$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: VWfKF3IxfRedwTfEdFYNpdbXoX+ke5DVNO1t+qlUmNM= Subject key identifier: 1E:FE:B1:64:7E:CE:58:2D:64:D9:E9:9F:70:04:93:5F:22:9A:87:48 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019A4C6141549E50738B1A04A920B2D11574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 171D Signing time: Tue 04 Nov 2025 01:00:33 +0000 Manifest this update: Tue 04 Nov 2025 01:00:33 +0000 Manifest next update: Wed 05 Nov 2025 01:00:33 +0000 Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=) 2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=) 3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=) 4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=) 5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=) 6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=) 7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=) 8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=) 9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=) 10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=) 11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=) 12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: /V23xA6sJt/lGzigSOCTfMATYhSOFFZdijq+MZ38Anc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 20:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:41:54:9e:50:73:8b:1a:04:a9:20:b2:d1:15:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Nov 4 01:00:33 2025 GMT Not After : Nov 5 01:00:33 2025 GMT Subject: CN=1efeb1647ece582d64d9e99f7004935f229a8748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:60:2f:62:ef:c6:61:22:33:9a:09:10:14:8a: 43:93:fb:9a:23:ce:d6:23:7e:b1:f4:b6:46:43:27: c3:eb:d3:fd:1e:a8:3a:6b:40:0a:00:e1:3b:01:b6: 1b:cc:64:4a:7f:23:ec:6d:3f:bc:8b:0e:c3:aa:f5: df:a7:fd:77:33:b6:63:2e:53:21:4b:5d:92:f2:20: e5:39:4b:b7:a1:20:ac:3d:df:eb:6f:88:38:02:8f: ed:55:7b:40:c3:45:1d:b2:c4:43:f6:b9:bb:5f:a7: ff:51:d3:58:b7:eb:b5:97:4b:b0:4f:df:9d:e8:da: f7:3c:c1:d2:15:7e:ab:de:56:af:22:e2:77:19:d7: a9:f2:77:80:eb:fc:25:09:06:e8:79:94:15:3e:fd: 68:aa:d8:e3:8e:80:6b:ef:d7:68:88:31:b9:a6:2a: 91:17:8f:ce:0e:7a:a8:38:5b:f4:0f:df:36:85:54: 06:fe:58:e8:5d:2f:67:1e:b6:fb:2b:a7:1f:02:89: a8:ed:fb:a1:29:82:80:d5:83:06:5d:50:c8:86:44: 20:27:a6:b6:f5:17:cc:27:34:2d:81:af:e3:49:8f: d6:2f:41:43:ee:cb:2e:1c:be:41:ea:81:2c:ee:63: 8c:26:e7:39:00:13:c3:84:a7:f7:28:23:71:66:10: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FE:B1:64:7E:CE:58:2D:64:D9:E9:9F:70:04:93:5F:22:9A:87:48 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:74:5e:1d:5c:ff:f0:50:50:5d:29:44:c5:84:7a:23:f3:2a: ed:97:8e:87:31:0e:98:2c:b5:8a:6e:ff:a9:d2:a6:74:36:00: 57:7f:b6:d5:4e:c2:fa:f6:1e:28:82:64:9e:ca:cb:ef:2a:ce: 35:cd:97:3a:a9:ec:f3:a7:93:7a:52:2f:9d:d2:ec:f3:6f:0a: fd:4c:d3:53:51:b9:c3:43:04:6c:91:98:dc:c4:a0:58:4e:d3: 16:5a:e2:cc:fa:ea:ca:6f:d6:6d:4b:ee:47:4c:93:bc:ae:7c: 1c:f6:9c:a4:ac:06:56:aa:ed:70:52:51:d4:8c:3f:fe:70:5a: d4:76:fc:2f:4d:9c:fb:c0:00:9a:45:7f:09:75:bb:5d:15:00: 96:9e:c7:b3:29:ef:fb:bb:ee:98:13:4b:99:22:a9:73:d1:a1: c7:04:22:4c:44:fa:87:54:17:cf:75:54:33:da:c8:c7:19:7e: a8:8d:06:f6:ea:ca:67:89:bd:50:7b:d0:1e:8c:97:c9:02:e2: a0:0c:21:56:cd:6d:84:7a:8d:b5:2f:c0:37:d4:b3:83:ca:4f: b5:f1:c0:27:c8:79:73:0a:cd:76:94:0a:b6:6b:b6:98:f0:4c: 61:c8:c1:66:dc:a6:5c:a7:a0:86:79:fc:5a:81:27:57:2e:8c: 34:90:69:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYUFUnlBzixoEqSCy0RV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjUxMTA0MDEwMDMzWhcNMjUxMTA1MDEwMDMzWjAzMTEwLwYDVQQD EygxZWZlYjE2NDdlY2U1ODJkNjRkOWU5OWY3MDA0OTM1ZjIyOWE4NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGAvYu/GYSIzmgkQFIpDk/uaI87W I36x9LZGQyfD69P9Hqg6a0AKAOE7AbYbzGRKfyPsbT+8iw7DqvXfp/13M7ZjLlMh S12S8iDlOUu3oSCsPd/rb4g4Ao/tVXtAw0UdssRD9rm7X6f/UdNYt+u1l0uwT9+d 6Nr3PMHSFX6r3lavIuJ3Gdep8neA6/wlCQboeZQVPv1oqtjjjoBr79doiDG5piqR F4/ODnqoOFv0D982hVQG/ljoXS9nHrb7K6cfAomo7fuhKYKA1YMGXVDIhkQgJ6a2 9RfMJzQtga/jSY/WL0FD7ssuHL5B6oEs7mOMJuc5ABPDhKf3KCNxZhBiJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7+sWR+zlgtZNnpn3AEk18imodIMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnReHVz/ 8FBQXSlExYR6I/Mq7ZeOhzEOmCy1im7/qdKmdDYAV3+21U7C+vYeKIJknsrL7yrO Nc2XOqns86eTelIvndLs828K/UzTU1G5w0MEbJGY3MSgWE7TFlrizPrqym/WbUvu R0yTvK58HPacpKwGVqrtcFJR1Iw//nBa1Hb8L02c+8AAmkV/CXW7XRUAlp7Hsynv +7vumBNLmSKpc9GhxwQiTET6h1QXz3VUM9rIxxl+qI0G9urKZ4m9UHvQHoyXyQLi oAwhVs1thHqNtS/AN9Szg8pPtfHAJ8h5cwrNdpQKtmu2mPBMYcjBZtymXKeghnn8 WoEnVy6MNJBppw== -----END CERTIFICATE-----Generated at Tue Nov 4 06:02:59 2025 by rpki-client