$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: SsKLPWzoh4CNpufyhF2WyqtiF6vTCgtA20BNYi9e4B0= Subject key identifier: B1:57:57:47:1B:58:69:C2:66:75:37:40:CA:CD:26:6F:C8:82:B3:D2 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019A4D7450AF5FB287A052F57F113568A107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1716 Signing time: Tue 04 Nov 2025 06:00:59 +0000 Manifest this update: Tue 04 Nov 2025 06:00:59 +0000 Manifest next update: Wed 05 Nov 2025 06:00:59 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: GZPxfjwtCimIBtlNeUpePom2bcf002KC4UjV4t1I09o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:50:af:5f:b2:87:a0:52:f5:7f:11:35:68:a1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Nov 4 06:00:59 2025 GMT Not After : Nov 5 06:00:59 2025 GMT Subject: CN=b15757471b5869c266753740cacd266fc882b3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:92:b7:fd:71:c1:46:48:1c:f9:88:05:a8: d5:a3:14:e0:72:ba:55:cc:82:dd:ab:56:6b:c7:4a: 14:5b:d4:49:4f:75:3d:df:eb:d5:38:e5:7b:29:10: 81:07:ee:0b:f2:b4:16:24:f6:47:7c:c6:bd:b8:63: 87:f7:7c:e7:de:7f:8b:8b:af:5e:6b:39:b7:db:e0: 24:c5:f0:da:b8:4a:15:6b:ea:d0:00:e6:91:ca:29: a0:62:e1:f3:75:0d:c4:c9:86:55:1b:81:8f:74:09: 75:97:d0:cd:6c:93:9a:ae:a9:9d:1c:4d:c9:d1:03: e2:f1:b7:d3:2d:10:2b:5e:fd:ed:c0:63:d6:44:96: 48:8f:c5:1e:f3:6d:6a:22:a3:3b:a1:78:05:00:52: 78:ee:00:8e:b8:7c:c9:14:7b:3d:13:14:92:7c:3c: cd:f8:be:aa:05:2f:62:12:b9:0e:e2:e4:88:4f:9e: 6c:86:f2:73:6a:53:fb:ae:75:9c:ca:d4:5b:e1:ba: e5:84:09:0f:12:8f:7d:2e:a7:e4:10:70:2a:4c:ce: 8e:c5:31:2d:32:06:85:aa:84:12:a0:3b:70:bb:0e: ca:01:80:26:b6:a1:07:47:bf:21:8c:78:1e:16:91: 54:3e:64:10:b5:97:2e:95:4b:ec:f4:be:0f:fc:94: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:57:57:47:1B:58:69:C2:66:75:37:40:CA:CD:26:6F:C8:82:B3:D2 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ad:7e:70:93:81:97:00:31:c7:c0:cf:18:a8:c3:9c:b0:0d: ee:a1:f2:62:b3:15:79:ae:a2:01:92:32:81:2c:8c:90:f1:6b: 4f:fd:fd:41:37:58:04:63:02:c6:10:2c:03:63:f6:8d:83:99: 9e:bc:f7:e1:ba:bf:51:80:17:78:c4:d3:92:05:d2:b4:3a:13: 90:16:ad:0b:f0:77:93:2e:32:29:10:11:b4:a9:26:41:49:37: 47:17:46:34:98:84:f1:3d:0a:28:5c:5c:04:b0:39:49:fa:94: 80:70:51:bc:ba:ba:ad:e6:67:54:35:53:a1:86:a9:61:29:1e: 2e:b3:bb:48:e0:51:25:ee:9d:fa:ec:eb:40:e6:05:01:0d:31: 02:08:a1:cb:20:c6:d3:60:d6:f3:43:f5:6f:28:6c:7d:f4:b3: cc:af:3d:6c:b0:76:a2:4e:67:46:e0:da:77:32:8e:a8:55:22: 12:02:f5:95:84:37:13:d3:79:8e:83:e0:de:67:d3:14:53:2a: ee:a6:9d:94:02:a9:86:46:65:78:96:90:19:51:1b:66:ad:b9: 57:da:e3:24:a1:e3:4c:ff:ff:b9:8f:b3:a7:ac:a4:7a:9c:0e: da:ee:38:a9:35:ea:9a:e9:42:3d:e6:59:ee:7b:6a:9f:5d:6f: 14:54:6b:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdFCvX7KHoFL1fxE1aKEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD EyhiMTU3NTc0NzFiNTg2OWMyNjY3NTM3NDBjYWNkMjY2ZmM4ODJiM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVSSt/1xwUZIHPmIBajVoxTgcrpV zILdq1Zrx0oUW9RJT3U93+vVOOV7KRCBB+4L8rQWJPZHfMa9uGOH93zn3n+Li69e azm32+AkxfDauEoVa+rQAOaRyimgYuHzdQ3EyYZVG4GPdAl1l9DNbJOarqmdHE3J 0QPi8bfTLRArXv3twGPWRJZIj8Ue821qIqM7oXgFAFJ47gCOuHzJFHs9ExSSfDzN +L6qBS9iErkO4uSIT55shvJzalP7rnWcytRb4brlhAkPEo99LqfkEHAqTM6OxTEt MgaFqoQSoDtwuw7KAYAmtqEHR78hjHgeFpFUPmQQtZculUvs9L4P/JSGzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFXV0cbWGnCZnU3QMrNJm/IgrPSMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo61+cJOB lwAxx8DPGKjDnLAN7qHyYrMVea6iAZIygSyMkPFrT/39QTdYBGMCxhAsA2P2jYOZ nrz34bq/UYAXeMTTkgXStDoTkBatC/B3ky4yKRARtKkmQUk3RxdGNJiE8T0KKFxc BLA5SfqUgHBRvLq6reZnVDVToYapYSkeLrO7SOBRJe6d+uzrQOYFAQ0xAgihyyDG 02DW80P1byhsffSzzK89bLB2ok5nRuDadzKOqFUiEgL1lYQ3E9N5joPg3mfTFFMq 7qadlAKphkZleJaQGVEbZq25V9rjJKHjTP//uY+zp6ykepwO2u44qTXqmulCPeZZ 7ntqn11vFFRrMw== -----END CERTIFICATE-----Generated at Tue Nov 4 11:03:02 2025 by rpki-client