$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: F+CiTlCOJAEhEibne9bhatlQyYTjVJIPaoeXQj+0iWQ= Subject key identifier: AE:ED:A4:37:87:72:E2:8D:BE:88:50:F1:49:DE:9C:5C:12:49:D0:4D Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 01982BC947702ED6647CC9E9E8B6215F0DF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0F5F Signing time: Mon 21 Jul 2025 07:01:07 +0000 Manifest this update: Mon 21 Jul 2025 07:01:07 +0000 Manifest next update: Tue 22 Jul 2025 07:01:07 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: 7-yY2XLWHLUd9AuKxH5IHfl175M.roa (hash: zG66GAnwYloqOJJfg6bZ7R9P50YwxEBbTOi0v9cAdF8=) 6: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 7: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 8: XBAXnSmCv5-aVjUmot5ATfiEuxI.roa (hash: 6g9dUj0D+s3CKiQ71bKeZNmrEFu0U89VttCxnqum4+4=) 9: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 10: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: qpPUDfCkLiJp1YbHwY+xmSO4LpZF+xMXBwyzGjknUN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2b:c9:47:70:2e:d6:64:7c:c9:e9:e8:b6:21:5f:0d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jul 21 07:01:07 2025 GMT Not After : Jul 22 07:01:07 2025 GMT Subject: CN=aeeda4378772e28dbe8850f149de9c5c1249d04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:b0:64:c4:62:ab:d2:32:9d:72:af:ab:d8: 80:e5:07:79:03:08:45:0b:72:96:f6:e7:17:7c:87: 0a:bb:bf:f2:b0:b8:56:94:5c:d7:80:66:9e:4c:0a: c9:c5:fd:67:84:da:56:5e:cc:26:13:de:a9:32:a5: a8:4c:f0:a7:e9:05:5f:8e:44:0f:82:05:99:83:47: 91:3e:ad:66:56:75:9a:72:d9:4b:d0:fa:36:be:22: e7:eb:f5:86:4f:17:7d:32:6c:23:5b:91:bf:2a:6a: 25:fe:b0:6a:c6:60:8c:10:f9:a8:82:bd:76:67:af: ac:2a:e1:88:1b:0b:00:26:2d:3c:90:50:6a:56:9c: ec:52:0a:9d:21:50:60:64:db:4d:fc:b0:5c:24:c1: 78:9a:39:14:ce:49:8f:d2:57:d0:18:af:2c:7a:40: 05:27:66:df:5d:ba:06:51:1e:b7:f7:58:0d:a9:62: 3b:5e:d4:9a:37:b9:4f:29:e2:ce:4d:ca:52:5a:20: 76:24:b2:c6:07:27:a7:7c:9b:73:b6:bb:e5:ab:d6: 59:3a:3f:a7:b1:25:57:23:1a:1c:cf:6c:9f:25:34: 15:d9:ae:d2:75:39:2c:db:9a:33:d6:7a:d3:fe:de: 02:e6:ec:ca:f9:f8:17:a5:e2:bd:c4:8e:29:10:17: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:ED:A4:37:87:72:E2:8D:BE:88:50:F1:49:DE:9C:5C:12:49:D0:4D X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f5:71:f7:59:7e:e8:97:a5:ef:04:4d:c8:33:98:d5:59:8b: 19:99:5d:e9:df:41:99:0a:41:3f:e7:db:bb:2e:02:13:93:9e: 50:14:1a:ba:73:a3:cf:37:56:a5:28:09:2e:a6:d4:1b:b9:e7: ff:4b:b4:5e:f0:d0:a9:8c:0e:77:fc:a8:5c:f6:0f:07:b1:b5: bd:23:a4:7f:d6:f2:ad:ad:66:12:66:ae:a5:c6:31:b8:d3:40: a3:8b:8f:85:22:5d:9f:4d:96:83:6a:b9:d7:ec:5e:7d:69:b3: c3:7c:46:ec:07:84:ab:fb:96:ea:e3:69:3b:58:2b:1e:e9:0d: fc:41:af:49:cd:43:ee:7b:53:eb:24:3f:19:b1:e0:4d:49:d9: fc:03:e0:fb:6f:9d:c8:4c:35:af:6b:31:d6:7c:10:80:5d:d6: c8:2a:3f:a1:a4:18:b1:b1:14:83:af:75:26:9e:b1:f7:dc:a7: b5:59:fe:67:82:3e:76:66:60:ef:42:5f:b5:49:28:27:f2:72: d9:26:3a:f7:70:a4:a6:57:95:c4:31:ef:f5:6e:ce:ac:56:b7: 31:14:75:69:c3:6b:b4:22:c6:f6:48:26:d9:d4:ff:ca:be:b3: 6d:44:06:db:03:8b:84:e7:b1:f3:03:f7:0f:23:ff:33:03:2a: de:9e:5c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgryUdwLtZkfMnp6LYhXw31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwNzIxMDcwMTA3WhcNMjUwNzIyMDcwMTA3WjAzMTEwLwYDVQQD EyhhZWVkYTQzNzg3NzJlMjhkYmU4ODUwZjE0OWRlOWM1YzEyNDlkMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eywZMRiq9IynXKvq9iA5Qd5AwhF C3KW9ucXfIcKu7/ysLhWlFzXgGaeTArJxf1nhNpWXswmE96pMqWoTPCn6QVfjkQP ggWZg0eRPq1mVnWactlL0Po2viLn6/WGTxd9MmwjW5G/Kmol/rBqxmCMEPmogr12 Z6+sKuGIGwsAJi08kFBqVpzsUgqdIVBgZNtN/LBcJMF4mjkUzkmP0lfQGK8sekAF J2bfXboGUR6391gNqWI7XtSaN7lPKeLOTcpSWiB2JLLGByenfJtztrvlq9ZZOj+n sSVXIxocz2yfJTQV2a7SdTks25oz1nrT/t4C5uzK+fgXpeK9xI4pEBd5iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7tpDeHcuKNvohQ8UnenFwSSdBNMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPVx91l+ 6Jel7wRNyDOY1VmLGZld6d9BmQpBP+fbuy4CE5OeUBQaunOjzzdWpSgJLqbUG7nn /0u0XvDQqYwOd/yoXPYPB7G1vSOkf9byra1mEmaupcYxuNNAo4uPhSJdn02Wg2q5 1+xefWmzw3xG7AeEq/uW6uNpO1grHukN/EGvSc1D7ntT6yQ/GbHgTUnZ/APg+2+d yEw1r2sx1nwQgF3WyCo/oaQYsbEUg691Jp6x99yntVn+Z4I+dmZg70JftUkoJ/Jy 2SY693CkpleVxDHv9W7OrFa3MRR1acNrtCLG9kgm2dT/yr6zbUQG2wOLhOex8wP3 DyP/MwMq3p5cNQ== -----END CERTIFICATE-----Generated at Mon Jul 21 14:18:41 2025 by rpki-client