$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: tWiYPMXy6xCmQC73hGVULvXdnujYdeoQNB7eb7A4Pas= Subject key identifier: 76:74:41:EC:E4:4D:7E:15:25:11:7D:A9:89:EA:A2:C0:3C:19:FF:98 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 01991F1DA1CCC4B5583447EE2792B4FD43D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0FDD Signing time: Sat 06 Sep 2025 13:00:59 +0000 Manifest this update: Sat 06 Sep 2025 13:00:59 +0000 Manifest next update: Sun 07 Sep 2025 13:00:59 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: 7-yY2XLWHLUd9AuKxH5IHfl175M.roa (hash: zG66GAnwYloqOJJfg6bZ7R9P50YwxEBbTOi0v9cAdF8=) 6: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 7: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 8: XBAXnSmCv5-aVjUmot5ATfiEuxI.roa (hash: 6g9dUj0D+s3CKiQ71bKeZNmrEFu0U89VttCxnqum4+4=) 9: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 10: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: 4YLGk9AeRK2SsKToxG90++lnOYDytkWbX7VdRSClUk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 11:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1f:1d:a1:cc:c4:b5:58:34:47:ee:27:92:b4:fd:43:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Sep 6 13:00:59 2025 GMT Not After : Sep 7 13:00:59 2025 GMT Subject: CN=767441ece44d7e1525117da989eaa2c03c19ff98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:6b:d3:22:f2:24:3c:cb:be:37:a9:59:a2: f2:fe:fe:ba:17:e3:b1:5b:bd:04:e2:6d:fe:0a:a2: 5a:9f:52:3a:1b:c2:45:3f:d2:a7:b0:8e:31:8d:47: c0:f8:d3:27:06:73:02:45:bd:7d:f3:c5:e1:13:7b: 76:01:04:c8:0c:10:7d:5c:68:c6:db:4f:ce:81:46: 26:d9:63:a6:2c:06:e8:d3:d6:e7:bb:19:46:d7:ae: 13:6f:1d:94:92:36:cb:7e:cc:85:b5:21:5b:07:57: eb:7c:a5:40:94:d4:74:20:70:89:9f:53:81:af:47: be:9e:b6:05:35:f7:69:e5:fc:0f:48:97:9d:11:77: b0:0d:fd:f8:aa:ad:2f:70:6c:7f:7f:d8:7c:7e:20: fe:4a:1c:24:de:ed:4d:7c:0d:f3:44:86:87:9d:8b: 25:5b:82:b1:5e:eb:3d:a5:a4:7b:78:00:db:b5:10: 68:f9:39:7c:bd:43:19:93:36:ba:b3:e1:46:da:1f: 39:ad:d4:a0:ae:37:2c:d1:c4:50:d0:ef:b9:62:c6: 8b:9e:20:c0:a9:2a:4b:92:52:4a:d8:33:69:b1:db: 0b:43:7b:14:fd:86:4f:2a:41:78:41:09:3e:ef:16: de:7f:10:b4:54:5e:d8:be:96:6b:9f:10:43:cd:b6: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:74:41:EC:E4:4D:7E:15:25:11:7D:A9:89:EA:A2:C0:3C:19:FF:98 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:30:6b:da:c7:44:52:3a:25:ee:0d:a6:2b:a0:6c:d5:72:2f: e4:7e:a5:85:5a:6c:7f:9e:4d:dd:6d:85:61:5d:4c:79:8a:85: 63:93:4b:dc:44:b4:c8:9e:40:80:0e:a8:77:3e:65:1f:76:cd: de:7e:4b:30:c5:89:a5:a5:f0:88:6e:ec:f0:f9:8b:a9:56:35: d8:04:c8:fe:49:1d:9f:d7:c8:e4:a3:32:de:af:64:f9:65:25: ec:0f:9e:00:93:99:f5:83:39:e4:9b:7a:0c:19:09:a2:a4:ca: d9:0e:b7:f1:2f:9a:49:0a:87:f8:ea:a8:ce:6c:22:a2:bf:77: 2f:f0:89:c2:a8:7e:65:12:58:12:cf:a2:26:f2:80:02:44:87: f7:d8:ba:80:6f:e2:1f:9d:b2:05:ce:2f:8a:5c:af:6d:f0:e1: 41:3d:8c:ba:92:2d:d5:d3:1d:d5:f7:8f:22:4d:00:0f:7b:a5: 96:15:f2:ca:dd:4b:3e:d9:a5:09:18:90:0f:e5:88:38:ca:72: 63:14:27:c7:15:e5:12:94:0d:c9:f3:1c:f0:b2:54:36:49:f4: 97:43:1c:2c:b7:30:09:87:0e:8e:bc:0c:0f:32:27:7a:e4:9d: a0:f4:0f:f8:a6:b6:2c:bb:48:9a:6b:2c:17:bd:88:f3:4d:fd: e8:d4:9e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkfHaHMxLVYNEfuJ5K0/UPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwOTA2MTMwMDU5WhcNMjUwOTA3MTMwMDU5WjAzMTEwLwYDVQQD Eyg3Njc0NDFlY2U0NGQ3ZTE1MjUxMTdkYTk4OWVhYTJjMDNjMTlmZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrZr0yLyJDzLvjepWaLy/v66F+Ox W70E4m3+CqJan1I6G8JFP9KnsI4xjUfA+NMnBnMCRb1988XhE3t2AQTIDBB9XGjG 20/OgUYm2WOmLAbo09bnuxlG164Tbx2UkjbLfsyFtSFbB1frfKVAlNR0IHCJn1OB r0e+nrYFNfdp5fwPSJedEXewDf34qq0vcGx/f9h8fiD+Shwk3u1NfA3zRIaHnYsl W4KxXus9paR7eADbtRBo+Tl8vUMZkza6s+FG2h85rdSgrjcs0cRQ0O+5YsaLniDA qSpLklJK2DNpsdsLQ3sU/YZPKkF4QQk+7xbefxC0VF7YvpZrnxBDzbZ6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ0QezkTX4VJRF9qYnqosA8Gf+YMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTBr2sdE Ujol7g2mK6Bs1XIv5H6lhVpsf55N3W2FYV1MeYqFY5NL3ES0yJ5AgA6odz5lH3bN 3n5LMMWJpaXwiG7s8PmLqVY12ATI/kkdn9fI5KMy3q9k+WUl7A+eAJOZ9YM55Jt6 DBkJoqTK2Q638S+aSQqH+Oqozmwior93L/CJwqh+ZRJYEs+iJvKAAkSH99i6gG/i H52yBc4vilyvbfDhQT2MupIt1dMd1fePIk0AD3ullhXyyt1LPtmlCRiQD+WIOMpy YxQnxxXlEpQNyfMc8LJUNkn0l0McLLcwCYcOjrwMDzIneuSdoPQP+Ka2LLtImmss F72I80396NSekQ== -----END CERTIFICATE-----Generated at Sat Sep 6 15:26:13 2025 by rpki-client