$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: CzHNMfvmqgrfYj4l5ZyZhBU993ctFsPLSbXmUu0wEEk= Subject key identifier: 14:E7:17:29:93:FB:A8:83:97:C9:CF:B5:3B:98:93:B2:FB:CA:8F:CB Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 0198323989B0D79C6713A03B634CB1EDE69D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 131D Signing time: Tue 22 Jul 2025 13:01:28 +0000 Manifest this update: Tue 22 Jul 2025 13:01:28 +0000 Manifest next update: Wed 23 Jul 2025 13:01:28 +0000 Files and hashes: 1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=) 3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 5: OG-40bYrkPCUp0MkYoRVMSu2H1w.roa (hash: UlsUA9l9Kp1TKT4sWqeymuQrXSdCMK1f4iOVuci/KJ4=) 6: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: qAVseQalr73jT7s4nyAb39j44EdmKvsVjkukvv5OVf0=) 8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 10: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) 11: wCTFVOhH1_JXXaKELRZTghNafbE.roa (hash: uIydk4XczljVO9qTa7Z+Ts/JZRVkQzKoeoyTGqvobdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:32:39:89:b0:d7:9c:67:13:a0:3b:63:4c:b1:ed:e6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jul 22 13:01:28 2025 GMT Not After : Jul 23 13:01:28 2025 GMT Subject: CN=14e7172993fba88397c9cfb53b9893b2fbca8fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:18:66:90:35:6f:af:c6:37:3d:33:35:6f: 1a:31:89:81:ab:31:de:8d:61:1f:78:98:f5:57:51: 18:a5:71:f4:45:a1:51:eb:e7:5e:35:8e:18:b1:49: 68:7c:67:b2:ea:1a:7a:0e:8b:a7:04:c8:06:81:6c: dd:80:3b:7f:53:63:04:86:6d:ca:f7:c7:6d:a3:4c: d5:76:0e:91:27:71:c7:db:2f:47:32:48:a8:a2:f7: 50:d0:2d:ff:bf:be:ce:a6:fd:15:8a:a2:4b:95:71: 69:8e:ef:4f:4f:5f:77:a5:16:eb:6d:1c:53:06:49: 88:6d:61:29:8d:ec:3c:d8:62:0b:8e:e6:3b:ae:ce: ee:62:76:e5:9a:92:10:d0:67:18:d9:10:45:be:2b: 6f:de:8d:3f:47:0c:39:a4:af:9a:7c:68:00:73:59: 3b:17:2f:99:c8:4e:44:69:19:03:97:6a:9f:49:9b: 18:93:82:02:13:60:d7:55:0f:b4:57:73:b8:93:4a: 76:b8:a0:b7:ad:98:9f:6a:8f:44:a8:2b:86:39:77: ef:a9:11:36:d0:a3:11:57:ec:bf:c9:4c:09:ff:34: 60:c9:46:03:a1:a5:7a:61:ea:8d:4d:76:2a:c6:27: 38:46:ff:e6:4f:5c:3c:71:d2:15:9e:23:66:ae:6e: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E7:17:29:93:FB:A8:83:97:C9:CF:B5:3B:98:93:B2:FB:CA:8F:CB X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:69:2c:11:09:c1:fc:6f:3c:bc:40:05:ca:47:b2:84:ae:34: 57:6c:d0:c1:13:a5:c9:c0:1b:77:4f:8c:63:0d:75:a1:03:0c: c1:8b:7c:d2:f5:f2:c1:a6:e6:c5:1f:a8:09:3e:d2:48:37:10: f3:59:d3:ee:3f:aa:61:b9:80:64:3c:76:5a:0b:8e:60:e7:61: 03:8e:46:58:18:60:7f:2f:10:1f:92:a3:fb:e4:f5:7d:22:44: 37:bd:c7:0e:c9:53:b3:30:63:87:05:6e:08:20:9e:55:19:3b: c9:f1:1f:6c:42:52:1f:4a:0d:8b:ac:16:ba:0c:d8:8c:68:8b: dc:7d:4d:e5:3e:fa:52:d1:76:c2:98:56:72:d5:d2:1d:2a:ce: de:08:5a:80:5f:71:de:7e:86:5c:83:88:ad:ce:57:12:78:48: 99:59:e8:37:55:94:ce:b7:82:5d:2e:01:9e:16:75:a9:0c:5b: 66:a0:8f:6a:bc:3c:10:ac:0e:83:6c:ac:d2:52:57:fa:4b:6b: 35:a3:b3:6a:a8:a1:51:47:f2:98:97:de:e0:84:8e:48:4c:b0: 6d:14:b5:47:42:c9:e3:2d:ac:d3:01:ab:47:a6:50:e1:cf:61: da:66:fa:48:d8:b3:ca:2c:6a:2b:9e:98:71:f4:e9:1d:1b:73: 99:9d:c6:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgyOYmw15xnE6A7Y0yx7eadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwNzIyMTMwMTI4WhcNMjUwNzIzMTMwMTI4WjAzMTEwLwYDVQQD EygxNGU3MTcyOTkzZmJhODgzOTdjOWNmYjUzYjk4OTNiMmZiY2E4ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs68YZpA1b6/GNz0zNW8aMYmBqzHe jWEfeJj1V1EYpXH0RaFR6+deNY4YsUlofGey6hp6DounBMgGgWzdgDt/U2MEhm3K 98dto0zVdg6RJ3HH2y9HMkioovdQ0C3/v77Opv0ViqJLlXFpju9PT193pRbrbRxT BkmIbWEpjew82GILjuY7rs7uYnblmpIQ0GcY2RBFvitv3o0/Rww5pK+afGgAc1k7 Fy+ZyE5EaRkDl2qfSZsYk4ICE2DXVQ+0V3O4k0p2uKC3rZifao9EqCuGOXfvqRE2 0KMRV+y/yUwJ/zRgyUYDoaV6YeqNTXYqxic4Rv/mT1w8cdIVniNmrm609QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTnFymT+6iDl8nPtTuYk7L7yo/LMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmksEQnB /G88vEAFykeyhK40V2zQwROlycAbd0+MYw11oQMMwYt80vXywabmxR+oCT7SSDcQ 81nT7j+qYbmAZDx2WguOYOdhA45GWBhgfy8QH5Kj++T1fSJEN73HDslTszBjhwVu CCCeVRk7yfEfbEJSH0oNi6wWugzYjGiL3H1N5T76UtF2wphWctXSHSrO3ghagF9x 3n6GXIOIrc5XEnhImVnoN1WUzreCXS4BnhZ1qQxbZqCParw8EKwOg2ys0lJX+ktr NaOzaqihUUfymJfe4ISOSEywbRS1R0LJ4y2s0wGrR6ZQ4c9h2mb6SNizyixqK56Y cfTpHRtzmZ3GhQ== -----END CERTIFICATE-----Generated at Tue Jul 22 21:48:41 2025 by rpki-client