$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: dWsTfUtthuibTfpf1NSsa5UEkw7VdUyIrGPN+SujdPk= Subject key identifier: DE:42:36:C1:83:05:4D:56:A6:10:84:8D:74:BC:E9:C7:06:D0:A6:42 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019749D62EC0E35DAFE576DD7E5BB8AFF343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 158E Signing time: Sat 07 Jun 2025 10:01:02 +0000 Manifest this update: Sat 07 Jun 2025 10:01:02 +0000 Manifest next update: Sun 08 Jun 2025 10:01:02 +0000 Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=) 2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=) 3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=) 4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=) 5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=) 6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=) 7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=) 8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=) 9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=) 10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=) 11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=) 12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: RZ0rrnd9cqV/Q5l8b2pQIZ89wdsLnXTlRoLw7kRKGa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:d6:2e:c0:e3:5d:af:e5:76:dd:7e:5b:b8:af:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jun 7 10:01:02 2025 GMT Not After : Jun 8 10:01:02 2025 GMT Subject: CN=de4236c183054d56a610848d74bce9c706d0a642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:66:b5:27:65:69:a6:36:d4:c5:a5:99:29: 75:a4:43:e0:83:71:3f:08:7a:4a:10:6f:ad:0e:c3: 4e:61:a1:ed:b8:eb:2d:ef:ec:b9:29:98:8d:84:d7: 74:28:80:f3:dd:a6:3d:9e:9e:99:11:8c:0c:71:27: f6:c7:44:36:fc:76:7c:28:ed:43:8e:20:ef:97:00: c6:56:32:66:b2:96:bc:a0:ac:9e:a2:ba:4c:59:fe: 09:a0:49:b5:0b:f2:8f:c1:2d:db:ed:58:e6:a9:8d: 99:7c:e1:5a:00:e9:d5:32:e6:9c:15:8d:cb:91:38: ea:25:8c:b8:de:b1:bf:2d:bd:07:d7:c6:3b:5e:52: 4b:ad:cb:86:2b:68:2e:fc:b8:01:db:d2:37:ad:d3: 2f:c4:21:07:30:c6:b2:16:0e:36:47:bf:d6:e1:66: 2d:25:96:2e:79:b0:83:31:d2:c2:d4:b1:c4:bb:63: 3a:cf:d0:e7:bb:22:1f:2a:0c:f7:1f:51:f3:41:27: c8:a7:74:8e:6f:89:23:80:1e:f7:92:bd:95:1b:ec: 38:38:c2:ed:ee:3e:3f:ad:5a:87:e7:5d:ef:ad:b8: 45:90:e6:62:14:11:d8:24:a7:7b:05:f8:99:73:f4: b8:10:af:6b:c5:35:ec:5b:42:40:64:2f:07:55:13: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:36:C1:83:05:4D:56:A6:10:84:8D:74:BC:E9:C7:06:D0:A6:42 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:be:b4:a6:25:fd:d6:5a:1d:64:0c:b8:f5:a8:12:12:51:bc: 60:dc:44:3b:b0:6e:f5:f5:f7:8c:78:fc:fa:da:82:d8:3f:4e: ef:88:7a:34:54:c1:96:86:a2:26:83:e5:ac:66:b9:76:3f:10: 24:41:18:25:e1:66:62:cc:6b:fb:d1:c1:11:92:19:33:63:e3: e6:3c:ff:a3:cd:7b:f2:82:4b:b6:dd:32:9f:6e:3d:66:0d:f8: 3d:5b:b3:d8:91:d8:a5:89:e5:d9:b2:c7:fb:00:4d:81:2a:db: 07:b3:e3:4a:22:80:91:bf:5e:14:05:73:06:01:82:82:20:51: b6:ca:c8:56:36:ef:6d:58:c2:9b:d0:37:8c:a5:e1:25:dc:0e: 6f:64:6c:88:ee:96:fd:bb:eb:2d:fb:53:af:cd:fd:5e:ff:2b: dd:df:90:c0:d6:2a:be:fb:42:8b:63:7c:40:92:50:8b:6a:7b: 65:53:9d:ec:7d:8f:69:6b:e2:79:19:39:0c:01:8c:b1:9f:c4: 84:50:6e:4d:17:e4:60:ad:4e:25:bd:89:37:41:f0:4c:56:ee: f2:0c:7f:14:5f:e7:c4:45:70:89:3b:76:15:0c:6e:17:e9:b1: 8f:f4:14:ac:3d:6b:08:b0:db:bc:aa:f8:7b:35:cb:22:2c:1a: e2:9a:a7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJ1i7A412v5Xbdflu4r/NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjUwNjA3MTAwMTAyWhcNMjUwNjA4MTAwMTAyWjAzMTEwLwYDVQQD EyhkZTQyMzZjMTgzMDU0ZDU2YTYxMDg0OGQ3NGJjZTljNzA2ZDBhNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCFmtSdlaaY21MWlmSl1pEPgg3E/ CHpKEG+tDsNOYaHtuOst7+y5KZiNhNd0KIDz3aY9np6ZEYwMcSf2x0Q2/HZ8KO1D jiDvlwDGVjJmspa8oKyeorpMWf4JoEm1C/KPwS3b7VjmqY2ZfOFaAOnVMuacFY3L kTjqJYy43rG/Lb0H18Y7XlJLrcuGK2gu/LgB29I3rdMvxCEHMMayFg42R7/W4WYt JZYuebCDMdLC1LHEu2M6z9DnuyIfKgz3H1HzQSfIp3SOb4kjgB73kr2VG+w4OMLt 7j4/rVqH513vrbhFkOZiFBHYJKd7BfiZc/S4EK9rxTXsW0JAZC8HVROaHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5CNsGDBU1WphCEjXS86ccG0KZCMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL60piX9 1lodZAy49agSElG8YNxEO7Bu9fX3jHj8+tqC2D9O74h6NFTBloaiJoPlrGa5dj8Q JEEYJeFmYsxr+9HBEZIZM2Pj5jz/o8178oJLtt0yn249Zg34PVuz2JHYpYnl2bLH +wBNgSrbB7PjSiKAkb9eFAVzBgGCgiBRtsrIVjbvbVjCm9A3jKXhJdwOb2RsiO6W /bvrLftTr839Xv8r3d+QwNYqvvtCi2N8QJJQi2p7ZVOd7H2PaWvieRk5DAGMsZ/E hFBuTRfkYK1OJb2JN0HwTFbu8gx/FF/nxEVwiTt2FQxuF+mxj/QUrD1rCLDbvKr4 ezXLIiwa4pqnYA== -----END CERTIFICATE-----Generated at Sat Jun 7 16:13:16 2025 by rpki-client