$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: WJdylW8Ae9zIldGcQU9NoqDbzlf7zymXHjfTB7zDk+A= Subject key identifier: B9:93:64:8D:37:45:30:0E:28:24:E0:B0:E1:BF:CA:AB:0B:36:10:5D Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 0198887BE10321A44991AF2110C9291F0EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 1633 Signing time: Fri 08 Aug 2025 07:01:16 +0000 Manifest this update: Fri 08 Aug 2025 07:01:16 +0000 Manifest next update: Sat 09 Aug 2025 07:01:16 +0000 Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=) 2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=) 3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=) 4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=) 5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=) 6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=) 7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=) 8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=) 9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=) 10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=) 11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=) 12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: kAaCwvG7oj3b/RnCXN2e6F1X8sgs9B6hPbQaBu3KWig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:88:7b:e1:03:21:a4:49:91:af:21:10:c9:29:1f:0e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Aug 8 07:01:16 2025 GMT Not After : Aug 9 07:01:16 2025 GMT Subject: CN=b993648d3745300e2824e0b0e1bfcaab0b36105d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:75:a5:f0:f6:91:1a:ae:67:52:a3:5e:31: 88:3b:75:9d:af:20:c9:da:a2:a0:74:7f:72:e0:e6: d5:9a:eb:34:bf:0e:69:ef:77:60:73:03:7a:e7:b0: c5:0b:c7:5c:e1:39:ac:ed:42:41:fd:60:f1:de:8d: 62:4e:a4:00:e3:a2:d0:b8:f2:31:3a:63:73:b4:8c: 3e:a7:ed:a1:2d:6b:81:f2:86:7b:65:b9:17:fc:1b: 12:f8:6d:23:53:18:ce:f4:38:08:fe:79:99:16:d5: 53:9a:4d:22:99:64:06:54:e1:e7:92:43:4c:8b:a7: 44:81:da:13:aa:cb:87:cd:67:68:8c:73:1a:8e:b7: ad:bc:dc:35:b7:1d:44:d0:56:6a:f1:a6:34:67:54: 5a:db:47:a8:0c:2d:06:0f:dc:e1:b3:4a:ec:74:14: 1a:5d:96:bd:53:c2:fd:cd:bd:49:56:79:c3:d1:a2: ad:08:92:55:cf:5c:06:40:1f:a8:f1:1f:88:e3:a8: 45:94:ae:6b:28:fb:d1:61:9f:86:ea:e4:db:9a:a9: e6:c3:64:3f:36:36:79:ba:65:fb:81:49:83:0d:71: ae:00:cf:fd:17:17:7b:ea:7c:a6:aa:0f:43:cc:36: 97:60:ef:bd:53:3d:c3:a5:c4:80:e9:e4:9f:0e:11: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:93:64:8D:37:45:30:0E:28:24:E0:B0:E1:BF:CA:AB:0B:36:10:5D X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:00:f9:9c:96:b8:05:fb:c1:92:c9:66:94:0c:cc:bc:17:8f: 6b:da:99:a8:65:c8:86:02:20:3e:89:61:53:cf:10:40:da:89: 33:18:1c:b4:78:0a:cf:19:19:6a:f1:71:94:3c:bd:bd:d6:ff: 83:41:3f:1a:8e:d6:3a:0a:a3:5c:ef:b2:22:2b:2b:63:9f:4e: d8:c6:ce:4b:c3:e5:d1:29:ab:23:27:79:bd:f3:b0:5f:f2:d6: 64:09:5a:1d:8e:66:5f:6f:ac:28:71:62:37:5d:cf:68:d9:0d: 4a:a4:b9:b9:1b:08:9d:16:e6:d4:7d:05:6c:98:ee:18:ea:77: b4:4f:6b:f6:ea:70:56:65:47:e0:e3:9b:f7:3b:d8:7b:22:d0: 1e:da:d0:94:06:cb:31:19:c6:7f:57:56:7d:24:d9:32:01:44: 2f:13:34:a1:56:3e:36:2e:43:14:c4:63:83:5f:e7:dd:e7:c7: 54:a6:7b:77:fe:b3:e5:4d:83:c2:a3:5a:81:b3:9a:a1:01:2a: cd:57:1a:32:d0:f0:b7:af:91:64:1d:72:4c:f5:d4:ce:92:3f: d6:6b:ba:24:87:4a:20:91:9f:b2:db:4f:c2:3e:91:ad:3f:30: 90:62:7d:17:af:4d:ac:68:cc:91:95:72:a8:4e:8b:70:8e:a3: c6:e2:f0:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiIe+EDIaRJka8hEMkpHw7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjUwODA4MDcwMTE2WhcNMjUwODA5MDcwMTE2WjAzMTEwLwYDVQQD EyhiOTkzNjQ4ZDM3NDUzMDBlMjgyNGUwYjBlMWJmY2FhYjBiMzYxMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFp1pfD2kRquZ1KjXjGIO3WdryDJ 2qKgdH9y4ObVmus0vw5p73dgcwN657DFC8dc4Tms7UJB/WDx3o1iTqQA46LQuPIx OmNztIw+p+2hLWuB8oZ7ZbkX/BsS+G0jUxjO9DgI/nmZFtVTmk0imWQGVOHnkkNM i6dEgdoTqsuHzWdojHMajretvNw1tx1E0FZq8aY0Z1Ra20eoDC0GD9zhs0rsdBQa XZa9U8L9zb1JVnnD0aKtCJJVz1wGQB+o8R+I46hFlK5rKPvRYZ+G6uTbmqnmw2Q/ NjZ5umX7gUmDDXGuAM/9Fxd76nymqg9DzDaXYO+9Uz3DpcSA6eSfDhGngQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmTZI03RTAOKCTgsOG/yqsLNhBdMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAD5nJa4 BfvBkslmlAzMvBePa9qZqGXIhgIgPolhU88QQNqJMxgctHgKzxkZavFxlDy9vdb/ g0E/Go7WOgqjXO+yIisrY59O2MbOS8Pl0SmrIyd5vfOwX/LWZAlaHY5mX2+sKHFi N13PaNkNSqS5uRsInRbm1H0FbJjuGOp3tE9r9upwVmVH4OOb9zvYeyLQHtrQlAbL MRnGf1dWfSTZMgFELxM0oVY+Ni5DFMRjg1/n3efHVKZ7d/6z5U2DwqNagbOaoQEq zVcaMtDwt6+RZB1yTPXUzpI/1mu6JIdKIJGfsttPwj6RrT8wkGJ9F69NrGjMkZVy qE6LcI6jxuLw8A== -----END CERTIFICATE-----Generated at Fri Aug 8 10:21:24 2025 by rpki-client