$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: /pofvp01V5Inwe0I1Ees/p0VvFXWqslMCm/jQUPJuMk= Subject key identifier: 7A:5F:D2:20:E0:6F:F2:6A:C8:0D:CE:CB:1F:41:9F:A2:14:B3:35:E5 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01983616DCE61CDC78CAAAC03BDB9C4A9C0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1605 Signing time: Wed 23 Jul 2025 07:02:04 +0000 Manifest this update: Wed 23 Jul 2025 07:02:04 +0000 Manifest next update: Thu 24 Jul 2025 07:02:04 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: FoijTyhNtSTgT6l5iOp7gL+V6BCLGTlJF6yu2o4iTNw=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:16:dc:e6:1c:dc:78:ca:aa:c0:3b:db:9c:4a:9c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jul 23 07:02:04 2025 GMT Not After : Jul 24 07:02:04 2025 GMT Subject: CN=7a5fd220e06ff26ac80dcecb1f419fa214b335e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:71:f9:1a:fc:29:19:2b:11:10:70:0b:ae: 3c:cb:5e:3a:f4:09:46:85:57:b3:4c:95:ab:6e:54: 43:20:9c:24:b3:f4:35:8b:72:82:e2:26:e4:24:86: 98:6b:9d:0e:67:1b:7e:b6:2a:30:ac:8f:d2:9d:0c: 09:31:f8:dd:98:b7:1a:6d:f6:c2:db:70:a6:89:b6: ba:0d:f7:c8:da:65:9f:04:8a:33:90:ae:46:0f:ac: 76:25:88:81:19:82:02:39:56:fd:2e:86:37:35:1f: bb:f8:9f:fb:7d:e3:f4:3b:0d:b1:1a:7f:b9:c6:5d: 6d:1d:be:bf:fc:cf:61:77:46:5e:ed:39:b4:c1:a3: 33:e3:ab:98:19:90:16:2b:85:53:2d:2c:db:92:91: 35:37:8b:11:1e:a6:56:b3:fe:00:75:f5:fd:ef:93: a9:0f:4c:29:4c:81:09:89:f7:81:de:64:c5:66:bb: 4d:f4:01:c9:da:7e:dd:b4:98:d8:aa:d8:62:e4:5e: e2:f4:a2:3c:49:e4:1b:71:00:6a:da:6d:e7:31:e1: ee:f9:bb:e9:1c:96:37:c8:4d:f0:28:5a:c5:1c:66: 92:e6:73:2e:a7:31:bc:b5:88:a6:d5:dc:67:c8:19: ae:9e:d5:23:39:64:c7:18:df:79:22:35:a1:e5:e6: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5F:D2:20:E0:6F:F2:6A:C8:0D:CE:CB:1F:41:9F:A2:14:B3:35:E5 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a8:4b:40:2d:f3:00:4f:04:dd:9f:8d:f6:eb:8e:0f:5a:30: 6d:8c:af:26:8f:c5:d5:f7:c0:5a:24:23:2f:d8:fe:a0:f9:0d: e1:54:99:ff:83:0d:a2:9e:36:cc:32:9f:34:a6:f7:14:91:e2: 89:ac:28:f0:a3:43:49:b5:6e:b6:ed:40:25:5b:f9:ac:a9:64: 4b:03:a0:6d:9c:8a:43:1b:f9:15:b8:18:2e:08:3c:2d:87:2a: e6:ec:34:92:34:d9:ae:b4:7d:59:6a:bd:1e:dc:87:9a:db:64: 76:fa:e9:6e:cf:05:f9:ca:21:96:d7:04:92:3f:e3:d6:b6:fd: 6a:99:a7:a0:09:47:a5:8e:78:93:46:35:6a:07:3c:03:70:da: 5e:b3:0b:78:fb:c0:69:a0:f5:b7:3a:32:f9:23:ab:56:bb:47: 70:0f:e7:ad:9c:be:16:47:06:f4:ad:f6:e8:2c:39:d5:a9:f5: 6a:8c:59:cf:b3:27:1d:03:8f:3e:e1:e7:db:2f:22:36:5d:c4: a1:c6:9d:6f:86:9d:ae:7f:be:54:00:24:50:43:35:cb:32:80: e9:c7:ea:34:2f:de:f2:0c:6b:93:4a:eb:25:4b:24:97:02:bf: 91:c8:97:07:62:9a:a8:02:97:32:75:9f:f5:7e:d6:85:15:30: 0e:48:1d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2FtzmHNx4yqrAO9ucSpwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwNzIzMDcwMjA0WhcNMjUwNzI0MDcwMjA0WjAzMTEwLwYDVQQD Eyg3YTVmZDIyMGUwNmZmMjZhYzgwZGNlY2IxZjQxOWZhMjE0YjMzNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMFx+Rr8KRkrERBwC648y1469AlG hVezTJWrblRDIJwks/Q1i3KC4ibkJIaYa50OZxt+tiowrI/SnQwJMfjdmLcabfbC 23Cmiba6DffI2mWfBIozkK5GD6x2JYiBGYICOVb9LoY3NR+7+J/7feP0Ow2xGn+5 xl1tHb6//M9hd0Ze7Tm0waMz46uYGZAWK4VTLSzbkpE1N4sRHqZWs/4AdfX975Op D0wpTIEJifeB3mTFZrtN9AHJ2n7dtJjYqthi5F7i9KI8SeQbcQBq2m3nMeHu+bvp HJY3yE3wKFrFHGaS5nMupzG8tYim1dxnyBmuntUjOWTHGN95IjWh5eY7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpf0iDgb/JqyA3Oyx9Bn6IUszXlMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqhLQC3z AE8E3Z+N9uuOD1owbYyvJo/F1ffAWiQjL9j+oPkN4VSZ/4MNop42zDKfNKb3FJHi iawo8KNDSbVutu1AJVv5rKlkSwOgbZyKQxv5FbgYLgg8LYcq5uw0kjTZrrR9WWq9 HtyHmttkdvrpbs8F+cohltcEkj/j1rb9apmnoAlHpY54k0Y1agc8A3DaXrMLePvA aaD1tzoy+SOrVrtHcA/nrZy+FkcG9K326Cw51an1aoxZz7MnHQOPPuHn2y8iNl3E ocadb4adrn++VAAkUEM1yzKA6cfqNC/e8gxrk0rrJUsklwK/kciXB2KaqAKXMnWf 9X7WhRUwDkgd2w== -----END CERTIFICATE-----Generated at Wed Jul 23 12:24:28 2025 by rpki-client