$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: mLJTDqRovUyVqfhpfSCUCKZ11NzhKxhH1snLPKqUHlg= Subject key identifier: 3B:73:9C:AA:F5:A4:5E:EC:3A:37:9B:3F:58:80:70:96:B3:9E:6C:8C Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 01972FDFC5217A5BF18DA96F14A0539C945D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 07E5 Signing time: Mon 02 Jun 2025 09:01:23 +0000 Manifest this update: Mon 02 Jun 2025 09:01:23 +0000 Manifest next update: Tue 03 Jun 2025 09:01:23 +0000 Files and hashes: 1: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (hash: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=) 2: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (hash: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=) 3: 8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa (hash: vLGuiUaaMRg3Oh7AvVSEZuZjqVJEBlIV9vKNBDoC7tE=) 4: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (hash: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=) 5: E2CsRwz9g826xgce9UMdi-jpNc0.roa (hash: p8vKwGNWyPepiaRRxHDNJ9XMoMoNlWP3l1RLiZkb2+U=) 6: E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa (hash: w6Z0YEJQvfL4NvmqQHTVNtC2n3ge/nKiZiSd6ate0dI=) 7: Gs6wyM63OMnbKZMOf0cda_N7OHI.roa (hash: klxL/qsoExOmtoi4MkmdkNuAIFKSpx+D0u3x1SSJEX0=) 8: HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa (hash: FgAisfkYOtHtqPca1uMEVAA9ecV9h1pOsVf2alGzd9o=) 9: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (hash: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=) 10: M_Vi73CFA0pYsLc_tnhRMlqnyzw.roa (hash: Sa1IToWhunFsh7PNrbHTSOaXwck3hxZREJV3TqwmoFA=) 11: NfFWK6CE2t9Pa-x8zwAV9BuwlEI.roa (hash: YfoMWCybmpdOuYSX8n89Rg3jlFAY6S7JvtkdJ5G+mxc=) 12: TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa (hash: 5TOUXLSShUEIyyWwQvXlNv+6kmdqCB9iCboytyJ7clM=) 13: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (hash: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=) 14: VZZ9WawBePhv4LDIZfO_F9oGyz0.roa (hash: tpSdt2I+RDE+fPAieXAjll9NyOZ/5yWRInrrSwy0o3Y=) 15: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: kFKPscHwCEbhVYDzO9hfup7n1xPQeVCDCRCTNvMqMpo=) 16: dOwbaQzqcRYTsS9whCXtEpuCSXk.roa (hash: 1R7jY8US+XVotTudXZJyXVeOcS1o5JnuJJgbbY55aZU=) 17: eUtBoT5j0z-IYqDSfwpzibFEqJY.roa (hash: xrripoBlTawer5hRJBFA2IV4xDGQFgwmcY1MUaK5VFs=) 18: hUld0bztgVsjCx1wOfJFp5IoOW8.roa (hash: yhAFJhhqEely7Z+gYD2UjZa+MFUNj+TLxyxBcw9l33Y=) 19: keun2IRw7haIIKkVfKP-snALaeQ.roa (hash: YB+3CYxlHEJ9vwl2a7w4/uVnP5GuPShO8QVbYUihRFU=) 20: nDCQMjqJYZzn6cBHaTW3WoI-N1I.roa (hash: OMmnNufOFNF1WSMlxRX3hhHWusPYAz+qyX0FtxvkgWg=) 21: podfBbvblbujwJeMWZwGbU0sPNA.roa (hash: +aCb+Gg3Ip7BjJ/sgR8dzhKxDrlUXm7AtkYxnTfteRk=) 22: zWfpDcDGP8ZBOnbHTD2rBjXz78M.roa (hash: kQIUbN3JJr8uLsYWLB80RGyd2JN8/nPj/Xb7OpSz18k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:2f:df:c5:21:7a:5b:f1:8d:a9:6f:14:a0:53:9c:94:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jun 2 09:01:23 2025 GMT Not After : Jun 3 09:01:23 2025 GMT Subject: CN=3b739caaf5a45eec3a379b3f58807096b39e6c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:95:0d:47:69:00:2a:60:82:c8:65:80:d5: 70:e9:0c:a0:f7:26:6b:92:2d:32:b9:4c:07:36:35: 45:f1:1f:e6:4a:b1:47:38:4f:11:1f:70:e8:bb:68: 19:ee:44:18:76:d8:d2:8f:7b:65:50:c1:79:18:c4: f6:dd:f5:f1:a6:3c:8a:6e:8a:85:96:eb:bb:91:ca: 5a:8e:d9:bb:21:84:9e:00:4e:89:7f:71:69:3f:b3: 79:94:51:89:0f:3b:46:33:19:f8:a4:20:1c:ea:4e: fd:d7:96:0c:5e:c3:ec:26:ca:7c:24:a9:9c:73:81: 5a:f3:dc:47:f3:cb:54:9b:aa:15:82:d1:4c:4c:18: 84:23:81:01:39:90:9f:39:d7:36:79:e7:d3:ac:31: e8:15:2b:19:d1:42:eb:9f:32:a7:41:60:68:30:3a: 2e:4a:d4:f8:eb:1c:4e:4f:84:6b:27:89:f6:40:58: e1:39:73:6e:60:9d:be:1a:3c:40:9b:1d:8e:2c:73: ec:87:93:1d:05:ef:4b:70:73:06:1d:20:32:ea:bc: e5:ea:52:61:e7:b0:6c:b6:b1:ff:9c:5c:3c:e1:64: 6a:11:d5:33:86:d8:c6:97:e3:6e:9f:3b:ce:44:e4: aa:be:29:eb:8a:32:01:e8:39:55:4a:94:8c:75:a5: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:9C:AA:F5:A4:5E:EC:3A:37:9B:3F:58:80:70:96:B3:9E:6C:8C X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:b5:77:3e:fb:5d:d0:60:ca:15:da:a6:75:c2:c8:cd:de: 0b:74:65:e0:63:66:98:8b:70:b6:14:f1:cf:32:22:de:5a:00: 1c:63:a0:45:ef:77:28:53:6b:bb:80:7c:d1:12:1f:1f:6a:26: a4:80:49:8c:81:a5:c7:d2:5f:e9:6c:93:ac:84:23:60:48:f5: b0:39:a1:67:df:64:17:94:77:d2:d1:a3:4d:fe:9f:8c:28:72: 1b:b0:49:07:41:dd:6a:08:a9:26:46:9e:c3:79:c9:11:e5:34: db:73:81:22:5f:6e:30:0f:75:cd:0e:0d:cb:db:f8:a5:a4:af: 49:ab:c4:80:07:76:91:b2:33:c4:30:89:b3:98:3e:33:76:16: 52:83:fa:c3:41:0a:7a:77:f6:b8:64:18:e2:9a:df:d4:4f:32: 35:29:27:2b:0f:2f:12:49:ac:77:94:f0:8e:39:e8:9d:3f:3e: 8b:72:4f:64:83:a9:4c:9c:6a:06:ca:21:ff:b9:5c:fb:4f:68: e2:f2:31:80:3f:80:de:53:0b:0d:a5:3f:14:d8:a6:3f:b8:b6: 6b:fb:68:76:57:5e:35:cf:28:98:0e:53:4e:5c:be:02:cf:0b: 93:f4:55:cf:26:ef:da:4a:36:66:6b:6e:0d:b6:ce:25:ab:b9: f3:ea:cd:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcv38UhelvxjalvFKBTnJRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjUwNjAyMDkwMTIzWhcNMjUwNjAzMDkwMTIzWjAzMTEwLwYDVQQD EygzYjczOWNhYWY1YTQ1ZWVjM2EzNzliM2Y1ODgwNzA5NmIzOWU2YzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nmVDUdpACpggshlgNVw6Qyg9yZr ki0yuUwHNjVF8R/mSrFHOE8RH3Dou2gZ7kQYdtjSj3tlUMF5GMT23fXxpjyKboqF luu7kcpajtm7IYSeAE6Jf3FpP7N5lFGJDztGMxn4pCAc6k7915YMXsPsJsp8JKmc c4Fa89xH88tUm6oVgtFMTBiEI4EBOZCfOdc2eefTrDHoFSsZ0ULrnzKnQWBoMDou StT46xxOT4RrJ4n2QFjhOXNuYJ2+GjxAmx2OLHPsh5MdBe9LcHMGHSAy6rzl6lJh 57BstrH/nFw84WRqEdUzhtjGl+NunzvOROSqvinrijIB6DlVSpSMdaVrXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtznKr1pF7sOjebP1iAcJaznmyMMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4+1dz77 XdBgyhXapnXCyM3eC3Rl4GNmmItwthTxzzIi3loAHGOgRe93KFNru4B80RIfH2om pIBJjIGlx9Jf6WyTrIQjYEj1sDmhZ99kF5R30tGjTf6fjChyG7BJB0HdagipJkae w3nJEeU023OBIl9uMA91zQ4Ny9v4paSvSavEgAd2kbIzxDCJs5g+M3YWUoP6w0EK enf2uGQY4prf1E8yNSknKw8vEkmsd5TwjjnonT8+i3JPZIOpTJxqBsoh/7lc+09o 4vIxgD+A3lMLDaU/FNimP7i2a/todldeNc8omA5TTly+As8Lk/RVzybv2ko2Zmtu DbbOJau58+rN7w== -----END CERTIFICATE-----Generated at Mon Jun 2 16:42:03 2025 by rpki-client