$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: 9Pl0P3G8ZDDiRwsiCSmr13wyg05gN+3G92tkcX2/+34= Subject key identifier: 35:98:23:65:E2:F5:EF:1B:26:E1:FA:C7:F8:89:1D:E7:63:C2:DC:1A Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019A09DC6A81E264B33643C8E496B8F31C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 16FD Signing time: Wed 22 Oct 2025 03:00:31 +0000 Manifest this update: Wed 22 Oct 2025 03:00:31 +0000 Manifest next update: Thu 23 Oct 2025 03:00:31 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=) 3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: H4qh/tyKAiauLeq7ANb4aE3bnr59FVIxonSKd/oRwc4=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) 11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:09:dc:6a:81:e2:64:b3:36:43:c8:e4:96:b8:f3:1c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Oct 22 03:00:31 2025 GMT Not After : Oct 23 03:00:31 2025 GMT Subject: CN=35982365e2f5ef1b26e1fac7f8891de763c2dc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:01:78:f7:54:83:c4:d9:d9:66:fe:65:b3: c4:2f:ba:2d:24:ad:7a:1d:31:52:3e:20:19:a8:d9: dd:43:f6:31:cb:6f:24:d6:58:f8:ef:72:53:8e:25: be:9c:d4:12:1e:47:0d:63:ba:b9:2e:fb:ac:c7:1c: d6:71:16:55:4b:31:94:00:68:86:c8:02:2e:2e:f9: c4:1b:f0:90:97:fd:49:00:6d:f3:ae:23:71:bd:01: c1:3f:a7:f9:58:5e:9b:df:95:da:4c:f4:c6:0e:9e: e7:38:d3:70:57:6c:dd:02:45:ca:71:e8:1d:21:a1: ad:d7:3d:68:28:3c:57:d8:bc:39:a2:12:7e:f8:13: 11:cd:38:57:f4:67:4e:d1:61:58:6a:be:9c:a2:56: 0d:fd:fd:e7:9c:68:11:7c:bb:5b:60:5b:96:7e:02: a9:22:25:39:26:53:1c:81:3b:65:84:e0:88:57:98: db:13:d5:a4:6a:aa:f7:4e:98:fe:15:6b:d4:e2:c6: f5:d0:d2:d7:27:00:3a:77:4a:2c:67:26:22:d4:6c: 07:3f:63:7c:89:0d:07:ca:2f:b5:1e:a2:4f:b9:66: dd:8c:a8:8f:d2:9e:b0:c8:62:e5:38:3b:f9:e0:00: 58:c2:39:4e:7e:7b:b6:8b:6f:f5:d4:42:ec:8b:aa: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:98:23:65:E2:F5:EF:1B:26:E1:FA:C7:F8:89:1D:E7:63:C2:DC:1A X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b2:bd:e0:9e:45:d3:8b:6f:94:a2:a0:c9:a1:90:8c:d9:09: 38:26:40:c6:80:05:b2:ba:2d:01:3a:a1:64:30:44:60:46:35: 0d:3f:96:89:f1:85:0c:70:1c:eb:3c:8d:3d:b5:54:66:44:f3: 59:a9:5b:bb:83:b2:19:92:d6:e1:27:68:21:80:0e:06:8c:fd: 66:a1:05:b7:5d:b2:9c:de:ef:52:96:08:7c:b4:2a:bb:78:d0: 07:48:b9:79:75:64:02:5d:4f:5a:43:9a:3d:7b:1b:56:a8:77: 20:f3:5c:16:d8:df:1b:35:86:a5:3b:5a:a2:af:01:d5:af:59: 48:00:e0:f2:3c:0a:df:8d:ca:81:73:58:2e:a5:94:7b:cb:eb: 09:7d:2d:f9:61:a9:89:29:d6:c0:78:4b:d1:0e:1f:91:1e:57: 0a:9c:d9:38:18:45:49:f4:ac:ae:f2:b5:3e:72:88:90:f3:6a: 78:8d:99:eb:be:91:87:f0:58:c1:f1:ef:68:a1:b6:0c:dd:14: b4:12:1f:7a:a0:e0:3d:d9:9c:7a:6c:04:e8:eb:3b:d0:70:b4: 8c:32:79:40:d4:83:36:53:2a:b0:c3:81:b9:d3:23:04:02:3e: 4a:27:4a:29:e4:80:06:6e:a6:94:a6:cd:71:dd:a2:69:f4:42: 18:cf:e3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoJ3GqB4mSzNkPI5Ja48xybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUxMDIyMDMwMDMxWhcNMjUxMDIzMDMwMDMxWjAzMTEwLwYDVQQD EygzNTk4MjM2NWUyZjVlZjFiMjZlMWZhYzdmODg5MWRlNzYzYzJkYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEEBePdUg8TZ2Wb+ZbPEL7otJK16 HTFSPiAZqNndQ/Yxy28k1lj473JTjiW+nNQSHkcNY7q5LvusxxzWcRZVSzGUAGiG yAIuLvnEG/CQl/1JAG3zriNxvQHBP6f5WF6b35XaTPTGDp7nONNwV2zdAkXKcegd IaGt1z1oKDxX2Lw5ohJ++BMRzThX9GdO0WFYar6colYN/f3nnGgRfLtbYFuWfgKp IiU5JlMcgTtlhOCIV5jbE9Wkaqr3Tpj+FWvU4sb10NLXJwA6d0osZyYi1GwHP2N8 iQ0Hyi+1HqJPuWbdjKiP0p6wyGLlODv54ABYwjlOfnu2i2/11ELsi6ockQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWYI2Xi9e8bJuH6x/iJHedjwtwaMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrK94J5F 04tvlKKgyaGQjNkJOCZAxoAFsrotATqhZDBEYEY1DT+WifGFDHAc6zyNPbVUZkTz Walbu4OyGZLW4SdoIYAOBoz9ZqEFt12ynN7vUpYIfLQqu3jQB0i5eXVkAl1PWkOa PXsbVqh3IPNcFtjfGzWGpTtaoq8B1a9ZSADg8jwK343KgXNYLqWUe8vrCX0t+WGp iSnWwHhL0Q4fkR5XCpzZOBhFSfSsrvK1PnKIkPNqeI2Z676Rh/BYwfHvaKG2DN0U tBIfeqDgPdmcemwE6Os70HC0jDJ5QNSDNlMqsMOBudMjBAI+SidKKeSABm6mlKbN cd2iafRCGM/jvw== -----END CERTIFICATE-----Generated at Wed Oct 22 12:31:47 2025 by rpki-client