$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: j9pGCrvH2QDYLFwDb9RR2zklDtVfBmb0IcXmOwdyA38= Subject key identifier: 4B:FF:B6:97:6B:17:05:71:68:C9:C2:9F:16:3E:69:EF:55:E5:AE:47 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 01984852AE938BA26159D6BD5A82A36B6CA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0E55 Signing time: Sat 26 Jul 2025 20:00:34 +0000 Manifest this update: Sat 26 Jul 2025 20:00:34 +0000 Manifest next update: Sun 27 Jul 2025 20:00:34 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: 3nF/0IfHq4mLEdCHC6T48L2hlbMCMpgyy/S0kveUWO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:52:ae:93:8b:a2:61:59:d6:bd:5a:82:a3:6b:6c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jul 26 20:00:34 2025 GMT Not After : Jul 27 20:00:34 2025 GMT Subject: CN=4bffb6976b17057168c9c29f163e69ef55e5ae47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:73:0e:25:94:ff:8b:53:18:84:29:c5:21: e4:47:56:2f:34:95:36:9f:ed:3c:4e:89:78:37:5f: f6:ba:a0:e3:f7:e7:2d:6b:26:6a:b6:ed:a3:4c:90: 1e:9b:ea:b6:7d:28:c0:86:e6:84:99:8d:4e:a0:d3: 8c:fe:c2:d4:61:69:94:16:a3:a9:80:5d:bb:42:d4: 54:79:1f:24:88:d2:74:46:97:62:fa:bf:fe:71:69: 0b:83:34:bf:23:1f:4d:ba:cc:bd:9b:b0:9b:f5:da: a7:a0:88:c7:ce:d8:58:9f:a2:4d:71:31:ac:78:fc: c8:e5:62:eb:d7:1e:42:0b:57:4c:fa:98:5b:bc:cc: c9:cd:6b:12:cc:4b:18:71:46:62:44:07:0a:a9:8c: 0c:30:4d:07:e7:f1:cd:72:67:20:3d:cd:ac:e3:ad: 43:7e:14:ab:9b:2a:09:4d:a0:4e:b2:5e:53:69:31: 13:f5:05:fc:17:b7:f9:b0:5e:58:25:1b:52:c6:b5: 5c:c2:f2:a5:98:1b:07:33:40:cd:03:3e:d0:83:4e: 37:82:a6:46:01:3f:1d:ef:68:cf:47:76:be:27:4f: 4f:42:fa:06:3a:e5:88:8a:5e:d2:9c:9d:8f:6b:9c: 3c:2d:8b:a6:08:0a:09:86:d8:f0:ab:cc:8f:43:49: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FF:B6:97:6B:17:05:71:68:C9:C2:9F:16:3E:69:EF:55:E5:AE:47 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:9b:fb:34:52:13:c0:b9:81:6a:63:56:2d:92:21:be:62: 5b:c5:0f:80:b3:58:28:a0:0a:cd:88:59:4f:96:82:da:78:02: cb:63:d2:a5:b2:1b:94:44:02:11:64:76:7d:bd:43:12:cd:99: 30:34:54:79:ee:a6:75:92:9f:2f:51:7c:cc:92:7d:37:be:b0: 4e:da:ac:9d:5d:83:5a:88:85:6e:c6:6b:05:52:08:48:82:b2: a9:30:6e:97:4a:1b:84:91:15:65:e2:47:b7:1c:72:d5:29:76: e5:69:9f:a6:24:20:94:c5:6a:6f:63:4c:41:f6:4c:5c:81:d6: 53:f8:18:47:4b:2d:f3:31:da:58:7e:18:91:81:d2:f5:75:66: 90:bc:bf:7e:90:19:86:db:90:06:c9:3e:e4:57:d9:dc:2e:11: 51:da:3a:e6:16:86:a7:63:2c:60:be:f0:12:a8:c0:b8:17:68: 33:94:4e:3d:64:df:ed:c1:82:df:d4:56:df:b3:19:d9:76:13: 2f:e2:43:49:e1:c9:76:5c:fa:c2:ec:2b:b0:5f:2a:90:33:02: bf:b6:9d:74:21:a1:2b:69:8f:36:5e:03:b2:17:82:9a:94:10: a5:84:0d:4f:76:12:88:83:0e:76:47:c4:19:69:bd:e4:e3:1c: 86:70:7a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIUq6Ti6JhWda9WoKja2ykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwNzI2MjAwMDM0WhcNMjUwNzI3MjAwMDM0WjAzMTEwLwYDVQQD Eyg0YmZmYjY5NzZiMTcwNTcxNjhjOWMyOWYxNjNlNjllZjU1ZTVhZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqVzDiWU/4tTGIQpxSHkR1YvNJU2 n+08Tol4N1/2uqDj9+ctayZqtu2jTJAem+q2fSjAhuaEmY1OoNOM/sLUYWmUFqOp gF27QtRUeR8kiNJ0Rpdi+r/+cWkLgzS/Ix9Nusy9m7Cb9dqnoIjHzthYn6JNcTGs ePzI5WLr1x5CC1dM+phbvMzJzWsSzEsYcUZiRAcKqYwMME0H5/HNcmcgPc2s461D fhSrmyoJTaBOsl5TaTET9QX8F7f5sF5YJRtSxrVcwvKlmBsHM0DNAz7Qg043gqZG AT8d72jPR3a+J09PQvoGOuWIil7SnJ2Pa5w8LYumCAoJhtjwq8yPQ0kEGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv/tpdrFwVxaMnCnxY+ae9V5a5HMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh6b+zRS E8C5gWpjVi2SIb5iW8UPgLNYKKAKzYhZT5aC2ngCy2PSpbIblEQCEWR2fb1DEs2Z MDRUee6mdZKfL1F8zJJ9N76wTtqsnV2DWoiFbsZrBVIISIKyqTBul0obhJEVZeJH txxy1Sl25WmfpiQglMVqb2NMQfZMXIHWU/gYR0st8zHaWH4YkYHS9XVmkLy/fpAZ htuQBsk+5FfZ3C4RUdo65haGp2MsYL7wEqjAuBdoM5ROPWTf7cGC39RW37MZ2XYT L+JDSeHJdlz6wuwrsF8qkDMCv7addCGhK2mPNl4DsheCmpQQpYQNT3YSiIMOdkfE GWm95OMchnB6Nw== -----END CERTIFICATE-----Generated at Sun Jul 27 02:29:39 2025 by rpki-client