$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: MM5HSkwMEwFMXsVRhZ7fpoaRRwLfBCFR/Fj44h6K0l4= Subject key identifier: CB:B6:63:5B:FD:3A:27:1A:5F:96:ED:F1:1B:FA:28:4B:58:DA:07:43 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019872CFCBFEE181365BEBDAE7E87E896BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1662 Signing time: Mon 04 Aug 2025 02:01:17 +0000 Manifest this update: Mon 04 Aug 2025 02:01:17 +0000 Manifest next update: Tue 05 Aug 2025 02:01:17 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 1on02s47SmwkekNYRvvqPMKKs1s.roa (hash: PVU8TQ1XVWLL41acJ/qMMaJx5HekZ2LfJTCmhfZN/cY=) 3: EfIYNiM608dw9De4gr0QoLFH8AU.roa (hash: 2TaK0wfXNwHYOVXohwQvDaJR6X0XqbjEaNjkMp4hvKo=) 4: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 5: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 6: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 7: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: Iakhdgmg8bmeueayzQJuEA61HCPzNUzBCgODUUT5Ydc=) 8: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 9: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 10: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 11: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 12: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 13: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 14: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:cb:fe:e1:81:36:5b:eb:da:e7:e8:7e:89:6b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Aug 4 02:01:17 2025 GMT Not After : Aug 5 02:01:17 2025 GMT Subject: CN=cbb6635bfd3a271a5f96edf11bfa284b58da0743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:f7:1a:f0:60:e9:b8:76:18:15:7d:8f:18: b4:d2:b8:35:3c:ba:c2:c8:ab:31:80:db:88:06:77: b5:b1:03:6a:d3:8a:06:59:0f:c5:3b:38:8e:7f:f7: ac:c1:a7:a8:b2:92:81:7e:8a:9f:d3:38:02:4f:d4: 3d:08:2f:92:8a:66:18:f8:a9:21:36:cf:3b:0d:fa: 8a:8f:46:fb:21:e4:eb:d4:98:5c:9c:20:f6:76:31: 75:38:08:b8:fd:46:22:20:5d:57:ab:a4:ee:8b:7e: 06:2b:14:24:9d:ab:f8:ae:55:2c:df:44:51:86:4b: 0f:8e:0a:45:1e:df:fd:4a:3b:19:99:6a:a8:0f:6b: 9a:f7:56:c4:04:e4:9c:fb:2b:81:64:91:37:d8:25: bd:df:d3:f5:bb:22:3f:da:93:f5:59:e0:5e:a1:34: e9:27:01:6f:80:84:8a:b3:e3:b1:da:b5:15:86:c4: 67:63:68:48:e5:71:9e:cb:83:6c:b4:b2:ee:0a:d8: 8e:2a:12:8a:1f:5e:ea:3e:c2:ad:09:9c:3a:07:98: be:72:81:13:a0:d2:d4:fc:d3:63:93:a6:a6:45:60: e4:ec:69:08:3c:5c:be:0f:5e:72:11:e7:7d:04:70: 9f:62:b1:8e:49:13:c7:9f:ab:3e:fa:04:d9:3b:6f: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B6:63:5B:FD:3A:27:1A:5F:96:ED:F1:1B:FA:28:4B:58:DA:07:43 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5c:01:55:7f:b6:8b:7a:ae:76:8b:eb:1b:e7:49:64:d2:1d: ad:de:27:56:30:82:c1:69:a1:d9:b9:b7:e8:04:87:5e:75:f1: fa:87:af:b0:0b:36:a3:0d:8a:ea:7f:ff:15:11:ac:36:f6:67: c0:3b:71:5e:12:ed:54:68:55:bf:78:0b:17:53:ac:49:0d:f1: 8e:ab:e0:fd:39:d7:3f:4b:90:94:b6:47:5d:ab:6b:fe:2a:cd: 73:20:32:42:54:e7:8c:d5:fb:bc:44:19:7a:27:59:b1:ef:96: 40:55:a0:30:09:47:f1:79:76:b7:5d:08:5e:77:3f:6d:f4:a6: eb:51:87:ab:43:39:d0:1b:f9:0f:ed:a0:94:6a:ce:c4:af:bb: 39:06:5c:09:32:3b:0a:23:0a:b4:65:d1:50:00:e5:78:34:27: 1a:1a:56:95:68:c5:22:a8:47:38:8a:60:db:80:8a:2b:89:10: cc:c7:9f:f6:d2:6e:a5:31:9c:79:50:70:c3:b2:43:c7:15:a1: 7e:b8:42:fa:cb:e3:c9:60:4b:f0:37:4f:e1:a4:23:30:c0:28: 29:eb:97:dc:6c:97:56:e4:37:33:a5:e2:cc:70:da:2e:f5:dd: 37:b4:64:e3:2c:94:d1:91:e1:df:56:c3:9d:c1:c6:a2:c5:6f: 66:96:44:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz8v+4YE2W+va5+h+iWviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwODA0MDIwMTE3WhcNMjUwODA1MDIwMTE3WjAzMTEwLwYDVQQD EyhjYmI2NjM1YmZkM2EyNzFhNWY5NmVkZjExYmZhMjg0YjU4ZGEwNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUT3GvBg6bh2GBV9jxi00rg1PLrC yKsxgNuIBne1sQNq04oGWQ/FOziOf/eswaeospKBfoqf0zgCT9Q9CC+SimYY+Kkh Ns87DfqKj0b7IeTr1JhcnCD2djF1OAi4/UYiIF1Xq6Tui34GKxQknav4rlUs30RR hksPjgpFHt/9SjsZmWqoD2ua91bEBOSc+yuBZJE32CW939P1uyI/2pP1WeBeoTTp JwFvgISKs+Ox2rUVhsRnY2hI5XGey4NstLLuCtiOKhKKH17qPsKtCZw6B5i+coET oNLU/NNjk6amRWDk7GkIPFy+D15yEed9BHCfYrGOSRPHn6s++gTZO29e5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu2Y1v9OicaX5bt8Rv6KEtY2gdDMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1wBVX+2 i3qudovrG+dJZNIdrd4nVjCCwWmh2bm36ASHXnXx+oevsAs2ow2K6n//FRGsNvZn wDtxXhLtVGhVv3gLF1OsSQ3xjqvg/TnXP0uQlLZHXatr/irNcyAyQlTnjNX7vEQZ eidZse+WQFWgMAlH8Xl2t10IXnc/bfSm61GHq0M50Bv5D+2glGrOxK+7OQZcCTI7 CiMKtGXRUADleDQnGhpWlWjFIqhHOIpg24CKK4kQzMef9tJupTGceVBww7JDxxWh frhC+svjyWBL8DdP4aQjMMAoKeuX3GyXVuQ3M6XizHDaLvXdN7Rk4yyU0ZHh31bD ncHGosVvZpZEGA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:15:45 2025 by rpki-client