$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: GPwTsS0xIvn3Pf3OMeRN+sQPrFwPipQmMMVgOq7LgDs= Subject key identifier: 5C:88:13:C2:74:A0:A0:5E:DB:6A:21:A6:9D:12:76:14:FD:C4:FD:1F Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01992F3665E8B69ECBA393CC68ECB5C93D73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1686 Signing time: Tue 09 Sep 2025 16:01:57 +0000 Manifest this update: Tue 09 Sep 2025 16:01:57 +0000 Manifest next update: Wed 10 Sep 2025 16:01:57 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: ImERmC3r3uNn8LOM7gOkNeGrKgvyInAHiv6YJMq4HlY=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 16:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:36:65:e8:b6:9e:cb:a3:93:cc:68:ec:b5:c9:3d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Sep 9 16:01:57 2025 GMT Not After : Sep 10 16:01:57 2025 GMT Subject: CN=5c8813c274a0a05edb6a21a69d127614fdc4fd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f8:c3:c6:01:29:c6:91:dd:13:34:6e:8e:99: 16:7e:4b:96:a9:b8:31:44:ff:ae:33:49:cb:5b:fc: 91:39:ee:28:e7:e4:bd:82:0b:cf:1a:d4:f6:a6:c9: ab:d8:6b:47:91:09:da:6f:d4:7e:4c:a1:3d:8d:2d: 54:9d:2b:9e:d4:cc:fa:0d:c3:36:e5:b1:c5:d6:ef: 46:d2:fb:09:7a:bd:66:93:0f:f1:7b:84:5c:8f:53: 95:5b:3e:8e:dd:9b:38:3b:9d:69:02:ab:a3:2a:98: 6d:19:68:5c:5e:06:5f:bc:7d:ea:55:d3:5f:91:0a: 20:bb:53:be:80:cd:ba:07:8f:6e:32:23:c8:16:16: c7:4a:a6:5f:f7:00:5a:2e:d0:60:19:40:e9:88:41: 66:5e:f6:8a:1e:5e:af:0d:97:f1:c5:f7:7a:7c:79: e3:d9:5c:d4:fc:32:5e:aa:db:94:3a:91:84:54:6f: 69:86:4d:6a:70:42:31:18:14:3d:ce:02:60:ea:be: 1b:7a:be:9b:e6:ca:2b:db:ea:c5:eb:d2:5c:4d:0b: 01:e5:26:d0:68:46:85:64:9b:3b:82:6c:f1:13:32: d6:dc:9e:81:5b:a1:18:2b:ce:77:ba:f3:19:e6:07: 82:6f:03:7c:b6:7a:e0:36:87:30:11:73:fc:91:99: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:13:C2:74:A0:A0:5E:DB:6A:21:A6:9D:12:76:14:FD:C4:FD:1F X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7c:b7:fe:c1:bb:6c:82:05:aa:8f:21:ff:79:05:97:1f:2e: 02:78:99:88:06:8f:c9:cf:7a:aa:2c:05:2c:ed:58:32:9e:c7: 1a:c9:90:49:37:c2:a1:a9:17:cf:8d:b8:05:b4:48:98:72:39: 76:5f:28:e2:3c:a4:99:e3:91:63:8c:91:4f:11:74:94:9a:64: fb:19:c7:3c:4f:a0:4e:22:be:20:4b:45:18:33:e5:cb:05:63: 8c:bc:f8:39:40:cd:57:f5:a4:b1:15:cd:20:9a:72:2c:e3:a4: 76:8f:bd:3a:b7:e5:b3:34:46:87:3f:06:69:10:eb:5d:89:a0: 9f:a0:a0:78:b2:86:12:b2:53:2a:0e:e0:87:e9:90:0b:c7:52: b9:1b:09:26:3a:d5:8f:0c:ef:22:19:16:2f:b0:4d:7a:d4:2a: ff:a5:45:8a:94:34:1f:eb:1f:77:9d:22:e5:7e:ea:5b:bd:f8: d8:3d:58:a6:22:5b:39:b1:5a:5f:73:84:d2:5e:87:04:3a:5f: 11:8c:86:ad:76:0c:fb:1a:6c:ca:2f:02:2b:41:8a:a6:b6:6f: d2:c0:24:82:1c:d6:d4:14:4a:32:93:f0:bd:51:ab:92:86:34: e0:66:a7:c1:46:bb:76:23:35:af:3b:ae:78:3c:d0:a4:df:ea: 52:13:b3:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvNmXotp7Lo5PMaOy1yT1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwOTA5MTYwMTU3WhcNMjUwOTEwMTYwMTU3WjAzMTEwLwYDVQQD Eyg1Yzg4MTNjMjc0YTBhMDVlZGI2YTIxYTY5ZDEyNzYxNGZkYzRmZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PjDxgEpxpHdEzRujpkWfkuWqbgx RP+uM0nLW/yROe4o5+S9ggvPGtT2psmr2GtHkQnab9R+TKE9jS1UnSue1Mz6DcM2 5bHF1u9G0vsJer1mkw/xe4Rcj1OVWz6O3Zs4O51pAqujKphtGWhcXgZfvH3qVdNf kQogu1O+gM26B49uMiPIFhbHSqZf9wBaLtBgGUDpiEFmXvaKHl6vDZfxxfd6fHnj 2VzU/DJeqtuUOpGEVG9phk1qcEIxGBQ9zgJg6r4ber6b5sor2+rF69JcTQsB5SbQ aEaFZJs7gmzxEzLW3J6BW6EYK853uvMZ5geCbwN8tnrgNocwEXP8kZnJsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyIE8J0oKBe22ohpp0SdhT9xP0fMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXy3/sG7 bIIFqo8h/3kFlx8uAniZiAaPyc96qiwFLO1YMp7HGsmQSTfCoakXz424BbRImHI5 dl8o4jykmeORY4yRTxF0lJpk+xnHPE+gTiK+IEtFGDPlywVjjLz4OUDNV/WksRXN IJpyLOOkdo+9OrflszRGhz8GaRDrXYmgn6CgeLKGErJTKg7gh+mQC8dSuRsJJjrV jwzvIhkWL7BNetQq/6VFipQ0H+sfd50i5X7qW7342D1YpiJbObFaX3OE0l6HBDpf EYyGrXYM+xpsyi8CK0GKprZv0sAkghzW1BRKMpPwvVGrkoY04GanwUa7diM1rzuu eDzQpN/qUhOzMA== -----END CERTIFICATE-----Generated at Tue Sep 9 23:06:39 2025 by rpki-client