$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: QwK2enPN3zm7F6d8wNNlwq62tsKaCol1OIyKZNiIpcg= Subject key identifier: 76:0D:6D:3A:6F:46:9A:1D:C3:13:6C:75:F7:D2:22:C9:50:0A:7D:96 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 01976E86D44422D52A61D94084E33FABC646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0EFA Signing time: Sat 14 Jun 2025 13:00:19 +0000 Manifest this update: Sat 14 Jun 2025 13:00:19 +0000 Manifest next update: Sun 15 Jun 2025 13:00:19 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 4: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 5: DxQo9woLXeabrOTMdWKdmE79g6E.roa (hash: L7s/bsG2AYPSeoCt18lu0VaXIusr29U08eqlb4+V114=) 6: KnG8E7kezj3tf5epLozmTXTa310.roa (hash: DtT9ixAjwNWnGrRh0hq/H61cwW7Mp11Bc6qafI15X5M=) 7: NYD7kEkEPf-ABChHg559KWDxZM8.roa (hash: wEdTjLyasP6V7i4QrzN1J6SR98/Z10g1DKcaBU2r67I=) 8: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 9: eL97ct3zq6TVsXqsm_lH3Bbmhag.roa (hash: lU3q1Bg78D4eXPO6TJ7nPcg82PdCzYKhbHO7kJienoQ=) 10: m1fv2wuNZrr8jBjk4GOP29n9uGg.roa (hash: kteVPpKzQdVFACZScgeUlas5Q589BNk8kwEszbWHglI=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 13: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: kU2jELBGieZiNe5aU2bQyTPM4kdiD8EHKiZNrhRI9VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:86:d4:44:22:d5:2a:61:d9:40:84:e3:3f:ab:c6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jun 14 13:00:19 2025 GMT Not After : Jun 15 13:00:19 2025 GMT Subject: CN=760d6d3a6f469a1dc3136c75f7d222c9500a7d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:ed:3a:e1:3b:c9:a5:fb:f7:e8:f7:7f:2d: a9:01:4c:75:b5:7c:72:f4:ca:2b:8d:a8:b3:8e:04: 96:1f:57:f5:b1:0f:89:2b:8f:fe:f4:d1:b4:49:fd: 00:32:4e:c5:76:6e:10:5d:1b:31:57:90:f1:33:14: 30:04:fe:9c:bf:23:08:49:8b:0e:a7:80:10:cd:a0: cd:29:db:8c:13:6e:f8:fe:ce:65:6f:91:ce:6b:87: 03:77:02:dd:30:d8:e0:72:1c:38:18:56:e5:66:8e: 65:46:9b:ef:9e:e6:13:5a:74:3e:87:0c:e4:03:7f: 37:be:a1:43:7c:6b:8c:18:e9:77:44:42:d2:fc:e5: d6:c2:22:01:f0:84:2c:11:ed:4c:3e:2a:30:20:45: ec:40:6d:6f:eb:a4:c3:52:23:8b:36:89:c6:91:42: 7d:7d:1e:5d:5e:80:e9:f1:f9:33:de:2b:e3:4f:ad: 2e:df:2f:c5:fa:fd:3d:af:10:4b:2a:67:4a:01:6b: f9:9f:9f:5f:af:7f:71:f6:af:96:50:44:1a:b9:10: ff:4c:b4:3e:91:29:09:ca:58:6c:c5:d9:3b:d5:e6: 15:59:d8:b3:b3:31:16:9a:d4:13:ff:de:ff:e9:b0: 2b:15:d6:d2:22:0f:6b:c9:1b:00:d2:5b:70:8b:a6: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:6D:3A:6F:46:9A:1D:C3:13:6C:75:F7:D2:22:C9:50:0A:7D:96 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1f:35:52:8e:7f:25:79:f9:2c:a6:5c:90:98:1c:97:ec:e6: f5:60:d2:2e:45:db:6f:41:5f:00:4c:e8:c7:0a:65:ce:71:0d: bf:64:45:8e:d1:3d:99:2e:8b:fb:9d:7e:8e:5e:7a:0e:d2:80: a7:8c:68:fe:eb:b1:36:91:37:f0:19:ad:08:4f:a6:bd:df:ab: f2:1c:30:e2:c9:c1:65:1f:0f:ee:36:35:56:0d:87:f3:02:84: 5e:1e:f5:a1:6e:ba:9d:b1:1c:d2:e8:62:fd:b4:06:d1:5f:4f: b2:ed:ec:b6:a2:36:8b:9d:3a:7e:83:2e:4e:f5:cf:1a:87:8a: 7b:6e:64:0f:9a:aa:ba:16:93:58:6d:33:8d:a0:41:d1:38:b8: 6e:f8:73:9f:05:b7:cb:55:c5:54:5c:ee:77:6f:42:eb:87:77: 64:69:9d:fd:06:43:ad:6d:eb:4d:60:26:8b:54:54:68:6e:08: 8f:01:22:c4:df:d1:2b:71:4b:19:b8:0d:ac:35:a0:79:47:b1: 7b:08:b6:a1:14:49:88:03:c4:59:78:d9:8b:63:40:e0:e2:45: d0:69:e0:34:2d:13:6b:2d:de:c3:9e:9c:7f:78:e1:e9:8d:10: ee:bb:1b:74:d9:bd:67:81:24:f2:4a:16:30:10:28:f6:2b:c9: 59:7d:eb:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduhtREItUqYdlAhOM/q8ZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwNjE0MTMwMDE5WhcNMjUwNjE1MTMwMDE5WjAzMTEwLwYDVQQD Eyg3NjBkNmQzYTZmNDY5YTFkYzMxMzZjNzVmN2QyMjJjOTUwMGE3ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsztOuE7yaX79+j3fy2pAUx1tXxy 9MorjaizjgSWH1f1sQ+JK4/+9NG0Sf0AMk7Fdm4QXRsxV5DxMxQwBP6cvyMISYsO p4AQzaDNKduME274/s5lb5HOa4cDdwLdMNjgchw4GFblZo5lRpvvnuYTWnQ+hwzk A383vqFDfGuMGOl3RELS/OXWwiIB8IQsEe1MPiowIEXsQG1v66TDUiOLNonGkUJ9 fR5dXoDp8fkz3ivjT60u3y/F+v09rxBLKmdKAWv5n59fr39x9q+WUEQauRD/TLQ+ kSkJylhsxdk71eYVWdizszEWmtQT/97/6bArFdbSIg9ryRsA0ltwi6aLBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYNbTpvRpodwxNsdffSIslQCn2WMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh81Uo5/ JXn5LKZckJgcl+zm9WDSLkXbb0FfAEzoxwplznENv2RFjtE9mS6L+51+jl56DtKA p4xo/uuxNpE38BmtCE+mvd+r8hww4snBZR8P7jY1Vg2H8wKEXh71oW66nbEc0uhi /bQG0V9Psu3stqI2i506foMuTvXPGoeKe25kD5qquhaTWG0zjaBB0Ti4bvhznwW3 y1XFVFzud29C64d3ZGmd/QZDrW3rTWAmi1RUaG4IjwEixN/RK3FLGbgNrDWgeUex ewi2oRRJiAPEWXjZi2NA4OJF0GngNC0Tay3ew56cf3jh6Y0Q7rsbdNm9Z4Ek8koW MBAo9ivJWX3rtQ== -----END CERTIFICATE-----Generated at Sat Jun 14 23:51:34 2025 by rpki-client