$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: gHoizd2T2uR0zU40+HevTquWgpYCQminlGnG5uKCm3g= Subject key identifier: 3B:50:B2:E3:24:88:4E:B8:D1:AB:B4:4E:70:24:AE:AA:99:49:A1:46 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019A4EF51C7DD3F6C9B958476DFC7406B406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 175A Signing time: Tue 04 Nov 2025 13:01:17 +0000 Manifest this update: Tue 04 Nov 2025 13:01:17 +0000 Manifest next update: Wed 05 Nov 2025 13:01:17 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 44H6reyMjlJh9wXB8StInUQIzhY.roa (hash: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=) 3: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 4: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 5: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: 9sUt2cIU3JkhuaghsP+gC69Y5gK2o34ePJcsG+NwHN4=) 6: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 7: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 8: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 9: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 10: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 11: fbFp30tlds9SoJJaUq5OEp638sk.roa (hash: p5y15eDb7e13qvb9/5WBmJnyQVEEGak4ep0rcaPkAFw=) 12: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) 14: uAswi2cRK_R4XEmz2KryL_bRIvc.roa (hash: lGkmLJGMW98lhszGgEj5yLC0iPASHSud2DBzOk1U8uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:1c:7d:d3:f6:c9:b9:58:47:6d:fc:74:06:b4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Nov 4 13:01:17 2025 GMT Not After : Nov 5 13:01:17 2025 GMT Subject: CN=3b50b2e324884eb8d1abb44e7024aeaa9949a146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:e6:a6:29:d5:b8:55:0b:55:1e:0f:1c:35: 6c:73:13:f8:b3:af:b7:87:fc:94:f2:f2:ff:61:ec: ac:f1:d3:3e:42:e5:e5:69:ff:52:d2:42:3e:cf:e1: 82:fa:1e:b5:8b:cf:be:f7:b3:75:98:81:7f:32:f4: ab:51:f8:f6:71:91:52:0f:c6:f1:47:33:a5:8b:02: ec:cd:3b:98:28:d6:c4:69:ec:3c:8f:0a:30:a7:b9: b8:6e:ba:aa:49:a7:f2:69:c5:8d:60:de:63:84:8b: eb:a8:80:11:ac:f5:9d:81:6c:c2:0a:ae:ca:2b:c4: fb:bf:0c:62:50:3e:dd:28:9f:25:64:39:2a:9d:28: d3:32:67:57:03:c0:77:9f:e5:14:cc:fc:9e:83:25: cb:79:d8:6a:8f:98:d3:20:da:90:63:70:3c:6e:75: 1c:4e:e3:60:f3:fe:00:0b:e3:4d:80:83:72:c5:ba: 96:1f:4d:a4:d7:26:6b:dd:2b:3d:82:9f:c8:ad:ae: 08:04:a0:00:b3:aa:6f:b0:7f:e1:80:19:78:01:36: af:03:92:b5:ef:cb:cf:f1:b6:68:94:3a:69:f8:73: 5d:b0:65:a0:a7:29:e0:90:19:44:c3:c0:f8:c3:38: bf:c1:11:d1:51:66:96:e7:23:56:b2:3c:1d:3c:00: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:B2:E3:24:88:4E:B8:D1:AB:B4:4E:70:24:AE:AA:99:49:A1:46 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d2:af:9c:96:20:c2:c1:6a:8a:a3:59:d1:19:17:0a:97:1a: 94:9a:45:90:34:08:b1:8b:2b:5d:7b:ef:5f:e9:d9:84:45:3f: 34:a4:71:34:be:a0:0e:00:c1:60:45:22:4b:69:57:3b:ae:23: 9f:52:ec:ba:10:ce:fa:86:e7:1c:bf:49:2b:13:43:e3:5f:11: e8:72:79:c7:d0:88:27:e9:ad:aa:5b:e7:ec:c6:a6:82:70:9e: 29:70:a7:0f:8a:aa:03:0b:0e:06:0b:b6:5d:28:c2:40:c8:74: 72:7e:71:c2:ac:f6:1e:06:1d:21:10:cf:c1:61:0f:1e:f6:14: f6:65:1c:1f:e3:56:ef:12:6f:df:dd:19:3b:5e:e8:45:fc:a4: 64:93:5c:3d:41:8a:15:1d:fd:15:d7:cb:1b:c6:98:18:c0:50: 88:44:5f:df:68:c7:14:7f:6c:ea:c4:8f:47:87:d9:33:8e:75: 76:a8:83:c4:db:3a:7a:75:c3:a7:86:1b:5f:dc:c7:d3:6e:9c: 18:97:cd:06:f0:f2:e3:3d:85:f8:fb:5e:ea:71:eb:ba:5b:77: 6a:e7:be:02:38:a4:26:18:56:16:cd:8d:6c:d0:d2:ba:28:a4: 3d:08:10:d7:d2:df:91:64:84:a9:c0:59:5f:09:0c:8b:dd:15: 8d:5e:00:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9Rx90/bJuVhHbfx0BrQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMTA0MTMwMTE3WhcNMjUxMTA1MTMwMTE3WjAzMTEwLwYDVQQD EygzYjUwYjJlMzI0ODg0ZWI4ZDFhYmI0NGU3MDI0YWVhYTk5NDlhMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPDmpinVuFULVR4PHDVscxP4s6+3 h/yU8vL/Yeys8dM+QuXlaf9S0kI+z+GC+h61i8++97N1mIF/MvSrUfj2cZFSD8bx RzOliwLszTuYKNbEaew8jwowp7m4brqqSafyacWNYN5jhIvrqIARrPWdgWzCCq7K K8T7vwxiUD7dKJ8lZDkqnSjTMmdXA8B3n+UUzPyegyXLedhqj5jTINqQY3A8bnUc TuNg8/4AC+NNgINyxbqWH02k1yZr3Ss9gp/Ira4IBKAAs6pvsH/hgBl4ATavA5K1 78vP8bZolDpp+HNdsGWgpyngkBlEw8D4wzi/wRHRUWaW5yNWsjwdPACF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtQsuMkiE640au0TnAkrqqZSaFGMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdKvnJYg wsFqiqNZ0RkXCpcalJpFkDQIsYsrXXvvX+nZhEU/NKRxNL6gDgDBYEUiS2lXO64j n1LsuhDO+obnHL9JKxND418R6HJ5x9CIJ+mtqlvn7MamgnCeKXCnD4qqAwsOBgu2 XSjCQMh0cn5xwqz2HgYdIRDPwWEPHvYU9mUcH+NW7xJv390ZO17oRfykZJNcPUGK FR39FdfLG8aYGMBQiERf32jHFH9s6sSPR4fZM451dqiDxNs6enXDp4YbX9zH026c GJfNBvDy4z2F+Pte6nHrult3aue+AjikJhhWFs2NbNDSuiikPQgQ19LfkWSEqcBZ XwkMi90VjV4ASQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:06:29 2025 by rpki-client