$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: +8S5sMXFRc09hnF3rqSPCQ41tKUr9gdhadhd6iWkc2U= Subject key identifier: C3:3B:A0:F7:AB:EC:61:6C:F3:1A:1B:60:C4:70:51:CC:61:B0:4F:10 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019881D54FCDB5A1AC9B563E7C5347089B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 097A Signing time: Thu 07 Aug 2025 00:01:37 +0000 Manifest this update: Thu 07 Aug 2025 00:01:37 +0000 Manifest next update: Fri 08 Aug 2025 00:01:37 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 4: AcjZPvLVEctq4aWtM9Se4g1Hez4.roa (hash: m4DjUNQ10CarUgcdKKVdQWZBHX6pVTG/J1Gv/VX/MoI=) 5: AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa (hash: MeOMNj8M3otSolym8ILgKTUapqaRLBLDFhuT2M87Jfs=) 6: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 7: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 8: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 9: T9T4J6edlfy_i5-slOG4aV_QdIQ.roa (hash: eu2IweeoPyVHQt7dr15SgVjejr4+xNgXU9dFpcwWirI=) 10: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 11: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 12: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: mxk4XtyfpaBfib7IwLF4L+uXyfoA4/SI2hcqQho5w+Y=) 13: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 14: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 15: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 16: iCveD-Xjd5JabG_WX6frr5x6in0.roa (hash: 95l1uR3aj9xTQRq9TbMrNh9RKHM6w6gjilx0WBwNahE=) 17: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 18: r3-jhMzUpqRf-XPJjV_rCoTSW1Y.roa (hash: d1j3zpkkY7fbTjCgTFyKErgvb3ejNuj/hmKVrcssWYs=) 19: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:d5:4f:cd:b5:a1:ac:9b:56:3e:7c:53:47:08:9b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Aug 7 00:01:37 2025 GMT Not After : Aug 8 00:01:37 2025 GMT Subject: CN=c33ba0f7abec616cf31a1b60c47051cc61b04f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:00:53:18:fb:80:b9:a1:d2:46:bd:9b:8e: bc:31:6b:83:61:d4:aa:26:d0:23:b3:17:c3:1a:11: c0:1f:be:22:f6:33:12:e5:cf:bd:4e:fb:8e:47:2e: 50:a4:18:35:0c:ab:b6:71:a1:f5:16:1e:3f:43:2d: c7:a0:1a:92:8f:6d:ca:c6:97:c9:5f:fd:36:40:22: e4:6b:ea:de:26:a2:41:a9:26:2f:12:f9:f3:be:60: e9:7f:95:96:24:fa:38:04:0c:9c:9e:86:43:8c:65: 9c:96:f8:40:0a:44:89:80:a5:ba:4c:b4:0d:5c:db: 13:ad:00:df:84:81:fd:99:a9:02:b3:01:79:d8:0f: 7c:15:18:5a:c1:9b:a5:1d:5d:ba:a9:5d:73:19:46: da:6a:8c:bc:26:ae:e6:5c:80:d1:47:48:66:4f:6f: 9f:58:27:8b:40:05:e5:e1:d3:24:7f:3e:2c:04:22: 9c:92:3b:1e:24:b7:d5:cc:b5:f1:e0:41:cc:2d:d1: 35:3b:f4:3e:7f:42:aa:ee:3c:fe:b3:49:bf:40:9b: 06:08:a0:c9:08:cb:31:86:66:29:62:76:02:df:7f: 0a:1a:d0:b4:d3:18:f5:e2:c8:80:0d:00:3b:89:f0: 05:18:cf:96:dd:7b:02:85:d2:2f:a3:03:28:e0:61: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:A0:F7:AB:EC:61:6C:F3:1A:1B:60:C4:70:51:CC:61:B0:4F:10 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ac:7d:9c:33:13:3b:3e:f2:c0:3e:ea:58:f1:95:8a:89:12: bc:fc:8c:4c:22:89:cf:a6:4b:47:5c:04:5e:91:aa:ae:ab:9f: ff:55:4c:f3:52:fb:f1:01:ba:ee:2d:60:70:6e:9e:93:6b:db: c2:13:b1:8c:30:e2:a6:c7:85:c9:8c:96:f4:79:66:16:68:69: cb:77:26:40:f2:5b:8c:ae:82:b1:b9:86:ed:e3:89:d8:eb:e6: 5a:2e:ca:38:c3:6b:b8:3f:6d:98:2a:5b:7a:e3:02:ff:0e:c9: fa:82:ea:d4:1f:01:f1:14:9a:26:69:f9:59:2f:01:22:98:5c: d9:05:98:be:d9:80:3c:d1:ac:c2:22:22:87:d8:f1:02:8a:95: 20:b5:f6:7a:87:5c:0b:11:cc:96:46:0b:12:3a:9d:ed:c5:c9: 06:2e:2d:e2:cd:8f:ee:87:d0:e7:a5:0b:55:e7:07:ca:b7:c2: 58:ab:93:e6:95:7f:24:9b:0e:d5:d3:f4:de:c3:ea:aa:f7:19: 6e:ed:ee:48:52:86:f8:f9:8f:f8:7c:c8:85:6a:3a:2c:96:3a: b4:e5:c4:24:cf:85:ae:3a:07:39:28:01:21:b0:db:4d:33:fa: 89:b2:8f:e4:f9:60:67:c1:53:ac:66:87:2f:26:9b:ac:59:90: 92:09:5f:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiB1U/NtaGsm1Y+fFNHCJtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUwODA3MDAwMTM3WhcNMjUwODA4MDAwMTM3WjAzMTEwLwYDVQQD EyhjMzNiYTBmN2FiZWM2MTZjZjMxYTFiNjBjNDcwNTFjYzYxYjA0ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NYAUxj7gLmh0ka9m468MWuDYdSq JtAjsxfDGhHAH74i9jMS5c+9TvuORy5QpBg1DKu2caH1Fh4/Qy3HoBqSj23KxpfJ X/02QCLka+reJqJBqSYvEvnzvmDpf5WWJPo4BAycnoZDjGWclvhACkSJgKW6TLQN XNsTrQDfhIH9makCswF52A98FRhawZulHV26qV1zGUbaaoy8Jq7mXIDRR0hmT2+f WCeLQAXl4dMkfz4sBCKckjseJLfVzLXx4EHMLdE1O/Q+f0Kq7jz+s0m/QJsGCKDJ CMsxhmYpYnYC338KGtC00xj14siADQA7ifAFGM+W3XsChdIvowMo4GE6tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM7oPer7GFs8xobYMRwUcxhsE8QMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqx9nDMT Oz7ywD7qWPGViokSvPyMTCKJz6ZLR1wEXpGqrquf/1VM81L78QG67i1gcG6ek2vb whOxjDDipseFyYyW9HlmFmhpy3cmQPJbjK6CsbmG7eOJ2OvmWi7KOMNruD9tmCpb euMC/w7J+oLq1B8B8RSaJmn5WS8BIphc2QWYvtmAPNGswiIih9jxAoqVILX2eodc CxHMlkYLEjqd7cXJBi4t4s2P7ofQ56ULVecHyrfCWKuT5pV/JJsO1dP03sPqqvcZ bu3uSFKG+PmP+HzIhWo6LJY6tOXEJM+FrjoHOSgBIbDbTTP6ibKP5PlgZ8FTrGaH LyabrFmQkglfeA== -----END CERTIFICATE-----Generated at Thu Aug 7 02:08:08 2025 by rpki-client