$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: KpGZgWzASqS3L0antNE9EG5xCvqcu4xLsAswBzZ3wGU= Subject key identifier: 07:FA:D0:59:9F:04:D9:E0:0A:3E:F3:3F:F6:3B:D0:9A:8F:85:11:42 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 01992E22DB6D9F4EB3889D4F25EF0797E098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 16C3 Signing time: Tue 09 Sep 2025 11:01:00 +0000 Manifest this update: Tue 09 Sep 2025 11:01:00 +0000 Manifest next update: Wed 10 Sep 2025 11:01:00 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 1on02s47SmwkekNYRvvqPMKKs1s.roa (hash: PVU8TQ1XVWLL41acJ/qMMaJx5HekZ2LfJTCmhfZN/cY=) 3: EfIYNiM608dw9De4gr0QoLFH8AU.roa (hash: 2TaK0wfXNwHYOVXohwQvDaJR6X0XqbjEaNjkMp4hvKo=) 4: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 5: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 6: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 7: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: 1T0CEmFoR2KUEvrVkd98cYjLlelYuUCUSRRRZ8vGW+k=) 8: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 9: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 10: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 11: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 12: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 13: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 14: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:22:db:6d:9f:4e:b3:88:9d:4f:25:ef:07:97:e0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Sep 9 11:01:00 2025 GMT Not After : Sep 10 11:01:00 2025 GMT Subject: CN=07fad0599f04d9e00a3ef33ff63bd09a8f851142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:53:a0:4b:bd:23:05:37:e5:8f:4f:1d:7c: d2:e1:3c:a2:4e:81:de:45:87:ef:b6:cf:d0:f2:82: 33:58:ba:f7:0c:62:0e:36:1f:ec:78:19:65:fa:d5: 46:ea:ac:82:7f:5a:03:b0:a6:c5:b3:df:59:e6:55: 66:dc:21:4f:84:1d:17:24:00:bf:84:7a:37:26:f2: 83:5c:28:20:34:7a:41:ad:36:2a:06:4d:7f:f0:49: 42:1a:83:ad:46:98:e8:88:5e:2d:44:b6:86:1b:8e: 19:ef:35:a1:6b:e2:72:e8:44:6b:99:13:c5:7c:3f: 0b:9b:ff:1e:ce:eb:c9:30:08:c6:fe:29:2f:d0:d1: cd:13:10:72:94:82:f2:08:2c:dc:0e:fa:bc:d5:3f: c1:f2:3e:63:de:7d:81:b1:e7:9d:af:c3:77:dc:ac: a3:6f:6f:f6:37:d7:ee:ba:b5:57:6b:5f:fa:c1:2d: 98:55:3f:af:b7:e6:bf:9f:ae:e3:a0:69:4b:3d:0e: 72:7d:e6:a3:a3:6d:d9:76:76:de:b2:56:89:75:8d: d8:a5:6c:e1:92:6b:5f:72:4b:b7:2f:17:83:ee:b0: 6d:de:0f:12:48:af:b6:d5:66:c8:7d:9d:ff:ae:79: 92:e9:04:96:46:e1:a2:24:ad:17:ff:77:f8:0a:73: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:D0:59:9F:04:D9:E0:0A:3E:F3:3F:F6:3B:D0:9A:8F:85:11:42 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b9:be:b5:d2:2e:26:ff:f5:45:72:58:e9:72:f6:07:85:a8: 3a:0d:b0:41:a2:0d:a2:25:05:25:7c:58:f8:1e:86:56:e9:b6: a6:c2:b6:7c:1e:77:a2:6a:e3:20:53:00:05:ce:df:13:55:3d: b6:4d:5f:db:91:ba:fe:9a:11:1b:3b:79:9c:44:04:46:36:b5: fd:ed:a5:ac:70:3e:3c:27:e1:5f:29:c6:d6:8b:f8:90:09:64: d5:60:8a:4f:48:c3:6c:99:76:c6:e3:84:ea:4a:55:92:fb:9b: cf:56:d1:c4:ff:d0:a8:c3:0b:18:7a:b8:ec:e1:42:60:97:69: 7c:82:ac:2a:dd:de:3f:0f:ee:13:f4:cf:34:89:0c:ae:a3:f1: 1e:13:09:43:eb:3f:64:45:14:4e:eb:84:b5:87:18:5b:77:01: 3b:df:eb:13:6e:92:d9:0a:2c:36:22:83:fe:22:4f:f1:3a:1f: 9e:9e:66:a9:55:6f:c2:b5:c4:23:5d:52:a7:ac:ab:d9:5c:bd: ed:57:e6:67:51:e2:a5:61:46:79:c7:02:e6:40:4f:fa:3d:33: 8d:bd:49:88:a5:f6:8f:c8:ad:23:35:ce:d3:dc:63:c4:5c:b4: b8:30:c4:d4:f5:18:07:9e:8a:e6:ac:51:f6:9b:b9:1a:f1:88: 3d:0c:27:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkuItttn06ziJ1PJe8Hl+CYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwOTA5MTEwMTAwWhcNMjUwOTEwMTEwMTAwWjAzMTEwLwYDVQQD EygwN2ZhZDA1OTlmMDRkOWUwMGEzZWYzM2ZmNjNiZDA5YThmODUxMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz65ToEu9IwU35Y9PHXzS4TyiToHe RYfvts/Q8oIzWLr3DGIONh/seBll+tVG6qyCf1oDsKbFs99Z5lVm3CFPhB0XJAC/ hHo3JvKDXCggNHpBrTYqBk1/8ElCGoOtRpjoiF4tRLaGG44Z7zWha+Jy6ERrmRPF fD8Lm/8ezuvJMAjG/ikv0NHNExBylILyCCzcDvq81T/B8j5j3n2Bseedr8N33Kyj b2/2N9fuurVXa1/6wS2YVT+vt+a/n67joGlLPQ5yfeajo23ZdnbeslaJdY3YpWzh kmtfcku3LxeD7rBt3g8SSK+21WbIfZ3/rnmS6QSWRuGiJK0X/3f4CnPD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf60FmfBNngCj7zP/Y70JqPhRFCMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbm+tdIu Jv/1RXJY6XL2B4WoOg2wQaINoiUFJXxY+B6GVum2psK2fB53omrjIFMABc7fE1U9 tk1f25G6/poRGzt5nEQERja1/e2lrHA+PCfhXynG1ov4kAlk1WCKT0jDbJl2xuOE 6kpVkvubz1bRxP/QqMMLGHq47OFCYJdpfIKsKt3ePw/uE/TPNIkMrqPxHhMJQ+s/ ZEUUTuuEtYcYW3cBO9/rE26S2QosNiKD/iJP8Tofnp5mqVVvwrXEI11Sp6yr2Vy9 7VfmZ1HipWFGeccC5kBP+j0zjb1JiKX2j8itIzXO09xjxFy0uDDE1PUYB56K5qxR 9pu5GvGIPQwnkQ== -----END CERTIFICATE-----Generated at Tue Sep 9 18:09:55 2025 by rpki-client