$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: VdwxVrSzB6L0ZtpceWW80eFZwSG43B0fkhOg3H+DFms= Subject key identifier: 81:5A:9C:32:FC:B3:93:31:6A:2C:7D:B3:23:D0:B6:6F:8F:DD:36:91 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019768BC5E5E27CB725F7535615AF63AABC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 159A Signing time: Fri 13 Jun 2025 10:01:04 +0000 Manifest this update: Fri 13 Jun 2025 10:01:04 +0000 Manifest next update: Sat 14 Jun 2025 10:01:04 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: D3HyRH4gt8I3AVc_11aVtLDHXXs.roa (hash: LthCRx/kLSoC/Gm2fuPju175Bc+44KoK1FGNtCDpOFQ=) 4: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 5: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 6: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 7: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: n3VwU7V7nbKSYqubEQIOKFIn5IduwxJhKuh/wgbCs34=) 9: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 10: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 11: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bc:5e:5e:27:cb:72:5f:75:35:61:5a:f6:3a:ab:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jun 13 10:01:04 2025 GMT Not After : Jun 14 10:01:04 2025 GMT Subject: CN=815a9c32fcb393316a2c7db323d0b66f8fdd3691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:41:09:2b:31:cf:33:e9:ff:06:10:78:a9: 43:7e:5c:f3:8e:a5:81:f2:42:01:ed:cd:07:0b:3a: 4e:81:1f:68:cb:8e:f9:2c:1a:dd:c0:62:67:42:0e: 42:70:1c:94:15:3d:e9:44:4f:32:6c:c5:30:0e:a7: 27:c7:00:db:fe:69:33:8b:00:ae:58:e7:22:45:59: 68:6f:e8:17:0d:ba:15:47:0c:4c:3c:90:6e:df:81: 60:72:a7:f5:48:02:d2:cc:64:e8:3e:86:b1:1f:2f: 16:e9:46:37:ac:d3:2c:e6:b8:b7:1d:f3:fe:60:1f: be:f6:80:b3:4f:8e:fc:30:f2:e9:3a:74:b0:f8:df: a0:64:1f:60:06:60:04:34:65:3b:80:b8:57:39:1c: 6d:35:68:d4:83:52:6e:b5:14:9b:cf:64:99:8b:9a: 6c:ac:e1:e8:72:c6:5a:d5:19:f7:55:9a:2b:bd:01: e1:a9:46:33:9e:82:99:19:c8:e0:34:c6:99:4a:0f: 55:28:0d:a0:cb:82:07:67:5e:25:8c:3a:88:65:ae: 67:ae:f5:0c:2e:59:9b:6a:03:f7:95:39:62:e4:2a: 54:ac:62:1a:03:5c:10:ce:c3:e5:7d:49:cf:ef:75: 1b:ad:b8:9c:68:47:c1:48:9e:52:af:a7:ae:2f:7a: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5A:9C:32:FC:B3:93:31:6A:2C:7D:B3:23:D0:B6:6F:8F:DD:36:91 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:22:1e:db:37:00:e7:f5:c5:a0:cf:6b:e4:36:b3:40:41:59: 5f:33:f2:72:4b:ae:2b:f9:64:b1:eb:77:2b:6c:64:c3:68:95: cb:17:54:73:11:bd:47:1e:01:53:f6:2f:b6:83:3e:68:9c:d2: 17:76:04:8b:2f:ea:9a:37:f9:8e:6e:ae:9f:0a:4d:10:5c:34: 6c:ec:df:b3:7a:04:94:5b:59:2b:f3:24:5a:ef:7f:f3:5c:84: ef:a6:0a:04:b9:8a:09:67:9d:21:01:2b:d2:d1:10:d9:a9:a1: 4e:f0:23:23:84:46:61:cd:23:35:88:a3:a8:cc:3f:83:b3:0d: 59:bb:e5:bd:14:b3:16:01:15:60:c1:14:d7:3a:bc:af:ea:c6: 09:17:39:11:51:95:41:5f:1d:c8:75:a0:a0:2c:f3:0b:a4:84: bd:dc:41:b1:0c:45:0f:82:d0:c2:f4:85:f0:79:8d:37:0e:94: 45:c7:7d:c3:de:08:c0:f6:9d:6e:7a:d2:c7:ad:91:88:db:d3: 7c:8f:8f:ea:43:c4:1d:f3:63:9c:1c:3e:d0:69:4f:59:f7:b8: 89:9c:aa:a9:93:2d:0c:b1:c8:9e:e0:ca:74:be:69:80:38:16: e5:d0:b8:41:c6:9f:f1:ad:6b:8e:08:f8:33:89:aa:87:12:0e: 5d:e5:f6:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdovF5eJ8tyX3U1YVr2OqvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwNjEzMTAwMTA0WhcNMjUwNjE0MTAwMTA0WjAzMTEwLwYDVQQD Eyg4MTVhOWMzMmZjYjM5MzMxNmEyYzdkYjMyM2QwYjY2ZjhmZGQzNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OxBCSsxzzPp/wYQeKlDflzzjqWB 8kIB7c0HCzpOgR9oy475LBrdwGJnQg5CcByUFT3pRE8ybMUwDqcnxwDb/mkziwCu WOciRVlob+gXDboVRwxMPJBu34Fgcqf1SALSzGToPoaxHy8W6UY3rNMs5ri3HfP+ YB++9oCzT478MPLpOnSw+N+gZB9gBmAENGU7gLhXORxtNWjUg1JutRSbz2SZi5ps rOHocsZa1Rn3VZorvQHhqUYznoKZGcjgNMaZSg9VKA2gy4IHZ14ljDqIZa5nrvUM LlmbagP3lTli5CpUrGIaA1wQzsPlfUnP73UbrbicaEfBSJ5Sr6euL3qHWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFanDL8s5Mxaix9syPQtm+P3TaRMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSIe2zcA 5/XFoM9r5DazQEFZXzPyckuuK/lkset3K2xkw2iVyxdUcxG9Rx4BU/YvtoM+aJzS F3YEiy/qmjf5jm6unwpNEFw0bOzfs3oElFtZK/MkWu9/81yE76YKBLmKCWedIQEr 0tEQ2amhTvAjI4RGYc0jNYijqMw/g7MNWbvlvRSzFgEVYMEU1zq8r+rGCRc5EVGV QV8dyHWgoCzzC6SEvdxBsQxFD4LQwvSF8HmNNw6URcd9w94IwPadbnrSx62RiNvT fI+P6kPEHfNjnBw+0GlPWfe4iZyqqZMtDLHInuDKdL5pgDgW5dC4Qcaf8a1rjgj4 M4mqhxIOXeX2/Q== -----END CERTIFICATE-----Generated at Fri Jun 13 19:05:09 2025 by rpki-client