$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: 6QM0u5U7fHyC17qFYgqEZJPVBkostAQI55afL5elQ90= Subject key identifier: 1D:1C:8E:DE:A5:4A:B9:00:E1:33:A7:00:87:AB:A4:45:BD:71:D5:27 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019938701DBB4522E4D29D9763A818379195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0ED2 Signing time: Thu 11 Sep 2025 11:01:35 +0000 Manifest this update: Thu 11 Sep 2025 11:01:35 +0000 Manifest next update: Fri 12 Sep 2025 11:01:35 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 6: Wzt-Ou1QVSJEG5lh6mPjN_ZX0o8.roa (hash: KIeE4BRemOsByP9NZcIanx6wVETopkaYtA+bHc7KopI=) 7: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 8: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 9: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: +sC38sG9c/uu8lea6YggJShb6vDDfNqR6/VA52TNSAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:38:70:1d:bb:45:22:e4:d2:9d:97:63:a8:18:37:91:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Sep 11 11:01:35 2025 GMT Not After : Sep 12 11:01:35 2025 GMT Subject: CN=1d1c8edea54ab900e133a70087aba445bd71d527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:53:27:e6:10:75:3a:d1:17:70:07:00:88: a7:81:23:6d:81:76:a9:27:04:c6:3c:02:cc:96:b7: 14:67:8e:c2:a4:09:38:7a:fc:15:3d:cf:57:79:61: 17:6a:8d:8f:8c:dc:ab:1c:a5:ad:45:78:a6:e8:9d: 01:f4:07:3d:73:56:35:af:ef:0e:64:8a:ba:8e:ad: c2:b1:b1:72:2a:04:13:7d:b0:e8:cc:6b:90:7c:e7: bb:e6:65:17:11:44:36:75:a5:2a:d4:78:b8:34:c9: 5e:f1:0e:91:55:3f:64:c7:d7:42:43:e2:b4:29:0e: 29:96:55:9f:33:2e:fc:eb:7d:ca:de:83:8c:f7:62: db:b6:04:ca:86:e1:ff:2d:29:3c:b7:48:1f:79:71: c0:23:a4:90:85:3c:9c:bb:b4:6d:b4:d6:c3:e9:84: 09:2e:b2:6d:c8:21:bb:4d:ee:68:02:7b:f0:13:ac: f8:13:3e:23:75:c9:3d:b8:ab:22:06:f5:13:5b:b3: 74:ac:cf:9b:7e:59:eb:91:e9:bd:23:f1:a3:38:32: be:e2:f1:29:c3:89:e3:e3:c4:b2:f0:a6:65:e2:82: 94:78:57:36:48:29:d4:8a:cd:73:c5:40:4b:61:d5: 9c:42:32:b2:31:06:48:88:68:f6:df:2f:47:f2:52: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1C:8E:DE:A5:4A:B9:00:E1:33:A7:00:87:AB:A4:45:BD:71:D5:27 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:53:78:2b:33:3c:25:72:88:eb:28:0f:2b:4b:00:9d:04:a7: 04:b8:f9:e1:b4:0b:9c:cb:8f:c7:12:a6:e4:a4:37:f8:2b:5b: 6b:31:8a:c3:27:ca:f1:e6:42:db:78:a1:9c:63:98:c4:f4:78: 8b:f3:fa:f8:22:67:2c:05:35:fe:74:a2:a5:af:02:28:d3:55: e1:ba:bb:5e:6f:3b:f6:3f:e2:38:34:00:7f:22:99:b7:a6:43: e4:92:e2:92:ec:47:25:a7:d6:d1:9d:08:67:96:9c:2e:2d:d8: f6:8e:e3:49:e7:e4:4a:f5:56:05:92:64:71:08:64:77:10:f7: 78:12:ce:77:8c:53:f4:d5:89:89:66:28:c6:7d:77:15:6b:6e: 6d:be:de:af:62:fa:eb:79:8a:45:db:e4:81:de:cf:fa:46:5c: ce:43:77:e2:c6:cb:60:92:e2:85:61:e2:7f:fb:b6:01:a9:87: 15:2a:cb:69:ad:65:f9:e3:44:25:e7:8c:d8:48:84:37:3c:1e: b4:ec:bd:01:55:2e:9d:0f:76:a6:8e:55:68:6f:49:db:4c:02: 03:ab:39:91:7e:0e:29:db:42:96:66:93:e3:62:38:aa:a6:e6: 67:e3:70:96:58:ac:29:79:19:9f:16:36:8d:9e:57:cb:b5:89: 11:bc:f6:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk4cB27RSLk0p2XY6gYN5GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwOTExMTEwMTM1WhcNMjUwOTEyMTEwMTM1WjAzMTEwLwYDVQQD EygxZDFjOGVkZWE1NGFiOTAwZTEzM2E3MDA4N2FiYTQ0NWJkNzFkNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki5TJ+YQdTrRF3AHAIingSNtgXap JwTGPALMlrcUZ47CpAk4evwVPc9XeWEXao2PjNyrHKWtRXim6J0B9Ac9c1Y1r+8O ZIq6jq3CsbFyKgQTfbDozGuQfOe75mUXEUQ2daUq1Hi4NMle8Q6RVT9kx9dCQ+K0 KQ4pllWfMy78633K3oOM92LbtgTKhuH/LSk8t0gfeXHAI6SQhTycu7RttNbD6YQJ LrJtyCG7Te5oAnvwE6z4Ez4jdck9uKsiBvUTW7N0rM+bflnrkem9I/GjODK+4vEp w4nj48Sy8KZl4oKUeFc2SCnUis1zxUBLYdWcQjKyMQZIiGj23y9H8lLyNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0cjt6lSrkA4TOnAIerpEW9cdUnMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFN4KzM8 JXKI6ygPK0sAnQSnBLj54bQLnMuPxxKm5KQ3+CtbazGKwyfK8eZC23ihnGOYxPR4 i/P6+CJnLAU1/nSipa8CKNNV4bq7Xm879j/iODQAfyKZt6ZD5JLikuxHJafW0Z0I Z5acLi3Y9o7jSefkSvVWBZJkcQhkdxD3eBLOd4xT9NWJiWYoxn13FWtubb7er2L6 63mKRdvkgd7P+kZczkN34sbLYJLihWHif/u2AamHFSrLaa1l+eNEJeeM2EiENzwe tOy9AVUunQ92po5VaG9J20wCA6s5kX4OKdtClmaT42I4qqbmZ+NwllisKXkZnxY2 jZ5Xy7WJEbz2Vg== -----END CERTIFICATE-----Generated at Thu Sep 11 15:53:52 2025 by rpki-client