$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json) Hash identifier: k//EafN2+XBgTPnRNaqJjNNlp+tGKx9VN5+3HBDDrnY= Subject key identifier: 3A:AE:A7:66:80:AE:57:E1:3C:69:6A:E5:41:B9:59:C6:9E:0E:EB:97 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 01991B09737AAFFF7BBCE714382092403DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft Manifest number: 13A3 Signing time: Fri 05 Sep 2025 18:00:28 +0000 Manifest this update: Fri 05 Sep 2025 18:00:28 +0000 Manifest next update: Sat 06 Sep 2025 18:00:28 +0000 Files and hashes: 1: 08PIServFYDaJgzE1Tv12X6XY58.roa (hash: dQLCMB30niktc0gPuNH+lrW711hzl9qGVDR0YgMTxfI=) 2: 5v_vrW0HvoruhQZTNV_0b8Xqqto.roa (hash: GLURXBU690UhI1Gmf5xLttGeyafmzBhy8dobKw1u4ZA=) 3: 67_iqcd-jnhgApAKTC6d4bs5Qro.roa (hash: e8mI5oDqjL7eXb9pexw5mS8lQPn8bQBHzfmgkkeV8Wg=) 4: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (hash: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=) 5: 7ZaGyEnc0PzjbLmcCjoBHoUEk-o.roa (hash: Q9epmobCRWEP4QS/HRqGknlGIFOq7xuwq89WgKxRa8Y=) 6: 9MPbywuqNktfB0f4ONx5i7D-9RY.roa (hash: XUIyXra42zTdha5ZBSTyRYrhlv/tQGKMTfMGyuOTNh4=) 7: A5l3o6XbhGvF5USL_QEb6eeQe6Y.roa (hash: qbMsyG64j/YQECtVy/l1ZckwMXYgmRnjYsG1XUGE8QM=) 8: AP_6Goo6fEz7oQb-achec-XNy_8.roa (hash: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=) 9: BUewB9_NvYJ85g8W4DMrlK3_tQg.roa (hash: KfdE/hwU8BwH3XdQnS1AEI6YsQvLec/S3fA+jD/NPmI=) 10: DNKfYMLP9Xm_WjVzpKO7q84QzXw.roa (hash: 5tBAqqFCun3qMuyt3hnlLRBwJNJimso2u+1bTRY1BKk=) 11: DYOadUqHfb_PNZxu1cy5_hpkSBg.roa (hash: eEYETNPErMqebmlIAobMItUoKYgLHkCgaVCrZRnsjrA=) 12: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (hash: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=) 13: EqHLuk1cCxicxIqrHgHfPVu2AsI.roa (hash: jTt4fC0OpOSrlOKthxVRS05mx+wfzh6t7wCVTnxG5GM=) 14: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (hash: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=) 15: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (hash: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=) 16: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (hash: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=) 17: Iz6s_leBualQ5imcY5zIa71R0KI.roa (hash: T8yyK+8ZKDwOzRR5jc3tNtonTD4CKYsOcncUcdr1ajQ=) 18: JJBV1z2R-u9Mp9thC9Wdv1eJkc0.roa (hash: NQzzAQc28osxjZT05mQhRtDuQ1pY2Seb4Ooc5Ebd8mE=) 19: K42vHM1Y31hkoh1eY_MCD3Phd2g.roa (hash: 10MJflr8WaH9nBqOosM69cUHwjn7LcR8ExGlOShDPI0=) 20: KFUGUcvmIlpq5q-ckZr_I-ACd8A.roa (hash: AxeqJ69DtzRoZ5va8UeQbeRY3eDeB2zp97Cos2PtkpE=) 21: LGFAazBBdLZYkcpdEXoB99ym1Q8.roa (hash: /mAXnxGLWns/xdENk8P9coOl/pg4zzGpxWls2He6518=) 22: MFaoBuMp_n8GYQy16F9yYPCDvlw.roa (hash: pzLjXNVOb/tu8XBFljfZTE6/DnQ8ZMtfBy9pSDaK+d0=) 23: MOJEU5OiSmgt_dqOtEzktEJbSMA.roa (hash: rMGIQ3RFsr4DEYaqV6jp3wNTqUtoguOSEfloYNNvmi4=) 24: NEBTrVrG2aOIqVsZMSsFHhwJFnw.roa (hash: f/aYHn25//7r/Dz9hT4MyKOdlYCxECJdfwrHVdjUJdo=) 25: NqEDSyCU-4MS42jFZzpvAT-HI8I.roa (hash: 9FbUsU13J/GmaYBC86KZ74ejALBebmKkz0F4iRu7cz4=) 26: Oh4FLGHxy1-rnxuSpVMei6iMkxg.roa (hash: t0XpRWtsKgAoA32Sc2xutvn6pHyDdFXpsGXl09aN/so=) 27: Pcba8QNq05Onyt8c9PChrOeDwkk.roa (hash: 1zhirneHsYlEsC5JAw7XhZDInFj824D/W2vvSSXKLa8=) 28: QIUxG2d20ewp6Ag4VHhOjKX3390.roa (hash: gd3ad7uP/4lRdgZeJ5043KvMhVaae9ozbtJI6vLh94w=) 29: QWF8iPmkcL6NOooL8tPM7IMPoUo.roa (hash: bzBipE6wAO2T/yEjaOJi1+OmhaU74b59cVPkctxln9Y=) 30: RK1O-a2mHIy_nQ5roRSHFEMArKI.roa (hash: UJRbqwcH/HImxZn6bg73LlWy7wN6vSCErzYOKPapKao=) 31: TQoyMTaufag9Fh3qmegQelA2zNg.roa (hash: 95d7zIS7vKuMg1Mj7+fOLFO0LcohD9ziLzOdj+cFHi4=) 32: UFM7V0QaEQk5iMcLePQNtrCnBuU.roa (hash: 1KCm2LnslOt1Go2n1GlY4KXw/ywbLjggHVGzM3KYrZI=) 33: YUaDvoP_nAP_yF9k21rrbzDEuOQ.roa (hash: J8Rp1qTd7tJrcIRX+iFAqIHutCvAtC+awBrqesiPa+o=) 34: Ya5-h2ETMjyWDhCB2tvxKRLAqsQ.roa (hash: coLWeAGOhf5VNkz6Fd+O+ZH/zyRAc6w/wTvM49zi9Dc=) 35: ZMIpjzhJjoRrwfwWR4Eg02S5swQ.roa (hash: Y3cv/AKvcAV9CtpBid+Ox0AoU1x0IW4ZhWyaCypKBDQ=) 36: ZmOLtkEtlhL2CMYIIJ4DjvhpbB0.roa (hash: mVEV4Cnxvh0Qg/MQIwtAPVJY6n+x9DYslpR1RMbhdq8=) 37: _dcJgLvUvSMsukmLo-EaOfxcN5U.roa (hash: uI3m28aVm/tyt4XjnhomVIxLqAW8QPK2Lb2lUn22Vp4=) 38: a2c7U5RqEuvoRR43jWzCy7CopsM.roa (hash: 3nWXCwf43YLWRV04mKr1sMjB7lKWY2rRGgaUKYp4+Xs=) 39: b61HSuiy0Na7f4UrfLY9NGImbD0.roa (hash: 4Mj7zGLGzr8nVHR6LExTV7YXmw9nn79uJnC/gfTDV6E=) 40: bjRr7IWjofFhY5UaTK36gjVTmJw.roa (hash: 8Uet42He0JUZ3FcDIiHrwMRWDjvtV5w/CbqK7W2EWwk=) 41: cXPwDKdKoIuZQCWcD1H6lct9eH8.roa (hash: TVE7Gc6adZMsubybixe+sQ/OeGr4yJ0ymZcYr+WulwU=) 42: chbVlzcWSFykj4rKm8-p8fjB_as.roa (hash: BFYzg89bv90dUCygtVu4jl5yAElZjXQf5CiCJkIcML4=) 43: dPsJh8so_OGOeB6OrHXBmVF-xTo.roa (hash: 7DuEegpyE/v8O0DAqoZg3ItwVVZDZ3DbZy0QXCDbpJA=) 44: fWAfX3KpvP6KHVwuJR6oEj4CXnQ.roa (hash: 7Asl2MelB+M4yfnzUpkkQrmPhCU/0GL0ifTu9RCxXRU=) 45: h8OJykuunCfq50nKTd0p4lkA9g4.roa (hash: IK7wO2ufqh8xN+gdXTF1VWocwjXOSawO01aBXzuxMOQ=) 46: i7v5xES7KqnGKp2XIwwDykdC--8.roa (hash: rS/YCxhUDao1PlYvZQnFkxfAD6XCRjF8yjNd2Cjxs+0=) 47: j5Qii8CZN_qp-4ccXtc7LD97-tY.roa (hash: ngeZ8nTSt/nDCbtXdxmIMpyWVPp5DgtOQvP/5mpQVcQ=) 48: j8MXOx7IAf2KSqCp-jaAVv0pzxg.roa (hash: E8aLYB6SNTmeAHTqRh2dAkdFRmjbWJTPYcFub4aB9Jg=) 49: jP2hUUSq-SoUvjctKqakxy0FX-0.roa (hash: 34H49knyzEOR0dcgwXPPlFWFIVptz1A9kV7rvxjIzXE=) 50: n8KrkCOeu372DfA7gb7CXyt4MkA.roa (hash: m6YplWM+G0Bt8JF0DAD2p3UhAQO9YK+EkRMI1CUMIoE=) 51: nIzC6awjA7_y1vLiscg-NRhvbds.roa (hash: 6T78Tu5by6VMvsB9uTgSy1rBgEymtWKPvocz26uGATU=) 52: tdLfXcDpWOMtk8wLiBZyFA-0cNo.roa (hash: egvgSWXbD00pKRV+iN4rWc5kDKElUDp5sYulqSPLc0c=) 53: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (hash: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=) 54: uWfHgBN_fUuSZSwrLJm4yP6GS9Q.roa (hash: +A1T+WhnOHYIEIZ7mEVu1afaFwmjRRKYqLMFQ3ckAmE=) 55: uhUfOemLlSizJlvnI4iZXIRsvD4.roa (hash: VkvlIs3PMisicDeiEnRW3SF8FPJpEZKckV5h24sjnkw=) 56: ulVKP7JCGC0iMQQVoFCQANnsK_A.roa (hash: egX7sPcPukmP8iY1HfS1GniheclkfAu1QyMIehiLHfg=) 57: xT_QNbaEsHShNwPnlOG7D27KR6I.roa (hash: Mw/4548MeQOvs37HbuZ+A8sJj11JYohArvbf7TjnWpk=) 58: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: roabCn1wTdxO0BeOiWRkPRAv++M/f/kzNgM+UJLNWTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1b:09:73:7a:af:ff:7b:bc:e7:14:38:20:92:40:3d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Sep 5 18:00:28 2025 GMT Not After : Sep 6 18:00:28 2025 GMT Subject: CN=3aaea76680ae57e13c696ae541b959c69e0eeb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:84:d0:b4:59:7c:f4:37:41:fb:47:b3:dd: 3e:32:6f:04:bd:a7:dd:2f:a7:31:ef:33:56:75:c0: 05:3c:24:41:6d:a2:af:bd:2b:99:dd:2d:73:fc:23: e9:51:d8:de:f0:c9:dd:d4:aa:2c:00:27:be:b5:d4: bc:4f:ad:95:95:4b:19:b4:c4:20:2f:66:a5:4c:b6: 85:0d:46:df:b9:97:73:5f:cf:5d:ed:7a:a6:df:c1: c5:7e:0c:81:5a:28:fb:52:8e:7f:6b:58:fa:36:8a: 6f:78:39:8b:5c:e4:f3:43:0c:c9:4c:17:db:df:6d: 92:33:8a:d5:62:32:50:17:b4:d6:7d:9e:7a:c3:32: 3d:f4:9e:67:43:58:7a:2b:97:01:4b:26:84:3a:89: 87:06:f2:e5:cf:23:34:96:aa:60:09:56:b1:31:48: 11:ac:01:88:59:34:7f:e8:8f:89:d8:7e:10:57:54: 44:d9:cf:95:ea:9c:eb:02:39:56:ca:06:60:59:5b: db:21:29:bd:f4:c9:e9:a4:e9:52:31:1e:fd:c4:1d: b1:17:58:c6:2b:3d:35:4b:86:d5:63:e2:14:14:36: f0:69:f0:0d:3d:f6:83:ca:85:41:d7:c8:5d:a3:54: ea:5f:27:e5:6c:7a:0a:5e:1a:02:83:8f:16:93:74: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:A7:66:80:AE:57:E1:3C:69:6A:E5:41:B9:59:C6:9E:0E:EB:97 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1e:68:db:91:f5:30:c0:bf:f7:3c:12:85:12:e6:1c:eb:aa: 63:25:1b:75:af:12:06:a3:52:d6:e5:3a:af:cc:90:96:51:14: 30:d4:4d:64:52:f1:7c:ac:e8:1a:9a:e7:1a:d6:a4:22:4d:9e: 8d:a0:3e:56:6b:57:eb:2d:01:07:f2:40:f3:c5:e7:32:be:e9: 22:6a:db:ca:0d:82:fa:37:18:0c:18:10:e5:99:a1:b4:b6:4c: b2:2e:19:e3:00:78:0e:08:81:c5:c8:77:bf:58:80:ca:30:f7: a1:7a:43:5f:1a:50:46:ca:64:22:78:98:8f:ea:9e:63:72:e0: 6b:86:47:43:6e:ca:e1:68:dd:fa:88:ee:e6:38:67:8c:c7:fb: f7:f8:47:78:f4:59:13:44:59:7b:3e:1e:f6:1f:1c:ee:bc:bf: 28:4b:bc:87:39:1d:65:ff:46:16:09:b7:44:59:a7:59:ef:47: 21:81:8f:31:b1:0d:f7:22:e0:3e:e6:56:3f:c9:a7:ec:b3:88: c3:1f:64:54:65:be:f9:b2:b9:d0:2e:59:a5:1f:af:27:40:ad: d5:f2:14:38:7e:d4:7b:d9:3c:b8:d2:08:63:d1:66:09:d7:17: 08:6a:2c:8b:1f:1f:3e:b1:b0:d6:dd:e8:55:63:9b:d9:12:34: eb:cd:a5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkbCXN6r/97vOcUOCCSQD2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUwOTA1MTgwMDI4WhcNMjUwOTA2MTgwMDI4WjAzMTEwLwYDVQQD EygzYWFlYTc2NjgwYWU1N2UxM2M2OTZhZTU0MWI5NTljNjllMGVlYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgOE0LRZfPQ3QftHs90+Mm8Evafd L6cx7zNWdcAFPCRBbaKvvSuZ3S1z/CPpUdje8Mnd1KosACe+tdS8T62VlUsZtMQg L2alTLaFDUbfuZdzX89d7Xqm38HFfgyBWij7Uo5/a1j6NopveDmLXOTzQwzJTBfb 322SM4rVYjJQF7TWfZ56wzI99J5nQ1h6K5cBSyaEOomHBvLlzyM0lqpgCVaxMUgR rAGIWTR/6I+J2H4QV1RE2c+V6pzrAjlWygZgWVvbISm99MnppOlSMR79xB2xF1jG Kz01S4bVY+IUFDbwafANPfaDyoVB18hdo1TqXyflbHoKXhoCg48Wk3Qo/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqup2aArlfhPGlq5UG5WcaeDuuXMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB5o25H1 MMC/9zwShRLmHOuqYyUbda8SBqNS1uU6r8yQllEUMNRNZFLxfKzoGprnGtakIk2e jaA+VmtX6y0BB/JA88XnMr7pImrbyg2C+jcYDBgQ5ZmhtLZMsi4Z4wB4DgiBxch3 v1iAyjD3oXpDXxpQRspkIniYj+qeY3Lga4ZHQ27K4Wjd+oju5jhnjMf79/hHePRZ E0RZez4e9h8c7ry/KEu8hzkdZf9GFgm3RFmnWe9HIYGPMbEN9yLgPuZWP8mn7LOI wx9kVGW++bK50C5ZpR+vJ0Ct1fIUOH7Ue9k8uNIIY9FmCdcXCGosix8fPrGw1t3o VWOb2RI0682lPA== -----END CERTIFICATE-----Generated at Fri Sep 5 20:15:03 2025 by rpki-client