$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: n9tdtGocsHn5cuKIi+lhYTjCgLtRkpRtJrhLlHbw/BM= Subject key identifier: E9:2A:EE:32:49:86:E3:E0:F7:CE:6B:12:00:CB:6A:7A:BD:6B:46:32 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019A4F6268F75AE36CE71C0A57DAD3C03C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1721 Signing time: Tue 04 Nov 2025 15:00:40 +0000 Manifest this update: Tue 04 Nov 2025 15:00:40 +0000 Manifest next update: Wed 05 Nov 2025 15:00:40 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=) 3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: JdbMHR7GiAy+Y2uqthcW3PJvUW6V1oz3GQfPN2dK6gg=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) 11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:68:f7:5a:e3:6c:e7:1c:0a:57:da:d3:c0:3c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Nov 4 15:00:40 2025 GMT Not After : Nov 5 15:00:40 2025 GMT Subject: CN=e92aee324986e3e0f7ce6b1200cb6a7abd6b4632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:62:36:b1:79:8f:4b:79:73:ce:59:c1:24: d4:c6:b9:56:cc:ee:12:22:a7:1a:34:6e:60:5d:06: 82:5b:4f:31:ed:75:17:52:94:af:a3:67:32:83:b8: e7:8a:cd:21:e8:8a:cd:72:1c:3f:26:71:88:f2:7e: 4a:76:fc:11:96:80:96:cd:6f:3b:1a:16:6c:c2:19: f8:f0:68:22:e0:df:7a:a5:37:05:47:6f:dc:dd:bd: 62:24:f7:49:85:5e:a2:e8:cb:45:8e:0c:a8:a3:64: e3:73:c1:a2:3b:cd:c3:18:6a:c0:69:e1:32:bc:da: 3d:a6:e6:a1:50:90:5e:61:7c:80:9e:84:ad:40:7e: bd:e2:d8:5b:7a:c9:2e:85:a6:c1:82:61:e4:13:c8: 52:a1:3d:af:71:8d:49:d2:ba:a0:76:2d:3f:cd:4a: f2:cf:a2:14:11:86:eb:05:84:a4:3c:9f:5d:8b:01: 08:e5:a8:3c:28:a0:38:67:13:36:92:e9:88:f6:61: 9e:68:52:50:4c:b4:06:42:ad:60:61:64:43:79:40: 8f:db:4a:d7:2d:c6:af:12:20:4d:7f:0d:f7:ad:e8: 7a:65:58:3d:43:f4:e3:55:b3:ab:80:cc:ac:a9:dd: f9:80:4a:56:b7:6c:f4:84:c0:34:94:b0:42:06:14: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:EE:32:49:86:E3:E0:F7:CE:6B:12:00:CB:6A:7A:BD:6B:46:32 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:c4:ec:8d:21:82:4a:aa:b4:04:7b:d3:50:00:cd:bf:96: 4b:61:df:3d:37:58:f8:8e:68:15:8d:a5:c0:c5:7e:d3:bd:a8: 5b:60:f9:bf:c3:1a:1d:52:e5:db:1a:48:c7:20:6b:cc:69:27: c1:68:91:4e:92:ca:41:cb:c7:2c:c1:97:3a:10:be:c4:22:ba: 7a:65:60:8c:b9:eb:84:be:d7:d7:dc:2f:c1:87:f6:8a:52:92: f9:82:4d:e9:b8:f8:da:7e:09:95:44:8f:10:42:60:b4:da:67: fa:50:b9:fa:d8:8b:35:56:35:88:8f:59:88:c2:47:0f:3c:4a: d0:bb:01:8b:a6:0f:fb:fb:b0:f9:cf:ca:2e:77:9f:91:fd:3a: c4:e7:1b:cc:96:ce:87:89:f5:14:2e:5b:85:a3:09:d8:28:1c: 28:b4:e4:c6:d4:b6:e3:43:b1:60:c9:06:55:1f:25:dd:de:b2: fc:f1:ff:dc:c0:fc:82:84:de:19:21:1e:8d:26:48:4e:d5:43: a8:0d:c2:0f:3e:71:d3:e6:dc:63:d9:cb:c0:d2:8d:66:ee:66: 4c:08:d9:78:d2:73:82:17:58:29:ab:e5:de:34:48:1b:5c:a1: 83:5c:26:c8:b9:98:da:3f:09:f3:34:1b:a4:04:42:04:f3:c2: e1:3e:36:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYmj3WuNs5xwKV9rTwDxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUxMTA0MTUwMDQwWhcNMjUxMTA1MTUwMDQwWjAzMTEwLwYDVQQD EyhlOTJhZWUzMjQ5ODZlM2UwZjdjZTZiMTIwMGNiNmE3YWJkNmI0NjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EBiNrF5j0t5c85ZwSTUxrlWzO4S IqcaNG5gXQaCW08x7XUXUpSvo2cyg7jnis0h6IrNchw/JnGI8n5KdvwRloCWzW87 GhZswhn48Ggi4N96pTcFR2/c3b1iJPdJhV6i6MtFjgyoo2Tjc8GiO83DGGrAaeEy vNo9puahUJBeYXyAnoStQH694thbeskuhabBgmHkE8hSoT2vcY1J0rqgdi0/zUry z6IUEYbrBYSkPJ9diwEI5ag8KKA4ZxM2kumI9mGeaFJQTLQGQq1gYWRDeUCP20rX LcavEiBNfw33reh6ZVg9Q/TjVbOrgMysqd35gEpWt2z0hMA0lLBCBhS7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkq7jJJhuPg985rEgDLanq9a0YyMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHbE7I0h gkqqtAR701AAzb+WS2HfPTdY+I5oFY2lwMV+072oW2D5v8MaHVLl2xpIxyBrzGkn wWiRTpLKQcvHLMGXOhC+xCK6emVgjLnrhL7X19wvwYf2ilKS+YJN6bj42n4JlUSP EEJgtNpn+lC5+tiLNVY1iI9ZiMJHDzxK0LsBi6YP+/uw+c/KLnefkf06xOcbzJbO h4n1FC5bhaMJ2CgcKLTkxtS240OxYMkGVR8l3d6y/PH/3MD8goTeGSEejSZITtVD qA3CDz5x0+bcY9nLwNKNZu5mTAjZeNJzghdYKavl3jRIG1yhg1wmyLmY2j8J8zQb pARCBPPC4T42yQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:37 2025 by rpki-client