$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft File: Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json) Hash identifier: UQ76oW8kOTwUqx6XPq7JbnUqg2Xom3xtgMpiklitZbQ= Subject key identifier: 7C:AC:76:20:F0:42:AF:1F:63:E4:24:B5:52:97:E9:9F:28:2A:80:65 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 0197B77C3E8C838C747FA7A53BBA70E8EFD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft Manifest number: 0428 Signing time: Sat 28 Jun 2025 17:01:02 +0000 Manifest this update: Sat 28 Jun 2025 17:01:02 +0000 Manifest next update: Sun 29 Jun 2025 17:01:02 +0000 Files and hashes: 1: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=) 2: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=) 3: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=) 4: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (hash: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=) 5: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=) 6: DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa (hash: p48aM9J6UtUtpZTM/841RmdWu2zT9B6GH0dk1pfPpo4=) 7: DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa (hash: JXy3wpgCmIL1KJ6V2fbPe71TEfjeAQIbVCR92SplqIo=) 8: EdGVjEh6znEiY0xnI6tnnsDmccQ.roa (hash: y+5pZPNAYlJ/z27zBdh0E8geOyw/SZCW+6NOeA97S5U=) 9: KC1VRLfkRjJaTRJkoqJn0hRlI84.roa (hash: tQWG0ggjDXD3kpeWao/i+euRv960YKPeRVxpWQ6SB8g=) 10: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=) 11: Ukci9Bg7j4Bn7kCrXEDt1C9dNSA.roa (hash: H+c80Rb+WwbpGiMbg43g9GvHTmvViqW1xacKDSZEpQI=) 12: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (hash: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=) 13: VN-x3if2JfSigyOSHLCs6UizS4M.roa (hash: mr97YYgeFYA7EPEZZwoik/VjswtT3aAYQjI6+eLZYiU=) 14: VWObvOSvF1AXNIIRn3xBmcVBaCA.roa (hash: k2TM3+amiq1VQwMqtDCgTlWYgVGq94+g2GBovKDeCf0=) 15: WGYEguUavpCm1up5aoWx17M7VF8.roa (hash: 7LrFDAvn49AXPONunh9HIMSmPEiDJLlOh62u/CVqUuI=) 16: ZFOXIg0OEPtnBjfbywrEG5iZOIo.roa (hash: Ryy+wPPRhz6QBXpj3jwSi5cqGdl/f+SrE3JOHaH2kp0=) 17: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: wKTTlMk7iEY4EMrDelDOtuUCPOwmwLM8fsfDSyGwdzI=) 18: Zh-8f0tKdwJJmTErbAZbBlAu2-k.roa (hash: Krjl31rGf1mkJQ9LvksqzyPEEMfTl0Ol/mUhHx32Z6c=) 19: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=) 20: ajJXa8aIvHOlVBnzgPL8HsXSKPc.roa (hash: 2OyoDakgfS4OIoQoPgsoG8SlZKCjA3/3esWcjB+/eQ0=) 21: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=) 22: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=) 23: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=) 24: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=) 25: ga0KLDUpKphpd5uhD-u7xvCdgo8.roa (hash: iNvTkN67twKCRuI+xwjBz8piFCF9xnDfvAKVgLU20KI=) 26: hIsb24dWsZ8VsBWOEEjl3fdkCsE.roa (hash: A4XAyp6Fewl0t4Uxa5BTFhXjIGGvivyuEJQWo21WUn8=) 27: jJAMNmAh3_heXLx-3lZjlbb0rT4.roa (hash: +kN7wYZliIZDgA9ImlLry1J0Pp3xcHDSqBUjZROOAlE=) 28: jrev2CCg204y6thtVMgx8NoOHvc.roa (hash: XInUBJm/rNM3kh1KQHkzlYycOkqI3p4/VV8cWm6nGSY=) 29: lN-t97gLRpuQiIuZBao3sqyhivU.roa (hash: +mDT0U1tA2WAtk/Z2ZEI8eZRiQJYovhUI82zz7zEdzc=) 30: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=) 31: o9UTDerj5SkBNPSC_40DCs_7wyc.roa (hash: 7gqSvQN7VD6wF2cIvKTOi/nKnwSyMGxTZqKG6dEtTe0=) 32: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=) 33: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=) 34: uwJjJYOZ_7DUuDF8wU2KZg0dlOo.roa (hash: cA4rHQb9J7DcEiVd1KVksPey2LgBKIyPGl4x9ht8hg0=) 35: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=) 36: xtacYUrWT0gTPxdT4fe0TiG1Tsc.roa (hash: yMQPsqMg7sD3m/fFaAS+z0fJHNjAt10OD8IjX7c29Jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:3e:8c:83:8c:74:7f:a7:a5:3b:ba:70:e8:ef:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jun 28 17:01:02 2025 GMT Not After : Jun 29 17:01:02 2025 GMT Subject: CN=7cac7620f042af1f63e424b55297e99f282a8065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:28:4b:3c:75:1d:9a:bd:50:3b:83:04:b6: fe:69:91:b8:d0:79:ab:4f:96:8c:c2:96:66:32:9c: 56:3f:e7:0a:e4:11:db:2d:99:db:87:04:94:48:58: eb:38:e4:49:78:3e:56:9e:67:61:9f:a2:b3:c8:4e: 49:ee:55:fe:3f:d0:53:5b:8d:d2:30:af:7c:64:46: bb:ce:56:73:19:21:93:43:6e:1d:77:63:3e:4d:1c: 7e:3c:a6:5a:09:89:02:18:1c:9e:ee:c6:4e:34:2e: 6e:c0:f3:f1:c8:22:2f:04:c6:52:38:0b:9c:55:30: f6:5f:0f:f1:36:41:ef:06:b2:7f:38:d4:97:86:53: 8e:42:15:52:5f:8e:6b:26:6b:db:d5:47:aa:31:df: 1e:aa:b9:31:ed:cb:f2:43:30:98:fd:5e:1a:77:7e: e2:4a:07:93:3f:64:3d:64:93:4c:c5:27:a7:0b:44: d7:f2:e3:46:f1:8b:b0:71:f0:5e:92:07:39:0f:ec: cf:83:00:51:d5:b6:55:e8:1a:8c:04:4f:15:a4:96: b9:cf:e4:35:a0:42:73:66:e5:e4:3c:83:32:a6:9a: 9f:3b:cd:59:48:44:9f:74:e6:9f:40:2a:b5:31:20: f8:ef:3a:f6:71:bf:2b:32:65:53:e6:d4:eb:65:93: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AC:76:20:F0:42:AF:1F:63:E4:24:B5:52:97:E9:9F:28:2A:80:65 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:0f:ba:4f:6d:d3:7a:3c:3b:67:2c:f2:6e:5c:65:21:c0:b3: 45:62:53:e8:fb:0d:68:f8:97:29:1a:89:b4:14:43:b9:1f:3b: 2e:b4:45:69:f9:a9:6d:ef:67:5e:b1:ad:10:d3:c7:13:41:98: fd:62:26:5a:03:60:6d:bd:9a:2a:ba:cb:d7:cf:57:da:d6:82: 97:d5:e0:90:f1:87:cf:81:1e:a0:0e:5d:c4:b3:f3:fb:45:b5: e9:e0:4f:ad:ef:2c:3a:e5:90:67:5e:79:90:23:25:37:c5:9c: 96:7b:08:16:b9:b5:3f:4c:23:da:b1:9c:60:65:2a:33:c8:68: f7:30:f1:74:63:5d:b2:8c:5b:76:a5:cb:8f:80:1d:ca:72:59: e8:1f:37:3b:e3:9d:b4:2f:b0:cb:d5:d6:86:fa:0b:cb:23:ad: 37:6b:20:c1:51:04:21:49:c2:2f:c6:d8:4b:c4:77:ba:9c:b2: 70:79:d5:c3:4a:a0:af:97:c4:0c:93:9d:c9:da:4e:7c:6e:50: 6d:fb:80:d2:01:f6:f6:d9:a3:0c:ae:f8:a1:ac:16:cc:03:49: 86:ce:0b:64:3f:31:17:fb:b3:f8:dd:1c:bc:9f:5a:df:3c:a4: af:df:b5:08:d6:9a:a9:80:92:02:50:89:10:d1:63:f4:cf:37: 8e:0f:38:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fD6Mg4x0f6elO7pw6O/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUwNjI4MTcwMTAyWhcNMjUwNjI5MTcwMTAyWjAzMTEwLwYDVQQD Eyg3Y2FjNzYyMGYwNDJhZjFmNjNlNDI0YjU1Mjk3ZTk5ZjI4MmE4MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02ooSzx1HZq9UDuDBLb+aZG40Hmr T5aMwpZmMpxWP+cK5BHbLZnbhwSUSFjrOORJeD5Wnmdhn6KzyE5J7lX+P9BTW43S MK98ZEa7zlZzGSGTQ24dd2M+TRx+PKZaCYkCGBye7sZONC5uwPPxyCIvBMZSOAuc VTD2Xw/xNkHvBrJ/ONSXhlOOQhVSX45rJmvb1UeqMd8eqrkx7cvyQzCY/V4ad37i SgeTP2Q9ZJNMxSenC0TX8uNG8YuwcfBekgc5D+zPgwBR1bZV6BqMBE8VpJa5z+Q1 oEJzZuXkPIMyppqfO81ZSESfdOafQCq1MSD47zr2cb8rMmVT5tTrZZMssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHysdiDwQq8fY+QktVKX6Z8oKoBlMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvA+6T23T ejw7ZyzyblxlIcCzRWJT6PsNaPiXKRqJtBRDuR87LrRFafmpbe9nXrGtENPHE0GY /WImWgNgbb2aKrrL189X2taCl9XgkPGHz4EeoA5dxLPz+0W16eBPre8sOuWQZ155 kCMlN8WclnsIFrm1P0wj2rGcYGUqM8ho9zDxdGNdsoxbdqXLj4AdynJZ6B83O+Od tC+wy9XWhvoLyyOtN2sgwVEEIUnCL8bYS8R3upyycHnVw0qgr5fEDJOdydpOfG5Q bfuA0gH29tmjDK74oawWzANJhs4LZD8xF/uz+N0cvJ9a3zykr9+1CNaaqYCSAlCJ ENFj9M83jg84wg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:08:25 2025 by rpki-client