$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: P09GfSJeWRe0QoW5ercMXWNGr4JCTe2gRZJbcgCwqW8= Subject key identifier: 3A:2C:CE:A1:F8:E1:4C:16:68:FD:9F:9B:16:BD:A7:A9:DF:0E:45:D0 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 0197485569FD0B173E3223E121324842FE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 15AB Signing time: Sat 07 Jun 2025 03:00:46 +0000 Manifest this update: Sat 07 Jun 2025 03:00:46 +0000 Manifest next update: Sun 08 Jun 2025 03:00:46 +0000 Files and hashes: 1: Alcw5bqlDy76iV6c7S-O4-OARxU.roa (hash: 6PM7jMBzQWTA4t/Nn+DwFnlxCf+V4o07GoBa6fjtRkI=) 2: Fh6CLt6xczOHHemrrM4bMN7qnwo.roa (hash: hvSyiuRPH2Z9ZscYXJ/Gadi12dcqRqXvTeKlVkuzaPk=) 3: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 4: Nz3-Q-RxdSBD88DeGr810PxedL8.roa (hash: uPZGJ9gwD1kRoY4QiGyirZQndG4HUf2vvZTk9DEBtFM=) 5: QOlMZj7vIZjok8y_zbWoIKFDGA4.roa (hash: 4CfAMqsFuVPfLgIqhqcYqH+T6ntjHVY7atrb+fGvffY=) 6: QV9PJiaRafvQ_hgIDmO7ZnKcbY4.roa (hash: 2QXB3Kem47g74nl/LcX2OLvSfpYG+14vPRpNfDO+Mik=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 1vVVrckVDuPDlJohNwg8f+nHPVBVmlmTWrNCUwNhprk=) 8: bv4tcwtbryxLyYhV6XTH39AB-vY.roa (hash: Xi6BhRdiZvjQrRH2s9UR2MhITflZG1sNqXTRu0wxscs=) 9: fN1BDsW9C5C9Bqke6ry_fePDBlM.roa (hash: 3fdGseWrPkjGKUusjcENuIavE0xvyg7utbXjROm1P3E=) 10: mo5JK6v6R0SlbhL9bpJDUSnP2o0.roa (hash: 727Fnu3PPIa8ngtI0/OvrhrO6bIcmHl3XFKfTHPbhNk=) 11: pi020TsW0QReka4EU_X98LZY30k.roa (hash: gf5U/BiHkb9/XX1VONoBqkzZ+yxHvJslptQx9dyXOBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:55:69:fd:0b:17:3e:32:23:e1:21:32:48:42:fe:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Jun 7 03:00:46 2025 GMT Not After : Jun 8 03:00:46 2025 GMT Subject: CN=3a2ccea1f8e14c1668fd9f9b16bda7a9df0e45d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:c5:2f:f0:28:22:33:c0:de:fb:7d:b0:88: 3f:52:6a:d1:81:b9:ac:b0:37:6d:09:f7:28:db:ab: 03:07:67:e3:11:ee:e4:ff:b4:55:ea:36:24:e3:92: 51:36:a9:20:b2:0c:1a:48:50:a9:9b:b9:aa:5e:61: 21:7c:4e:2c:74:7b:d4:2a:f6:8e:c9:f7:34:3e:0b: b2:ec:4a:cf:b5:f2:8b:09:4d:c5:01:ae:93:4e:80: fa:bd:10:f9:27:8b:bf:f6:dd:24:34:e1:44:15:1b: 8a:72:18:0a:cc:7b:4f:56:39:cf:2a:55:57:85:e0: 94:d5:d6:53:cd:08:47:b8:f7:0b:ed:cf:62:e9:07: f1:61:f8:c6:16:80:da:24:ce:88:c8:82:48:9c:5f: 61:86:15:d2:f4:7b:c7:84:cb:40:3b:96:e9:d6:13: 82:a3:9a:ef:53:9c:8e:ca:19:69:a0:49:8c:d2:24: 58:8b:9b:e5:47:5f:17:07:17:d2:ea:62:3f:08:f6: e1:ab:6b:21:6a:33:90:12:16:5b:c9:54:cc:73:81: c7:1e:28:43:3b:c6:41:37:0e:7e:5c:bf:7f:14:f0: 0c:ac:59:83:1f:ed:6b:ca:65:73:3f:0e:e4:54:d3: cc:d1:57:44:9c:69:7b:33:88:ac:a1:12:14:c5:09: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:CE:A1:F8:E1:4C:16:68:FD:9F:9B:16:BD:A7:A9:DF:0E:45:D0 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:35:5d:70:58:2d:92:b9:12:86:66:55:36:72:b0:10:9c:8f: 80:88:9a:33:9c:38:bb:0d:1c:04:30:70:e6:b6:6f:eb:a5:53: 4c:f8:87:b2:ba:69:88:b8:ca:e5:67:de:23:37:c9:dd:18:0d: 38:1e:88:07:b8:59:66:70:66:e4:88:f6:85:61:2a:07:2c:13: 3b:45:6b:32:51:54:16:80:8e:d4:3f:3d:1c:6e:e6:7a:5d:a9: 15:f1:e9:73:19:14:49:19:ca:8c:e7:fc:b8:52:c8:3e:a5:0d: 47:a6:c7:51:08:ea:e3:80:ef:a9:f7:05:5d:c3:15:5d:0c:cc: a9:54:14:89:c3:90:2e:0b:a8:f5:b1:8f:88:00:8e:9d:8c:2c: 78:51:4a:e1:fe:82:22:ce:f8:a3:55:80:dc:c5:4e:83:4f:ef: 6e:8d:97:43:bf:d1:6e:fd:eb:86:f3:36:aa:51:11:0c:64:c0: ef:79:69:b5:74:43:82:ab:06:66:20:15:73:4a:14:65:71:5e: 10:ff:d7:2e:ea:ba:c9:51:e7:4d:e1:bb:13:f0:34:35:3c:6e: ae:a3:7e:7a:f5:34:83:16:6e:f0:07:94:2a:b1:fe:89:bd:98: 96:25:22:6c:6c:a9:37:10:0e:0e:7a:06:b9:e3:c9:fd:0f:c8: 98:f6:99:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIVWn9Cxc+MiPhITJIQv59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUwNjA3MDMwMDQ2WhcNMjUwNjA4MDMwMDQ2WjAzMTEwLwYDVQQD EygzYTJjY2VhMWY4ZTE0YzE2NjhmZDlmOWIxNmJkYTdhOWRmMGU0NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HFL/AoIjPA3vt9sIg/UmrRgbms sDdtCfco26sDB2fjEe7k/7RV6jYk45JRNqkgsgwaSFCpm7mqXmEhfE4sdHvUKvaO yfc0Pguy7ErPtfKLCU3FAa6TToD6vRD5J4u/9t0kNOFEFRuKchgKzHtPVjnPKlVX heCU1dZTzQhHuPcL7c9i6QfxYfjGFoDaJM6IyIJInF9hhhXS9HvHhMtAO5bp1hOC o5rvU5yOyhlpoEmM0iRYi5vlR18XBxfS6mI/CPbhq2shajOQEhZbyVTMc4HHHihD O8ZBNw5+XL9/FPAMrFmDH+1rymVzPw7kVNPM0VdEnGl7M4isoRIUxQlkowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoszqH44UwWaP2fmxa9p6nfDkXQMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzVdcFgt krkShmZVNnKwEJyPgIiaM5w4uw0cBDBw5rZv66VTTPiHsrppiLjK5WfeIzfJ3RgN OB6IB7hZZnBm5Ij2hWEqBywTO0VrMlFUFoCO1D89HG7mel2pFfHpcxkUSRnKjOf8 uFLIPqUNR6bHUQjq44DvqfcFXcMVXQzMqVQUicOQLguo9bGPiACOnYwseFFK4f6C Is74o1WA3MVOg0/vbo2XQ7/Rbv3rhvM2qlERDGTA73lptXRDgqsGZiAVc0oUZXFe EP/XLuq6yVHnTeG7E/A0NTxurqN+evU0gxZu8AeUKrH+ib2YliUibGypNxAODnoG uePJ/Q/ImPaZNg== -----END CERTIFICATE-----Generated at Sat Jun 7 05:34:54 2025 by rpki-client