$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: eeo8hclNlZbBZM+uCKZZZVrM3oxSTznf8j7qnDCxiBQ= Subject key identifier: C9:E2:24:32:24:13:D8:06:D9:44:7C:12:4D:2D:78:EC:3E:B2:E0:2D Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 0199263277997E9300161AB8C883E1C3CBA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 168D Signing time: Sun 07 Sep 2025 22:01:05 +0000 Manifest this update: Sun 07 Sep 2025 22:01:05 +0000 Manifest next update: Mon 08 Sep 2025 22:01:05 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: x7yXF+Pq/M2af9UETQi+FbzzZVi4BBk0h93pYB+sPJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 17:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:32:77:99:7e:93:00:16:1a:b8:c8:83:e1:c3:cb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Sep 7 22:01:05 2025 GMT Not After : Sep 8 22:01:05 2025 GMT Subject: CN=c9e224322413d806d9447c124d2d78ec3eb2e02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:ad:d0:d8:e3:6f:14:07:47:74:1a:66:a0: 18:b3:de:09:0e:15:91:57:96:ba:48:77:69:0f:a8: 8a:68:00:44:3b:81:9e:76:3a:57:29:a3:32:23:e2: d3:d6:25:ee:d1:c3:60:bb:ad:24:c3:51:2c:33:cd: 42:b2:de:41:4b:6a:6a:63:0f:6f:28:39:42:d2:a3: b6:c3:d3:9b:a9:53:82:f1:bd:38:5b:de:74:73:14: 95:43:81:f6:4a:db:db:5e:b4:d3:b0:3e:10:0a:3c: 84:85:a7:af:37:90:16:a2:ed:74:65:e9:ac:15:15: f7:30:5d:ec:ab:49:3d:21:b2:62:d0:22:31:08:f2: 75:31:cf:cd:f4:18:18:f0:3c:51:30:02:c2:9f:2b: bb:d2:32:02:a5:c8:4e:d0:c3:61:0d:47:79:41:d8: 55:ce:cf:6e:89:23:be:a9:8d:57:8e:0a:f0:8b:b6: a8:c3:49:0b:31:35:2c:77:78:bd:ac:ff:ff:d6:4f: 3b:ac:42:61:03:c1:aa:b0:ef:ef:34:8b:ef:de:36: 49:95:1f:45:6c:f9:b3:c9:e3:b4:60:5d:ea:d0:c4: 2f:2c:38:79:fa:4d:bf:75:ee:d4:f4:ad:19:17:c2: 9f:de:e5:77:96:47:2c:08:5d:73:5e:26:c7:8e:14: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E2:24:32:24:13:D8:06:D9:44:7C:12:4D:2D:78:EC:3E:B2:E0:2D X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c0:b5:97:1b:3f:f2:99:69:c3:46:76:b4:17:ba:fb:77:d5: fb:35:62:e7:74:85:42:40:93:e0:cd:bf:b1:da:77:35:c4:33: 79:2f:a6:19:38:09:29:7b:66:a4:31:f6:a6:f3:6f:fd:ad:b7: 74:5b:ff:b3:a1:a2:c7:bf:00:15:08:41:d6:2f:b4:fe:5f:b5: 13:5a:f7:4f:e6:5e:2e:d6:93:c4:03:07:a0:bb:7d:c4:8e:5d: 56:46:89:25:a0:2c:3d:8f:7c:88:df:0e:4c:92:70:f7:90:fd: 37:fc:b5:1d:30:08:c3:84:57:7d:f9:9c:6e:69:6c:cd:8f:be: b8:f6:b7:04:51:ab:7c:24:4f:54:e9:fe:4f:6b:bd:bc:0b:e6: 70:74:05:5e:ab:86:90:c8:d4:1c:bf:f7:ef:17:e2:b7:c8:9b: 6b:29:f3:e7:5c:4d:09:72:73:e8:a2:fc:4a:b3:0d:66:c4:71: 89:ba:47:3e:f4:b1:e8:12:53:44:7c:fc:df:38:b7:a6:0e:ae: d8:b6:bb:ea:c6:63:bf:b2:b2:16:47:85:fc:66:13:eb:66:19: 3e:be:79:d7:9d:a4:13:26:48:0f:88:ca:88:33:e4:89:dc:a3: 93:87:16:9b:f0:27:e0:1a:6f:31:f1:de:cf:0a:6d:25:a9:f0: 14:20:5a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmMneZfpMAFhq4yIPhw8unMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUwOTA3MjIwMTA1WhcNMjUwOTA4MjIwMTA1WjAzMTEwLwYDVQQD EyhjOWUyMjQzMjI0MTNkODA2ZDk0NDdjMTI0ZDJkNzhlYzNlYjJlMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27yt0NjjbxQHR3QaZqAYs94JDhWR V5a6SHdpD6iKaABEO4GedjpXKaMyI+LT1iXu0cNgu60kw1EsM81Cst5BS2pqYw9v KDlC0qO2w9ObqVOC8b04W950cxSVQ4H2StvbXrTTsD4QCjyEhaevN5AWou10Zems FRX3MF3sq0k9IbJi0CIxCPJ1Mc/N9BgY8DxRMALCnyu70jICpchO0MNhDUd5QdhV zs9uiSO+qY1Xjgrwi7aow0kLMTUsd3i9rP//1k87rEJhA8GqsO/vNIvv3jZJlR9F bPmzyeO0YF3q0MQvLDh5+k2/de7U9K0ZF8Kf3uV3lkcsCF1zXibHjhSE9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMniJDIkE9gG2UR8Ek0teOw+suAtMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMC1lxs/ 8plpw0Z2tBe6+3fV+zVi53SFQkCT4M2/sdp3NcQzeS+mGTgJKXtmpDH2pvNv/a23 dFv/s6Gix78AFQhB1i+0/l+1E1r3T+ZeLtaTxAMHoLt9xI5dVkaJJaAsPY98iN8O TJJw95D9N/y1HTAIw4RXffmcbmlszY++uPa3BFGrfCRPVOn+T2u9vAvmcHQFXquG kMjUHL/37xfit8ibaynz51xNCXJz6KL8SrMNZsRxibpHPvSx6BJTRHz83zi3pg6u 2La76sZjv7KyFkeF/GYT62YZPr55152kEyZID4jKiDPkidyjk4cWm/An4BpvMfHe zwptJanwFCBaPw== -----END CERTIFICATE-----Generated at Mon Sep 8 02:15:55 2025 by rpki-client