$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: AMSTheA6TvfyWCmB4iEpa88Ntpn1VlLs/IsLsoB1SUo= Subject key identifier: 5F:2F:EA:3F:E5:12:29:48:45:C5:CF:14:E2:02:35:DA:FA:FF:9E:0C Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 0199240D06F08CBFB10E70AD1101F4E7EEC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 16BD Signing time: Sun 07 Sep 2025 12:00:57 +0000 Manifest this update: Sun 07 Sep 2025 12:00:57 +0000 Manifest next update: Mon 08 Sep 2025 12:00:57 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 2i7X4Sq3Jn0520NGRVMWHz+oFIr/bTwDUPEcb9Za7rw=) 8: pDp2CToPzzYDQ1WhaCtd0HG6Gtc.roa (hash: gA5JjiJRsXhS8LWEfP0H0OvEaHq8p+EbMF4HPnV2enw=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:24:0d:06:f0:8c:bf:b1:0e:70:ad:11:01:f4:e7:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Sep 7 12:00:57 2025 GMT Not After : Sep 8 12:00:57 2025 GMT Subject: CN=5f2fea3fe512294845c5cf14e20235dafaff9e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:30:54:6d:b5:15:23:ea:c0:72:ff:50:73:5a: aa:d9:1a:61:91:4f:f1:69:00:1a:bc:60:c4:60:d1: a7:b7:1d:a1:4e:44:07:ea:50:53:57:90:67:7b:e8: a8:e5:cf:22:13:55:e9:ab:22:b1:2e:54:b4:84:98: 58:0e:d4:f4:61:ac:c3:82:75:39:3c:7e:e7:53:ab: a5:35:75:37:15:34:71:33:b5:fa:18:07:28:6b:c5: 3f:43:65:ca:a0:42:5f:17:57:61:1b:e4:b9:88:df: 4f:d8:17:35:b7:ab:b1:3b:9f:4c:74:dc:5b:aa:63: 3a:b2:5c:ba:64:4c:2e:40:71:4a:19:b2:85:47:88: 18:38:2f:a1:c4:0d:7c:cf:ee:07:a6:4f:02:c3:83: 8e:ee:4a:45:f7:aa:92:67:6c:c6:dc:d4:d6:9c:bb: f6:14:8b:45:0d:6a:bf:8c:d5:f2:30:14:9d:70:74: b4:5f:69:b4:f1:a0:a6:0a:9d:e9:76:35:ce:7b:c6: b2:72:d5:b0:e1:ec:a5:24:a2:d2:7f:a5:75:9d:ed: 1d:ca:47:b9:2d:a6:ef:00:d5:27:0a:8b:8a:1c:0d: 75:c5:56:33:60:52:50:ab:8c:f2:9a:05:be:62:e4: f6:e1:14:c1:4c:60:10:e8:15:2e:b9:5b:72:0f:35: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2F:EA:3F:E5:12:29:48:45:C5:CF:14:E2:02:35:DA:FA:FF:9E:0C X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:96:aa:c7:68:83:47:b0:ee:15:24:30:15:93:19:90:ce:6d: 17:af:69:af:e3:6a:b9:0e:09:94:ff:17:4d:1a:dc:25:a2:41: 1d:af:5d:c8:56:2e:e9:b3:85:4c:08:df:34:91:ed:66:3f:ab: f3:b1:bc:50:62:be:7d:30:c0:9a:4c:19:6b:d1:00:10:27:85: 70:c1:71:11:9d:69:12:86:44:50:97:4a:d8:a2:98:40:f9:08: 4e:e9:19:85:26:4e:c9:d7:67:52:89:14:be:3b:f7:e9:fb:fc: fd:fa:70:6b:81:dd:b4:67:1d:e1:15:d6:e5:5b:de:1b:73:3c: 37:22:df:4b:ea:44:5f:87:6c:9c:e1:42:c6:40:dc:27:57:4a: 2d:b6:44:c7:07:80:2c:b9:a5:4a:70:eb:e4:05:65:8f:04:55: 02:da:8f:e9:d0:88:1b:6e:b7:4a:88:27:47:dc:53:70:fc:fa: 5e:09:f5:b3:58:60:b6:67:74:a8:bc:4e:ce:fa:76:c7:36:26: f7:dd:30:4a:f0:9e:75:86:3e:05:56:4f:b0:d6:ba:f6:60:e4: 85:3d:d8:6e:57:8e:8e:c5:19:4e:fd:bb:26:c7:00:66:3e:09: c7:1d:56:a8:43:0f:04:06:76:c5:88:e4:05:af:24:00:c0:8f: c0:8b:1e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkkDQbwjL+xDnCtEQH05+7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUwOTA3MTIwMDU3WhcNMjUwOTA4MTIwMDU3WjAzMTEwLwYDVQQD Eyg1ZjJmZWEzZmU1MTIyOTQ4NDVjNWNmMTRlMjAyMzVkYWZhZmY5ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TBUbbUVI+rAcv9Qc1qq2RphkU/x aQAavGDEYNGntx2hTkQH6lBTV5Bne+io5c8iE1XpqyKxLlS0hJhYDtT0YazDgnU5 PH7nU6ulNXU3FTRxM7X6GAcoa8U/Q2XKoEJfF1dhG+S5iN9P2Bc1t6uxO59MdNxb qmM6sly6ZEwuQHFKGbKFR4gYOC+hxA18z+4Hpk8Cw4OO7kpF96qSZ2zG3NTWnLv2 FItFDWq/jNXyMBSdcHS0X2m08aCmCp3pdjXOe8ayctWw4eylJKLSf6V1ne0dyke5 LabvANUnCouKHA11xVYzYFJQq4zymgW+YuT24RTBTGAQ6BUuuVtyDzW23wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8v6j/lEilIRcXPFOICNdr6/54MMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJaqx2iD R7DuFSQwFZMZkM5tF69pr+NquQ4JlP8XTRrcJaJBHa9dyFYu6bOFTAjfNJHtZj+r 87G8UGK+fTDAmkwZa9EAECeFcMFxEZ1pEoZEUJdK2KKYQPkITukZhSZOyddnUokU vjv36fv8/fpwa4HdtGcd4RXW5VveG3M8NyLfS+pEX4dsnOFCxkDcJ1dKLbZExweA LLmlSnDr5AVljwRVAtqP6dCIG263SognR9xTcPz6Xgn1s1hgtmd0qLxOzvp2xzYm 990wSvCedYY+BVZPsNa69mDkhT3YbleOjsUZTv27JscAZj4Jxx1WqEMPBAZ2xYjk Ba8kAMCPwIsedg== -----END CERTIFICATE-----Generated at Sun Sep 7 15:23:07 2025 by rpki-client