$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: iuLbUWU/uQV+iH2gNIK2bpW6mV3NAXIY+Lucz+XBoK8= Subject key identifier: D3:43:9A:7F:28:C9:CE:62:D2:21:F6:6B:D4:FA:0A:93:55:8E:C7:FC Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 0199FC58E6D1837CD0557CD72E7916665507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 172D Signing time: Sun 19 Oct 2025 12:01:48 +0000 Manifest this update: Sun 19 Oct 2025 12:01:48 +0000 Manifest next update: Mon 20 Oct 2025 12:01:48 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: XgFZIMdrR4mEgIcL9sTmt8RIFhlXimNgFSt6gKs4VEU=) 8: pDp2CToPzzYDQ1WhaCtd0HG6Gtc.roa (hash: gA5JjiJRsXhS8LWEfP0H0OvEaHq8p+EbMF4HPnV2enw=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:e6:d1:83:7c:d0:55:7c:d7:2e:79:16:66:55:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Oct 19 12:01:48 2025 GMT Not After : Oct 20 12:01:48 2025 GMT Subject: CN=d3439a7f28c9ce62d221f66bd4fa0a93558ec7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:80:3e:14:94:7a:cf:ae:a6:0f:ca:5b:dc: cd:8b:06:eb:ca:9f:62:30:02:ac:8d:7a:66:cf:72: 0c:66:7b:3c:f2:17:dc:bd:18:8d:bf:81:7c:03:1d: f7:47:b5:4c:f1:13:61:8e:b7:06:5b:52:09:ac:3d: 06:19:f4:ae:f3:06:c3:eb:1e:82:85:cf:cf:a4:67: ca:4c:9c:dc:d4:98:27:cc:b5:52:c3:54:c5:e1:40: a0:e5:ec:5e:65:3d:02:64:10:65:00:c7:15:bf:49: 98:d5:23:3b:56:8c:bc:7d:68:ee:f5:ef:27:cc:13: 49:94:f5:62:43:49:d1:30:01:8a:85:14:1b:ca:dd: 9a:7b:0e:ca:b5:34:39:ef:e0:e5:b8:e1:d1:82:9e: 5f:e8:43:bd:46:ec:1c:54:41:20:c8:e9:4e:47:dc: c7:a6:28:57:a0:3f:34:b2:76:1c:99:46:25:38:2e: 34:d5:93:18:4b:6b:11:ef:01:c4:3c:aa:8c:88:ec: 80:d8:db:ff:e4:2e:2c:c2:61:0e:f2:9c:cc:ec:63: e3:b3:0d:82:cb:0d:de:c1:73:4a:92:10:8a:4f:1d: 27:6a:5a:b1:fb:b7:f3:79:5a:a1:f9:fd:80:90:4c: f0:9b:82:bb:6c:ee:8b:b6:53:6b:7f:93:48:44:02: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:43:9A:7F:28:C9:CE:62:D2:21:F6:6B:D4:FA:0A:93:55:8E:C7:FC X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e2:d5:61:5c:29:5b:e2:be:f7:e8:e4:67:c3:4c:24:db:fb: f0:81:92:56:77:2b:84:6c:12:94:1a:7f:3f:93:bd:9f:11:7c: c1:00:e8:b8:4b:f2:67:60:6d:09:13:1f:d6:7c:f1:d7:b4:9c: ef:1e:88:74:59:e3:05:89:c1:58:07:fb:e2:49:8b:5b:1c:a4: 05:3f:a0:52:62:fc:81:e4:fd:16:86:6d:f6:d5:a4:1b:35:36: 56:06:ff:cf:56:e6:f5:53:4b:2a:07:a1:95:53:04:ab:15:f1: ed:02:00:49:13:ee:fd:e2:ab:32:f9:ca:d2:59:5a:5d:6b:85: 63:8f:03:58:90:33:fa:2a:24:14:71:83:b1:bc:80:cf:6d:f5: 86:8b:7d:45:81:c0:85:4e:49:37:ae:e5:1a:71:82:71:17:cb: d7:73:a9:35:e7:fe:31:00:7e:7b:1c:ab:80:a0:e4:c9:4f:c5: 2c:12:de:75:18:97:ab:2c:0f:f3:94:63:10:02:4c:a4:f4:5d: 40:28:33:c0:4a:45:da:c2:6a:06:a9:ea:7b:06:b7:fd:19:06: 73:c5:11:b0:2c:72:d1:6c:d9:11:78:3f:3e:3a:2e:01:3c:d9: 50:96:77:f0:46:93:ca:26:ce:c2:45:1f:8d:6f:f7:ca:6d:01: 4d:d4:f6:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WObRg3zQVXzXLnkWZlUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUxMDE5MTIwMTQ4WhcNMjUxMDIwMTIwMTQ4WjAzMTEwLwYDVQQD EyhkMzQzOWE3ZjI4YzljZTYyZDIyMWY2NmJkNGZhMGE5MzU1OGVjN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuveAPhSUes+upg/KW9zNiwbryp9i MAKsjXpmz3IMZns88hfcvRiNv4F8Ax33R7VM8RNhjrcGW1IJrD0GGfSu8wbD6x6C hc/PpGfKTJzc1JgnzLVSw1TF4UCg5exeZT0CZBBlAMcVv0mY1SM7Voy8fWju9e8n zBNJlPViQ0nRMAGKhRQbyt2aew7KtTQ57+DluOHRgp5f6EO9RuwcVEEgyOlOR9zH pihXoD80snYcmUYlOC401ZMYS2sR7wHEPKqMiOyA2Nv/5C4swmEO8pzM7GPjsw2C yw3ewXNKkhCKTx0nalqx+7fzeVqh+f2AkEzwm4K7bO6LtlNrf5NIRAJhNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNDmn8oyc5i0iH2a9T6CpNVjsf8MB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+LVYVwp W+K+9+jkZ8NMJNv78IGSVncrhGwSlBp/P5O9nxF8wQDouEvyZ2BtCRMf1nzx17Sc 7x6IdFnjBYnBWAf74kmLWxykBT+gUmL8geT9FoZt9tWkGzU2Vgb/z1bm9VNLKgeh lVMEqxXx7QIASRPu/eKrMvnK0llaXWuFY48DWJAz+iokFHGDsbyAz231hot9RYHA hU5JN67lGnGCcRfL13OpNef+MQB+exyrgKDkyU/FLBLedRiXqywP85RjEAJMpPRd QCgzwEpF2sJqBqnqewa3/RkGc8URsCxy0WzZEXg/PjouATzZUJZ38EaTyibOwkUf jW/3ym0BTdT2Pg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:44:58 2025 by rpki-client