$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: 9VfUM7Kct7kD+og5/kpWEKfHkq1Bc1TbvVb0bNI4TpA= Subject key identifier: 3A:E3:9C:EA:5A:59:05:F4:0A:B6:D4:B1:9E:C6:B0:11:8C:5A:E9:15 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019749D616F4DDA9708795DF2A0E4238DCBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 158A Signing time: Sat 07 Jun 2025 10:00:56 +0000 Manifest this update: Sat 07 Jun 2025 10:00:56 +0000 Manifest next update: Sun 08 Jun 2025 10:00:56 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: D3HyRH4gt8I3AVc_11aVtLDHXXs.roa (hash: LthCRx/kLSoC/Gm2fuPju175Bc+44KoK1FGNtCDpOFQ=) 4: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 5: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 6: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 7: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: Z9178QndXZoMHWJ9RfEAJ4xtEANURCyoR8lot+MNGcA=) 9: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 10: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 11: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:d6:16:f4:dd:a9:70:87:95:df:2a:0e:42:38:dc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jun 7 10:00:56 2025 GMT Not After : Jun 8 10:00:56 2025 GMT Subject: CN=3ae39cea5a5905f40ab6d4b19ec6b0118c5ae915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:0a:35:a6:49:a7:2f:64:1b:3b:3f:5e:73: ee:70:d5:a2:1f:eb:99:42:52:29:62:27:5a:35:de: c1:c5:39:6c:ca:54:84:ca:03:e8:7d:42:dd:4d:53: 9f:6f:f9:23:ad:7f:74:57:9c:aa:f6:0b:f5:23:d8: 6d:07:7d:d3:ec:45:a4:cf:13:32:aa:29:8c:ff:39: 26:9f:7b:ec:09:dc:cb:5c:28:f2:cc:bd:fd:45:cf: b9:33:dd:65:ed:77:94:8a:dd:6e:ad:29:26:88:e7: 6a:75:b3:85:3f:d4:ae:4d:f6:24:13:f9:68:71:03: 26:71:30:e3:fe:aa:fb:6d:0f:76:81:80:3b:e1:31: 9e:99:4a:e8:e0:5e:f2:ac:c8:80:6f:67:a1:14:8a: 29:e9:ba:f2:a6:e1:79:df:af:71:62:fd:e6:5d:f2: f8:99:db:90:19:85:07:61:36:af:3c:8e:73:22:d0: 7f:69:7a:c3:af:48:75:84:25:c6:8d:33:2d:c1:6c: eb:56:bc:ef:6b:f9:af:b7:0c:19:31:5c:02:7a:8c: 74:83:b3:75:b3:61:6b:b4:ec:f0:8f:23:f5:25:f9: fc:8b:da:3c:4d:9a:46:8a:c3:46:a2:ea:9b:5f:c8: c5:86:60:4a:bb:45:1c:24:c1:16:ad:1b:fa:81:91: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E3:9C:EA:5A:59:05:F4:0A:B6:D4:B1:9E:C6:B0:11:8C:5A:E9:15 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:95:80:5d:bf:eb:97:66:f6:13:00:64:0d:e2:08:d5:c8:90: 67:27:0d:ce:30:d7:e4:4a:26:05:d9:df:2a:4c:3b:47:48:99: 08:ca:94:1f:43:a2:40:9e:5a:5f:de:ad:5c:02:25:15:24:31: a7:6e:56:8f:d0:b6:8f:62:7d:5e:d2:bf:f5:23:bd:23:d3:a6: ff:35:15:0a:fd:77:68:17:f7:82:de:f9:cb:40:09:8d:54:59: b8:1d:f9:10:f3:3d:4f:85:05:8c:f4:f5:9e:71:9b:ee:56:b8: 94:f7:47:e4:84:f1:dc:56:84:3b:36:6a:89:96:99:ef:e5:90: 88:25:71:7f:cb:ba:54:98:9d:c6:fc:ae:bc:6d:77:c4:f5:c0: 79:ee:72:93:cd:90:fa:dd:d7:9f:ce:5f:98:ad:5a:b1:9b:22: 17:67:0b:a9:3b:24:e4:b0:a6:dd:3a:bf:a9:b2:19:d9:16:69: 24:a1:36:b8:44:81:f5:d9:21:35:4a:33:b0:79:fd:b4:73:e9: da:72:f7:12:8b:34:f4:19:03:3d:66:3f:9d:dc:ea:cc:ad:6d: e5:90:39:51:f3:6f:b9:b8:62:4d:1a:3c:03:1a:59:bf:55:f1: 28:7c:42:15:2a:58:43:6e:00:f2:b4:40:b7:c7:42:f4:d1:ac: 0b:1d:31:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJ1hb03alwh5XfKg5CONy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwNjA3MTAwMDU2WhcNMjUwNjA4MTAwMDU2WjAzMTEwLwYDVQQD EygzYWUzOWNlYTVhNTkwNWY0MGFiNmQ0YjE5ZWM2YjAxMThjNWFlOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSEKNaZJpy9kGzs/XnPucNWiH+uZ QlIpYidaNd7BxTlsylSEygPofULdTVOfb/kjrX90V5yq9gv1I9htB33T7EWkzxMy qimM/zkmn3vsCdzLXCjyzL39Rc+5M91l7XeUit1urSkmiOdqdbOFP9SuTfYkE/lo cQMmcTDj/qr7bQ92gYA74TGemUro4F7yrMiAb2ehFIop6brypuF5369xYv3mXfL4 mduQGYUHYTavPI5zItB/aXrDr0h1hCXGjTMtwWzrVrzva/mvtwwZMVwCeox0g7N1 s2FrtOzwjyP1Jfn8i9o8TZpGisNGouqbX8jFhmBKu0UcJMEWrRv6gZH0hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrjnOpaWQX0CrbUsZ7GsBGMWukVMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJWAXb/r l2b2EwBkDeII1ciQZycNzjDX5EomBdnfKkw7R0iZCMqUH0OiQJ5aX96tXAIlFSQx p25Wj9C2j2J9XtK/9SO9I9Om/zUVCv13aBf3gt75y0AJjVRZuB35EPM9T4UFjPT1 nnGb7la4lPdH5ITx3FaEOzZqiZaZ7+WQiCVxf8u6VJidxvyuvG13xPXAee5yk82Q +t3Xn85fmK1asZsiF2cLqTsk5LCm3Tq/qbIZ2RZpJKE2uESB9dkhNUozsHn9tHPp 2nL3Eos09BkDPWY/ndzqzK1t5ZA5UfNvubhiTRo8AxpZv1XxKHxCFSpYQ24A8rRA t8dC9NGsCx0xZg== -----END CERTIFICATE-----Generated at Sat Jun 7 18:45:48 2025 by rpki-client