$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: h5qqVo0xi6aargpbSgh6CMo7gVER3gfl5CvOJASx6ZA= Subject key identifier: A0:01:55:55:2C:3D:78:57:3E:2C:03:4F:84:6A:70:4F:44:FC:6C:9D Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 0197409BD2094C3E5BE2FA5B5C92DADD4262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 158B Signing time: Thu 05 Jun 2025 15:00:43 +0000 Manifest this update: Thu 05 Jun 2025 15:00:43 +0000 Manifest next update: Fri 06 Jun 2025 15:00:43 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 3: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 4: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 5: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 6: RqGHUWF00fhVZeF-dl8ZKiYmlxQ.roa (hash: xtXihm79MoGY4uAJpdxZbQ/glvVQjH9b99Zaga793M8=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: EM2BUqmAVqtnf9w+v/O23qXxN6pHNv7tQeXP/lMDK8I=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:40:9b:d2:09:4c:3e:5b:e2:fa:5b:5c:92:da:dd:42:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jun 5 15:00:43 2025 GMT Not After : Jun 6 15:00:43 2025 GMT Subject: CN=a00155552c3d78573e2c034f846a704f44fc6c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:f1:47:9d:59:0f:aa:29:61:16:ed:2c:c5: ad:13:98:2d:8e:f5:3a:d5:7c:31:ea:55:f5:8b:09: ea:2a:9e:d3:1a:66:d1:5b:6d:26:5d:0e:43:39:4e: 83:b7:81:7f:35:87:b4:14:19:4a:55:43:34:56:bf: f3:67:b3:9e:ae:99:e6:fc:87:7d:76:9a:60:1e:de: 7b:6f:8c:80:18:0e:1c:9e:0b:61:32:af:dd:e9:54: 33:be:8a:e6:d8:7a:d7:d8:51:e2:23:af:51:79:b1: df:0e:2b:e6:08:b2:da:a9:b0:77:d8:b1:e3:47:8e: 37:9f:af:7d:d2:4b:3e:3c:ae:f7:ae:5f:f0:10:1a: af:0f:f0:5b:8a:cf:0e:11:5b:22:5d:4e:5c:8c:83: e6:fe:dd:02:6a:89:4d:7c:83:74:ff:d0:9c:b1:3f: 45:db:8e:ae:67:44:a0:4f:1e:ed:e4:b6:9b:c5:0b: ce:3b:cc:45:95:96:3b:d0:90:00:ce:6c:bc:29:a3: e8:0c:c5:6d:5e:40:3e:23:6b:0a:6d:0f:9d:5d:b6: c9:e5:1d:fa:ab:79:11:0b:8b:42:4b:61:67:51:87: 25:b0:08:c7:83:00:7c:be:95:fa:e3:dd:44:96:41: ad:4f:cf:1a:d6:27:8c:4c:28:ed:f7:a9:62:ee:32: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:01:55:55:2C:3D:78:57:3E:2C:03:4F:84:6A:70:4F:44:FC:6C:9D X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:42:40:23:b1:ba:f1:4a:12:f5:00:69:a2:0d:d3:61:9d:ae: c7:51:c8:90:f7:ba:eb:00:08:71:d8:f1:be:5f:92:44:43:21: 0d:36:7a:01:a7:8f:74:e0:27:ec:94:06:48:3e:a9:96:a3:90: 0f:c2:01:cd:4e:e1:2b:d5:c4:c5:b6:03:f8:9f:b1:9f:3c:c5: c0:b2:6c:fb:76:91:e3:6c:82:14:2b:6a:43:e7:72:a9:11:f9: 97:2e:53:fc:b5:54:df:bd:3c:d4:ab:9e:7a:35:37:ee:30:50: 3f:99:28:da:79:1a:2a:52:49:bf:05:32:70:6c:2d:fe:a5:d0: 67:f6:f1:80:e9:b1:a9:30:ce:c7:4e:13:97:64:59:20:f3:b1: 76:1c:f0:22:19:7c:fe:cd:5c:17:15:f4:7d:c7:4c:73:6b:33: f6:61:5a:b5:60:48:a5:e6:39:c1:49:7f:28:33:b3:9a:7e:c7: 1b:63:51:f2:30:57:44:af:7a:51:46:7c:e7:7b:c7:1e:a7:51: 7a:b5:9a:77:df:0c:80:2a:37:69:04:c6:ea:40:3a:42:1c:7e: e1:29:7c:ed:61:ac:6e:97:d1:54:ca:c1:1c:8d:b3:a1:d0:a8: 8b:0c:e0:80:10:53:d7:4f:ee:cb:6e:ed:d2:e2:cd:24:43:d9: 82:a1:4c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdAm9IJTD5b4vpbXJLa3UJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUwNjA1MTUwMDQzWhcNMjUwNjA2MTUwMDQzWjAzMTEwLwYDVQQD EyhhMDAxNTU1NTJjM2Q3ODU3M2UyYzAzNGY4NDZhNzA0ZjQ0ZmM2YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdjxR51ZD6opYRbtLMWtE5gtjvU6 1Xwx6lX1iwnqKp7TGmbRW20mXQ5DOU6Dt4F/NYe0FBlKVUM0Vr/zZ7Oerpnm/Id9 dppgHt57b4yAGA4cngthMq/d6VQzvorm2HrX2FHiI69RebHfDivmCLLaqbB32LHj R443n6990ks+PK73rl/wEBqvD/Bbis8OEVsiXU5cjIPm/t0CaolNfIN0/9CcsT9F 246uZ0SgTx7t5LabxQvOO8xFlZY70JAAzmy8KaPoDMVtXkA+I2sKbQ+dXbbJ5R36 q3kRC4tCS2FnUYclsAjHgwB8vpX6491ElkGtT88a1ieMTCjt96li7jJjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKABVVUsPXhXPiwDT4RqcE9E/GydMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUJAI7G6 8UoS9QBpog3TYZ2ux1HIkPe66wAIcdjxvl+SREMhDTZ6AaePdOAn7JQGSD6plqOQ D8IBzU7hK9XExbYD+J+xnzzFwLJs+3aR42yCFCtqQ+dyqRH5ly5T/LVU37081Kue ejU37jBQP5ko2nkaKlJJvwUycGwt/qXQZ/bxgOmxqTDOx04Tl2RZIPOxdhzwIhl8 /s1cFxX0fcdMc2sz9mFatWBIpeY5wUl/KDOzmn7HG2NR8jBXRK96UUZ853vHHqdR erWad98MgCo3aQTG6kA6Qhx+4Sl87WGsbpfRVMrBHI2zodCoiwzggBBT10/uy27t 0uLNJEPZgqFMGw== -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:45 2025 by rpki-client