKXCHiuNZgkO6 vMRQPuQPo3lv7E6dVLIQE8oZnj/vyUqs3NUuryLFe0ivBCrKX84DnfVdqnYYljan Z4Jmq5EBtYqSFnb6VD9Y2lMspQo8ABMtj6vVhCwi8JNiR/vjUfuJnRNuOOMiVHbL BWSEXOuoMDW7YROw5Y1OwUfrf2glwAvnmDFGROnYx2q8n89BKeziLdX1sQKlP+3n nwu0W8VmX3qKnvc2buABj71T4xA9Qtcwd9Z+/Z5kdJ92Zrb25kEodwIaSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl09ieAVDZLlPi2mLnRhd2trj7wMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9/p+XWT +1Zf4RLIJCaZUcx+Sawn2vkqR/RtYHARjbLUQIpOqLdtd1TmQ4XyuU0EF/HBjkfz cslBuyw2xfoB11hS/pjOCXAlNGw4fi1fbEa3ZVVx2xH53J93Zkf4GFS9wE+zwXsm vlDMeCaOvLK371Yf9TVN+yjNg6ulrEiFuJiWH2l5fK1hKAPj6jYSkibYJjGDs9eS fJDdGp47+REIU6VwGyButRY/6o8nIOlLxehYsSAsWgbv3tU888TGWiicVgIqmx/G Vn4sTWbR8dJjQlVAS/dgrd0wKXGn5nE0q7y0EoHOrO3u7V5OHp/11gyWENlX/nB7 TLer26kBzjGteg== -----END CERTIFICATE-----Generated at Mon Jun 16 08:27:15 2025 by rpki-client