$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: vpoTWVD70SdBL8eP3G0rdFqb6dnn/7WzeOJATESA/ZA= Subject key identifier: 36:E6:17:B0:8C:44:85:BC:B2:E0:1F:20:1C:92:AA:48:4A:22:32:5B Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019873E40DE0BAF1259E54F9FE40B65BC768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1625 Signing time: Mon 04 Aug 2025 07:03:02 +0000 Manifest this update: Mon 04 Aug 2025 07:03:02 +0000 Manifest next update: Tue 05 Aug 2025 07:03:02 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: gbzz6LAKD7XEHW/0aftzOLQtyqr94r+w62LCzGVUaXs=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e4:0d:e0:ba:f1:25:9e:54:f9:fe:40:b6:5b:c7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Aug 4 07:03:02 2025 GMT Not After : Aug 5 07:03:02 2025 GMT Subject: CN=36e617b08c4485bcb2e01f201c92aa484a22325b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:23:54:cb:2c:48:a2:15:e6:5f:0f:ae:e3:15: ab:d4:8f:91:7e:b7:65:0e:ad:6c:dc:40:0e:88:93: 64:33:71:64:4a:4f:23:63:b0:ec:04:b4:8a:17:c9: ae:ce:99:d0:03:aa:cb:ab:95:fd:38:11:d9:4d:25: fe:e7:9f:1d:2d:13:79:e7:2f:c2:3a:66:b8:14:99: 5c:57:20:9d:11:ec:7d:ed:89:30:7d:65:a4:44:03: 06:13:13:dd:2d:6d:f9:02:51:44:84:0e:6b:a3:fe: 3e:b6:a3:44:2d:73:0c:ec:96:02:5b:c7:86:68:8e: 1c:4d:7a:b0:a7:f3:7a:25:98:5e:3a:10:91:98:90: 58:ee:82:fe:ce:cd:08:6c:43:09:99:de:fa:4a:95: e1:b8:6f:f3:ef:fe:84:db:b7:4f:5a:86:a0:9b:fb: f3:91:b9:42:e4:c0:ab:5e:29:bb:c1:a3:bd:bb:a6: 29:0c:89:ac:1b:45:98:6c:53:31:57:ad:ed:09:3d: 2d:f3:f1:e9:e8:a9:ac:9a:92:cb:d6:d7:25:ad:2c: 24:8b:0a:63:68:25:92:50:4d:ef:9a:5a:fe:f2:6c: 73:d7:40:91:40:67:e7:88:75:fd:8e:e3:90:73:70: f5:0a:b9:7a:78:64:1d:1e:d8:13:55:ed:30:c3:98: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E6:17:B0:8C:44:85:BC:B2:E0:1F:20:1C:92:AA:48:4A:22:32:5B X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4e:83:8b:50:c8:85:35:b9:fe:5b:39:98:0e:f4:37:24:17: 85:56:02:74:b0:07:9c:43:8b:07:da:ea:ca:f4:7d:d0:0a:c1: c4:72:74:d9:f0:a8:3c:dc:ec:a7:4b:a4:9f:ea:fd:18:d8:74: 52:1f:07:d9:90:37:6a:70:fb:ab:8f:f7:5f:49:4d:d6:0a:2e: 6b:0e:d0:fb:fa:af:72:dd:1e:95:a2:43:19:62:f6:49:7f:37: 5e:53:46:65:07:65:81:78:6b:ff:d9:34:d9:92:c6:10:ee:80: b5:04:7d:fe:bf:03:81:65:d9:39:4f:32:4d:45:9e:7a:21:cb: 89:c0:d2:e0:26:00:69:b4:33:6d:07:29:89:a0:08:8a:51:e3: 9b:54:93:47:df:58:9a:fc:dc:cf:76:42:31:6c:b5:bd:39:06: 45:0c:84:34:bb:14:97:07:d2:97:63:23:97:b1:23:20:c7:3c: 86:e6:ff:11:4e:cd:ba:59:3d:db:df:c3:11:bf:53:b9:c2:a5: fa:a2:0d:5d:47:db:9f:aa:a9:cf:f4:28:f8:98:ea:c9:02:bc: 2b:47:c2:4f:fa:5a:65:fc:5a:92:12:2b:08:25:37:8d:1f:96: fd:0a:19:99:ef:ae:57:83:6d:c4:76:a0:81:04:c4:7e:43:91: 53:62:de:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz5A3guvElnlT5/kC2W8doMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwODA0MDcwMzAyWhcNMjUwODA1MDcwMzAyWjAzMTEwLwYDVQQD EygzNmU2MTdiMDhjNDQ4NWJjYjJlMDFmMjAxYzkyYWE0ODRhMjIzMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CNUyyxIohXmXw+u4xWr1I+Rfrdl Dq1s3EAOiJNkM3FkSk8jY7DsBLSKF8muzpnQA6rLq5X9OBHZTSX+558dLRN55y/C Oma4FJlcVyCdEex97YkwfWWkRAMGExPdLW35AlFEhA5ro/4+tqNELXMM7JYCW8eG aI4cTXqwp/N6JZheOhCRmJBY7oL+zs0IbEMJmd76SpXhuG/z7/6E27dPWoagm/vz kblC5MCrXim7waO9u6YpDImsG0WYbFMxV63tCT0t8/Hp6KmsmpLL1tclrSwkiwpj aCWSUE3vmlr+8mxz10CRQGfniHX9juOQc3D1Crl6eGQdHtgTVe0ww5gJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbmF7CMRIW8suAfIBySqkhKIjJbMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm06Di1DI hTW5/ls5mA70NyQXhVYCdLAHnEOLB9rqyvR90ArBxHJ02fCoPNzsp0ukn+r9GNh0 Uh8H2ZA3anD7q4/3X0lN1gouaw7Q+/qvct0elaJDGWL2SX83XlNGZQdlgXhr/9k0 2ZLGEO6AtQR9/r8DgWXZOU8yTUWeeiHLicDS4CYAabQzbQcpiaAIilHjm1STR99Y mvzcz3ZCMWy1vTkGRQyENLsUlwfSl2Mjl7EjIMc8hub/EU7Nulk929/DEb9TucKl +qINXUfbn6qpz/Qo+JjqyQK8K0fCT/paZfxakhIrCCU3jR+W/QoZme+uV4NtxHag gQTEfkORU2Legw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:10 2025 by rpki-client