$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: puLrMyRevD7znXgCaAIMdZuH8cIBoK5LkFtCMHgyh54= Subject key identifier: 8E:79:90:A1:8A:75:56:F3:5A:74:FD:AF:08:78:57:24:4B:54:1F:E3 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 01991E41676ABE9C9AF3198AFE8BF2897C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1683 Signing time: Sat 06 Sep 2025 09:00:26 +0000 Manifest this update: Sat 06 Sep 2025 09:00:26 +0000 Manifest next update: Sun 07 Sep 2025 09:00:26 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=) 3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: Z4+QSPIzk0ly5jneAR2guCSROdvAxEkcsm+yAxOHXh4=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) 11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:41:67:6a:be:9c:9a:f3:19:8a:fe:8b:f2:89:7c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Sep 6 09:00:26 2025 GMT Not After : Sep 7 09:00:26 2025 GMT Subject: CN=8e7990a18a7556f35a74fdaf087857244b541fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:6d:8a:be:49:d2:1c:b6:c1:e6:20:ab:63: 4a:cd:8f:43:84:b4:90:ba:49:61:92:66:d6:29:85: d6:39:26:ad:1e:82:a1:58:da:db:5b:59:e1:c6:68: d6:69:11:d6:2c:92:e9:c5:be:23:e7:39:96:aa:76: 3f:cc:b8:d5:60:bb:b9:72:35:bb:bc:c7:ce:84:0a: 32:0e:e7:f8:0b:8f:2c:5c:0a:54:7a:1e:fa:3d:63: 43:dd:82:b5:71:3f:c4:55:b9:0e:b4:5a:f3:a6:f1: 68:d8:3a:92:75:a3:ce:21:39:b2:3f:19:e3:5d:41: d9:49:e8:5a:47:cc:2d:7a:50:8e:70:55:e9:0d:88: 48:04:51:fa:5e:17:37:0f:dc:a5:72:31:d1:58:d0: a3:11:49:9c:5d:0f:8b:cd:56:3c:a9:0e:7d:c9:ed: 7b:b2:69:f3:b4:20:02:3a:02:c7:9c:db:64:13:5d: 7c:b8:db:0e:be:3a:cf:a3:93:03:e8:64:b1:4b:21: 5b:e3:56:ea:13:d2:14:f7:9f:93:a5:64:bb:b4:93: a2:d2:3a:4a:96:3d:88:3b:84:d6:e1:11:d3:d3:e1: ea:57:17:ce:82:28:3d:52:3e:a3:2a:7a:60:dd:95: 98:af:e4:05:30:34:80:8f:a3:22:0d:52:47:8e:53: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:90:A1:8A:75:56:F3:5A:74:FD:AF:08:78:57:24:4B:54:1F:E3 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a0:d0:51:95:14:fe:a2:91:fa:3c:31:4e:4b:97:17:01:fa: 74:73:bc:87:91:93:df:6e:b2:0e:f2:00:e0:ba:17:d0:a8:99: 35:2c:fe:aa:ae:f0:5d:7a:6b:b1:40:ec:39:d2:f3:0d:65:e4: be:25:2f:5c:07:dd:6f:54:97:89:05:70:bb:67:87:9b:1a:bf: 37:24:3c:40:8f:ea:49:a5:38:f6:37:95:dc:05:37:e5:2a:66: 5f:a3:6c:4a:5f:0a:47:87:c4:e1:28:9a:38:ff:10:7e:33:7f: cb:c7:21:dc:62:7c:43:2b:4d:07:25:d0:1f:ac:8f:c2:16:3b: 6e:ea:cb:b3:28:5f:a3:25:79:88:6c:8a:d5:c6:66:8d:2a:d5: ec:f1:9d:a7:a5:66:7b:9f:ea:c8:ae:f9:30:c0:7b:e8:6c:27: 77:99:1e:fd:82:93:7c:ba:84:f7:6a:58:12:1b:e6:b3:1a:63: e8:a8:ad:7f:72:af:f2:66:90:4e:9b:d1:fc:7b:aa:ce:4a:0b: 84:0e:cc:60:10:d1:11:65:f6:0a:b8:8a:aa:a3:5a:55:bb:58: cf:8f:56:20:5f:09:1e:6a:75:3e:65:74:4e:c2:fb:f0:bc:63: f1:2d:c3:10:cb:57:3e:ca:45:69:e4:0d:a6:5a:5a:f1:08:6d: 08:d6:b4:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeQWdqvpya8xmK/ovyiXxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUwOTA2MDkwMDI2WhcNMjUwOTA3MDkwMDI2WjAzMTEwLwYDVQQD Eyg4ZTc5OTBhMThhNzU1NmYzNWE3NGZkYWYwODc4NTcyNDRiNTQxZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Ftir5J0hy2weYgq2NKzY9DhLSQ uklhkmbWKYXWOSatHoKhWNrbW1nhxmjWaRHWLJLpxb4j5zmWqnY/zLjVYLu5cjW7 vMfOhAoyDuf4C48sXApUeh76PWND3YK1cT/EVbkOtFrzpvFo2DqSdaPOITmyPxnj XUHZSehaR8wtelCOcFXpDYhIBFH6Xhc3D9ylcjHRWNCjEUmcXQ+LzVY8qQ59ye17 smnztCACOgLHnNtkE118uNsOvjrPo5MD6GSxSyFb41bqE9IU95+TpWS7tJOi0jpK lj2IO4TW4RHT0+HqVxfOgig9Uj6jKnpg3ZWYr+QFMDSAj6MiDVJHjlPstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI55kKGKdVbzWnT9rwh4VyRLVB/jMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKDQUZUU /qKR+jwxTkuXFwH6dHO8h5GT326yDvIA4LoX0KiZNSz+qq7wXXprsUDsOdLzDWXk viUvXAfdb1SXiQVwu2eHmxq/NyQ8QI/qSaU49jeV3AU35SpmX6NsSl8KR4fE4Sia OP8QfjN/y8ch3GJ8QytNByXQH6yPwhY7burLsyhfoyV5iGyK1cZmjSrV7PGdp6Vm e5/qyK75MMB76Gwnd5ke/YKTfLqE92pYEhvmsxpj6Kitf3Kv8maQTpvR/HuqzkoL hA7MYBDREWX2CriKqqNaVbtYz49WIF8JHmp1PmV0TsL78Lxj8S3DEMtXPspFaeQN plpa8QhtCNa0Ug== -----END CERTIFICATE-----Generated at Sat Sep 6 12:11:25 2025 by rpki-client