$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: WenyYGey8QJLtTnA6ggqOkkC9btXmbfJSWNROQhR9Vk= Subject key identifier: 7E:79:4C:58:93:0A:66:77:3E:46:0F:94:A1:94:B7:F2:3E:83:04:86 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019A06A451773567F6716258AE67363B7152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0970 Signing time: Tue 21 Oct 2025 12:00:23 +0000 Manifest this update: Tue 21 Oct 2025 12:00:23 +0000 Manifest next update: Wed 22 Oct 2025 12:00:23 +0000 Files and hashes: 1: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (hash: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=) 2: 1-O322bBLVOWQDNMjFywrUKIxIw0.roa (hash: 7vlxbPUiv3Std38MYSGtKLa+JRa87TkvQmUti3lj/M0=) 3: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (hash: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=) 4: 2dZgvqLVnr3L7YBNwa-dmAKuNeI.roa (hash: x4ULifAZk0DVtPg0u1emvRD3DI0t8YVOlw3nhG2CXgs=) 5: 49CKyADgLLIvTuESaHIzqHu2gtg.roa (hash: 5CuCUUa8X7/ocW7RyLEv8Vb6VI17HgQju5mFySfuyAs=) 6: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (hash: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=) 7: E2CsRwz9g826xgce9UMdi-jpNc0.roa (hash: p8vKwGNWyPepiaRRxHDNJ9XMoMoNlWP3l1RLiZkb2+U=) 8: Gs6wyM63OMnbKZMOf0cda_N7OHI.roa (hash: klxL/qsoExOmtoi4MkmdkNuAIFKSpx+D0u3x1SSJEX0=) 9: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (hash: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=) 10: M_Vi73CFA0pYsLc_tnhRMlqnyzw.roa (hash: Sa1IToWhunFsh7PNrbHTSOaXwck3hxZREJV3TqwmoFA=) 11: NfFWK6CE2t9Pa-x8zwAV9BuwlEI.roa (hash: YfoMWCybmpdOuYSX8n89Rg3jlFAY6S7JvtkdJ5G+mxc=) 12: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (hash: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=) 13: VZZ9WawBePhv4LDIZfO_F9oGyz0.roa (hash: tpSdt2I+RDE+fPAieXAjll9NyOZ/5yWRInrrSwy0o3Y=) 14: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: IuZtLOddhpSdxj1hDV5XlWyfM04qdxWrEQJvE2LEPz4=) 15: dGULqhrcL_ANSs7BLhleecesMvA.roa (hash: eOOIkAUS4EOg9hUCyRisXwLNCWdAEMdVK4NcFcmfEBA=) 16: el3s5FU97XWZHwIp4vnzG1ZyhVA.roa (hash: Un8MbL+EOz96ZIqKNXFdGfjM2fM+efAGzm2lPyUt4cY=) 17: hTvlytGQdE4bMSxFpu4pwOqOzAs.roa (hash: sjwfg5+KO0tm6ztHfkhFPbdkaAWRxRv1HZmf8qkebNc=) 18: hUld0bztgVsjCx1wOfJFp5IoOW8.roa (hash: yhAFJhhqEely7Z+gYD2UjZa+MFUNj+TLxyxBcw9l33Y=) 19: lpP2NtJrOsnyJY4GK-9DeCM-P_Q.roa (hash: CsUk7QdVZqmzvlB30KB4KWvPaPIZZBhOOH3ZXiNwIvg=) 20: podfBbvblbujwJeMWZwGbU0sPNA.roa (hash: +aCb+Gg3Ip7BjJ/sgR8dzhKxDrlUXm7AtkYxnTfteRk=) 21: yhkS5lsjYYscgr4foRJtRjpwYWM.roa (hash: iY9LNop7X5Mq1+wEqI5l+HA0vGg7zxCKH5e1YxqKboA=) 22: zWfpDcDGP8ZBOnbHTD2rBjXz78M.roa (hash: kQIUbN3JJr8uLsYWLB80RGyd2JN8/nPj/Xb7OpSz18k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:a4:51:77:35:67:f6:71:62:58:ae:67:36:3b:71:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Oct 21 12:00:23 2025 GMT Not After : Oct 22 12:00:23 2025 GMT Subject: CN=7e794c58930a66773e460f94a194b7f23e830486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:fc:d8:2c:96:38:63:25:ab:99:50:bc:3b: f6:c4:ea:d4:29:e2:19:18:3c:12:d8:8c:86:fe:94: fd:39:a0:11:23:bf:70:95:59:32:dc:ba:ff:ed:d5: 13:b8:0b:75:70:e6:3b:4f:26:8b:ce:a5:5e:33:85: 90:d9:16:8a:5d:be:79:e2:c2:67:96:65:91:36:4c: 00:c0:67:5d:f7:b2:31:b9:61:4a:ac:6c:08:19:f4: 68:a1:e4:7c:63:61:dd:15:b3:b2:cc:d4:d7:c0:d1: d9:7a:ec:91:94:64:f5:e3:2f:64:ef:f0:39:91:1b: 0e:4f:e8:d9:d6:c4:17:83:59:3f:88:f5:c2:18:97: e0:75:d9:bb:a6:52:cb:73:38:f7:02:20:99:c9:b1: 90:d0:bd:97:33:41:a6:82:53:4d:03:44:c8:07:f8: 70:42:69:d6:8c:44:71:e4:34:7f:7a:10:6f:94:9a: 24:66:b3:d8:68:15:a9:d2:37:cc:18:79:67:8a:41: da:ef:f6:45:54:40:b4:2b:e1:fc:6a:15:95:cb:cb: e5:66:50:ed:90:0f:13:3b:f0:64:ae:ee:f9:74:40: 52:6e:fb:dd:fe:4d:5e:6c:b5:8f:58:34:d0:a0:b9: ef:f7:63:2d:49:6a:7a:ed:ef:9b:49:b5:ef:c3:9e: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:79:4C:58:93:0A:66:77:3E:46:0F:94:A1:94:B7:F2:3E:83:04:86 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a5:56:b8:f8:80:da:4d:54:08:8c:61:5a:72:41:14:a6:79: 8b:d7:73:c6:54:6f:30:28:e8:a3:5f:2a:10:3b:ea:9d:52:e2: d7:6c:bf:e6:03:c4:32:42:10:8a:eb:b5:b4:df:53:f4:46:b4: 53:10:65:ea:fe:3e:44:f7:30:88:10:fb:e3:25:97:0c:25:4a: 32:90:18:d5:b5:fd:64:eb:0f:60:c3:40:87:f0:6d:ac:01:84: b5:77:bd:cc:ae:09:e1:3e:9d:56:6e:ac:62:d7:9b:ff:5f:88: 00:b7:36:09:5e:7a:42:dd:8c:aa:ef:ea:93:82:54:90:4e:5f: 9b:cf:81:29:d6:94:f0:93:44:b7:aa:da:0f:a6:d4:27:c0:9f: 7a:f1:58:50:82:c8:de:ea:77:f4:12:dd:96:69:95:01:fd:2d: 76:e4:ff:53:54:2d:bb:90:6e:99:ca:27:06:7b:be:b8:b4:ab: 50:be:2a:2d:2f:3c:33:7a:6a:57:f6:37:8d:9d:f3:55:47:50: 43:71:86:39:23:c0:91:65:70:17:1a:f9:71:37:49:37:2c:f3: 23:ff:76:90:1a:09:2c:7d:9b:5b:94:c8:66:29:45:f0:00:0e: 6e:5d:5d:14:d5:9e:04:73:dd:04:c5:2e:ee:96:e4:25:5b:73: 70:97:2c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGpFF3NWf2cWJYrmc2O3FSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjUxMDIxMTIwMDIzWhcNMjUxMDIyMTIwMDIzWjAzMTEwLwYDVQQD Eyg3ZTc5NGM1ODkzMGE2Njc3M2U0NjBmOTRhMTk0YjdmMjNlODMwNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33z82CyWOGMlq5lQvDv2xOrUKeIZ GDwS2IyG/pT9OaARI79wlVky3Lr/7dUTuAt1cOY7TyaLzqVeM4WQ2RaKXb554sJn lmWRNkwAwGdd97IxuWFKrGwIGfRooeR8Y2HdFbOyzNTXwNHZeuyRlGT14y9k7/A5 kRsOT+jZ1sQXg1k/iPXCGJfgddm7plLLczj3AiCZybGQ0L2XM0GmglNNA0TIB/hw QmnWjERx5DR/ehBvlJokZrPYaBWp0jfMGHlnikHa7/ZFVEC0K+H8ahWVy8vlZlDt kA8TO/Bkru75dEBSbvvd/k1ebLWPWDTQoLnv92MtSWp67e+bSbXvw55D+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH55TFiTCmZ3PkYPlKGUt/I+gwSGMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKVWuPiA 2k1UCIxhWnJBFKZ5i9dzxlRvMCjoo18qEDvqnVLi12y/5gPEMkIQiuu1tN9T9Ea0 UxBl6v4+RPcwiBD74yWXDCVKMpAY1bX9ZOsPYMNAh/BtrAGEtXe9zK4J4T6dVm6s Yteb/1+IALc2CV56Qt2Mqu/qk4JUkE5fm8+BKdaU8JNEt6raD6bUJ8CfevFYUILI 3up39BLdlmmVAf0tduT/U1Qtu5BumconBnu+uLSrUL4qLS88M3pqV/Y3jZ3zVUdQ Q3GGOSPAkWVwFxr5cTdJNyzzI/92kBoJLH2bW5TIZilF8AAObl1dFNWeBHPdBMUu 7pbkJVtzcJcs0w== -----END CERTIFICATE-----Generated at Tue Oct 21 18:08:39 2025 by rpki-client