$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: YaKv8000b7e+9wyNTBmh33j+CYeozGlrJg2L9/OwM7Q= Subject key identifier: 37:69:FD:B2:B6:6B:0B:38:35:57:1F:F1:4C:DB:52:F6:1D:00:A7:DF Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019A221B5F1E5B022C95BDE2FEC3F936670A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0F4F Signing time: Sun 26 Oct 2025 20:00:10 +0000 Manifest this update: Sun 26 Oct 2025 20:00:10 +0000 Manifest next update: Mon 27 Oct 2025 20:00:10 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 3: RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa (hash: NRK1tkj307QIWrwEzdrVKBHZ1usXN/uxhPlhLwB47SM=) 4: Sp_AwQEQ502wSAdDoXALwwjuTq0.roa (hash: x3326z+EE69lKq3xqRD9lBhKqDvCEycDJkLt0CfCGyI=) 5: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 6: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 7: Wzt-Ou1QVSJEG5lh6mPjN_ZX0o8.roa (hash: KIeE4BRemOsByP9NZcIanx6wVETopkaYtA+bHc7KopI=) 8: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 9: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: OqHtjA0Sx2HxYQ79b78/7wfRq0fUiIke7wdK+g1qhOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:1b:5f:1e:5b:02:2c:95:bd:e2:fe:c3:f9:36:67:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Oct 26 20:00:10 2025 GMT Not After : Oct 27 20:00:10 2025 GMT Subject: CN=3769fdb2b66b0b3835571ff14cdb52f61d00a7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:f3:a7:c5:9b:d4:cd:51:6f:92:a9:52:70: 7d:fe:14:80:ff:31:5d:57:66:6c:f2:f2:a7:fc:83: d9:d9:14:56:24:ec:3d:64:9f:ea:a2:f7:e2:d8:26: 4a:50:ca:27:ed:c2:a0:b6:97:7d:09:5d:2f:ef:e4: 19:b7:fe:2a:21:89:0e:ac:d6:47:20:70:7d:fa:11: ef:b5:7b:f9:1a:fb:5c:75:59:7e:47:d3:67:3b:89: f1:e5:9d:c5:9a:d0:4b:16:3f:27:70:80:f8:84:b0: 63:0b:67:8c:87:d9:66:12:1e:79:c6:9c:1f:68:63: fd:b4:41:0c:e5:61:76:c3:e6:37:61:f0:5a:90:92: c2:65:44:3c:5b:83:19:e2:f6:ce:46:37:3e:75:fb: 3d:1a:c5:1e:75:79:83:c7:04:8e:ec:c9:48:ad:65: 51:85:29:25:04:69:45:b5:03:e1:13:a8:ac:9e:70: 52:44:37:a1:a2:20:7e:67:31:9f:9b:bb:63:7c:a8: fa:5e:4e:3d:04:7e:d1:ef:3f:ba:dc:39:3c:03:82: f1:1b:ba:6f:6c:90:ce:83:53:80:42:e3:cf:24:9e: 23:95:39:04:6e:63:9c:df:42:07:a3:2b:aa:5d:53: 89:e6:21:57:2d:b6:9b:50:c4:f4:06:cf:21:18:ce: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:69:FD:B2:B6:6B:0B:38:35:57:1F:F1:4C:DB:52:F6:1D:00:A7:DF X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1d:78:02:83:64:db:2f:c2:d2:be:db:b9:df:a9:e8:ed:5f: 07:b7:87:38:9a:23:85:05:ec:d6:4f:86:38:52:c0:a0:84:16: 41:ed:38:24:a7:85:95:f4:36:85:20:d7:e5:b7:51:6b:d5:06: 86:52:b4:c2:69:8e:77:b4:7a:68:52:c1:8a:24:00:2c:08:1a: f8:ed:65:d7:59:86:cd:b1:49:1b:0e:af:f4:1e:fa:4b:6a:e4: 81:65:e9:41:b5:2e:5d:3b:80:a3:e4:67:0b:ef:64:21:91:c4: e0:91:e2:a2:d2:b4:b0:4e:63:2f:20:ad:7b:c2:1d:2d:bd:a1: 94:fb:4a:c7:ae:55:b1:f7:a0:99:e8:3c:e0:90:3c:6c:7c:f4: 55:9c:95:8e:26:a4:b4:da:c0:71:75:81:89:30:82:8b:aa:03: b3:86:cd:65:52:93:ca:50:dc:66:ae:11:1a:4a:45:d4:91:5d: 05:f5:ae:41:47:29:0e:f5:aa:6a:1a:aa:be:12:99:9e:58:02: 9c:40:b0:dc:05:3c:ff:47:63:15:ce:6c:17:85:92:2e:1f:e2: d5:d0:5a:7f:90:af:7c:ea:05:00:10:da:aa:5d:ec:eb:44:98: 56:c8:6c:5c:81:9b:33:b3:26:e5:a1:5b:4a:d7:9a:14:16:02: 43:54:82:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiG18eWwIslb3i/sP5NmcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMDI2MjAwMDEwWhcNMjUxMDI3MjAwMDEwWjAzMTEwLwYDVQQD EygzNzY5ZmRiMmI2NmIwYjM4MzU1NzFmZjE0Y2RiNTJmNjFkMDBhN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntDzp8Wb1M1Rb5KpUnB9/hSA/zFd V2Zs8vKn/IPZ2RRWJOw9ZJ/qovfi2CZKUMon7cKgtpd9CV0v7+QZt/4qIYkOrNZH IHB9+hHvtXv5GvtcdVl+R9NnO4nx5Z3FmtBLFj8ncID4hLBjC2eMh9lmEh55xpwf aGP9tEEM5WF2w+Y3YfBakJLCZUQ8W4MZ4vbORjc+dfs9GsUedXmDxwSO7MlIrWVR hSklBGlFtQPhE6isnnBSRDehoiB+ZzGfm7tjfKj6Xk49BH7R7z+63Dk8A4LxG7pv bJDOg1OAQuPPJJ4jlTkEbmOc30IHoyuqXVOJ5iFXLbabUMT0Bs8hGM59vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdp/bK2aws4NVcf8UzbUvYdAKffMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR14AoNk 2y/C0r7bud+p6O1fB7eHOJojhQXs1k+GOFLAoIQWQe04JKeFlfQ2hSDX5bdRa9UG hlK0wmmOd7R6aFLBiiQALAga+O1l11mGzbFJGw6v9B76S2rkgWXpQbUuXTuAo+Rn C+9kIZHE4JHiotK0sE5jLyCte8IdLb2hlPtKx65Vsfegmeg84JA8bHz0VZyVjiak tNrAcXWBiTCCi6oDs4bNZVKTylDcZq4RGkpF1JFdBfWuQUcpDvWqahqqvhKZnlgC nECw3AU8/0djFc5sF4WSLh/i1dBaf5CvfOoFABDaql3s60SYVshsXIGbM7Mm5aFb SteaFBYCQ1SCAQ== -----END CERTIFICATE-----Generated at Mon Oct 27 04:41:44 2025 by rpki-client