$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: n+eicrbEEoVzT/cFOtB4BUZb4FqaObzolfWsOtJLVQo= Subject key identifier: 1A:DF:CF:AF:BA:63:0C:88:E8:C5:99:26:7C:E5:B2:FF:15:51:30:C7 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019845F63332F05035AF0FD6DB0796385071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 160D Signing time: Sat 26 Jul 2025 09:00:19 +0000 Manifest this update: Sat 26 Jul 2025 09:00:19 +0000 Manifest next update: Sun 27 Jul 2025 09:00:19 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: SYW7vJR8jh6OnS0xw0zxS3bgN60.roa (hash: RRdRxhUDlZPMyyr5BdAFCoJYcDMXRiJFFRNcVSSyJoQ=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: 1Ldgz3TSblDOCJx+wgEQ1lkVfduBQb1YA8uBIpP9KcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:f6:33:32:f0:50:35:af:0f:d6:db:07:96:38:50:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jul 26 09:00:19 2025 GMT Not After : Jul 27 09:00:19 2025 GMT Subject: CN=1adfcfafba630c88e8c599267ce5b2ff155130c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:52:d4:80:a3:ab:98:5c:8b:e3:00:c6:9b: 9f:17:29:16:8c:99:bd:2b:e2:f0:57:36:d5:17:be: 5a:08:ac:c3:cc:1a:48:d6:60:41:9c:0e:0f:6f:9e: 07:8b:76:90:90:e3:ce:f1:07:2b:5a:0c:80:09:66: 7b:20:e6:fa:a6:2d:07:7b:dc:50:05:1a:97:88:2e: 24:9a:84:1e:65:1a:29:93:e6:6d:8a:eb:e1:16:67: 49:18:f1:ee:93:86:cd:5a:3f:86:b1:c5:cd:42:28: 3e:cd:d3:fc:b0:77:1d:a9:0a:43:49:06:09:ff:7f: c4:b1:59:17:d7:09:92:34:91:b6:23:2e:e1:4d:7f: d6:e8:2f:c6:a3:70:b5:b9:ea:82:1e:b0:8e:d7:fa: 9c:c8:b7:2f:a6:22:66:62:50:b0:8a:e2:c9:7c:ea: 9e:f3:d2:93:01:c2:d7:b9:db:1a:cc:f6:70:59:7c: 44:40:de:f8:50:f3:26:45:f2:04:7c:30:0e:6b:aa: 70:d2:98:5b:12:f2:4c:1e:ec:0a:f6:55:17:9f:0a: 46:10:b6:53:79:f4:97:a5:63:fa:67:84:2a:78:df: 43:70:d8:a1:8f:77:6f:ff:aa:f9:c4:bb:50:ad:88: e1:bf:58:81:d7:6c:5e:37:bb:07:5b:e5:36:65:5f: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DF:CF:AF:BA:63:0C:88:E8:C5:99:26:7C:E5:B2:FF:15:51:30:C7 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1d:d4:8a:3e:22:d5:d0:bf:d7:eb:8b:14:6b:80:c6:da:69: 0c:82:c7:39:b0:c2:ff:53:bc:fd:2a:9c:d2:80:b9:fe:96:88: 13:56:bf:ca:60:6f:b4:f7:6d:ba:3b:71:52:d4:3f:97:2c:bd: cd:09:f5:5f:b9:c6:18:26:e1:ec:4d:bd:7c:85:41:30:2e:ad: a7:89:72:47:54:7f:a4:e4:5d:dc:55:af:7c:49:be:e9:eb:d4: 20:f0:3d:2b:20:68:2f:fa:d0:d3:20:6c:97:2e:7e:a3:f1:2e: 4d:84:77:ae:cd:af:f2:b0:05:6a:7a:9e:97:6f:13:57:c5:e7: 9d:5f:9e:86:1d:31:c5:8d:88:f6:31:b0:68:54:d0:03:68:61: c6:8d:08:c0:08:7c:c2:7d:38:3c:8a:fa:a8:71:8a:22:95:35: dd:56:78:1b:65:7e:38:38:37:86:05:67:fb:17:ca:f5:92:41: 1a:e3:e9:d9:9b:1c:07:da:11:45:bd:93:96:1b:0a:47:ad:82: 93:e6:45:b8:e3:11:a1:a7:70:79:6c:ca:79:38:75:7e:31:c1: fb:a0:4c:6f:6a:eb:e3:e1:e1:8e:7a:1c:d3:70:92:e9:3d:b7: 93:ef:66:95:4a:d5:6f:b1:45:54:ca:55:3e:22:eb:a6:91:f3: 1e:45:76:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhF9jMy8FA1rw/W2weWOFBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUwNzI2MDkwMDE5WhcNMjUwNzI3MDkwMDE5WjAzMTEwLwYDVQQD EygxYWRmY2ZhZmJhNjMwYzg4ZThjNTk5MjY3Y2U1YjJmZjE1NTEzMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHlS1ICjq5hci+MAxpufFykWjJm9 K+LwVzbVF75aCKzDzBpI1mBBnA4Pb54Hi3aQkOPO8QcrWgyACWZ7IOb6pi0He9xQ BRqXiC4kmoQeZRopk+ZtiuvhFmdJGPHuk4bNWj+GscXNQig+zdP8sHcdqQpDSQYJ /3/EsVkX1wmSNJG2Iy7hTX/W6C/Go3C1ueqCHrCO1/qcyLcvpiJmYlCwiuLJfOqe 89KTAcLXudsazPZwWXxEQN74UPMmRfIEfDAOa6pw0phbEvJMHuwK9lUXnwpGELZT efSXpWP6Z4QqeN9DcNihj3dv/6r5xLtQrYjhv1iB12xeN7sHW+U2ZV/oGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrfz6+6YwyI6MWZJnzlsv8VUTDHMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB3Uij4i 1dC/1+uLFGuAxtppDILHObDC/1O8/Sqc0oC5/paIE1a/ymBvtPdtujtxUtQ/lyy9 zQn1X7nGGCbh7E29fIVBMC6tp4lyR1R/pORd3FWvfEm+6evUIPA9KyBoL/rQ0yBs ly5+o/EuTYR3rs2v8rAFanqel28TV8XnnV+ehh0xxY2I9jGwaFTQA2hhxo0IwAh8 wn04PIr6qHGKIpU13VZ4G2V+ODg3hgVn+xfK9ZJBGuPp2ZscB9oRRb2TlhsKR62C k+ZFuOMRoadweWzKeTh1fjHB+6BMb2rr4+Hhjnoc03CS6T23k+9mlUrVb7FFVMpV PiLrppHzHkV2CQ== -----END CERTIFICATE-----Generated at Sat Jul 26 11:38:18 2025 by rpki-client