$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: v3UW4HhXxjk4r3o2ZldkJHIYWiKk5NyZgMd5UAzhi8E= Subject key identifier: 34:84:F1:16:AA:02:84:1B:39:7C:64:4C:2C:58:F3:10:3F:7D:1A:6F Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 01984475AAC90AF1048B5F60239A7C1F6E6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 164A Signing time: Sat 26 Jul 2025 02:00:18 +0000 Manifest this update: Sat 26 Jul 2025 02:00:18 +0000 Manifest next update: Sun 27 Jul 2025 02:00:18 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 1on02s47SmwkekNYRvvqPMKKs1s.roa (hash: PVU8TQ1XVWLL41acJ/qMMaJx5HekZ2LfJTCmhfZN/cY=) 3: EfIYNiM608dw9De4gr0QoLFH8AU.roa (hash: 2TaK0wfXNwHYOVXohwQvDaJR6X0XqbjEaNjkMp4hvKo=) 4: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 5: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 6: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 7: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: d4mPow+DDAHQM5sVwMX9grIaFTonL9xQ+PSFHlUTz9A=) 8: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 9: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 10: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 11: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 12: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 13: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 14: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:44:75:aa:c9:0a:f1:04:8b:5f:60:23:9a:7c:1f:6e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jul 26 02:00:18 2025 GMT Not After : Jul 27 02:00:18 2025 GMT Subject: CN=3484f116aa02841b397c644c2c58f3103f7d1a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:fd:5f:11:0c:b8:ab:55:d9:2e:33:2d:0a: a4:b2:fa:db:33:8a:74:90:0f:3e:9c:a0:59:67:8c: 02:c1:68:bf:a1:86:f4:0a:4f:c1:ab:9d:80:76:7b: 13:d7:23:da:8e:d5:9c:c3:09:35:c3:08:94:ea:34: 01:ce:83:81:7d:64:23:be:2d:c3:f5:47:d5:e3:76: ca:dc:7f:09:cb:93:ce:04:42:60:df:23:7a:f8:87: d0:5e:83:14:81:00:7d:c8:88:45:18:4b:fe:12:0e: 75:be:07:56:0e:06:3c:57:0c:09:d3:c5:90:26:61: cd:a7:b2:2c:02:ae:dd:32:29:2c:a4:77:f3:b4:09: c9:ee:0f:fb:b6:47:b4:13:d1:bd:9a:da:de:36:ca: 59:47:c3:a5:d7:8d:1f:21:6c:9d:6d:59:6d:88:12: f3:81:71:ae:91:d6:02:d3:d5:38:3f:96:cb:cc:8b: 21:06:ba:e8:34:d0:0c:80:64:dd:fa:d9:00:22:f1: 77:f2:d1:b1:76:b8:35:08:ea:b6:8b:5b:95:8e:24: 2c:81:2d:02:ad:73:90:29:d8:06:5f:bf:0f:1e:44: fc:a4:4b:ae:35:e3:51:08:9e:ef:8e:04:c3:55:ca: 2c:20:df:31:e2:c0:7d:49:57:06:d1:a8:ac:55:ae: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:84:F1:16:AA:02:84:1B:39:7C:64:4C:2C:58:F3:10:3F:7D:1A:6F X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c0:ef:3a:66:9b:7c:4d:79:62:73:79:a9:a0:9e:49:72:15: 26:5d:a2:b9:f6:da:4e:bd:45:c9:ba:56:cc:73:3a:47:fc:e6: 0f:23:c6:40:4f:fd:c4:6b:16:e5:2c:e0:26:3e:25:46:d6:20: 6e:8e:b0:99:a8:c3:fc:2b:03:9a:39:3d:36:84:fe:28:c1:ed: 47:c1:8d:83:c1:af:68:e9:b7:bc:24:cd:88:ea:17:31:16:c1: 59:68:a0:1f:21:d5:bc:c3:2f:f8:84:e9:c4:cc:f8:e0:ea:4e: 55:e8:d8:c3:31:78:80:27:02:05:5e:e4:08:90:20:ca:08:5e: 20:55:47:83:9b:f9:3a:d3:e7:52:ab:b6:c0:60:a6:19:15:59: 91:5b:62:56:d4:8a:c6:14:c8:68:c3:71:80:fc:f7:4c:f9:d6: e5:55:17:af:43:f4:fd:f6:20:e0:b4:f3:e0:b9:3f:cf:f2:f4: 5b:ec:7c:2d:dd:dd:51:a6:17:13:17:67:e4:fe:1e:b1:bf:35: 87:d5:57:dc:80:5d:7f:78:1e:e3:86:3a:b3:c9:f8:17:02:3d: 0e:51:11:df:d8:ac:22:79:98:7d:0b:00:87:c7:e4:19:29:c0: 53:12:5f:cd:f8:d7:96:26:32:cb:76:b7:34:55:9e:9b:8e:f4: 8a:fb:3f:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhEdarJCvEEi19gI5p8H25tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwNzI2MDIwMDE4WhcNMjUwNzI3MDIwMDE4WjAzMTEwLwYDVQQD EygzNDg0ZjExNmFhMDI4NDFiMzk3YzY0NGMyYzU4ZjMxMDNmN2QxYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn479XxEMuKtV2S4zLQqksvrbM4p0 kA8+nKBZZ4wCwWi/oYb0Ck/Bq52AdnsT1yPajtWcwwk1wwiU6jQBzoOBfWQjvi3D 9UfV43bK3H8Jy5POBEJg3yN6+IfQXoMUgQB9yIhFGEv+Eg51vgdWDgY8VwwJ08WQ JmHNp7IsAq7dMikspHfztAnJ7g/7tke0E9G9mtreNspZR8Ol140fIWydbVltiBLz gXGukdYC09U4P5bLzIshBrroNNAMgGTd+tkAIvF38tGxdrg1COq2i1uVjiQsgS0C rXOQKdgGX78PHkT8pEuuNeNRCJ7vjgTDVcosIN8x4sB9SVcG0aisVa4KVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSE8RaqAoQbOXxkTCxY8xA/fRpvMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsDvOmab fE15YnN5qaCeSXIVJl2iufbaTr1FybpWzHM6R/zmDyPGQE/9xGsW5SzgJj4lRtYg bo6wmajD/CsDmjk9NoT+KMHtR8GNg8GvaOm3vCTNiOoXMRbBWWigHyHVvMMv+ITp xMz44OpOVejYwzF4gCcCBV7kCJAgygheIFVHg5v5OtPnUqu2wGCmGRVZkVtiVtSK xhTIaMNxgPz3TPnW5VUXr0P0/fYg4LTz4Lk/z/L0W+x8Ld3dUaYXExdn5P4esb81 h9VX3IBdf3ge44Y6s8n4FwI9DlER39isInmYfQsAh8fkGSnAUxJfzfjXliYyy3a3 NFWem470ivs/IQ== -----END CERTIFICATE-----Generated at Sat Jul 26 06:09:09 2025 by rpki-client