$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: 6GQpABeKovz43ODQLtW7MMj4aT+6AlnWuj6vfivjoAg= Subject key identifier: 3C:D8:0E:66:77:41:88:90:06:8B:CA:0F:BD:5E:08:D9:B4:EC:87:C9 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 01982859E49BC5CFB2D28DCB349B66A16959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 094A Signing time: Sun 20 Jul 2025 15:00:36 +0000 Manifest this update: Sun 20 Jul 2025 15:00:36 +0000 Manifest next update: Mon 21 Jul 2025 15:00:36 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 2pvIQqdrnc-BOV2vOiV82aU9KnE.roa (hash: JAA8g6YNbUGTGs3DmgxNRM+sH++rPd6SoVFBQv/ksXw=) 4: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 5: 9-Lq9NSY6nMi32xtrHchy0u9eLo.roa (hash: Z9AqNkkBI9qUeSw20awtQHkRxTjGqDrKUrCkhNF8va8=) 6: AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa (hash: MeOMNj8M3otSolym8ILgKTUapqaRLBLDFhuT2M87Jfs=) 7: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 8: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 9: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 10: T9T4J6edlfy_i5-slOG4aV_QdIQ.roa (hash: eu2IweeoPyVHQt7dr15SgVjejr4+xNgXU9dFpcwWirI=) 11: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 12: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 13: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: JAci4+Lt87X2kg2QslFPO4oQ6oAAPwSO2Cc0M59z0zM=) 14: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 15: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 16: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 17: j60P2U9ew9b40KT1eQixMF89Kiw.roa (hash: 6QyYZiDRnfs4gi+c7xIeW7neFF2AWa/7UFLNyJVZkkI=) 18: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 19: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:59:e4:9b:c5:cf:b2:d2:8d:cb:34:9b:66:a1:69:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jul 20 15:00:36 2025 GMT Not After : Jul 21 15:00:36 2025 GMT Subject: CN=3cd80e6677418890068bca0fbd5e08d9b4ec87c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:8a:c5:50:d1:8e:92:f8:d0:f8:a7:0b:4e: 6c:67:35:3e:1d:20:e7:26:28:d6:85:42:5f:d5:d1: 9d:ee:3e:26:b3:82:68:3e:59:c1:af:81:b8:3b:b7: de:94:ea:d9:7b:75:54:9b:d7:d4:e5:c8:55:36:d2: 86:28:80:a4:f6:db:e9:22:d9:1f:01:92:4a:9a:d9: ef:6a:7c:12:61:50:b8:73:76:7b:9c:9d:ed:ed:41: da:06:61:e1:c1:5a:d7:6f:ea:92:e7:de:bf:33:a0: fe:a2:65:e9:49:8e:7f:b6:0c:5e:83:d7:cc:e7:45: 9e:53:dc:2e:f9:33:d9:ca:b6:63:66:c4:ce:2f:b7: 69:14:82:66:c0:ed:7b:98:c9:91:84:be:55:21:77: 08:87:1e:74:98:24:81:a9:af:22:bc:8f:65:85:39: 39:c7:7b:b7:a9:c0:78:e2:17:c0:9c:18:c6:76:f3: e9:59:83:d0:68:de:5a:34:5c:75:cf:8f:f5:54:57: 13:e9:a0:a8:9a:d3:48:72:a4:97:53:05:56:fe:a7: 05:f5:17:ab:fc:45:cc:81:78:0d:c0:f5:02:94:3e: 85:28:be:e2:51:65:05:0b:66:5e:ef:a8:b5:34:10: 9f:f2:a5:cf:2c:c8:f4:18:16:46:40:f1:a9:3f:13: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:0E:66:77:41:88:90:06:8B:CA:0F:BD:5E:08:D9:B4:EC:87:C9 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e8:ec:43:96:17:4f:82:27:b2:7b:78:0a:82:db:36:aa:a9: 9d:8f:23:c5:88:de:52:4d:be:fb:73:19:e3:70:c8:91:a4:2b: 28:9f:84:7f:3b:79:5e:50:ab:8c:25:5d:c6:da:32:2e:75:34: 59:5a:b8:6d:3a:09:f0:66:d7:3d:4a:8b:00:ab:45:e0:6e:78: 18:cd:ea:b1:20:d6:05:ed:13:44:81:77:32:ff:db:2a:ed:bb: 37:d4:b8:51:ce:85:f8:39:24:5e:ff:9a:e1:3d:31:88:27:32: 84:cb:49:4e:15:7a:69:1c:72:0b:fc:79:5b:59:72:4f:e5:51: a2:f4:36:a8:5a:10:27:17:01:22:69:f0:e9:0a:28:1c:bb:34: 53:e4:54:55:1b:71:10:95:c9:cf:b4:83:d3:24:68:a7:14:43: 7e:19:d2:10:f7:ef:d9:e5:c9:3c:54:d4:be:db:82:31:a5:e6: a4:fe:e3:8e:9d:59:c3:e5:63:6d:06:74:46:29:f2:b4:18:12: ec:e8:31:f5:7f:69:b2:05:ff:ea:76:1b:0e:0d:af:fb:94:91: 89:cc:66:c1:62:af:61:14:8c:38:08:3d:d3:c7:ec:3c:ec:53: fd:cf:4d:e7:7e:3e:04:68:e4:1f:9a:8c:3b:9b:9d:de:09:b9: ac:bb:c2:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgoWeSbxc+y0o3LNJtmoWlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUwNzIwMTUwMDM2WhcNMjUwNzIxMTUwMDM2WjAzMTEwLwYDVQQD EygzY2Q4MGU2Njc3NDE4ODkwMDY4YmNhMGZiZDVlMDhkOWI0ZWM4N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoriKxVDRjpL40PinC05sZzU+HSDn JijWhUJf1dGd7j4ms4JoPlnBr4G4O7felOrZe3VUm9fU5chVNtKGKICk9tvpItkf AZJKmtnvanwSYVC4c3Z7nJ3t7UHaBmHhwVrXb+qS596/M6D+omXpSY5/tgxeg9fM 50WeU9wu+TPZyrZjZsTOL7dpFIJmwO17mMmRhL5VIXcIhx50mCSBqa8ivI9lhTk5 x3u3qcB44hfAnBjGdvPpWYPQaN5aNFx1z4/1VFcT6aComtNIcqSXUwVW/qcF9Rer /EXMgXgNwPUClD6FKL7iUWUFC2Ze76i1NBCf8qXPLMj0GBZGQPGpPxMAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzYDmZ3QYiQBovKD71eCNm07IfJMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOjsQ5YX T4Insnt4CoLbNqqpnY8jxYjeUk2++3MZ43DIkaQrKJ+Efzt5XlCrjCVdxtoyLnU0 WVq4bToJ8GbXPUqLAKtF4G54GM3qsSDWBe0TRIF3Mv/bKu27N9S4Uc6F+DkkXv+a 4T0xiCcyhMtJThV6aRxyC/x5W1lyT+VRovQ2qFoQJxcBImnw6QooHLs0U+RUVRtx EJXJz7SD0yRopxRDfhnSEPfv2eXJPFTUvtuCMaXmpP7jjp1Zw+VjbQZ0RinytBgS 7Ogx9X9psgX/6nYbDg2v+5SRicxmwWKvYRSMOAg908fsPOxT/c9N534+BGjkH5qM O5ud3gm5rLvCdw== -----END CERTIFICATE-----Generated at Sun Jul 20 16:26:03 2025 by rpki-client