$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json) Hash identifier: ikxk0gQK/T//bvUntb9JEV4ZZS4hjG1kJXS3r/AYYXo= Subject key identifier: C7:F7:6E:CC:29:20:1D:5A:15:F8:AB:FD:F9:F4:09:A8:98:31:25:22 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 0198D629933FE29871DEB85869A51E886822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft Manifest number: 1693 Signing time: Sat 23 Aug 2025 09:01:45 +0000 Manifest this update: Sat 23 Aug 2025 09:01:45 +0000 Manifest next update: Sun 24 Aug 2025 09:01:45 +0000 Files and hashes: 1: 8CKcN-SRoQO9JUmL4yTExDvEyOA.roa (hash: OiMf5Nf+OTh9H87VfBx1A0/7NWZO8HCqhBwOMnyM4g4=) 2: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=) 3: IPhgwX2J1W_WHqZwiQtgli6OPp0.roa (hash: uLYKsJDyBlsz0wPQt/BFvxYT4L2W5pr5QGJD/dNyz8Y=) 4: MarPqAKLnLs3JHOx2TaEpLM7hdg.roa (hash: oZ++sruGxBQDgf5YcQmFffmW21Vj1WeJ1Od9xvKdOsw=) 5: NS3XXMpuUJ7e6TIRbLhc_TJGnFg.roa (hash: HLJlh4DZvx7MZIAUm/JvZH+qCWWlvC+l0SmW17p/JtA=) 6: VNgk2ElbKVr6bU53Uo3tLbMuHJU.roa (hash: MArZlLnUbeLfKeQ2I2uPVdMNT+hXyAM4+ETwxERT/kw=) 7: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: x3hkFXJ31JpGe1eXsMCeXPNtKWs2ud1nEQVJOAfTomI=) 8: b4Bg3C8yLnwhHAdBQw5sKUy_31w.roa (hash: hVVvprBUndrQW0sDkipdwCtFpl7nrY4xlGhjcSamk+Q=) 9: rDhRYLoMMdDTAcbPUVzQo-xuLTc.roa (hash: er8NQ2qL2T7rKcpUvAnC977xSMC0/2xbuX4/EOtjEb0=) 10: smg13oH1hBQbA_5m43nwaI3gdg8.roa (hash: ZdZ3yucmGYB2CT4hyegkGOfWlkmsWAk5BlNxC0F98/Y=) 11: yzSelLKPU3VJWRULncODW1JLnv4.roa (hash: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:93:3f:e2:98:71:de:b8:58:69:a5:1e:88:68:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Aug 23 09:01:45 2025 GMT Not After : Aug 24 09:01:45 2025 GMT Subject: CN=c7f76ecc29201d5a15f8abfdf9f409a898312522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:28:55:78:38:15:e1:91:79:82:4f:f5:fa: 3f:81:64:f9:a9:3f:63:6e:d3:83:df:8c:74:34:8c: 43:f8:0d:35:46:05:c4:1e:a9:cb:df:0a:3e:cd:47: ce:19:a4:4c:da:30:3a:57:92:4f:f0:51:bc:9b:44: 5b:55:fd:67:51:86:53:56:46:75:9b:bb:32:53:60: 4e:da:e7:3b:18:4e:0b:46:67:af:74:20:2c:17:6c: 26:b1:f6:8e:12:63:74:5d:ab:3d:22:01:59:6c:1e: fe:7e:89:71:f7:17:ea:db:28:b5:f8:9b:3a:1b:3c: f4:23:27:61:62:4b:39:00:59:00:92:0e:3d:86:b5: c6:1f:4c:f1:1b:20:32:d6:38:35:f5:a2:d3:e5:ca: aa:30:6f:6e:20:7d:ca:ea:09:78:c6:83:e6:32:49: d5:91:4d:f6:63:eb:f3:39:46:b6:88:9b:b3:fd:4f: 53:c0:d8:de:5e:58:72:0a:b5:8f:ff:e2:f5:81:25: 58:fd:9c:a6:3d:82:4b:fe:a3:72:c1:a7:bc:0a:8d: 4b:ee:04:50:8a:b0:15:ac:6c:d6:f9:bf:ae:7b:05: f7:ac:8b:18:06:2c:1d:4c:13:1e:a2:8f:32:ae:d4: e7:59:43:4f:8c:71:42:ed:90:db:d7:78:f0:de:9e: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:6E:CC:29:20:1D:5A:15:F8:AB:FD:F9:F4:09:A8:98:31:25:22 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:e5:da:01:5c:11:36:ae:9d:70:ad:02:f3:b3:66:ed:81:05: b0:cb:90:9f:d6:b9:59:73:2f:2a:e9:3d:31:31:5b:5c:3f:0c: 41:e4:c6:a4:d9:d9:df:2c:02:a4:2b:4b:95:db:46:c3:ad:e7: 62:6d:cb:de:ba:33:94:60:22:7a:a7:eb:b7:86:7e:c0:67:63: a0:48:6c:2a:5c:33:0e:72:dd:0b:b9:7d:15:5f:0f:bc:d5:22: fc:86:0d:e0:da:dd:60:89:25:2a:6e:8a:bf:80:2b:08:75:51: cd:64:60:f6:88:5c:e6:88:41:fc:55:93:6a:fa:0f:ab:9f:95: 77:52:24:60:53:b8:76:17:93:20:3f:cc:c4:6d:ae:42:3c:61: 6b:88:dc:98:52:d0:b4:0c:20:c2:e7:5d:41:cf:0f:19:d9:d6: 59:d9:af:1c:be:73:04:63:e8:2e:d8:1d:9b:0d:db:0d:81:f1: 46:08:78:62:e7:f1:a0:fe:16:d1:d8:27:13:f7:39:f5:92:03: 3a:d4:0b:94:d9:27:1b:31:2c:04:50:31:7a:cc:f1:5e:1c:a7: f2:31:f2:79:41:79:5d:8a:79:b0:65:5e:f8:e8:8e:9b:7f:3b: a3:10:02:f3:39:59:27:42:0f:a1:8a:cf:0d:94:ec:78:66:fc: 4e:52:d2:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKZM/4phx3rhYaaUeiGgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjUwODIzMDkwMTQ1WhcNMjUwODI0MDkwMTQ1WjAzMTEwLwYDVQQD EyhjN2Y3NmVjYzI5MjAxZDVhMTVmOGFiZmRmOWY0MDlhODk4MzEyNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCYoVXg4FeGReYJP9fo/gWT5qT9j btOD34x0NIxD+A01RgXEHqnL3wo+zUfOGaRM2jA6V5JP8FG8m0RbVf1nUYZTVkZ1 m7syU2BO2uc7GE4LRmevdCAsF2wmsfaOEmN0Xas9IgFZbB7+folx9xfq2yi1+Js6 Gzz0IydhYks5AFkAkg49hrXGH0zxGyAy1jg19aLT5cqqMG9uIH3K6gl4xoPmMknV kU32Y+vzOUa2iJuz/U9TwNjeXlhyCrWP/+L1gSVY/ZymPYJL/qNywae8Co1L7gRQ irAVrGzW+b+uewX3rIsYBiwdTBMeoo8yrtTnWUNPjHFC7ZDb13jw3p7SHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf3bswpIB1aFfir/fn0CaiYMSUiMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuXaAVwR Nq6dcK0C87Nm7YEFsMuQn9a5WXMvKuk9MTFbXD8MQeTGpNnZ3ywCpCtLldtGw63n Ym3L3rozlGAieqfrt4Z+wGdjoEhsKlwzDnLdC7l9FV8PvNUi/IYN4NrdYIklKm6K v4ArCHVRzWRg9ohc5ohB/FWTavoPq5+Vd1IkYFO4dheTID/MxG2uQjxha4jcmFLQ tAwgwuddQc8PGdnWWdmvHL5zBGPoLtgdmw3bDYHxRgh4YufxoP4W0dgnE/c59ZID OtQLlNknGzEsBFAxeszxXhyn8jHyeUF5XYp5sGVe+OiOm387oxAC8zlZJ0IPoYrP DZTseGb8TlLSZQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:23 2025 by rpki-client