$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: Aepfj7Cpzxrwa6Ef5Qx6mnhcjSqg2trWVnamtBP/XJY= Subject key identifier: 3B:4E:C4:D4:7C:DC:6D:F6:B5:D7:0F:11:2A:DE:63:FE:FF:90:D6:B3 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 0198752B573A06A564F38132133D73CC258E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0F85 Signing time: Mon 04 Aug 2025 13:00:31 +0000 Manifest this update: Mon 04 Aug 2025 13:00:31 +0000 Manifest next update: Tue 05 Aug 2025 13:00:31 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: 7-yY2XLWHLUd9AuKxH5IHfl175M.roa (hash: zG66GAnwYloqOJJfg6bZ7R9P50YwxEBbTOi0v9cAdF8=) 6: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 7: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 8: XBAXnSmCv5-aVjUmot5ATfiEuxI.roa (hash: 6g9dUj0D+s3CKiQ71bKeZNmrEFu0U89VttCxnqum4+4=) 9: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 10: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: QTTC7Xoe/jaQUomk+ioDtGR4lfsTk3hFeYyy+q8g1Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:2b:57:3a:06:a5:64:f3:81:32:13:3d:73:cc:25:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Aug 4 13:00:31 2025 GMT Not After : Aug 5 13:00:31 2025 GMT Subject: CN=3b4ec4d47cdc6df6b5d70f112ade63feff90d6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:57:3f:5d:e2:3d:e7:83:46:f6:a6:5f:92: ff:17:73:c6:bb:19:b0:07:12:e7:0c:d2:30:89:bb: 80:3d:f1:a4:9c:ff:b2:56:3b:29:56:70:b7:af:c5: 12:f6:bd:56:d1:06:03:05:12:53:7f:63:86:08:60: 4f:e9:f5:28:34:98:96:40:4e:59:f5:13:5e:98:27: 61:16:58:9d:de:60:0e:21:cd:02:aa:4d:f1:d5:96: c8:e9:68:a0:69:12:e2:b6:c0:1c:79:b3:a8:06:0c: 68:37:c3:5b:b6:25:e5:d1:c9:da:a0:5b:c3:99:b3: 8a:04:67:55:e8:2e:95:0b:9f:32:99:b8:a4:e4:9b: f6:ce:3c:19:4a:30:e2:46:ae:96:09:02:3e:3c:ce: 30:eb:1d:57:8f:9c:e6:c3:e1:96:48:2d:8c:9a:2c: c4:27:e6:8c:a3:c8:86:a8:91:fd:7f:8c:e2:62:97: 33:84:31:e7:b5:2d:c4:1e:84:e2:fd:42:64:a0:71: c4:82:57:2b:6b:dc:e2:47:48:bc:7e:49:30:c6:b1: 8d:3a:27:4a:27:07:a0:fe:a0:2f:aa:bf:ec:36:01: a0:77:20:bf:4f:40:1f:ac:73:30:65:6c:44:b5:31: fa:ee:4b:ab:6a:3a:5a:33:2f:79:0f:1c:ee:38:5d: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4E:C4:D4:7C:DC:6D:F6:B5:D7:0F:11:2A:DE:63:FE:FF:90:D6:B3 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1a:0c:46:28:89:b7:b8:c0:a6:74:9a:7f:d0:52:cc:1b:eb: 5e:37:7a:e8:49:e8:57:15:4e:38:0f:1b:b7:41:8d:e2:58:0c: 18:43:88:de:8e:71:b9:87:7f:a4:81:a2:d9:94:7f:fb:79:39: 7c:98:a1:46:f8:e4:8e:68:d4:0d:d8:3e:10:ac:58:8b:b1:ea: 79:5f:27:83:ef:55:60:53:bd:8a:db:aa:1d:52:2b:e9:c4:ec: cd:9f:d9:b7:16:96:c6:bb:d1:bc:33:43:3a:e3:3f:35:7b:54: d7:69:5b:c8:1d:ae:64:dd:ad:7c:3a:af:3b:13:d8:61:a4:9c: 99:28:5c:36:8f:d5:b7:9c:68:47:39:24:f1:0e:30:03:c7:87: dd:2b:be:81:9d:1f:db:be:8c:5d:fe:34:e1:ad:a4:f6:3f:ae: 03:b9:bc:70:cc:96:0a:09:63:c5:4a:e3:d7:55:1b:38:fc:09: db:db:4e:4f:9a:90:d7:61:b3:94:a6:43:17:29:2a:d0:e2:ff: 2d:5c:45:e3:13:91:b9:79:d4:35:9a:69:5d:48:3f:24:b9:7f: 04:00:e5:9e:2b:97:fa:d6:a1:43:5c:5c:ee:be:5b:38:fa:3e: 55:f0:39:1e:4f:c1:cc:0f:c4:72:73:4e:fe:4f:64:54:88:6f: e0:40:d1:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1K1c6BqVk84EyEz1zzCWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwODA0MTMwMDMxWhcNMjUwODA1MTMwMDMxWjAzMTEwLwYDVQQD EygzYjRlYzRkNDdjZGM2ZGY2YjVkNzBmMTEyYWRlNjNmZWZmOTBkNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy9XP13iPeeDRvamX5L/F3PGuxmw BxLnDNIwibuAPfGknP+yVjspVnC3r8US9r1W0QYDBRJTf2OGCGBP6fUoNJiWQE5Z 9RNemCdhFlid3mAOIc0Cqk3x1ZbI6WigaRLitsAcebOoBgxoN8NbtiXl0cnaoFvD mbOKBGdV6C6VC58ymbik5Jv2zjwZSjDiRq6WCQI+PM4w6x1Xj5zmw+GWSC2MmizE J+aMo8iGqJH9f4ziYpczhDHntS3EHoTi/UJkoHHEglcra9ziR0i8fkkwxrGNOidK Jweg/qAvqr/sNgGgdyC/T0AfrHMwZWxEtTH67kurajpaMy95DxzuOF0xWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtOxNR83G32tdcPESreY/7/kNazMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBoMRiiJ t7jApnSaf9BSzBvrXjd66EnoVxVOOA8bt0GN4lgMGEOI3o5xuYd/pIGi2ZR/+3k5 fJihRvjkjmjUDdg+EKxYi7HqeV8ng+9VYFO9ituqHVIr6cTszZ/ZtxaWxrvRvDND OuM/NXtU12lbyB2uZN2tfDqvOxPYYaScmShcNo/Vt5xoRzkk8Q4wA8eH3Su+gZ0f 276MXf404a2k9j+uA7m8cMyWCgljxUrj11UbOPwJ29tOT5qQ12GzlKZDFykq0OL/ LVxF4xORuXnUNZppXUg/JLl/BADlniuX+tahQ1xc7r5bOPo+VfA5Hk/BzA/EcnNO /k9kVIhv4EDRRA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:15 2025 by rpki-client