$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: 3PYOhwr6pPR5SIzuTaP45pb3KJQ0o7UnRuBRjqwGJVw= Subject key identifier: 00:FA:B6:FD:35:76:CC:31:E4:F5:67:20:8D:47:FA:CC:87:94:8A:78 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 01987DC138C10D2C549029D6C2F43ADD33B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 16A9 Signing time: Wed 06 Aug 2025 05:01:11 +0000 Manifest this update: Wed 06 Aug 2025 05:01:11 +0000 Manifest next update: Thu 07 Aug 2025 05:01:11 +0000 Files and hashes: 1: 1-YvEReZaLsTO0jjKZ78pRhHRfsQ.roa (hash: zdufkDo+ZHpmPAX/tYX0aFypSlJTt9HUATtQVpaRiJ0=) 2: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=) 3: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=) 4: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=) 5: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=) 6: 9la_AU58bMd-3pCNHt8w31jQCl4.roa (hash: E9TsWgVQ3BFPUDXwzoZMZ0b6bAsHWFerURHLZ/QkqCc=) 7: CCpeBz282waZWIp6wfY2xNGCC9E.roa (hash: vV/uCDu7bu0Kj5ZjmV2IVmbVX66D/TiH8HiOBPDsfV4=) 8: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=) 9: LDrl5yQ6YgLU4GfM_arnmSz23dU.roa (hash: iKaltE4AvPH8VGJ9xiua62Njowdj21H1MidVFZwr7hc=) 10: LdSX0TNAWu1GANikgGHJZKbN5ts.roa (hash: XzH2guM8uD41A2haqYmLeH+1CfMtNp2yUb4pKTWFFOk=) 11: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=) 12: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=) 13: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=) 14: WO5iMFxx-F4JF78W9Ca0mfMOiYc.roa (hash: uBIHUV8mnwau9Fyw3ey0VTaOO0smiERX1iJx5QMdF/M=) 15: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=) 16: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: PRKkMJOwPClaJ/gEfxuBQbUnGHdg2Po4jgzVUiCxwvA=) 17: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (hash: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=) 18: ivz9UuZi-4F_UY2dCJwvz92IleI.roa (hash: fMDlAKW/+cFJKH/iMMRqhtiZO+jRtkk6wHNfsrbqMnk=) 19: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=) 20: mDv8MzFAuvTVIARuxN1G5ZV4tJA.roa (hash: BjwmiZa9oIbZzTPO9rJht/3cWnP/fYAMoo6mGH8xFHw=) 21: qWpzvRDGfVICOAas6EpA5TLROBI.roa (hash: 0F40XY0fiwK+HQCyTtXfsCoNfyawPos3cmHr8KSTvbw=) 22: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=) 23: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:c1:38:c1:0d:2c:54:90:29:d6:c2:f4:3a:dd:33:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Aug 6 05:01:11 2025 GMT Not After : Aug 7 05:01:11 2025 GMT Subject: CN=00fab6fd3576cc31e4f567208d47facc87948a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:d7:e0:79:26:d4:cc:3c:c5:63:0d:7b:ce: d1:1e:82:9d:50:82:a3:bb:b6:c0:fc:0d:bb:77:8e: d2:9c:dd:e2:50:0d:ff:5e:79:7c:21:0d:aa:6c:cb: ac:de:2f:83:51:b4:98:f0:00:c6:67:2b:da:68:25: b7:bc:52:64:b0:9c:8c:68:b0:b1:a5:35:09:1c:55: 7e:7d:c6:ce:03:cf:6c:12:84:fb:fb:7d:75:10:65: e5:6a:23:6f:9a:39:04:e5:ab:50:75:de:5b:3c:7b: 7f:9c:5d:57:f7:56:b3:b5:5d:55:2c:30:0a:06:d1: f7:95:73:35:84:b8:fa:de:46:a4:ef:a8:f8:5c:20: d4:44:73:ad:59:f0:7e:3b:2c:93:ba:52:b1:ca:3e: b8:b2:7f:b5:85:5d:59:7b:01:39:1d:ed:ab:57:a3: 94:28:9f:7c:c4:14:f6:c3:a3:1b:0e:63:bb:45:27: 95:9b:87:15:93:12:f0:62:25:58:43:39:5b:8b:50: 1b:0e:12:70:f1:5c:6c:07:c4:78:0e:1e:7a:08:94: 9d:85:c4:eb:c4:b8:3e:55:9c:06:42:67:e5:1e:ca: be:48:05:6d:b3:06:85:8f:72:89:e4:0b:58:0b:f8: ee:0d:d5:3c:a6:b5:59:9a:df:47:73:1a:c0:54:c2: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:B6:FD:35:76:CC:31:E4:F5:67:20:8D:47:FA:CC:87:94:8A:78 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:10:2b:27:a5:86:98:c1:98:3d:f2:59:7e:90:96:11:db:cf: c9:76:9d:61:e6:11:b7:7a:13:d5:97:bb:2b:5b:3f:48:32:fd: 21:8c:3d:41:36:50:9a:dc:46:1c:ba:15:c4:58:46:0e:0a:92: 75:e4:78:b3:34:d4:cf:c3:6d:c6:0a:1d:71:87:fe:1c:1f:dd: 50:44:ae:23:ec:b9:01:73:a2:7c:16:06:81:b4:38:b0:f8:f0: b3:b5:7e:21:57:a9:50:2c:63:5d:39:e5:2e:95:3f:8d:e6:25: c3:87:e4:1c:f0:3f:6d:00:22:1e:65:44:bb:9d:a5:c6:83:01: 6f:fc:a4:01:80:83:3a:90:be:da:1c:49:fb:6a:86:f7:b5:f6: fd:ca:c7:9d:e5:78:1e:e6:2f:0b:79:bf:33:fd:cb:c9:22:3c: 60:34:68:d1:e7:d3:ea:4f:f3:07:ba:15:b3:8e:26:d3:0c:06: c3:9f:b3:3b:ac:52:bd:3a:84:fc:72:e4:a9:08:3e:7b:69:b1: d6:fb:72:a7:42:05:52:5f:4e:93:40:d7:5c:0d:45:f0:bd:3d: 1c:1a:76:bc:0b:ae:59:95:41:4b:ca:03:1c:8a:8c:dc:d1:ee: 98:8f:03:d4:e2:7e:bb:77:61:92:1a:e2:b9:67:bc:42:c0:8c: 0f:d6:7b:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9wTjBDSxUkCnWwvQ63TO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUwODA2MDUwMTExWhcNMjUwODA3MDUwMTExWjAzMTEwLwYDVQQD EygwMGZhYjZmZDM1NzZjYzMxZTRmNTY3MjA4ZDQ3ZmFjYzg3OTQ4YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTDX4Hkm1Mw8xWMNe87RHoKdUIKj u7bA/A27d47SnN3iUA3/Xnl8IQ2qbMus3i+DUbSY8ADGZyvaaCW3vFJksJyMaLCx pTUJHFV+fcbOA89sEoT7+311EGXlaiNvmjkE5atQdd5bPHt/nF1X91aztV1VLDAK BtH3lXM1hLj63kak76j4XCDURHOtWfB+OyyTulKxyj64sn+1hV1ZewE5He2rV6OU KJ98xBT2w6MbDmO7RSeVm4cVkxLwYiVYQzlbi1AbDhJw8VxsB8R4Dh56CJSdhcTr xLg+VZwGQmflHsq+SAVtswaFj3KJ5AtYC/juDdU8prVZmt9HcxrAVMIpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD6tv01dswx5PVnII1H+syHlIp4MB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahArJ6WG mMGYPfJZfpCWEdvPyXadYeYRt3oT1Ze7K1s/SDL9IYw9QTZQmtxGHLoVxFhGDgqS deR4szTUz8NtxgodcYf+HB/dUESuI+y5AXOifBYGgbQ4sPjws7V+IVepUCxjXTnl LpU/jeYlw4fkHPA/bQAiHmVEu52lxoMBb/ykAYCDOpC+2hxJ+2qG97X2/crHneV4 HuYvC3m/M/3LySI8YDRo0efT6k/zB7oVs44m0wwGw5+zO6xSvTqE/HLkqQg+e2mx 1vtyp0IFUl9Ok0DXXA1F8L09HBp2vAuuWZVBS8oDHIqM3NHumI8D1OJ+u3dhkhri uWe8QsCMD9Z7rQ== -----END CERTIFICATE-----Generated at Wed Aug 6 12:38:28 2025 by rpki-client