$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: 7VPE1juLHqnUJdNeIapxV6sd44nbc9h0mV9AJEjXPnY= Subject key identifier: 9E:88:F2:44:C3:0E:D7:40:65:44:93:D4:96:F6:AA:37:82:AD:75:3A Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 01987A51EA19EAAE39D6912FFB2208957508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1757 Signing time: Tue 05 Aug 2025 13:00:45 +0000 Manifest this update: Tue 05 Aug 2025 13:00:45 +0000 Manifest next update: Wed 06 Aug 2025 13:00:45 +0000 Files and hashes: 1: 2MknCTAqPrL-JBVm-a7dCcSPR7A.roa (hash: QgeWbSBTUKGBsvwbQgC/fRYVcUxNWpLiMOHrMsaO2LA=) 2: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=) 3: 81KZQ-u5F9g0MOVoHU9ewgY-QXg.roa (hash: 8UjV0Jm7R1QguHBx9y2wyolm/VjFBkdN2Pr8OyUJ+mY=) 4: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (hash: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=) 5: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 6: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 7: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 8: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 9: KpxyohCywKCqC59cVbvb-hk2m1Q.roa (hash: K6acNuE4Oq4jimpCfQM9xEqDM+cg6n/Y23YyHZF46Co=) 10: Mfhs8jmocGTaGuB0fg_x0qnHXQY.roa (hash: P75mvG00MMw6xQyOke8+iOXUOpf6sb8l40ULEZSs1Co=) 11: MkpuHlRFeXINy7SEDa2LV04onKw.roa (hash: X0Zsw3yhNAPz8F6U1Ym4lWPzkmaxW3raaydI0FX0eOA=) 12: RXsHFcWsg8HFbqYTSOpUV55FHFY.roa (hash: Fiu0I04LrIP8oLzI9NfPchAST7oZy3UnOH3R/n5EaUk=) 13: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 14: Uf4S6jWBociDXxw8SA3g3YegGrA.roa (hash: xwZ7G+nvv8rF1WKKEX4QFZTkvUOy9whIagPfLwR41G0=) 15: XJ123o6tZlSfzKNNo89Uqq3cEoc.roa (hash: DDNQsDmpGvCIwHRzgWySzrbyMPFC2+Bkq7hUOsilKCE=) 16: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 17: h_aVeyWAhyIXUAM9oeSx15liAiM.roa (hash: hv39e2N25/bI+YhyIVAOqVFMdikRy2tXVlzLcuRexMM=) 18: jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa (hash: oNa1hwlsmstQ0sAKmsfIRqvEXfj92rgiiikTtvbNxKU=) 19: mXHFh-ebHPX9x5bzfuMwZ7-rpH8.roa (hash: Z2WL4zHjQCEC6HRSGXQoO+lycAn013LlgjAlCDXu1nI=) 20: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 21: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 22: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=) 23: zHEaABL4NVOgmOybvjiAZTo3pXo.roa (hash: ql4hQMsthYpz1h1NR5cn/vlp0w5g7CrcXyqDAYNVzDA=) 24: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: z0nXGhKkGUX2YMWcPZJzCeWOb8WqdU5iaFdQdvY05ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:51:ea:19:ea:ae:39:d6:91:2f:fb:22:08:95:75:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Aug 5 13:00:45 2025 GMT Not After : Aug 6 13:00:45 2025 GMT Subject: CN=9e88f244c30ed740654493d496f6aa3782ad753a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:54:13:3e:62:f8:ba:cf:e7:19:6a:2f:51: bc:c8:50:17:c4:69:b6:9c:8e:72:f9:e1:3a:76:1c: 36:30:af:3b:b0:94:54:71:d5:96:c7:63:f0:04:47: 43:e4:85:f0:52:be:ce:85:5c:a0:2d:5f:b1:b6:08: 82:8a:ef:08:53:40:95:f6:e2:f7:db:56:9e:78:f0: 33:2d:e7:a7:58:32:92:e1:6c:71:db:2b:f6:77:38: ca:9b:38:98:28:5f:4d:92:86:3c:b9:46:d2:e5:bd: 9c:14:8b:b6:4d:92:1f:f9:ce:5b:4e:a1:7c:ba:1b: c7:9a:7b:2c:62:eb:fa:0d:20:44:99:d7:78:fb:12: 20:d8:c5:84:b6:c8:8f:c7:37:d1:a6:74:b3:98:a6: 6f:bd:41:79:6b:f9:c0:43:8c:07:b2:4a:bc:30:c7: 62:c5:5e:05:ef:aa:8f:8e:ac:28:1b:da:3b:d6:2f: 3e:87:7e:19:fd:7c:d1:70:15:ef:ef:bb:10:0c:06: 6f:3d:41:34:03:b2:4c:d4:8d:3d:43:97:04:61:41: bd:f5:0d:77:99:62:69:7d:a4:4c:8a:97:a8:37:14: 18:73:f8:8e:2d:c2:0d:55:27:fd:0a:d7:38:a5:0b: 57:89:b4:88:41:da:1e:6e:46:f3:1f:c3:84:8e:89: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:F2:44:C3:0E:D7:40:65:44:93:D4:96:F6:AA:37:82:AD:75:3A X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6a:9b:6d:75:cb:43:7c:9a:1e:24:93:2d:05:c4:bc:e6:73: 42:be:8e:72:0a:0d:54:82:22:50:15:5a:12:90:ab:94:3c:94: 20:47:a3:95:f3:f6:d5:ac:bb:ca:a7:05:b7:4c:23:48:d3:2f: ee:15:80:ce:d3:60:fa:99:f8:a1:e0:a5:51:de:90:41:74:8a: d0:4b:a9:4a:04:5b:2c:51:39:5e:f5:4d:e3:b3:27:54:a1:b7: d6:ab:8d:06:a7:4f:9a:58:74:64:0f:9d:13:b3:7c:2e:c8:4a: 5b:56:16:57:c6:f8:e2:82:d9:3b:17:86:6e:03:bf:82:7a:7b: f9:e3:08:f2:a7:70:0d:39:c6:d1:79:2c:34:f7:5b:81:d0:0b: c4:11:a0:76:fb:ae:10:40:80:3d:6d:f9:bc:d5:c8:2a:d2:8f: 1f:f7:b5:f2:68:0f:6f:e9:a1:a4:79:40:00:50:47:4d:88:bc: 0d:e5:ca:8f:04:22:a9:84:c0:e0:e0:7a:7a:6b:4f:32:b0:4b: 7f:28:f4:e1:f9:ac:f1:ee:46:56:db:b6:94:43:d7:a1:51:dc: 85:79:5a:15:41:0c:9b:6d:31:54:30:91:2a:f5:e8:68:c4:97: 79:66:b0:0a:3f:8a:91:83:95:fa:77:c2:ec:0e:99:33:46:45: 36:da:26:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6UeoZ6q451pEv+yIIlXUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUwODA1MTMwMDQ1WhcNMjUwODA2MTMwMDQ1WjAzMTEwLwYDVQQD Eyg5ZTg4ZjI0NGMzMGVkNzQwNjU0NDkzZDQ5NmY2YWEzNzgyYWQ3NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv5UEz5i+LrP5xlqL1G8yFAXxGm2 nI5y+eE6dhw2MK87sJRUcdWWx2PwBEdD5IXwUr7OhVygLV+xtgiCiu8IU0CV9uL3 21aeePAzLeenWDKS4Wxx2yv2dzjKmziYKF9NkoY8uUbS5b2cFIu2TZIf+c5bTqF8 uhvHmnssYuv6DSBEmdd4+xIg2MWEtsiPxzfRpnSzmKZvvUF5a/nAQ4wHskq8MMdi xV4F76qPjqwoG9o71i8+h34Z/XzRcBXv77sQDAZvPUE0A7JM1I09Q5cEYUG99Q13 mWJpfaRMipeoNxQYc/iOLcINVSf9Ctc4pQtXibSIQdoebkbzH8OEjokpOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6I8kTDDtdAZUST1Jb2qjeCrXU6MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2qbbXXL Q3yaHiSTLQXEvOZzQr6OcgoNVIIiUBVaEpCrlDyUIEejlfP21ay7yqcFt0wjSNMv 7hWAztNg+pn4oeClUd6QQXSK0EupSgRbLFE5XvVN47MnVKG31quNBqdPmlh0ZA+d E7N8LshKW1YWV8b44oLZOxeGbgO/gnp7+eMI8qdwDTnG0XksNPdbgdALxBGgdvuu EECAPW35vNXIKtKPH/e18mgPb+mhpHlAAFBHTYi8DeXKjwQiqYTA4OB6emtPMrBL fyj04fms8e5GVtu2lEPXoVHchXlaFUEMm20xVDCRKvXoaMSXeWawCj+KkYOV+nfC 7A6ZM0ZFNtomSg== -----END CERTIFICATE-----Generated at Tue Aug 5 16:37:49 2025 by rpki-client