$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: Dm/daBno+biO58YLrf30JrpVLExqZZN1SL9foNnNpM4= Subject key identifier: F0:71:33:CB:2B:C1:75:EF:32:9D:60:97:70:6F:67:B9:23:23:C8:C3 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019A0CA6BC8EA5779138B4E4941BFC8EECA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1725 Signing time: Wed 22 Oct 2025 16:00:45 +0000 Manifest this update: Wed 22 Oct 2025 16:00:45 +0000 Manifest next update: Thu 23 Oct 2025 16:00:45 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (hash: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: s49jNqwOruavLReSabqcPVjFPUJLxzhwV8wDXqjpOEQ=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 13:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0c:a6:bc:8e:a5:77:91:38:b4:e4:94:1b:fc:8e:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Oct 22 16:00:45 2025 GMT Not After : Oct 23 16:00:45 2025 GMT Subject: CN=f07133cb2bc175ef329d6097706f67b92323c8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:fc:75:87:7e:78:60:2f:96:6a:12:04:05: 7d:84:68:ea:52:92:ce:42:5a:48:cc:9b:29:1b:1b: 66:90:1d:3c:97:ba:da:d7:95:5e:66:57:ce:16:d7: 2d:85:c1:af:76:74:3c:68:99:d2:28:37:22:07:eb: 28:e4:d3:e7:e5:3a:e1:89:7b:f1:ab:4f:79:fb:9e: 5a:0c:5a:6d:af:30:e0:af:2a:78:d6:a4:83:08:9d: c9:0c:ba:4c:3d:53:ee:5d:a3:12:2c:63:9d:a1:9a: ea:f1:02:b8:d3:d7:88:7c:e2:d2:86:79:8b:81:fa: 12:c6:5c:b1:b2:ef:d2:63:42:cb:c8:af:6b:91:74: a7:4d:91:76:c2:8f:eb:9b:6f:04:51:8c:de:1a:28: 72:21:9a:ac:b1:e4:1f:3a:b9:a7:44:8d:77:e6:c8: 02:b7:84:b1:30:c4:d8:9c:91:1d:f3:8b:95:c2:5b: ed:4e:c7:f3:22:71:3e:2a:38:a6:a7:8d:39:d6:da: 7c:16:d8:13:36:3f:d9:2e:aa:45:b3:42:5a:05:72: 2d:a5:76:1e:30:e4:30:14:1d:ad:79:9e:b8:dc:b5: bb:f0:86:3c:e2:f9:de:e0:b1:8b:81:fd:8a:0a:d2: 38:1a:10:7d:84:51:4c:b4:20:c1:f5:b4:1f:4e:0b: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:71:33:CB:2B:C1:75:EF:32:9D:60:97:70:6F:67:B9:23:23:C8:C3 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a8:6c:2b:86:80:91:0c:e0:97:99:41:91:84:67:a4:12:53: c4:83:e7:12:16:4c:76:c9:7d:3a:e0:70:61:11:6c:4c:2a:e1: fe:95:91:08:e7:4f:68:0f:65:b0:e2:ba:8b:4f:37:87:cc:86: f9:2e:73:0d:95:b5:ba:34:04:81:c9:5b:f0:8e:a6:e7:6a:26: 81:83:15:95:88:fb:8e:7d:a1:7d:52:22:14:95:e3:0b:ef:0d: 78:6e:ef:11:73:0c:d4:66:a6:61:7a:cc:bd:93:c2:02:bc:b4: cf:ca:3e:49:22:88:2e:f3:2d:bc:85:e6:fe:1e:c4:57:e6:bf: ce:11:c3:f9:be:fa:32:42:19:e3:0d:24:eb:10:12:50:dc:06: 86:7a:f8:e2:1e:1f:8e:c0:7b:35:e6:05:3b:5d:61:2f:1c:1f: 61:a5:7d:3c:19:2d:05:db:8e:27:01:84:fe:82:f0:6e:ad:c9: ce:48:ca:c9:40:90:13:60:70:4d:d9:d5:ba:93:db:61:c8:d0: b7:0a:48:60:42:83:28:b0:49:b3:47:d5:58:38:9d:d0:98:24: da:c6:8c:52:c5:00:d5:b9:ad:67:ea:4b:45:6d:2c:37:9c:de: 93:df:06:63:58:22:52:64:5d:b0:54:d1:ec:81:65:e5:28:be: ea:30:cb:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoMpryOpXeROLTklBv8juygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUxMDIyMTYwMDQ1WhcNMjUxMDIzMTYwMDQ1WjAzMTEwLwYDVQQD EyhmMDcxMzNjYjJiYzE3NWVmMzI5ZDYwOTc3MDZmNjdiOTIzMjNjOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjX8dYd+eGAvlmoSBAV9hGjqUpLO QlpIzJspGxtmkB08l7ra15VeZlfOFtcthcGvdnQ8aJnSKDciB+so5NPn5TrhiXvx q095+55aDFptrzDgryp41qSDCJ3JDLpMPVPuXaMSLGOdoZrq8QK409eIfOLShnmL gfoSxlyxsu/SY0LLyK9rkXSnTZF2wo/rm28EUYzeGihyIZqsseQfOrmnRI135sgC t4SxMMTYnJEd84uVwlvtTsfzInE+Kjimp4051tp8FtgTNj/ZLqpFs0JaBXItpXYe MOQwFB2teZ643LW78IY84vne4LGLgf2KCtI4GhB9hFFMtCDB9bQfTgvd/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBxM8srwXXvMp1gl3BvZ7kjI8jDMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuahsK4aA kQzgl5lBkYRnpBJTxIPnEhZMdsl9OuBwYRFsTCrh/pWRCOdPaA9lsOK6i083h8yG +S5zDZW1ujQEgclb8I6m52omgYMVlYj7jn2hfVIiFJXjC+8NeG7vEXMM1GamYXrM vZPCAry0z8o+SSKILvMtvIXm/h7EV+a/zhHD+b76MkIZ4w0k6xASUNwGhnr44h4f jsB7NeYFO11hLxwfYaV9PBktBduOJwGE/oLwbq3JzkjKyUCQE2BwTdnVupPbYcjQ twpIYEKDKLBJs0fVWDid0Jgk2saMUsUA1bmtZ+pLRW0sN5zek98GY1giUmRdsFTR 7IFl5Si+6jDLXQ== -----END CERTIFICATE-----Generated at Wed Oct 22 18:58:33 2025 by rpki-client