$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: 84985sbtVPISr1iGLDMQAi2zMcYTKESmbX0U0ZcglTg= Subject key identifier: 52:9D:C9:EE:56:6E:C7:BB:75:FF:19:7C:9C:90:D1:E7:45:4E:55:D6 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019A50E3254012D710D104C185135F5020C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 171C Signing time: Tue 04 Nov 2025 22:00:54 +0000 Manifest this update: Tue 04 Nov 2025 22:00:54 +0000 Manifest next update: Wed 05 Nov 2025 22:00:54 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: bHoQ6z06kKps9HHqNDFFmuGb08RJs6nZemCKyuBQTnw=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:e3:25:40:12:d7:10:d1:04:c1:85:13:5f:50:20:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Nov 4 22:00:54 2025 GMT Not After : Nov 5 22:00:54 2025 GMT Subject: CN=529dc9ee566ec7bb75ff197c9c90d1e7454e55d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:fe:1d:ff:95:bc:9b:1b:1a:25:08:b4:22: 39:55:00:3c:5f:76:87:11:21:5f:65:81:2c:8e:0b: d0:91:91:23:63:f0:fc:30:cb:e9:83:9a:50:37:48: 5b:c4:12:74:2a:94:51:0c:70:ec:88:10:2f:2f:de: e6:56:0e:45:8c:58:64:fc:77:e5:f1:03:39:f7:74: 5c:cc:85:0d:8f:e6:6e:69:91:df:97:e8:4d:b5:82: 8a:b7:2d:6b:22:5b:40:ac:f4:9e:5d:81:b8:89:75: 7d:34:55:3b:59:fb:94:5c:a0:a7:32:93:67:8c:4d: c1:29:90:43:8e:99:df:36:32:6c:ed:68:60:64:8b: af:83:ad:d4:00:e3:2d:77:ab:f0:51:7f:bb:bb:32: 59:76:54:ab:db:30:1b:1d:4e:1d:39:20:cd:6d:e9: 1b:de:dc:f8:c3:d6:30:8a:f9:42:cd:0e:f5:52:c1: dd:c4:e0:a7:a8:0e:f2:1e:5e:a0:fa:26:36:fb:60: d2:e7:92:40:35:11:de:ac:7c:5e:8a:b9:b5:70:dc: d3:91:8f:50:6d:39:ec:e7:9b:8f:d2:61:9e:58:ab: 8e:cf:8e:4e:a2:42:4b:a2:90:08:b5:67:97:61:e1: 08:17:ce:9b:48:dd:10:e9:7d:35:52:3c:89:45:74: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9D:C9:EE:56:6E:C7:BB:75:FF:19:7C:9C:90:D1:E7:45:4E:55:D6 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:4b:8f:be:17:a1:35:5b:8c:ef:c8:57:a2:98:ea:6c:c9: 40:6e:7a:33:4d:8b:7c:89:d0:d6:63:90:75:e4:cc:17:1f:52: b7:32:2a:7a:8b:98:80:de:c4:b9:9f:d5:a0:31:88:b4:c6:24: e1:fa:6e:98:ba:34:2d:44:c6:b3:0e:09:83:25:73:15:a0:d1: e6:88:79:25:84:a8:78:77:33:21:90:35:40:4c:95:66:ca:14: f7:13:08:41:78:6e:68:db:12:ee:54:08:40:f5:c9:0d:6e:e2: 3c:c7:de:6e:7c:be:74:30:00:fe:4f:8d:a6:e6:f2:f5:52:d6: 6e:be:bd:35:67:71:66:3a:d3:3d:54:bd:85:1d:13:18:11:64: 77:79:92:95:41:bc:4d:81:8c:f8:20:4d:4f:d5:4e:f4:31:b9: 8c:8c:ce:4b:40:a7:86:a0:dc:00:ae:90:8e:11:b8:db:b9:8f: b5:07:7f:ad:c7:a1:e8:4c:07:73:ff:fa:cb:fd:f9:46:6b:1c: 4d:ba:3c:e3:2b:ce:58:68:fe:fc:4b:6d:62:d2:72:05:4b:ef: c6:2d:8d:b6:11:99:5f:f9:7f:0d:d2:c7:1f:5f:bc:29:32:31: d1:02:45:4a:97:70:56:33:57:41:f2:cb:cc:cf:7f:6d:52:e2: 38:2e:df:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQ4yVAEtcQ0QTBhRNfUCDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMTA0MjIwMDU0WhcNMjUxMTA1MjIwMDU0WjAzMTEwLwYDVQQD Eyg1MjlkYzllZTU2NmVjN2JiNzVmZjE5N2M5YzkwZDFlNzQ1NGU1NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUj+Hf+VvJsbGiUItCI5VQA8X3aH ESFfZYEsjgvQkZEjY/D8MMvpg5pQN0hbxBJ0KpRRDHDsiBAvL97mVg5FjFhk/Hfl 8QM593RczIUNj+ZuaZHfl+hNtYKKty1rIltArPSeXYG4iXV9NFU7WfuUXKCnMpNn jE3BKZBDjpnfNjJs7WhgZIuvg63UAOMtd6vwUX+7uzJZdlSr2zAbHU4dOSDNbekb 3tz4w9YwivlCzQ71UsHdxOCnqA7yHl6g+iY2+2DS55JANRHerHxeirm1cNzTkY9Q bTns55uP0mGeWKuOz45OokJLopAItWeXYeEIF86bSN0Q6X01UjyJRXTUMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKdye5Wbse7df8ZfJyQ0edFTlXWMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpJLj74X oTVbjO/IV6KY6mzJQG56M02LfInQ1mOQdeTMFx9StzIqeouYgN7EuZ/VoDGItMYk 4fpumLo0LUTGsw4JgyVzFaDR5oh5JYSoeHczIZA1QEyVZsoU9xMIQXhuaNsS7lQI QPXJDW7iPMfebny+dDAA/k+Npuby9VLWbr69NWdxZjrTPVS9hR0TGBFkd3mSlUG8 TYGM+CBNT9VO9DG5jIzOS0CnhqDcAK6QjhG427mPtQd/rceh6EwHc//6y/35Rmsc Tbo84yvOWGj+/EttYtJyBUvvxi2NthGZX/l/DdLHH1+8KTIx0QJFSpdwVjNXQfLL zM9/bVLiOC7fIQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:50:45 2025 by rpki-client