$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: 7kwFZQE1z7D9sWRidgqRDwoZnOkxsTP2GmfC0J042QI= Subject key identifier: 83:68:DB:3F:C9:3C:DD:05:59:00:09:53:35:C9:B9:34:70:F3:2D:FF Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 0198266B62A956CA9CEC9C389E2E3AA0C373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0865 Signing time: Sun 20 Jul 2025 06:00:28 +0000 Manifest this update: Sun 20 Jul 2025 06:00:28 +0000 Manifest next update: Mon 21 Jul 2025 06:00:28 +0000 Files and hashes: 1: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (hash: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=) 2: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (hash: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=) 3: 8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa (hash: vLGuiUaaMRg3Oh7AvVSEZuZjqVJEBlIV9vKNBDoC7tE=) 4: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (hash: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=) 5: E2CsRwz9g826xgce9UMdi-jpNc0.roa (hash: p8vKwGNWyPepiaRRxHDNJ9XMoMoNlWP3l1RLiZkb2+U=) 6: E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa (hash: w6Z0YEJQvfL4NvmqQHTVNtC2n3ge/nKiZiSd6ate0dI=) 7: Gs6wyM63OMnbKZMOf0cda_N7OHI.roa (hash: klxL/qsoExOmtoi4MkmdkNuAIFKSpx+D0u3x1SSJEX0=) 8: HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa (hash: FgAisfkYOtHtqPca1uMEVAA9ecV9h1pOsVf2alGzd9o=) 9: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (hash: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=) 10: M_Vi73CFA0pYsLc_tnhRMlqnyzw.roa (hash: Sa1IToWhunFsh7PNrbHTSOaXwck3hxZREJV3TqwmoFA=) 11: NfFWK6CE2t9Pa-x8zwAV9BuwlEI.roa (hash: YfoMWCybmpdOuYSX8n89Rg3jlFAY6S7JvtkdJ5G+mxc=) 12: TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa (hash: 5TOUXLSShUEIyyWwQvXlNv+6kmdqCB9iCboytyJ7clM=) 13: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (hash: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=) 14: VZZ9WawBePhv4LDIZfO_F9oGyz0.roa (hash: tpSdt2I+RDE+fPAieXAjll9NyOZ/5yWRInrrSwy0o3Y=) 15: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: BJ2UBbtwLqVxaVSH/J4uhSRrj8fUvIEW02XpT7yvh/Y=) 16: dOwbaQzqcRYTsS9whCXtEpuCSXk.roa (hash: 1R7jY8US+XVotTudXZJyXVeOcS1o5JnuJJgbbY55aZU=) 17: eUtBoT5j0z-IYqDSfwpzibFEqJY.roa (hash: xrripoBlTawer5hRJBFA2IV4xDGQFgwmcY1MUaK5VFs=) 18: hUld0bztgVsjCx1wOfJFp5IoOW8.roa (hash: yhAFJhhqEely7Z+gYD2UjZa+MFUNj+TLxyxBcw9l33Y=) 19: keun2IRw7haIIKkVfKP-snALaeQ.roa (hash: YB+3CYxlHEJ9vwl2a7w4/uVnP5GuPShO8QVbYUihRFU=) 20: podfBbvblbujwJeMWZwGbU0sPNA.roa (hash: +aCb+Gg3Ip7BjJ/sgR8dzhKxDrlUXm7AtkYxnTfteRk=) 21: zWfpDcDGP8ZBOnbHTD2rBjXz78M.roa (hash: kQIUbN3JJr8uLsYWLB80RGyd2JN8/nPj/Xb7OpSz18k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:6b:62:a9:56:ca:9c:ec:9c:38:9e:2e:3a:a0:c3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jul 20 06:00:28 2025 GMT Not After : Jul 21 06:00:28 2025 GMT Subject: CN=8368db3fc93cdd055900095335c9b93470f32dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:ab:21:e8:59:0e:16:7f:ea:8b:f5:54:27: de:e1:6b:70:fa:38:80:05:f1:9a:b7:8d:dd:65:9d: 84:8a:b1:0f:25:1f:c0:fc:f5:c2:3b:4f:da:71:be: c9:31:9f:c2:ef:ec:ce:be:2a:8d:51:5b:af:69:a7: c5:83:a7:9c:b1:c6:f7:7f:df:09:ce:24:dc:95:46: c9:56:3b:0e:2d:e9:cd:89:92:3e:47:72:77:f8:0d: b1:f6:63:a9:bf:b4:1d:a1:88:a8:7f:e5:ae:a6:bf: a5:ae:d4:1d:39:ff:60:78:56:e3:7b:b8:8f:85:ab: 83:f4:36:5c:b3:26:66:79:13:de:76:c6:1e:93:16: 3a:7f:02:b1:77:b5:ae:23:d8:b5:69:63:b8:1e:9c: 5a:fb:f4:91:37:76:d3:33:9c:d2:7e:15:61:83:eb: 79:26:df:a8:36:06:5a:44:18:c4:b2:15:e5:a1:5b: fe:cc:3c:fe:64:2b:5d:53:90:f0:a4:64:69:96:87: 5c:1a:da:2d:f9:9c:05:2b:69:6a:82:d1:17:8d:39: 59:4b:40:20:0a:6a:fc:a8:f0:72:18:e4:6f:84:62: c1:c5:eb:d0:77:a2:3e:49:3d:56:94:b0:e7:b8:13: 62:a6:e4:9d:24:a6:94:11:70:7f:35:dd:09:ca:47: f8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:68:DB:3F:C9:3C:DD:05:59:00:09:53:35:C9:B9:34:70:F3:2D:FF X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b9:b1:22:06:7d:3e:1b:da:ec:fc:bc:d8:ef:f9:23:79:d6: 90:6f:cd:c1:a5:62:47:9b:7a:f3:fc:a4:69:f5:ba:a4:ea:2e: 2b:de:12:aa:ac:c8:b1:54:9e:45:68:58:65:45:86:a9:47:80: 97:b3:50:36:59:b9:18:f9:12:1a:18:28:8f:9c:80:4b:94:e4: db:2f:77:95:0b:1d:63:8c:5a:17:11:e7:5f:b0:6b:e0:15:ab: ce:0a:8b:ad:b8:31:94:d2:49:0b:56:21:37:a9:b6:9e:cb:cc: 80:28:1d:49:8f:85:9f:49:45:f4:1f:df:f1:56:03:6c:a8:50: 7e:d8:fa:f7:43:e6:0d:b4:fe:cf:55:ac:36:ef:de:90:a6:6a: bb:d1:e4:7a:f9:e0:2b:06:d7:99:09:8b:79:b9:95:47:ec:d0: e3:d4:ab:74:86:e8:fc:fb:9a:6a:28:dd:8c:c0:b8:9c:75:fe: e7:32:00:e5:3c:bb:7e:a0:ba:04:c3:65:82:5b:1c:9e:89:40: 55:16:bd:7e:3a:bd:99:4d:1e:d0:51:82:e7:08:62:d3:0f:c8: f4:3f:96:60:6c:f4:58:5c:e1:d3:aa:f1:58:66:5c:af:e9:d7: 97:ec:61:08:0f:3c:79:4e:5e:24:b1:f7:3a:96:d9:39:c8:77: 32:2d:bd:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgma2KpVsqc7Jw4ni46oMNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjUwNzIwMDYwMDI4WhcNMjUwNzIxMDYwMDI4WjAzMTEwLwYDVQQD Eyg4MzY4ZGIzZmM5M2NkZDA1NTkwMDA5NTMzNWM5YjkzNDcwZjMyZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy6rIehZDhZ/6ov1VCfe4Wtw+jiA BfGat43dZZ2EirEPJR/A/PXCO0/acb7JMZ/C7+zOviqNUVuvaafFg6ecscb3f98J ziTclUbJVjsOLenNiZI+R3J3+A2x9mOpv7QdoYiof+Wupr+lrtQdOf9geFbje7iP hauD9DZcsyZmeRPedsYekxY6fwKxd7WuI9i1aWO4Hpxa+/SRN3bTM5zSfhVhg+t5 Jt+oNgZaRBjEshXloVv+zDz+ZCtdU5DwpGRplodcGtot+ZwFK2lqgtEXjTlZS0Ag Cmr8qPByGORvhGLBxevQd6I+ST1WlLDnuBNipuSdJKaUEXB/Nd0Jykf41QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINo2z/JPN0FWQAJUzXJuTRw8y3/MB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbmxIgZ9 Phva7Py82O/5I3nWkG/NwaViR5t68/ykafW6pOouK94SqqzIsVSeRWhYZUWGqUeA l7NQNlm5GPkSGhgoj5yAS5Tk2y93lQsdY4xaFxHnX7Br4BWrzgqLrbgxlNJJC1Yh N6m2nsvMgCgdSY+Fn0lF9B/f8VYDbKhQftj690PmDbT+z1WsNu/ekKZqu9Hkevng KwbXmQmLebmVR+zQ49SrdIbo/PuaaijdjMC4nHX+5zIA5Ty7fqC6BMNlglscnolA VRa9fjq9mU0e0FGC5whi0w/I9D+WYGz0WFzh06rxWGZcr+nXl+xhCA88eU5eJLH3 OpbZOch3Mi299Q== -----END CERTIFICATE-----Generated at Sun Jul 20 14:14:07 2025 by rpki-client