$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: +cUoP5z0iSOqFd+DHMyPw9qctJFxoOb1eSwStBiqt88= Subject key identifier: EC:44:8E:E2:0B:6F:CC:FF:F9:3A:BA:50:D3:1F:A0:13:66:03:28:3F Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019A4E18DC3C45CEE215191D9B09100DA60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0995 Signing time: Tue 04 Nov 2025 09:00:43 +0000 Manifest this update: Tue 04 Nov 2025 09:00:43 +0000 Manifest next update: Wed 05 Nov 2025 09:00:43 +0000 Files and hashes: 1: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (hash: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=) 2: 1-O322bBLVOWQDNMjFywrUKIxIw0.roa (hash: 7vlxbPUiv3Std38MYSGtKLa+JRa87TkvQmUti3lj/M0=) 3: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (hash: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=) 4: 2dZgvqLVnr3L7YBNwa-dmAKuNeI.roa (hash: x4ULifAZk0DVtPg0u1emvRD3DI0t8YVOlw3nhG2CXgs=) 5: 49CKyADgLLIvTuESaHIzqHu2gtg.roa (hash: 5CuCUUa8X7/ocW7RyLEv8Vb6VI17HgQju5mFySfuyAs=) 6: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (hash: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=) 7: E2CsRwz9g826xgce9UMdi-jpNc0.roa (hash: p8vKwGNWyPepiaRRxHDNJ9XMoMoNlWP3l1RLiZkb2+U=) 8: Gs6wyM63OMnbKZMOf0cda_N7OHI.roa (hash: klxL/qsoExOmtoi4MkmdkNuAIFKSpx+D0u3x1SSJEX0=) 9: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (hash: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=) 10: M_Vi73CFA0pYsLc_tnhRMlqnyzw.roa (hash: Sa1IToWhunFsh7PNrbHTSOaXwck3hxZREJV3TqwmoFA=) 11: NfFWK6CE2t9Pa-x8zwAV9BuwlEI.roa (hash: YfoMWCybmpdOuYSX8n89Rg3jlFAY6S7JvtkdJ5G+mxc=) 12: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (hash: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=) 13: VZZ9WawBePhv4LDIZfO_F9oGyz0.roa (hash: tpSdt2I+RDE+fPAieXAjll9NyOZ/5yWRInrrSwy0o3Y=) 14: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: IQJz2fBHdYTs/Je10grpk1sCBYGbNXRKyhSwgJ69mHs=) 15: dGULqhrcL_ANSs7BLhleecesMvA.roa (hash: eOOIkAUS4EOg9hUCyRisXwLNCWdAEMdVK4NcFcmfEBA=) 16: el3s5FU97XWZHwIp4vnzG1ZyhVA.roa (hash: Un8MbL+EOz96ZIqKNXFdGfjM2fM+efAGzm2lPyUt4cY=) 17: hTvlytGQdE4bMSxFpu4pwOqOzAs.roa (hash: sjwfg5+KO0tm6ztHfkhFPbdkaAWRxRv1HZmf8qkebNc=) 18: hUld0bztgVsjCx1wOfJFp5IoOW8.roa (hash: yhAFJhhqEely7Z+gYD2UjZa+MFUNj+TLxyxBcw9l33Y=) 19: lpP2NtJrOsnyJY4GK-9DeCM-P_Q.roa (hash: CsUk7QdVZqmzvlB30KB4KWvPaPIZZBhOOH3ZXiNwIvg=) 20: podfBbvblbujwJeMWZwGbU0sPNA.roa (hash: +aCb+Gg3Ip7BjJ/sgR8dzhKxDrlUXm7AtkYxnTfteRk=) 21: yhkS5lsjYYscgr4foRJtRjpwYWM.roa (hash: iY9LNop7X5Mq1+wEqI5l+HA0vGg7zxCKH5e1YxqKboA=) 22: zWfpDcDGP8ZBOnbHTD2rBjXz78M.roa (hash: kQIUbN3JJr8uLsYWLB80RGyd2JN8/nPj/Xb7OpSz18k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:dc:3c:45:ce:e2:15:19:1d:9b:09:10:0d:a6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Nov 4 09:00:43 2025 GMT Not After : Nov 5 09:00:43 2025 GMT Subject: CN=ec448ee20b6fccfff93aba50d31fa0136603283f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:8b:22:25:66:a4:a3:57:ec:ce:e6:6c:9c: 59:98:70:6a:d1:f1:95:a9:c9:09:a6:7c:4d:4f:3b: 00:1e:7c:3a:a6:b9:47:aa:ea:9f:77:da:d7:b4:13: 75:7a:cb:4f:bf:5f:87:51:51:38:ca:4c:50:02:be: bf:82:b7:5b:e9:68:07:63:d6:4a:11:a8:78:94:03: b1:b3:b7:f9:8b:48:e6:af:ab:f8:e8:a2:28:f6:55: 4e:7a:2a:e8:0d:42:50:8d:af:c1:2b:71:b4:5d:8e: a9:53:0d:50:e1:f8:bf:3d:58:08:98:8a:b0:d9:e1: 12:df:cd:55:46:d7:6e:40:45:8f:2f:3b:59:0b:23: b3:b1:06:b8:90:c9:8e:ae:b1:91:e7:12:9c:d9:87: d8:3b:44:5e:5c:de:fc:33:c2:e9:75:fb:8b:a4:53: b1:8e:90:49:de:ea:03:7a:e6:13:20:d5:e5:f1:15: ad:51:62:c9:20:31:06:a7:fd:03:ee:64:85:e7:24: d6:74:b5:ab:76:79:46:d8:3d:4f:8d:40:30:09:1a: 7c:76:40:bd:5e:b9:65:e1:8b:26:64:8f:b6:d6:17: 8a:fe:0e:c7:71:57:bf:21:7e:21:44:62:e5:f0:5f: f9:97:28:47:5d:7a:fa:ef:66:26:75:ad:86:c1:3d: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:44:8E:E2:0B:6F:CC:FF:F9:3A:BA:50:D3:1F:A0:13:66:03:28:3F X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7f:d3:77:e0:de:5f:05:f5:d9:60:19:2d:55:48:35:c9:ff: a1:38:d0:e5:ec:7d:16:ec:6a:6f:77:35:56:72:be:6d:d5:34: 77:68:53:31:e4:74:0f:ee:4f:cc:25:bc:79:11:54:45:c2:ed: eb:76:96:01:df:f5:20:b8:0a:74:3d:32:23:48:9e:1f:a3:8e: 52:f4:3a:32:5d:cb:89:bc:36:46:14:38:b0:a1:4e:1b:7f:38: 49:92:45:2f:80:80:ad:6a:eb:b6:22:ae:17:e9:c6:ea:2a:40: 70:55:e1:a3:c8:93:73:8d:2d:38:0f:32:7e:83:22:d2:17:66: 0d:32:87:e2:9b:67:3a:7a:f5:f4:8a:40:a6:73:10:9b:da:52: 67:df:9b:af:66:aa:7a:55:da:f7:a8:3a:c1:16:6b:36:24:5a: cb:09:a2:db:04:4d:5d:6d:f6:0b:68:93:5b:12:b6:6a:ed:70: 76:c4:f7:a2:db:fa:71:7d:3f:73:07:54:01:f6:ec:2a:b5:c5: 2b:11:61:eb:0c:ff:75:86:f8:97:71:55:eb:3f:6b:0d:84:0b: 8b:02:d6:0e:16:12:c6:4f:1a:cb:fe:a7:8b:81:60:5c:00:2c: 12:5b:60:54:9f:a3:07:ae:ab:72:10:f6:83:d9:cf:1b:39:88: 09:2e:fd:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGNw8Rc7iFRkdmwkQDaYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjUxMTA0MDkwMDQzWhcNMjUxMTA1MDkwMDQzWjAzMTEwLwYDVQQD EyhlYzQ0OGVlMjBiNmZjY2ZmZjkzYWJhNTBkMzFmYTAxMzY2MDMyODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgaLIiVmpKNX7M7mbJxZmHBq0fGV qckJpnxNTzsAHnw6prlHquqfd9rXtBN1estPv1+HUVE4ykxQAr6/grdb6WgHY9ZK Eah4lAOxs7f5i0jmr6v46KIo9lVOeiroDUJQja/BK3G0XY6pUw1Q4fi/PVgImIqw 2eES381VRtduQEWPLztZCyOzsQa4kMmOrrGR5xKc2YfYO0ReXN78M8LpdfuLpFOx jpBJ3uoDeuYTINXl8RWtUWLJIDEGp/0D7mSF5yTWdLWrdnlG2D1PjUAwCRp8dkC9 Xrll4YsmZI+21heK/g7HcVe/IX4hRGLl8F/5lyhHXXr672Ymda2GwT0I/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxEjuILb8z/+Tq6UNMfoBNmAyg/MB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuX/Td+De XwX12WAZLVVINcn/oTjQ5ex9Fuxqb3c1VnK+bdU0d2hTMeR0D+5PzCW8eRFURcLt 63aWAd/1ILgKdD0yI0ieH6OOUvQ6Ml3Libw2RhQ4sKFOG384SZJFL4CArWrrtiKu F+nG6ipAcFXho8iTc40tOA8yfoMi0hdmDTKH4ptnOnr19IpApnMQm9pSZ9+br2aq elXa96g6wRZrNiRaywmi2wRNXW32C2iTWxK2au1wdsT3otv6cX0/cwdUAfbsKrXF KxFh6wz/dYb4l3FV6z9rDYQLiwLWDhYSxk8ay/6ni4FgXAAsEltgVJ+jB66rchD2 g9nPGzmICS790g== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:41 2025 by rpki-client