$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: BK/LPVhybOvlwe5n7b5I7lVsgVr1HipRSGVRgnBFETQ= Subject key identifier: 18:EE:66:74:E6:BB:2E:75:B5:A9:92:4F:3F:3F:9A:19:E7:88:72:E6 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019A13847F62CC1D5EB14E5224025918E029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 1739 Signing time: Fri 24 Oct 2025 00:00:41 +0000 Manifest this update: Fri 24 Oct 2025 00:00:41 +0000 Manifest next update: Sat 25 Oct 2025 00:00:41 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: i/7fFCXCbiIjR8KmErwFm59M19OE7qsYcBWRwp8+Jx4=) 8: pDp2CToPzzYDQ1WhaCtd0HG6Gtc.roa (hash: gA5JjiJRsXhS8LWEfP0H0OvEaHq8p+EbMF4HPnV2enw=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:84:7f:62:cc:1d:5e:b1:4e:52:24:02:59:18:e0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Oct 24 00:00:41 2025 GMT Not After : Oct 25 00:00:41 2025 GMT Subject: CN=18ee6674e6bb2e75b5a9924f3f3f9a19e78872e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:2d:3e:ea:bb:78:d5:93:e6:23:ce:cd:a2: e5:5b:ea:81:ef:d3:5c:12:1b:ef:f7:d9:ed:6e:ba: 4d:9f:5c:d3:8b:e2:7a:1e:e8:3b:1d:11:01:8c:4b: ae:37:06:6c:a2:84:0b:61:ee:75:5c:a4:98:4c:19: 87:66:cf:ae:42:09:9c:73:e0:9e:8c:40:55:6b:5b: 98:0d:db:08:34:40:ff:e1:32:55:f5:46:57:e3:84: 8a:ae:15:da:f7:bc:78:a0:08:02:72:15:8f:ec:bf: 4d:dc:0f:3a:45:7e:99:02:c6:88:e6:05:4f:c2:5d: b2:e7:73:8c:7e:3b:a8:50:09:2d:e5:45:60:45:6d: 3d:77:b4:53:58:23:57:9f:f3:2b:2e:d9:dd:50:9a: a8:f3:67:0f:a0:00:27:93:bd:7e:6c:a9:03:4d:75: d7:0c:5d:9f:f8:a0:d3:d3:c0:6e:65:5e:c7:4c:ec: a3:d1:c6:0d:60:f5:7e:a7:d9:b7:90:7b:ff:da:d5: 0e:58:2f:67:1e:36:2c:1a:33:11:b7:82:8e:c3:79: 1a:04:ad:13:34:49:4d:ed:ff:4d:82:bc:0d:e9:21: 65:fe:9e:dd:ce:2b:65:84:db:7e:16:87:65:f1:51: aa:8f:96:0b:69:aa:66:ce:ad:97:a5:5a:69:ad:b0: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:66:74:E6:BB:2E:75:B5:A9:92:4F:3F:3F:9A:19:E7:88:72:E6 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1e:61:3f:4b:37:60:50:bc:0b:ed:6d:3e:80:6e:fb:70:18: 67:d4:a7:15:5b:ca:cc:55:7e:27:8e:0f:32:7d:f7:2f:4d:0a: a5:38:c4:83:6a:63:6b:3a:33:66:66:33:9a:97:18:53:30:1c: eb:7c:70:74:00:86:6a:03:4c:88:f3:82:ef:37:37:58:18:d8: 77:e8:65:cd:69:aa:c9:7d:22:b3:44:ca:b6:e8:23:4b:5d:2d: c5:f9:fc:7e:6a:19:c4:1a:4a:d4:c1:17:0a:f2:90:a5:2e:e2: 30:83:3c:1c:4b:b9:43:c2:b5:cf:c6:02:9c:75:b2:f6:c1:cb: ef:07:cd:7c:91:06:d8:e0:bf:36:2d:ff:55:e4:e4:fc:b5:9a: a6:b4:1c:e8:f0:da:08:6c:09:93:d1:f3:0e:8c:5c:49:5d:1b: a6:28:ae:09:27:e3:51:08:1a:58:6f:91:28:70:6d:cd:72:f1: 77:3c:4c:9e:26:ec:36:1a:fe:2a:d3:8b:56:f7:21:5d:5e:7e: 8e:53:6d:55:d6:5c:c1:ff:5b:32:1d:ce:3a:ec:7d:9e:c6:79: 3b:0a:17:b0:c9:40:eb:80:a3:bd:28:53:95:b8:4f:9c:2b:bf: f6:ca:6f:d8:00:ac:b3:76:7c:5a:e1:cb:55:cc:77:bd:ae:d1: 58:a8:4c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoThH9izB1esU5SJAJZGOApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUxMDI0MDAwMDQxWhcNMjUxMDI1MDAwMDQxWjAzMTEwLwYDVQQD EygxOGVlNjY3NGU2YmIyZTc1YjVhOTkyNGYzZjNmOWExOWU3ODg3MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZotPuq7eNWT5iPOzaLlW+qB79Nc Ehvv99ntbrpNn1zTi+J6Hug7HREBjEuuNwZsooQLYe51XKSYTBmHZs+uQgmcc+Ce jEBVa1uYDdsINED/4TJV9UZX44SKrhXa97x4oAgCchWP7L9N3A86RX6ZAsaI5gVP wl2y53OMfjuoUAkt5UVgRW09d7RTWCNXn/MrLtndUJqo82cPoAAnk71+bKkDTXXX DF2f+KDT08BuZV7HTOyj0cYNYPV+p9m3kHv/2tUOWC9nHjYsGjMRt4KOw3kaBK0T NElN7f9NgrwN6SFl/p7dzitlhNt+Fodl8VGqj5YLaapmzq2XpVpprbC9QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjuZnTmuy51tamSTz8/mhnniHLmMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANh5hP0s3 YFC8C+1tPoBu+3AYZ9SnFVvKzFV+J44PMn33L00KpTjEg2pjazozZmYzmpcYUzAc 63xwdACGagNMiPOC7zc3WBjYd+hlzWmqyX0is0TKtugjS10txfn8fmoZxBpK1MEX CvKQpS7iMIM8HEu5Q8K1z8YCnHWy9sHL7wfNfJEG2OC/Ni3/VeTk/LWaprQc6PDa CGwJk9HzDoxcSV0bpiiuCSfjUQgaWG+RKHBtzXLxdzxMnibsNhr+KtOLVvchXV5+ jlNtVdZcwf9bMh3OOux9nsZ5OwoXsMlA64CjvShTlbhPnCu/9spv2ACss3Z8WuHL Vcx3va7RWKhMDQ== -----END CERTIFICATE-----Generated at Fri Oct 24 10:13:13 2025 by rpki-client