$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: qmP+fNsUS1z3dwnXumTYIXARgN0zDbSdltzJaeBSye0= Subject key identifier: 2D:E0:90:12:EA:BD:EE:B7:82:5F:81:30:01:15:18:41:B7:27:68:98 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 0198D54E1C9B2BE9ADB46DACE1E73A16E8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0E9E Signing time: Sat 23 Aug 2025 05:02:02 +0000 Manifest this update: Sat 23 Aug 2025 05:02:02 +0000 Manifest next update: Sun 24 Aug 2025 05:02:02 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: G3VNNBiIwy8jC7GBdO9D3/jt3ins9lzsp3qyS/exxes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:1c:9b:2b:e9:ad:b4:6d:ac:e1:e7:3a:16:e8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Aug 23 05:02:02 2025 GMT Not After : Aug 24 05:02:02 2025 GMT Subject: CN=2de09012eabdeeb7825f813001151841b7276898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:17:0b:b4:19:d0:58:b5:4e:1b:56:3d:e8: fa:90:cf:2f:aa:12:cd:9e:93:b3:33:41:b5:fc:f4: fd:e4:c2:cf:17:74:65:1c:fc:17:99:6b:1d:69:5e: 67:0f:0e:05:17:3f:1b:7c:fa:c4:cb:d2:a0:5b:3e: 0e:29:23:a5:10:50:ce:1c:81:3c:f4:13:31:3a:9b: 9d:b0:2f:85:1d:fd:b7:c8:ec:a5:20:13:81:72:a5: e3:c8:95:dc:eb:72:d9:48:f6:fa:66:3e:6c:ea:00: be:69:20:36:de:16:1a:28:07:02:74:08:b2:73:b6: 36:3f:ab:ba:8d:22:c9:9e:3a:62:98:b1:9b:3f:90: 43:10:1b:e3:98:b1:8a:6f:f7:37:7c:a0:45:60:88: 2a:f0:01:24:29:52:0e:ee:6e:5c:83:95:e3:63:25: e7:83:78:94:fa:67:ad:55:d2:a2:b3:d1:57:35:48: 4b:d4:ce:f3:df:5c:f7:80:94:5a:1d:1f:16:e7:12: d7:30:a0:ea:96:b9:d7:90:01:fb:4e:c6:2a:19:84: 20:a1:cc:b3:4b:90:ba:e1:c8:8f:d1:92:e6:d7:9f: b6:f3:ab:33:8a:5b:c0:2a:53:e0:b2:78:d7:c4:d7: fb:6b:a6:ff:e1:76:21:58:f4:ea:98:31:ea:d6:55: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:90:12:EA:BD:EE:B7:82:5F:81:30:01:15:18:41:B7:27:68:98 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b2:e1:25:cc:27:75:ca:cb:10:e2:4a:23:f2:cf:01:cf:49: ab:5e:fc:0d:cf:48:20:52:da:4e:e6:80:d4:1b:cc:f9:91:8c: e5:00:0d:92:d5:a3:a1:82:6e:c7:c2:fd:37:dd:4e:61:a9:0b: 19:88:de:3a:45:51:43:eb:ec:99:d3:3d:c1:56:3a:5f:14:91: 94:41:30:7a:f6:40:9f:1c:66:35:98:cc:06:db:dd:3d:34:25: 93:64:dc:74:7d:9c:77:1b:a0:f1:43:e5:5a:0d:3d:06:71:1b: bb:19:81:9c:d5:03:4c:67:51:8f:33:f4:1e:6a:22:c6:69:2d: cb:28:38:6c:f8:3c:2f:2c:21:cf:f3:33:f5:e1:b0:43:58:7b: 16:11:32:19:7f:90:65:f2:33:3a:17:43:47:50:00:49:6a:6f: b1:f8:2e:a1:6f:a6:fb:18:f3:68:38:e3:2c:4c:85:cd:57:b5: c6:69:0c:66:7a:da:d9:87:39:47:37:d4:c8:40:00:1f:ff:43: 1a:0c:69:18:07:b8:80:7d:59:a8:30:73:7f:52:eb:8c:78:c1: ae:a4:8d:0e:dc:4f:6f:c3:92:9e:7f:8a:24:b7:f3:dd:ee:61: 42:47:e3:09:be:74:49:b1:69:b6:1f:9c:c9:19:f7:9d:78:72: 05:dc:bf:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVThybK+mttG2s4ec6Fuj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwODIzMDUwMjAyWhcNMjUwODI0MDUwMjAyWjAzMTEwLwYDVQQD EygyZGUwOTAxMmVhYmRlZWI3ODI1ZjgxMzAwMTE1MTg0MWI3Mjc2ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uMXC7QZ0Fi1ThtWPej6kM8vqhLN npOzM0G1/PT95MLPF3RlHPwXmWsdaV5nDw4FFz8bfPrEy9KgWz4OKSOlEFDOHIE8 9BMxOpudsC+FHf23yOylIBOBcqXjyJXc63LZSPb6Zj5s6gC+aSA23hYaKAcCdAiy c7Y2P6u6jSLJnjpimLGbP5BDEBvjmLGKb/c3fKBFYIgq8AEkKVIO7m5cg5XjYyXn g3iU+metVdKis9FXNUhL1M7z31z3gJRaHR8W5xLXMKDqlrnXkAH7TsYqGYQgocyz S5C64ciP0ZLm15+286szilvAKlPgsnjXxNf7a6b/4XYhWPTqmDHq1lVDeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3gkBLqve63gl+BMAEVGEG3J2iYMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrLhJcwn dcrLEOJKI/LPAc9Jq178Dc9IIFLaTuaA1BvM+ZGM5QANktWjoYJux8L9N91OYakL GYjeOkVRQ+vsmdM9wVY6XxSRlEEwevZAnxxmNZjMBtvdPTQlk2TcdH2cdxug8UPl Wg09BnEbuxmBnNUDTGdRjzP0Hmoixmktyyg4bPg8Lywhz/Mz9eGwQ1h7FhEyGX+Q ZfIzOhdDR1AASWpvsfguoW+m+xjzaDjjLEyFzVe1xmkMZnra2Yc5RzfUyEAAH/9D GgxpGAe4gH1ZqDBzf1LrjHjBrqSNDtxPb8OSnn+KJLfz3e5hQkfjCb50SbFpth+c yRn3nXhyBdy/RA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:37 2025 by rpki-client