$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: kcV0p5jHjliFx6ihrDin3GG1ETnfIhMwn87G7NbvPbU= Subject key identifier: BB:16:B0:3F:95:15:72:24:AB:C2:B8:A0:2E:64:23:E4:C4:06:91:E2 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019A1F1B1570A519FC20D05107470E49CC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1741 Signing time: Sun 26 Oct 2025 06:00:59 +0000 Manifest this update: Sun 26 Oct 2025 06:00:59 +0000 Manifest next update: Mon 27 Oct 2025 06:00:59 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 44H6reyMjlJh9wXB8StInUQIzhY.roa (hash: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=) 3: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 4: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 5: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 6: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: BSVGzCHnjEDetSM8pl/9/BscKkNBGJ1Ue0AsCfBcd4k=) 7: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 8: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 9: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 10: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 11: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 12: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:1b:15:70:a5:19:fc:20:d0:51:07:47:0e:49:cc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Oct 26 06:00:59 2025 GMT Not After : Oct 27 06:00:59 2025 GMT Subject: CN=bb16b03f95157224abc2b8a02e6423e4c40691e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:bc:15:4e:34:20:9c:c9:62:58:70:f8:df: d2:99:cb:27:08:aa:c7:92:84:bf:14:85:13:d3:1c: 6f:68:66:67:92:eb:ba:f6:ef:c9:f5:6b:36:8a:66: c2:ab:1b:fc:5f:2b:87:a7:f3:c5:c7:44:fe:06:16: 15:2b:f4:19:93:27:07:ed:34:4e:1c:1a:a7:68:11: 34:41:75:f3:a9:ed:fd:bc:ba:76:77:93:1d:11:5d: 73:10:51:f7:3d:0e:f7:54:d9:cf:7b:74:a3:ee:ff: b1:19:dd:b0:b1:d0:85:a6:9d:64:0f:dd:e1:29:40: 29:a7:0d:8e:15:0b:48:cb:cd:69:c5:e4:bb:f5:1b: 71:0e:fb:5e:12:55:5d:fc:55:f1:c1:d8:ad:6f:99: 27:ed:7d:a7:20:21:6e:f2:2c:74:20:03:e5:d3:68: 15:35:6b:d7:01:9c:4e:42:99:80:0a:f0:f2:1c:38: 7a:01:d7:85:f9:37:64:6b:54:4d:c7:ee:4d:e6:54: c6:0c:da:84:f9:5d:c1:4c:e3:4e:99:62:d7:da:a7: d5:86:fe:51:43:2f:0c:37:ec:32:83:4c:bd:5b:90: f2:9e:2f:85:4b:4b:e4:42:cc:25:56:87:9f:59:07: 62:12:da:8e:ec:6f:44:d0:c4:f9:eb:6a:3b:59:bc: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:16:B0:3F:95:15:72:24:AB:C2:B8:A0:2E:64:23:E4:C4:06:91:E2 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6d:a1:50:f0:6a:c5:70:99:de:02:92:9a:21:30:3f:00:bd: c1:a7:d3:ac:6e:7f:25:12:f5:a2:2f:fb:d6:a4:a8:5e:6b:2a: 79:77:8d:f2:71:c1:cb:7c:15:d0:00:76:39:6e:bf:a0:44:15: 1a:89:4f:17:b5:2b:47:34:8e:3b:37:9d:fb:ae:2f:aa:f2:ee: 80:43:3d:11:58:b5:6c:e9:5b:55:5f:dd:a6:5c:68:6a:7c:49: d5:ea:da:59:3a:5c:97:82:dd:7d:0a:a6:31:27:c0:52:58:6e: 55:f6:9f:42:c6:b6:50:ad:b4:d9:44:5c:1b:8f:fe:4f:50:82: cc:4f:a2:c1:31:a3:52:de:33:9d:2b:6e:68:cc:b3:95:9c:93: ef:85:f2:bb:b9:b9:7f:05:cc:6a:40:d7:fe:ed:e2:96:d9:55: c8:32:72:73:48:e9:32:4f:45:f9:b6:99:d8:0c:46:af:3b:70: 14:ef:44:55:20:33:7c:f1:47:bd:97:48:1c:d7:db:f1:49:bf: 64:1d:70:a8:12:2d:92:d1:44:e2:63:e1:48:36:6a:00:d6:c7: 63:1e:4a:64:c0:dd:b4:b2:50:68:13:ae:1f:b7:47:6b:75:be: d7:c8:fa:87:02:0a:19:de:ff:7d:0f:97:e1:8c:9c:8b:07:5c: c4:d2:da:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofGxVwpRn8INBRB0cOScxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMDI2MDYwMDU5WhcNMjUxMDI3MDYwMDU5WjAzMTEwLwYDVQQD EyhiYjE2YjAzZjk1MTU3MjI0YWJjMmI4YTAyZTY0MjNlNGM0MDY5MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU+8FU40IJzJYlhw+N/SmcsnCKrH koS/FIUT0xxvaGZnkuu69u/J9Ws2imbCqxv8XyuHp/PFx0T+BhYVK/QZkycH7TRO HBqnaBE0QXXzqe39vLp2d5MdEV1zEFH3PQ73VNnPe3Sj7v+xGd2wsdCFpp1kD93h KUAppw2OFQtIy81pxeS79RtxDvteElVd/FXxwditb5kn7X2nICFu8ix0IAPl02gV NWvXAZxOQpmACvDyHDh6AdeF+Tdka1RNx+5N5lTGDNqE+V3BTONOmWLX2qfVhv5R Qy8MN+wyg0y9W5Dyni+FS0vkQswlVoefWQdiEtqO7G9E0MT562o7WbzzYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsWsD+VFXIkq8K4oC5kI+TEBpHiMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABW2hUPBq xXCZ3gKSmiEwPwC9wafTrG5/JRL1oi/71qSoXmsqeXeN8nHBy3wV0AB2OW6/oEQV GolPF7UrRzSOOzed+64vqvLugEM9EVi1bOlbVV/dplxoanxJ1eraWTpcl4LdfQqm MSfAUlhuVfafQsa2UK202URcG4/+T1CCzE+iwTGjUt4znStuaMyzlZyT74Xyu7m5 fwXMakDX/u3iltlVyDJyc0jpMk9F+baZ2AxGrztwFO9EVSAzfPFHvZdIHNfb8Um/ ZB1wqBItktFE4mPhSDZqANbHYx5KZMDdtLJQaBOuH7dHa3W+18j6hwIKGd7/fQ+X 4YyciwdcxNLaOw== -----END CERTIFICATE-----Generated at Sun Oct 26 09:09:34 2025 by rpki-client