$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: TGN8KGvfpSBzhbVcr7qHb2/VZLR1EFcQ/kJaXcVMQDI= Subject key identifier: 80:70:3F:ED:AC:2E:31:62:E2:E1:FB:65:01:F3:F7:1C:D2:44:F6:49 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019A2AB17A4745D074E7205608B0D199059A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1704 Signing time: Tue 28 Oct 2025 12:01:05 +0000 Manifest this update: Tue 28 Oct 2025 12:01:05 +0000 Manifest next update: Wed 29 Oct 2025 12:01:05 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: 5QjetMz25IrPMk4bdQhpnkxOs15CywRGaXjTbGGq0PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2a:b1:7a:47:45:d0:74:e7:20:56:08:b0:d1:99:05:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Oct 28 12:01:05 2025 GMT Not After : Oct 29 12:01:05 2025 GMT Subject: CN=80703fedac2e3162e2e1fb6501f3f71cd244f649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:e7:97:2f:13:37:52:c0:ae:58:52:a2:d1: 47:da:f0:67:dd:cd:91:32:b1:08:c0:a4:67:27:4e: 7d:23:2c:c7:bb:00:7e:08:01:2e:9c:a0:47:07:32: ff:ed:57:88:c1:55:65:d8:be:00:c1:32:a9:b2:cb: 1d:e2:72:76:71:c8:0a:25:fc:b3:17:40:2b:a6:d7: 40:60:1e:98:e9:19:7a:d9:dd:64:7f:45:e6:c2:02: 1d:20:56:fa:cb:09:78:55:cf:04:88:bc:70:11:cc: 34:a1:cb:7d:8c:f5:43:2c:7c:06:a5:a0:45:16:46: 45:50:a9:05:ff:32:c6:4e:61:34:41:e1:68:51:e8: 40:5b:42:db:4a:cc:f0:2a:cd:17:98:00:9f:29:18: 1d:a1:05:86:9f:4a:66:0e:75:e7:de:02:cd:fe:df: 41:f9:b7:e2:c9:7d:35:96:ca:eb:81:73:8b:48:0e: 11:a3:6a:fd:ae:d0:d8:95:98:12:89:42:fb:a7:52: 59:b4:c1:ae:25:6a:63:dd:72:10:4d:e0:91:64:d6: 4f:ca:9b:7c:cf:37:da:e4:e4:51:5b:2e:a0:ad:ba: 6f:f5:f7:00:7a:dc:09:da:2d:b9:49:54:77:3c:d0: 7c:d8:f9:ec:7d:41:4c:71:f7:7e:23:6f:d3:d8:aa: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:3F:ED:AC:2E:31:62:E2:E1:FB:65:01:F3:F7:1C:D2:44:F6:49 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ff:d3:1d:4c:bd:bb:f8:78:24:cc:5b:b4:df:04:92:60:b0: 9c:ce:4a:57:c2:f5:f3:1b:fd:46:8d:a2:cb:f9:de:23:df:ea: 35:e8:b2:51:ff:d6:a6:4f:0f:91:33:45:06:2a:07:b4:8e:ba: 94:14:87:1d:87:b1:f5:ba:f6:f3:39:28:83:59:10:20:a8:1d: 24:c6:cb:03:7a:47:ba:45:69:3c:fd:4e:aa:53:9d:38:9b:20: 07:a6:fc:28:33:32:a2:1e:a0:ea:b7:11:43:0a:53:1e:4e:de: a4:58:31:2e:fc:d3:34:c4:3d:6e:e2:5a:8a:14:14:2f:a4:ac: 37:48:3a:88:a9:63:6c:b6:98:3c:cb:49:00:47:a8:4c:f9:25: c2:ff:03:5f:fe:c0:0a:ca:b3:28:c2:3f:ed:2d:0a:08:98:74: 0b:9e:77:d2:a2:61:9f:48:4f:9a:a5:25:26:9a:c7:14:c0:29: 1f:e3:a6:e0:da:d5:3c:f5:f2:ce:74:90:db:12:31:e0:62:c9: 83:a0:8b:c5:79:be:5b:34:c4:4f:18:4f:14:53:0e:8d:b0:31: 51:53:1f:30:3f:7c:f3:59:07:74:12:c4:93:1c:6b:9e:3d:5d: 78:3c:af:5a:dc:cb:0f:bd:74:ff:b7:13:d2:6e:5c:ab:1a:93: e5:0e:34:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoqsXpHRdB05yBWCLDRmQWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUxMDI4MTIwMTA1WhcNMjUxMDI5MTIwMTA1WjAzMTEwLwYDVQQD Eyg4MDcwM2ZlZGFjMmUzMTYyZTJlMWZiNjUwMWYzZjcxY2QyNDRmNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RTnly8TN1LArlhSotFH2vBn3c2R MrEIwKRnJ059IyzHuwB+CAEunKBHBzL/7VeIwVVl2L4AwTKpsssd4nJ2ccgKJfyz F0ArptdAYB6Y6Rl62d1kf0XmwgIdIFb6ywl4Vc8EiLxwEcw0oct9jPVDLHwGpaBF FkZFUKkF/zLGTmE0QeFoUehAW0LbSszwKs0XmACfKRgdoQWGn0pmDnXn3gLN/t9B +bfiyX01lsrrgXOLSA4Ro2r9rtDYlZgSiUL7p1JZtMGuJWpj3XIQTeCRZNZPypt8 zzfa5ORRWy6grbpv9fcAetwJ2i25SVR3PNB82PnsfUFMcfd+I2/T2Ko96wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBwP+2sLjFi4uH7ZQHz9xzSRPZJMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhv/THUy9 u/h4JMxbtN8EkmCwnM5KV8L18xv9Ro2iy/neI9/qNeiyUf/Wpk8PkTNFBioHtI66 lBSHHYex9br28zkog1kQIKgdJMbLA3pHukVpPP1OqlOdOJsgB6b8KDMyoh6g6rcR QwpTHk7epFgxLvzTNMQ9buJaihQUL6SsN0g6iKljbLaYPMtJAEeoTPklwv8DX/7A CsqzKMI/7S0KCJh0C5530qJhn0hPmqUlJprHFMApH+Om4NrVPPXyznSQ2xIx4GLJ g6CLxXm+WzTETxhPFFMOjbAxUVMfMD9881kHdBLEkxxrnj1deDyvWtzLD710/7cT 0m5cqxqT5Q40jg== -----END CERTIFICATE-----Generated at Tue Oct 28 20:19:36 2025 by rpki-client