$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: 1RT2F8E8/7W7yW+GrfaTL3lx8YHf3AqfesCLFS2UA3k= Subject key identifier: 96:BD:C8:FC:DC:44:DB:62:45:79:02:28:72:3C:04:E0:A2:93:41:12 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019672660DCC0F617D833D79129EDB00459E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 1581 Signing time: Sat 26 Apr 2025 14:00:12 +0000 Manifest this update: Sat 26 Apr 2025 14:00:12 +0000 Manifest next update: Sun 27 Apr 2025 14:00:12 +0000 Files and hashes: 1: 1-YvEReZaLsTO0jjKZ78pRhHRfsQ.roa (hash: zdufkDo+ZHpmPAX/tYX0aFypSlJTt9HUATtQVpaRiJ0=) 2: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=) 3: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=) 4: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=) 5: 56lpErzmKA6zdpC8K6uqShjX918.roa (hash: JSNhnLmZxVAM2Ix+mj/nVmnsa17Mxaa20aoo3EM5/C8=) 6: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=) 7: CkBRqOo4nHpiMZCMmHhlMyMyMW8.roa (hash: QqiQ/A2UMFrHNJ7zFLbdbwUvQQ7O2J6ld5ZejB7+vXI=) 8: GxYedkSTeiLaGGZm3zR7zXc_okU.roa (hash: yZtZ5bEs3PMC5gEdtfPDZZYkR4su+br574QwtztI1z0=) 9: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=) 10: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=) 11: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=) 12: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=) 13: RBC7xRCUrzAV3xcSRBDVibZqCTI.roa (hash: WHOYeqrd+Q7s/pv59QgW/Re/r+BuES3bFI1GIinCkZM=) 14: UabrP9SFPinXYIxzV1CHpeuYu-U.roa (hash: vZsFY4hIlYsgml0HPRseUEiONs3e+mJi4UxFhq6ZGsU=) 15: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=) 16: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: NdrJumA6gcDx/LPERmpLk4cDimmQVSghBelzYCqFjh0=) 17: Zgs9-zOzZ1bVcmw_hJ-aLd6LSw0.roa (hash: Hd3GHtUQTqMRi7qf1gZPAx94+btgVUkFfnwpTbzv+nY=) 18: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=) 19: tR6Fa03gzifqR6_y9F-SUYuYgcc.roa (hash: uncWfY5Wy22Nief+j+lCY37qfqCxhpjeMeXy7CgUPqE=) 20: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=) 21: z6jYSnHDtoGGfHKYIRCDy4kC3uc.roa (hash: Vi9kGfRbZv/6QO+j/QQ2QU1ueyC8xJ89Nu2SL4QOCaI=) 22: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=) 23: zmWLRvZ7XMmYhQOppzBvFxRjR9o.roa (hash: 6Q/6wdfAylMsEZywBPJb5E0+PJFDXtpbTad0L2I6rWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:0d:cc:0f:61:7d:83:3d:79:12:9e:db:00:45:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Apr 26 14:00:12 2025 GMT Not After : Apr 27 14:00:12 2025 GMT Subject: CN=96bdc8fcdc44db6245790228723c04e0a2934112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:b5:94:b9:e0:64:53:a3:4c:0f:a5:ca:06: c6:56:49:80:95:46:c6:85:1a:e9:5f:3a:b7:f2:ba: 62:cb:f0:b7:cc:57:40:53:77:62:04:aa:ce:57:15: 2e:1c:65:07:cb:f2:1e:31:c4:41:c3:a5:7c:47:38: 71:60:be:a9:3f:df:62:29:b1:ae:62:8f:fc:65:ca: 60:e2:19:8b:a6:77:42:28:7f:76:5a:80:5c:eb:43: 9a:9a:b5:4e:7c:05:a1:18:27:90:f1:d7:61:39:a8: f5:65:ab:a7:3b:21:99:0a:80:f7:34:70:bb:36:b3: f6:05:33:14:40:e3:be:2a:43:f8:eb:4f:9b:74:08: 68:aa:28:9e:60:f9:54:4a:35:15:69:bd:98:e8:a7: f0:c0:1e:df:82:6c:3e:ed:44:a2:74:36:ed:fe:3a: f3:8b:4c:d5:e2:e1:13:86:51:0c:4b:3a:1e:6d:1c: 0a:9f:85:47:a7:6c:32:29:9c:5f:d5:0b:22:5b:3a: 64:9d:a8:d7:31:6c:75:2e:15:02:78:ac:5d:f5:97: 7a:bf:57:ec:85:52:f9:9d:3a:25:e4:5f:11:84:a4: 6c:8b:d8:a9:3e:02:75:fe:75:30:f0:fb:4a:ed:aa: 83:1e:83:5e:46:d9:2e:71:44:d0:0b:63:c9:b7:e5: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BD:C8:FC:DC:44:DB:62:45:79:02:28:72:3C:04:E0:A2:93:41:12 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8e:88:fe:57:ea:0d:b9:d2:50:de:a0:a4:01:a6:75:c1:ce: d4:29:41:8a:28:fe:06:0e:b5:ec:bc:06:75:d6:81:2a:2e:e1: 76:6d:e3:2c:9c:ff:4b:92:3c:71:6c:d4:06:f0:06:f3:ff:79: 93:51:8a:f0:a6:f1:76:48:6f:3f:ee:0e:e9:9a:8b:11:11:46: 10:7f:4b:d7:de:4c:ef:e0:d5:d2:11:fd:f8:e7:37:8c:ae:0c: 51:f4:4f:57:6f:01:61:3c:ec:6e:c5:1c:38:98:63:d7:7a:f6: 9b:af:74:8f:13:1e:73:d1:ce:43:2d:6f:63:86:d7:4d:87:2b: 22:88:f1:2d:e5:80:d8:bb:b6:53:ad:5a:81:5e:ae:a4:ae:d4: 51:6d:44:40:71:0a:2a:d6:b4:18:72:00:c0:14:b4:3e:c8:cb: b6:6b:11:c3:1b:65:d5:08:0f:36:26:b0:2d:fd:43:1a:cd:26: ea:5d:28:c7:f4:57:63:68:f8:ec:c0:56:35:d4:42:5c:9d:c6: 9c:7c:6f:1e:ec:cd:44:a4:44:94:21:28:eb:95:1e:0e:83:f5: ae:bc:c2:0e:05:ae:f2:6f:b8:1c:e4:3a:1f:2a:67:b2:92:78: b2:cd:09:46:b9:2d:2f:84:a3:aa:7e:f8:5a:47:f9:3e:e9:b9: 81:41:35:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZg3MD2F9gz15Ep7bAEWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUwNDI2MTQwMDEyWhcNMjUwNDI3MTQwMDEyWjAzMTEwLwYDVQQD Eyg5NmJkYzhmY2RjNDRkYjYyNDU3OTAyMjg3MjNjMDRlMGEyOTM0MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvG1lLngZFOjTA+lygbGVkmAlUbG hRrpXzq38rpiy/C3zFdAU3diBKrOVxUuHGUHy/IeMcRBw6V8RzhxYL6pP99iKbGu Yo/8Zcpg4hmLpndCKH92WoBc60OamrVOfAWhGCeQ8ddhOaj1ZaunOyGZCoD3NHC7 NrP2BTMUQOO+KkP460+bdAhoqiieYPlUSjUVab2Y6KfwwB7fgmw+7USidDbt/jrz i0zV4uEThlEMSzoebRwKn4VHp2wyKZxf1QsiWzpknajXMWx1LhUCeKxd9Zd6v1fs hVL5nTol5F8RhKRsi9ipPgJ1/nUw8PtK7aqDHoNeRtkucUTQC2PJt+U8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa9yPzcRNtiRXkCKHI8BOCik0ESMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATY6I/lfq DbnSUN6gpAGmdcHO1ClBiij+Bg617LwGddaBKi7hdm3jLJz/S5I8cWzUBvAG8/95 k1GK8KbxdkhvP+4O6ZqLERFGEH9L195M7+DV0hH9+Oc3jK4MUfRPV28BYTzsbsUc OJhj13r2m690jxMec9HOQy1vY4bXTYcrIojxLeWA2Lu2U61agV6upK7UUW1EQHEK Kta0GHIAwBS0PsjLtmsRwxtl1QgPNiawLf1DGs0m6l0ox/RXY2j47MBWNdRCXJ3G nHxvHuzNRKRElCEo65UeDoP1rrzCDgWu8m+4HOQ6HypnspJ4ss0JRrktL4Sjqn74 Wkf5Pum5gUE1Kw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:01 2025 by rpki-client