$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: /soWNLKoNv06OSZb3j94fmk/yLr1CgjT/ywzw+ZPt44= Subject key identifier: E4:D9:50:C1:84:DC:6D:DE:DB:9F:03:C6:77:7C:A0:78:BF:EA:23:D9 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 0199FD6AE2F7C516AA9BF38935C422B558AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0F3C Signing time: Sun 19 Oct 2025 17:01:04 +0000 Manifest this update: Sun 19 Oct 2025 17:01:04 +0000 Manifest next update: Mon 20 Oct 2025 17:01:04 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 3: RcsSaq0_BpL6lHW1LC0kjz4bYBo.roa (hash: NRK1tkj307QIWrwEzdrVKBHZ1usXN/uxhPlhLwB47SM=) 4: Sp_AwQEQ502wSAdDoXALwwjuTq0.roa (hash: x3326z+EE69lKq3xqRD9lBhKqDvCEycDJkLt0CfCGyI=) 5: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 6: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 7: Wzt-Ou1QVSJEG5lh6mPjN_ZX0o8.roa (hash: KIeE4BRemOsByP9NZcIanx6wVETopkaYtA+bHc7KopI=) 8: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 9: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: P5LmRBYvlqFyasLfJyU87iLzMNJPx8ANKF1gn24BBMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6a:e2:f7:c5:16:aa:9b:f3:89:35:c4:22:b5:58:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Oct 19 17:01:04 2025 GMT Not After : Oct 20 17:01:04 2025 GMT Subject: CN=e4d950c184dc6ddedb9f03c6777ca078bfea23d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:31:b4:c4:fa:8a:cf:4f:09:fc:01:1a:21:35: c7:94:58:8f:b3:f0:7e:77:cd:98:ff:ef:d3:be:ef: d6:cb:26:4c:1c:4c:a3:1e:2f:b0:91:5b:f3:ab:02: e6:aa:07:f0:63:df:c8:8b:0c:c8:91:e2:00:79:cc: 5d:3d:3f:e6:fe:9f:0a:cd:f2:d2:36:2f:30:76:f0: db:d6:c3:93:3a:9b:9c:d8:b1:c6:66:7c:e3:8c:4c: e7:50:9c:1b:e8:b7:a7:80:42:01:da:aa:ab:76:6a: 80:51:29:87:17:9e:c2:be:0d:49:5c:bb:6b:16:bb: 78:81:99:44:84:25:9c:31:65:3b:8b:86:62:7b:ab: c2:72:16:c9:96:55:61:7c:1d:1f:a6:9b:f5:5c:3f: 4b:8c:bd:8b:1a:f9:1a:55:d0:8e:f2:ec:9b:bc:e9: 42:96:ad:fb:9c:38:b0:8e:e4:78:90:64:2c:9f:a7: cc:40:1b:d2:29:8d:71:e1:4f:fa:9a:41:a5:85:16: 10:7e:aa:a9:1b:6e:85:d5:22:cd:4d:fa:71:41:b1: e2:a4:e7:f7:53:7d:b9:51:63:a0:11:56:ec:d8:4f: c0:66:bb:cf:7c:c7:88:05:c7:7d:5d:37:76:1c:97: b5:d6:93:71:28:88:54:f9:fd:ce:98:57:c2:e4:6f: c7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:50:C1:84:DC:6D:DE:DB:9F:03:C6:77:7C:A0:78:BF:EA:23:D9 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ab:7e:1d:16:cd:0f:26:c1:62:df:9a:15:91:62:ee:4a:68: 8a:58:b7:fa:55:4e:df:eb:12:c7:c8:40:49:80:78:82:a2:bf: 72:b8:9d:1f:28:75:a6:46:23:72:0e:d8:8f:e0:83:82:a1:fb: f9:25:87:62:ef:ec:97:04:3f:d5:ad:68:d0:e9:3f:a8:d8:4c: 4c:e1:e0:2b:b4:6d:91:64:29:a9:73:da:1f:9d:37:ab:b2:ae: 9c:4d:2e:b2:aa:4a:4e:ab:c9:99:dc:77:5a:d3:be:1d:39:0d: c3:03:09:ef:38:1f:1c:b6:ca:7c:70:c0:5e:fa:9c:23:93:ff: 48:d5:ae:ef:7e:ed:21:4c:43:66:1f:fd:a0:0a:54:63:44:31: 65:be:d2:fb:e0:1f:0e:58:28:0b:7c:8c:a6:86:b0:cf:0e:66: 0d:aa:c3:fa:a8:91:24:c9:c6:c1:b9:ca:1b:8f:c5:ea:27:ad: 10:1e:00:17:07:33:21:ea:ea:bb:9b:e8:db:69:32:13:30:88: 28:8a:62:96:b8:2d:23:4e:b2:ea:d9:2c:c3:13:56:64:99:f9: 00:44:d0:78:00:57:6b:f5:30:f5:d1:13:cd:be:e0:09:ee:69: b5:72:1a:1b:6c:e2:45:f3:af:2d:fb:13:1f:8d:61:90:88:35: 9a:ad:7a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9auL3xRaqm/OJNcQitVivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMDE5MTcwMTA0WhcNMjUxMDIwMTcwMTA0WjAzMTEwLwYDVQQD EyhlNGQ5NTBjMTg0ZGM2ZGRlZGI5ZjAzYzY3NzdjYTA3OGJmZWEyM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jG0xPqKz08J/AEaITXHlFiPs/B+ d82Y/+/Tvu/WyyZMHEyjHi+wkVvzqwLmqgfwY9/IiwzIkeIAecxdPT/m/p8KzfLS Ni8wdvDb1sOTOpuc2LHGZnzjjEznUJwb6LengEIB2qqrdmqAUSmHF57Cvg1JXLtr Frt4gZlEhCWcMWU7i4Zie6vCchbJllVhfB0fppv1XD9LjL2LGvkaVdCO8uybvOlC lq37nDiwjuR4kGQsn6fMQBvSKY1x4U/6mkGlhRYQfqqpG26F1SLNTfpxQbHipOf3 U325UWOgEVbs2E/AZrvPfMeIBcd9XTd2HJe11pNxKIhU+f3OmFfC5G/HTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTZUMGE3G3e258Dxnd8oHi/6iPZMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6t+HRbN DybBYt+aFZFi7kpoili3+lVO3+sSx8hASYB4gqK/cridHyh1pkYjcg7Yj+CDgqH7 +SWHYu/slwQ/1a1o0Ok/qNhMTOHgK7RtkWQpqXPaH503q7KunE0usqpKTqvJmdx3 WtO+HTkNwwMJ7zgfHLbKfHDAXvqcI5P/SNWu737tIUxDZh/9oApUY0QxZb7S++Af DlgoC3yMpoawzw5mDarD+qiRJMnGwbnKG4/F6ietEB4AFwczIerqu5vo22kyEzCI KIpilrgtI06y6tkswxNWZJn5AETQeABXa/Uw9dETzb7gCe5ptXIaG2ziRfOvLfsT H41hkIg1mq16Tg== -----END CERTIFICATE-----Generated at Sun Oct 19 20:41:12 2025 by rpki-client