$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: 0jOQJ4muaYTY63/ObibUExD44sC/iAPdwnhYt+xS20M= Subject key identifier: 9B:49:F2:13:45:72:9E:8C:AE:6D:B2:A5:04:DD:39:83:BA:F7:3E:69 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 01968435C91576566FC554FF61A615CD609E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1530 Signing time: Wed 30 Apr 2025 01:00:39 +0000 Manifest this update: Wed 30 Apr 2025 01:00:39 +0000 Manifest next update: Thu 01 May 2025 01:00:39 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: ZbAfsdEzroEXckmi58jvmEtC8XFbgzv4YpoxK855FwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:84:35:c9:15:76:56:6f:c5:54:ff:61:a6:15:cd:60:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Apr 30 01:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=9b49f21345729e8cae6db2a504dd3983baf73e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:97:0c:26:c6:f0:e4:83:a9:b1:db:77:74: b9:34:ac:ff:47:db:78:1d:56:fd:8b:23:4c:68:d1: f2:c4:a8:29:b9:29:89:0c:0a:81:8a:f3:b1:eb:f9: bb:4e:35:b9:5f:07:0f:22:b5:a9:49:f3:a5:db:26: be:12:e5:a8:8e:09:8b:fc:6c:71:8b:71:27:98:7f: 56:9c:69:48:03:cb:6b:b6:94:f9:cd:dc:4a:93:fc: 5e:b5:74:a0:a4:63:11:1c:76:30:96:5c:4e:c2:eb: 49:1a:3d:b4:96:89:a5:ae:2d:52:74:41:ea:39:2e: 50:20:e1:99:60:35:6a:3a:f1:54:19:b9:e0:22:e2: 95:d6:54:0e:e9:24:00:66:e5:ba:4b:11:9f:dc:94: 19:85:66:47:f5:89:ff:eb:a0:f0:e6:ed:b8:a3:b6: 83:ab:16:c6:ad:b1:ca:18:b9:f5:e4:e6:41:24:1b: 42:fd:c7:0a:a5:3e:da:5d:27:7f:b7:77:99:3d:98: ee:99:08:c1:1c:e1:06:c6:23:5c:0d:8d:e6:66:55: 53:e0:2f:12:3b:54:65:2f:3e:b2:86:54:fc:e7:7a: 21:b2:be:35:8e:6e:1d:af:40:c7:0c:de:76:e4:13: b5:80:e7:8b:5d:ae:07:08:bc:a6:ab:40:c6:d8:21: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:49:F2:13:45:72:9E:8C:AE:6D:B2:A5:04:DD:39:83:BA:F7:3E:69 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:55:e5:3a:63:95:bc:f8:68:9f:c3:4c:00:ea:ce:55:99: 2d:b9:fb:15:f3:7c:e4:e7:4b:70:58:06:8f:52:21:43:61:e2: 70:22:b2:b1:ec:6d:38:28:67:a8:66:4f:ea:19:c5:0d:4f:c1: d9:c6:78:bb:14:0d:2a:5a:e1:d6:aa:e1:d5:e7:34:3d:ba:3d: 93:fa:22:9b:1c:f9:a6:ff:29:e5:6a:05:3c:71:9e:20:89:2a: b1:7c:ec:a8:25:d7:00:4d:ff:3a:ae:a9:14:60:1f:89:f2:38: 55:3c:1d:30:ca:d5:94:cd:f8:d7:8b:0e:f9:c8:57:8d:92:ff: 7e:47:0e:43:9e:84:c9:02:85:e6:94:27:9f:34:80:eb:49:f6: bf:bd:17:4a:ef:7f:49:97:d4:b5:df:b8:bf:a0:26:f2:b2:ea: db:ff:d3:dc:e3:48:3a:d6:3f:0d:9c:95:d1:e2:ac:1f:4b:d7: 89:cc:fd:52:65:d8:c5:ea:a8:fd:ac:a2:8f:9e:32:37:bf:a6: e1:b3:e0:85:27:d8:2f:d1:df:b6:f4:50:ad:1b:a3:57:31:20: a1:5c:fe:db:7a:3c:57:bd:c1:a1:57:95:9b:2e:74:ad:65:f6: ee:89:09:67:f0:c6:5d:39:08:62:66:d8:15:93:6a:2b:1b:6e: d0:61:20:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaENckVdlZvxVT/YaYVzWCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUwNDMwMDEwMDM5WhcNMjUwNTAxMDEwMDM5WjAzMTEwLwYDVQQD Eyg5YjQ5ZjIxMzQ1NzI5ZThjYWU2ZGIyYTUwNGRkMzk4M2JhZjczZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaqXDCbG8OSDqbHbd3S5NKz/R9t4 HVb9iyNMaNHyxKgpuSmJDAqBivOx6/m7TjW5XwcPIrWpSfOl2ya+EuWojgmL/Gxx i3EnmH9WnGlIA8trtpT5zdxKk/xetXSgpGMRHHYwllxOwutJGj20lomlri1SdEHq OS5QIOGZYDVqOvFUGbngIuKV1lQO6SQAZuW6SxGf3JQZhWZH9Yn/66Dw5u24o7aD qxbGrbHKGLn15OZBJBtC/ccKpT7aXSd/t3eZPZjumQjBHOEGxiNcDY3mZlVT4C8S O1RlLz6yhlT853ohsr41jm4dr0DHDN525BO1gOeLXa4HCLymq0DG2CFPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtJ8hNFcp6Mrm2ypQTdOYO69z5pMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrpV5Tpj lbz4aJ/DTADqzlWZLbn7FfN85OdLcFgGj1IhQ2HicCKysextOChnqGZP6hnFDU/B 2cZ4uxQNKlrh1qrh1ec0Pbo9k/oimxz5pv8p5WoFPHGeIIkqsXzsqCXXAE3/Oq6p FGAfifI4VTwdMMrVlM3414sO+chXjZL/fkcOQ56EyQKF5pQnnzSA60n2v70XSu9/ SZfUtd+4v6Am8rLq2//T3ONIOtY/DZyV0eKsH0vXicz9UmXYxeqo/ayij54yN7+m 4bPghSfYL9HftvRQrRujVzEgoVz+23o8V73BoVeVmy50rWX27okJZ/DGXTkIYmbY FZNqKxtu0GEgJg== -----END CERTIFICATE-----Generated at Wed Apr 30 04:55:28 2025 by rpki-client