$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: wRkFDVwWBOQQ9aqWdytA0jTMCzP1MCTqm6QFUhcDoII= Subject key identifier: 3B:5A:2C:AE:68:BD:9F:17:73:64:12:77:2D:7F:8A:6B:48:B5:6D:54 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 01984287D5DD36A3B81990B7B0BBDCCA45B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1738 Signing time: Fri 25 Jul 2025 17:00:54 +0000 Manifest this update: Fri 25 Jul 2025 17:00:54 +0000 Manifest next update: Sat 26 Jul 2025 17:00:54 +0000 Files and hashes: 1: 2MknCTAqPrL-JBVm-a7dCcSPR7A.roa (hash: QgeWbSBTUKGBsvwbQgC/fRYVcUxNWpLiMOHrMsaO2LA=) 2: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=) 3: 81KZQ-u5F9g0MOVoHU9ewgY-QXg.roa (hash: 8UjV0Jm7R1QguHBx9y2wyolm/VjFBkdN2Pr8OyUJ+mY=) 4: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (hash: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=) 5: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 6: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 7: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 8: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 9: KpxyohCywKCqC59cVbvb-hk2m1Q.roa (hash: K6acNuE4Oq4jimpCfQM9xEqDM+cg6n/Y23YyHZF46Co=) 10: RXsHFcWsg8HFbqYTSOpUV55FHFY.roa (hash: Fiu0I04LrIP8oLzI9NfPchAST7oZy3UnOH3R/n5EaUk=) 11: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 12: XJ123o6tZlSfzKNNo89Uqq3cEoc.roa (hash: DDNQsDmpGvCIwHRzgWySzrbyMPFC2+Bkq7hUOsilKCE=) 13: YhuGwBeadZN2oq4AXd_5KjSIMy4.roa (hash: rdPe/qveT2+THdErHu0EeJPtwnywZQPs8hhSf6g9F60=) 14: ZEpBx_pqGr84wqpYQB2_R7Wzf4I.roa (hash: pofieL/tOay6rzAbvvC7d8nXeIB4Ylc0fSvUYi+Npbo=) 15: _HcVDi2NYdbKbRm-WLVowWB46gk.roa (hash: 31Aj5BT6eP1JzMCQgd1VQwXXxYbuNm4GWIs3khsxmHc=) 16: eGdekQ_g8hAJ-ioEk9E1wbpSYko.roa (hash: Xc+mS6hvX5T41xOJfoYymAlkhHw73saT9E1Jhaw6MEg=) 17: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 18: h_aVeyWAhyIXUAM9oeSx15liAiM.roa (hash: hv39e2N25/bI+YhyIVAOqVFMdikRy2tXVlzLcuRexMM=) 19: jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa (hash: oNa1hwlsmstQ0sAKmsfIRqvEXfj92rgiiikTtvbNxKU=) 20: mXHFh-ebHPX9x5bzfuMwZ7-rpH8.roa (hash: Z2WL4zHjQCEC6HRSGXQoO+lycAn013LlgjAlCDXu1nI=) 21: qkhoG-olXseOo6aVlwIpG2rKuK0.roa (hash: m7Ky1+mzd7wlW0R4oXPlbMGFi5L0ZX0hi49Rah9TI/w=) 22: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 23: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 24: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=) 25: zHEaABL4NVOgmOybvjiAZTo3pXo.roa (hash: ql4hQMsthYpz1h1NR5cn/vlp0w5g7CrcXyqDAYNVzDA=) 26: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: FzFz65hE06IjUNUTA2z4OMjo1wmFabDH9Nr83pMTNSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:42:87:d5:dd:36:a3:b8:19:90:b7:b0:bb:dc:ca:45:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jul 25 17:00:54 2025 GMT Not After : Jul 26 17:00:54 2025 GMT Subject: CN=3b5a2cae68bd9f17736412772d7f8a6b48b56d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:31:dc:0a:03:3e:1c:b5:b0:5a:4c:64:6d: 99:c3:80:b3:48:57:ee:82:88:e7:61:fc:82:f6:05: 1c:79:e4:18:65:af:f5:df:16:9a:85:bd:ce:6c:78: fc:f9:b3:89:5c:18:46:13:79:b7:82:3e:14:18:90: a1:e0:44:d3:eb:fd:85:77:b6:82:22:f6:19:a5:a7: cd:fc:d5:34:35:4a:c6:42:6c:d8:cf:9e:67:fa:d3: 64:e7:39:f4:69:95:81:dd:e1:a9:c4:f6:0d:49:22: 09:00:d8:6f:06:4d:36:4e:a7:d6:e4:0d:f1:f0:53: 09:7e:10:65:a9:fe:64:1b:4f:1d:4f:74:88:52:37: 9d:18:ca:8b:1d:39:85:42:9c:e3:3d:17:d2:16:bb: d0:72:f4:02:b9:23:77:37:6d:6c:58:1d:1d:b8:9d: 87:1b:df:87:97:a0:c5:66:61:56:ac:80:84:f2:48: 8d:cc:85:eb:27:91:a6:38:3c:2d:3c:41:b8:10:32: ab:67:28:ad:9b:c2:b0:3d:ea:c2:72:d6:6e:9d:66: 21:66:85:3b:cb:08:67:e8:0b:7a:2b:bc:2b:b7:a0: a3:cb:06:f1:bf:83:03:eb:8c:22:62:f0:0e:09:33: 7f:8b:a3:b7:dc:d8:82:8a:78:bd:ea:04:af:c0:1a: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5A:2C:AE:68:BD:9F:17:73:64:12:77:2D:7F:8A:6B:48:B5:6D:54 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:99:79:36:ab:a7:15:6c:c3:f4:62:07:f2:11:2a:6d:f6:cc: 87:e9:2d:2e:b1:19:82:43:6e:4c:31:8e:5d:56:fb:92:38:87: 76:aa:05:f6:d4:a0:6f:af:43:05:47:c1:92:bb:20:3a:f1:e3: a8:d1:56:a2:50:aa:fc:1d:6d:96:f3:ad:7b:48:33:22:55:1d: 48:24:fa:66:b6:83:fb:bf:00:9f:a5:a9:b5:f1:5b:e5:99:af: 5d:f5:a7:b2:5a:32:51:be:2b:cb:ef:50:05:f1:43:5b:cc:44: 90:30:76:29:a1:ae:f9:1f:80:33:b6:9a:62:fa:d7:02:c8:fd: 19:88:70:08:31:54:c4:a8:ef:8d:4d:22:f8:c4:05:c9:7d:8f: 03:ae:ed:b3:22:b2:62:fc:18:0c:2d:e1:f2:a7:73:d4:e5:57: c7:2f:91:ad:bd:08:f6:7a:16:13:f9:92:7f:37:60:bf:e9:15: c2:c9:8e:52:46:53:e9:20:2e:6d:7b:03:2b:29:29:9c:14:44: d1:80:fc:7a:22:cb:68:d0:f8:bc:a2:f2:42:ba:fa:48:67:ba: 55:03:ce:50:3d:5b:16:77:d2:a8:99:be:e6:99:f9:9b:92:f2: 53:38:44:05:3d:29:2e:e8:ce:f0:b6:6e:75:50:37:16:d4:c7: ea:2f:47:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhCh9XdNqO4GZC3sLvcykW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUwNzI1MTcwMDU0WhcNMjUwNzI2MTcwMDU0WjAzMTEwLwYDVQQD EygzYjVhMmNhZTY4YmQ5ZjE3NzM2NDEyNzcyZDdmOGE2YjQ4YjU2ZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtUx3AoDPhy1sFpMZG2Zw4CzSFfu gojnYfyC9gUceeQYZa/13xaahb3ObHj8+bOJXBhGE3m3gj4UGJCh4ETT6/2Fd7aC IvYZpafN/NU0NUrGQmzYz55n+tNk5zn0aZWB3eGpxPYNSSIJANhvBk02TqfW5A3x 8FMJfhBlqf5kG08dT3SIUjedGMqLHTmFQpzjPRfSFrvQcvQCuSN3N21sWB0duJ2H G9+Hl6DFZmFWrICE8kiNzIXrJ5GmODwtPEG4EDKrZyitm8KwPerCctZunWYhZoU7 ywhn6At6K7wrt6Cjywbxv4MD64wiYvAOCTN/i6O33NiCini96gSvwBrpQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtaLK5ovZ8Xc2QSdy1/imtItW1UMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZl5Nqun FWzD9GIH8hEqbfbMh+ktLrEZgkNuTDGOXVb7kjiHdqoF9tSgb69DBUfBkrsgOvHj qNFWolCq/B1tlvOte0gzIlUdSCT6ZraD+78An6WptfFb5ZmvXfWnsloyUb4ry+9Q BfFDW8xEkDB2KaGu+R+AM7aaYvrXAsj9GYhwCDFUxKjvjU0i+MQFyX2PA67tsyKy YvwYDC3h8qdz1OVXxy+Rrb0I9noWE/mSfzdgv+kVwsmOUkZT6SAubXsDKykpnBRE 0YD8eiLLaND4vKLyQrr6SGe6VQPOUD1bFnfSqJm+5pn5m5LyUzhEBT0pLujO8LZu dVA3FtTH6i9HPQ== -----END CERTIFICATE-----Generated at Sat Jul 26 00:24:36 2025 by rpki-client