$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: /Xhkzgi5j5E6g5n4BlRYnbaCqYIcCPydLG5LLAEXNuI= Subject key identifier: 7B:5E:E2:0F:61:A2:B6:CE:DD:A5:4D:90:2C:40:7A:50:36:32:53:5E Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019847E464FB28B35028114AFE693D455B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 160A Signing time: Sat 26 Jul 2025 18:00:07 +0000 Manifest this update: Sat 26 Jul 2025 18:00:07 +0000 Manifest next update: Sun 27 Jul 2025 18:00:07 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: UaA8J0kkL1itSvOnfMdJVGZS1vIpY11DS+liyay9Q0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:e4:64:fb:28:b3:50:28:11:4a:fe:69:3d:45:5b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jul 26 18:00:07 2025 GMT Not After : Jul 27 18:00:07 2025 GMT Subject: CN=7b5ee20f61a2b6cedda54d902c407a503632535e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:89:2b:55:b3:4e:7c:51:02:3f:db:d4:47: 37:02:20:12:6f:a4:32:e7:76:a1:f1:e5:04:25:b0: c3:62:63:e4:ef:b0:74:e4:8d:6d:a4:5d:90:85:d7: 6f:a4:a2:2f:77:68:61:64:aa:a2:e5:95:15:89:7e: 66:e6:b9:7d:49:d3:db:cd:53:6f:d0:b6:de:66:f6: 02:52:fc:60:6b:61:12:3a:c6:41:53:31:c7:b0:15: e9:58:d4:f6:d4:82:34:4e:55:fd:a9:cd:01:00:87: 74:23:d9:ea:ae:52:41:6f:6b:b4:d4:64:e7:b1:81: 51:b1:d7:9c:9e:f3:1b:e7:5b:89:1b:78:7b:5b:79: cf:99:90:62:b5:90:1d:f5:a7:69:d2:00:75:20:9a: 09:3a:7b:66:a6:fd:a9:fe:0d:9b:f7:f8:74:f1:1e: 32:18:b8:f2:6b:a5:c9:47:43:61:20:bc:89:05:12: 74:3b:8c:b6:2e:05:07:19:00:89:8c:b7:b6:48:19: f3:da:d0:47:44:08:c2:ea:b7:89:67:8e:ce:ca:8e: 7f:0f:1d:94:0a:64:7a:6c:2b:ae:48:47:21:cc:88: c5:b9:52:cd:01:5c:23:97:37:47:5c:87:68:96:ff: ea:b1:13:72:db:4b:43:c5:d4:06:47:b2:9a:3c:fc: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5E:E2:0F:61:A2:B6:CE:DD:A5:4D:90:2C:40:7A:50:36:32:53:5E X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ca:13:74:3f:44:50:50:64:20:b9:45:e9:65:81:e5:ac:63: 8d:a0:26:99:fa:12:14:c2:47:35:26:59:a8:6e:a2:69:3f:f7: 6e:bf:1e:2c:5c:80:dd:de:a2:0a:ee:40:85:42:19:49:72:f2: 4a:9c:98:53:a5:bc:74:55:59:5e:b3:77:02:1f:da:f3:36:7e: c0:31:fd:50:07:d4:ae:02:ee:75:fd:af:d1:33:c9:57:5b:42: 84:d5:a2:66:10:43:a2:7a:fd:a8:26:98:a9:a9:39:f7:5f:46: 14:fa:a7:2c:50:21:c5:e8:0c:4a:a4:d7:84:96:03:ca:07:aa: a7:8f:a4:4a:fd:d4:65:f7:af:9b:e7:53:ad:b0:a9:5b:a8:e1: 05:9f:fc:a1:fc:8f:87:f8:c2:68:a0:0c:ae:5a:89:6e:75:db: ac:dd:69:3e:2d:ea:5a:59:c6:95:e5:83:97:7b:7d:9d:b8:d5: e5:b4:7e:a8:3f:40:17:81:d6:be:01:29:2c:2b:a5:4b:8e:0c: 86:d0:73:58:ac:d4:3b:be:db:fe:cb:06:b8:52:e3:f1:03:c4: 91:3e:3f:e7:86:1b:52:43:18:b9:f4:be:cd:eb:b7:d8:0e:88: 47:ad:e5:80:9a:c0:d7:e3:ab:c8:ba:b9:4d:26:80:fc:f2:ad: 1d:d6:7e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhH5GT7KLNQKBFK/mk9RVsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNzI2MTgwMDA3WhcNMjUwNzI3MTgwMDA3WjAzMTEwLwYDVQQD Eyg3YjVlZTIwZjYxYTJiNmNlZGRhNTRkOTAyYzQwN2E1MDM2MzI1MzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytWJK1WzTnxRAj/b1Ec3AiASb6Qy 53ah8eUEJbDDYmPk77B05I1tpF2QhddvpKIvd2hhZKqi5ZUViX5m5rl9SdPbzVNv 0LbeZvYCUvxga2ESOsZBUzHHsBXpWNT21II0TlX9qc0BAId0I9nqrlJBb2u01GTn sYFRsdecnvMb51uJG3h7W3nPmZBitZAd9adp0gB1IJoJOntmpv2p/g2b9/h08R4y GLjya6XJR0NhILyJBRJ0O4y2LgUHGQCJjLe2SBnz2tBHRAjC6reJZ47Oyo5/Dx2U CmR6bCuuSEchzIjFuVLNAVwjlzdHXIdolv/qsRNy20tDxdQGR7KaPPyhSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHte4g9horbO3aVNkCxAelA2MlNeMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8oTdD9E UFBkILlF6WWB5axjjaAmmfoSFMJHNSZZqG6iaT/3br8eLFyA3d6iCu5AhUIZSXLy SpyYU6W8dFVZXrN3Ah/a8zZ+wDH9UAfUrgLudf2v0TPJV1tChNWiZhBDonr9qCaY qak5919GFPqnLFAhxegMSqTXhJYDygeqp4+kSv3UZfevm+dTrbCpW6jhBZ/8ofyP h/jCaKAMrlqJbnXbrN1pPi3qWlnGleWDl3t9nbjV5bR+qD9AF4HWvgEpLCulS44M htBzWKzUO77b/ssGuFLj8QPEkT4/54YbUkMYufS+zeu32A6IR63lgJrA1+OryLq5 TSaA/PKtHdZ+Ng== -----END CERTIFICATE-----Generated at Sat Jul 26 20:59:54 2025 by rpki-client