$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: S/f4eHSuWTyoGO+sR1EgE2SgcQDCqyZNeE/bJUmu69o= Subject key identifier: 49:EC:E1:F7:F9:DE:43:28:67:9D:B0:0D:99:E2:6F:3A:C0:47:FF:3D Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 01968812A89371661226CBDC933ADE3CA8E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1532 Signing time: Wed 30 Apr 2025 19:00:46 +0000 Manifest this update: Wed 30 Apr 2025 19:00:46 +0000 Manifest next update: Thu 01 May 2025 19:00:46 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: ii9TV4N4W6Rr7epimiV0iktLGHxu80am9+8pveoUgxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:88:12:a8:93:71:66:12:26:cb:dc:93:3a:de:3c:a8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Apr 30 19:00:46 2025 GMT Not After : May 1 19:00:46 2025 GMT Subject: CN=49ece1f7f9de4328679db00d99e26f3ac047ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:28:c3:b7:a6:3b:ef:04:2c:3e:94:cd:24: 42:23:18:06:be:bf:f6:d0:c4:c4:16:4f:ad:92:a3: 46:a9:9b:6c:f0:c2:d0:57:b2:15:ed:a9:bc:e0:25: 8a:d3:0e:94:0a:54:59:94:8d:b4:fb:11:f8:95:61: 68:f6:2a:17:e1:b4:5d:8b:8c:92:2a:70:2e:04:94: fc:6c:c0:29:e6:a9:ff:09:a4:bb:2a:3a:29:f1:df: b5:f7:32:16:49:a4:4e:2c:1c:da:8a:62:2e:04:d0: 86:32:5b:23:71:52:02:8b:c7:b6:8a:20:a2:0c:77: 1b:8c:f7:9c:cb:8c:f7:42:e9:79:d7:0a:55:99:b9: 63:61:7c:d8:38:81:75:2e:bb:ac:15:8f:01:d9:fd: b1:de:a0:7e:2d:71:9e:65:95:b7:9e:e7:f5:0d:b7: 06:d1:3e:ba:e4:97:31:f5:ed:15:24:69:d3:b5:6a: a7:f7:81:0b:4b:b1:a8:97:ed:f6:3f:2a:c4:41:b8: 11:e3:86:0d:07:67:64:2b:e7:6d:de:1e:23:3b:6d: c8:16:e4:c7:48:ab:b5:0b:6b:05:20:7a:8e:40:6f: 81:da:77:b7:e6:63:65:a7:b1:ab:3f:b7:33:63:9a: d5:10:9a:b0:83:57:9e:41:d2:b2:d9:d4:de:eb:47: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EC:E1:F7:F9:DE:43:28:67:9D:B0:0D:99:E2:6F:3A:C0:47:FF:3D X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:24:0e:31:92:a4:83:84:19:6e:d4:99:0d:b3:01:7c:99:e0: cd:01:7e:52:e6:32:09:49:27:65:2e:b4:e2:81:06:70:11:38: a9:c0:94:ee:b2:48:76:a1:c1:e4:96:51:95:51:cb:66:d6:15: 5a:b8:5b:42:ff:f2:05:6a:de:c1:ae:1a:e2:d0:83:c8:ed:05: 84:9d:d2:e6:96:48:38:28:78:cd:7c:25:eb:4c:11:35:b1:c1: 2e:07:a4:18:01:01:e4:0a:a8:77:00:3d:11:35:a3:46:5d:02: c9:58:ab:31:87:d0:15:f2:03:11:f0:8d:8a:98:06:81:23:e8: 65:dc:bb:ea:df:29:88:c2:f5:34:5e:72:fe:22:08:e8:64:51: a2:bc:9f:98:4f:dd:eb:c3:20:94:2e:f1:17:a8:d1:67:26:d1: 34:78:f8:5d:03:97:1b:60:e6:62:06:ee:fe:e7:7c:a1:61:6f: 43:56:14:48:26:d0:8d:53:f7:df:fa:df:5e:05:d0:b9:25:4b: 22:46:b5:20:84:83:a1:01:9d:e0:7e:1b:fc:e7:82:13:2d:22: c5:a7:46:fc:a5:a7:e6:37:0d:ef:18:5a:e1:2c:13:86:b4:35: 1b:01:c9:93:85:b3:98:01:e1:f3:86:50:e6:6c:cd:4d:2a:9e: e2:51:05:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaIEqiTcWYSJsvckzrePKjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUwNDMwMTkwMDQ2WhcNMjUwNTAxMTkwMDQ2WjAzMTEwLwYDVQQD Eyg0OWVjZTFmN2Y5ZGU0MzI4Njc5ZGIwMGQ5OWUyNmYzYWMwNDdmZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPEow7emO+8ELD6UzSRCIxgGvr/2 0MTEFk+tkqNGqZts8MLQV7IV7am84CWK0w6UClRZlI20+xH4lWFo9ioX4bRdi4yS KnAuBJT8bMAp5qn/CaS7Kjop8d+19zIWSaROLBzaimIuBNCGMlsjcVICi8e2iiCi DHcbjPecy4z3Qul51wpVmbljYXzYOIF1LrusFY8B2f2x3qB+LXGeZZW3nuf1DbcG 0T665Jcx9e0VJGnTtWqn94ELS7Gol+32PyrEQbgR44YNB2dkK+dt3h4jO23IFuTH SKu1C2sFIHqOQG+B2ne35mNlp7GrP7czY5rVEJqwg1eeQdKy2dTe60cStwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEns4ff53kMoZ52wDZnibzrAR/89MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSQOMZKk g4QZbtSZDbMBfJngzQF+UuYyCUknZS604oEGcBE4qcCU7rJIdqHB5JZRlVHLZtYV WrhbQv/yBWrewa4a4tCDyO0FhJ3S5pZIOCh4zXwl60wRNbHBLgekGAEB5AqodwA9 ETWjRl0CyVirMYfQFfIDEfCNipgGgSPoZdy76t8piML1NF5y/iII6GRRoryfmE/d 68MglC7xF6jRZybRNHj4XQOXG2DmYgbu/ud8oWFvQ1YUSCbQjVP33/rfXgXQuSVL Ika1IISDoQGd4H4b/OeCEy0ixadG/KWn5jcN7xha4SwThrQ1GwHJk4WzmAHh84ZQ 5mzNTSqe4lEFUw== -----END CERTIFICATE-----Generated at Thu May 1 04:29:17 2025 by rpki-client