$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: 43ZYkJt6QcJ2McuytVBY3d2s6Yoqa60/9biWiaetSlE= Subject key identifier: 53:E3:AC:09:81:D4:83:2A:C9:B0:E9:BA:F8:58:1B:2B:6E:D9:1D:5B Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019A52D297F383EF628B904B42F3B33080B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 171D Signing time: Wed 05 Nov 2025 07:02:04 +0000 Manifest this update: Wed 05 Nov 2025 07:02:04 +0000 Manifest next update: Thu 06 Nov 2025 07:02:04 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: SpHkHZTg/lzktVtKn3/sr8lj/YNZNB489/R/FKAOt18=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:d2:97:f3:83:ef:62:8b:90:4b:42:f3:b3:30:80:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Nov 5 07:02:04 2025 GMT Not After : Nov 6 07:02:04 2025 GMT Subject: CN=53e3ac0981d4832ac9b0e9baf8581b2b6ed91d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:33:30:af:41:df:47:21:5a:0b:46:f7:5a: a8:d3:b7:49:46:81:4a:e9:70:72:40:a0:f4:89:de: 8a:e3:ff:58:e2:d4:33:3d:2d:c9:56:03:06:d1:f6: b7:e8:79:d1:c4:ad:05:1e:09:42:bb:ea:8d:25:64: 44:29:87:43:86:f4:61:fb:c2:b0:d2:65:b5:5d:7e: 30:32:05:28:87:1d:34:d0:64:62:f7:0b:bf:c9:3c: 99:a9:a7:27:f2:8b:fc:7f:a7:0c:89:eb:17:08:c7: 93:56:b2:47:f5:1a:35:18:f1:8f:7e:2a:0c:c8:4b: fe:02:5b:0e:43:05:0b:aa:60:66:eb:86:fa:64:28: 80:94:55:e4:22:2b:a3:9b:75:b1:9e:cd:c8:03:08: 6b:68:30:a6:29:a5:53:d9:a3:d9:e1:bf:02:77:f3: 4b:bf:49:1d:41:e3:04:fe:1f:9b:ce:98:56:c3:8d: 0e:f5:44:d6:9d:fd:2d:f4:5a:b7:8d:6b:24:1b:1d: 27:f7:a0:20:5c:27:ec:c8:92:28:a2:27:8c:3f:08: a4:c6:c3:31:f6:3e:2f:55:f6:16:e7:6a:15:fa:cc: a4:7e:62:d5:1b:5e:00:f8:1b:3c:88:e0:e4:1f:85: 8b:61:f8:9d:0e:83:5d:5a:2c:39:69:1c:1d:58:7c: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E3:AC:09:81:D4:83:2A:C9:B0:E9:BA:F8:58:1B:2B:6E:D9:1D:5B X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a6:f5:a7:29:2d:a7:fb:40:65:c7:23:9c:03:fd:6f:3f:f6: 53:50:a4:e4:7e:6e:b1:af:1c:63:49:40:d7:35:0e:5e:10:1b: 88:92:e6:b7:26:0e:4f:ef:67:1a:6a:59:a4:6c:29:8a:83:a7: 75:e2:86:f4:7e:e5:de:a3:af:51:58:8d:c3:8f:ac:aa:05:95: 6a:04:96:72:df:74:93:6e:c3:bd:be:d8:c8:17:96:2b:93:29: c8:dd:4e:0b:4e:c2:b4:02:30:e2:8d:a7:44:98:9b:9f:eb:81: 2f:0b:4e:dc:d8:2c:5f:5b:3a:99:ba:90:5d:82:73:e7:ab:12: cd:27:a0:d9:67:a3:76:f7:0e:82:67:80:3b:f3:0e:59:7c:1a: f6:2c:d1:7a:f3:f1:83:12:13:48:87:71:55:79:3f:6e:8b:f3: 46:de:f9:24:d0:a0:05:2d:67:35:83:13:78:39:74:a3:ff:04: b9:e1:05:ba:be:cc:23:d6:fb:94:2f:3e:32:41:5d:46:78:a8: b7:8a:19:e0:6e:f3:66:31:dc:41:01:05:60:af:c2:d9:ee:92: 6b:24:a5:4d:23:f9:72:e4:92:32:cc:43:ed:c3:52:e7:b6:7c: 07:4f:ce:5a:2d:f1:8f:f6:3c:ae:35:2d:a9:bc:65:14:83:a0: 52:70:aa:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpS0pfzg+9ii5BLQvOzMICwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMTA1MDcwMjA0WhcNMjUxMTA2MDcwMjA0WjAzMTEwLwYDVQQD Eyg1M2UzYWMwOTgxZDQ4MzJhYzliMGU5YmFmODU4MWIyYjZlZDkxZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTUzMK9B30chWgtG91qo07dJRoFK 6XByQKD0id6K4/9Y4tQzPS3JVgMG0fa36HnRxK0FHglCu+qNJWREKYdDhvRh+8Kw 0mW1XX4wMgUohx000GRi9wu/yTyZqacn8ov8f6cMiesXCMeTVrJH9Ro1GPGPfioM yEv+AlsOQwULqmBm64b6ZCiAlFXkIiujm3Wxns3IAwhraDCmKaVT2aPZ4b8Cd/NL v0kdQeME/h+bzphWw40O9UTWnf0t9Fq3jWskGx0n96AgXCfsyJIooieMPwikxsMx 9j4vVfYW52oV+sykfmLVG14A+Bs8iODkH4WLYfidDoNdWiw5aRwdWHy2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPjrAmB1IMqybDpuvhYGytu2R1bMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqb1pykt p/tAZccjnAP9bz/2U1Ck5H5usa8cY0lA1zUOXhAbiJLmtyYOT+9nGmpZpGwpioOn deKG9H7l3qOvUViNw4+sqgWVagSWct90k27Dvb7YyBeWK5MpyN1OC07CtAIw4o2n RJibn+uBLwtO3NgsX1s6mbqQXYJz56sSzSeg2WejdvcOgmeAO/MOWXwa9izRevPx gxITSIdxVXk/bovzRt75JNCgBS1nNYMTeDl0o/8EueEFur7MI9b7lC8+MkFdRnio t4oZ4G7zZjHcQQEFYK/C2e6SaySlTSP5cuSSMsxD7cNS57Z8B0/OWi3xj/Y8rjUt qbxlFIOgUnCqwg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:34 2025 by rpki-client