$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: dHpm8iIG0hnBhTZhoqXl07409OKI3NPp0AoHjr0gBQ8= Subject key identifier: 1B:F9:64:2B:CF:DD:19:C8:DB:54:3B:77:DE:FD:68:56:40:56:21:A0 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019A228A91B1770C6334AE087AFB723CA35C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1704 Signing time: Sun 26 Oct 2025 22:01:37 +0000 Manifest this update: Sun 26 Oct 2025 22:01:37 +0000 Manifest next update: Mon 27 Oct 2025 22:01:37 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: zoHGa27H+NbaMVy+uOAe4MOgf9WRsYoXC65BAV2+67g=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:8a:91:b1:77:0c:63:34:ae:08:7a:fb:72:3c:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Oct 26 22:01:37 2025 GMT Not After : Oct 27 22:01:37 2025 GMT Subject: CN=1bf9642bcfdd19c8db543b77defd6856405621a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:bc:5c:a5:9d:58:e6:02:52:82:1c:0a:92: d0:d8:51:b8:ef:e3:61:c5:45:55:6d:48:8d:c2:5f: 57:3c:64:c3:03:67:86:ef:09:b0:8a:f3:39:52:11: 2c:ce:e2:dd:41:18:b8:f5:25:e5:79:20:45:1b:c9: da:72:13:63:46:17:6b:da:d6:fc:6b:31:84:b9:63: 8c:1e:98:ae:fb:aa:c5:a5:37:dd:6a:de:a8:17:65: 3d:3e:f9:52:9f:b1:4a:77:98:3b:d3:70:0c:a2:99: 96:b1:13:73:6d:79:f8:62:e1:7f:5f:50:1f:ce:b1: 91:90:5b:12:73:58:ea:54:7c:ce:5b:00:70:a5:dd: a1:40:c6:5f:2c:dd:50:39:e3:53:ca:03:c7:92:31: 4a:17:f8:53:62:78:2c:71:90:f9:cd:81:1a:53:60: 8f:0e:a3:e1:87:6c:3e:40:da:63:8a:f6:b6:f9:f8: a6:1c:1a:90:ac:bc:9c:99:fc:24:dd:72:a6:ca:aa: 69:7f:5e:90:82:d5:dd:62:06:cc:b0:ca:e8:58:bb: 3c:77:9e:69:b7:4e:93:ab:71:aa:30:e9:30:c8:08: 0c:8f:75:28:40:c9:32:f4:1c:40:1c:a7:ce:43:80: 9d:c2:fb:77:18:95:da:1b:ee:09:87:57:39:22:9d: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F9:64:2B:CF:DD:19:C8:DB:54:3B:77:DE:FD:68:56:40:56:21:A0 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b8:b1:1b:c2:49:8c:61:67:78:57:d3:49:c8:c2:9e:75:b3: 76:b0:b3:4c:67:39:de:58:a8:5f:a6:0c:d5:cb:7e:09:af:17: 2e:8c:17:c9:6d:f7:28:f2:49:80:2a:3a:2a:2c:30:d7:18:e3: f8:16:ec:3b:e2:fb:41:c2:b7:19:42:6c:dd:fb:8d:b6:7e:3e: 0b:b8:c7:f7:c8:2a:bd:32:f7:4c:98:3b:cd:c0:d1:a0:5b:f4: 4a:77:36:a0:f5:4a:15:f7:60:4a:3b:03:30:e0:8c:ec:ae:38: fd:26:8a:e2:72:38:27:b1:d1:e3:3f:ae:82:41:8b:36:93:27: 03:f3:2c:b7:aa:72:c1:ae:84:0b:dc:05:73:5d:64:09:71:3e: c2:02:87:8a:07:be:cd:06:44:b1:85:3b:6d:4d:89:34:60:90: 18:85:d4:f6:ae:66:4c:b3:02:8e:93:2a:b4:48:1b:15:a2:9c: c9:4f:3b:7a:d7:cb:c2:21:30:ab:0a:2c:4c:ac:f1:8a:0a:5a: ef:3d:32:42:1d:41:3b:98:c6:8d:d3:af:df:f2:21:cf:9f:bf: 64:ef:41:b5:a3:3b:62:50:ef:c9:10:7d:82:20:5a:8f:91:ee: 6c:ef:41:aa:de:9c:6b:08:11:7d:87:26:43:2d:33:87:6e:b1: 83:6f:98:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiipGxdwxjNK4IevtyPKNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMDI2MjIwMTM3WhcNMjUxMDI3MjIwMTM3WjAzMTEwLwYDVQQD EygxYmY5NjQyYmNmZGQxOWM4ZGI1NDNiNzdkZWZkNjg1NjQwNTYyMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjy8XKWdWOYCUoIcCpLQ2FG47+Nh xUVVbUiNwl9XPGTDA2eG7wmwivM5UhEszuLdQRi49SXleSBFG8nachNjRhdr2tb8 azGEuWOMHpiu+6rFpTfdat6oF2U9PvlSn7FKd5g703AMopmWsRNzbXn4YuF/X1Af zrGRkFsSc1jqVHzOWwBwpd2hQMZfLN1QOeNTygPHkjFKF/hTYngscZD5zYEaU2CP DqPhh2w+QNpjiva2+fimHBqQrLycmfwk3XKmyqppf16QgtXdYgbMsMroWLs8d55p t06Tq3GqMOkwyAgMj3UoQMky9BxAHKfOQ4Cdwvt3GJXaG+4Jh1c5Ip2yAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv5ZCvP3RnI21Q7d979aFZAViGgMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLixG8JJ jGFneFfTScjCnnWzdrCzTGc53lioX6YM1ct+Ca8XLowXyW33KPJJgCo6Kiww1xjj +BbsO+L7QcK3GUJs3fuNtn4+C7jH98gqvTL3TJg7zcDRoFv0Snc2oPVKFfdgSjsD MOCM7K44/SaK4nI4J7HR4z+ugkGLNpMnA/Mst6pywa6EC9wFc11kCXE+wgKHige+ zQZEsYU7bU2JNGCQGIXU9q5mTLMCjpMqtEgbFaKcyU87etfLwiEwqwosTKzxigpa 7z0yQh1BO5jGjdOv3/Ihz5+/ZO9BtaM7YlDvyRB9giBaj5HubO9Bqt6cawgRfYcm Qy0zh26xg2+Ykw== -----END CERTIFICATE-----Generated at Mon Oct 27 01:40:21 2025 by rpki-client