$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: JMfzJlmV/1j1C6lBW3VVCv2uyzA1dVStI1osdtir8L8= Subject key identifier: B6:2B:EF:D3:88:8D:A5:0D:68:3C:7D:47:02:5F:DF:F5:5D:A7:EE:30 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 0197C191D96FC06C4ABC7422D374BDE8E60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 15CC Signing time: Mon 30 Jun 2025 16:00:50 +0000 Manifest this update: Mon 30 Jun 2025 16:00:50 +0000 Manifest next update: Tue 01 Jul 2025 16:00:50 +0000 Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=) 2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=) 3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=) 4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=) 5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=) 6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=) 7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=) 8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=) 9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=) 10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=) 11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=) 12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: DT/8YVqbLDMSeo24MDpEM+QlpvuyZWLY0mjD375ObHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c1:91:d9:6f:c0:6c:4a:bc:74:22:d3:74:bd:e8:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jun 30 16:00:50 2025 GMT Not After : Jul 1 16:00:50 2025 GMT Subject: CN=b62befd3888da50d683c7d47025fdff55da7ee30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1f:ab:ac:42:2c:bf:6d:f8:4b:b7:90:d6:ae: a3:e5:94:03:fc:92:3d:d3:b6:fc:c6:e4:71:5c:82: 3a:f3:75:fd:3f:d1:e3:66:60:2f:69:53:ab:a1:5e: 10:3f:f5:fb:3c:61:25:05:dc:5d:27:4d:f1:19:12: c7:23:93:ff:b0:8d:36:06:30:68:e3:f9:32:51:68: f7:53:d6:06:b3:2e:b8:57:28:0d:8b:e0:20:a6:b1: cc:bf:22:a4:e8:a8:82:14:14:96:75:e6:93:16:e8: ff:51:d2:b6:ae:66:9e:91:4a:9e:57:6b:11:16:d8: 82:cf:3a:79:e6:28:99:6f:62:8f:b7:f8:ea:e9:dc: b6:b8:5c:46:18:a9:3c:fb:a8:70:d2:ee:75:18:c5: c2:c1:d2:80:8c:08:a3:5c:32:5e:a8:dd:c4:ec:36: e2:ea:25:d0:62:d8:32:04:6d:e9:13:45:ed:11:6c: 33:75:0d:14:4c:a5:7d:f4:20:10:d8:3f:e2:5d:1d: 4b:9e:9e:0f:56:46:62:6e:67:a2:95:67:1a:fe:66: 23:f5:0f:47:42:7a:f7:f6:97:e2:26:67:9f:54:e1: a9:38:d0:cc:23:61:5d:1b:e3:c3:34:df:e5:cb:a8: 6d:af:d1:26:3e:02:76:30:66:aa:8d:51:7e:dc:55: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2B:EF:D3:88:8D:A5:0D:68:3C:7D:47:02:5F:DF:F5:5D:A7:EE:30 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:18:31:a3:3a:02:e2:f5:75:e7:71:f3:2a:62:2a:bb:ef:fe: 85:00:2d:23:3b:06:e6:b1:94:18:af:66:c7:a5:89:ed:39:4b: f9:a9:0f:75:d4:0f:39:96:b6:b1:2b:a9:bb:0e:24:38:09:e1: e5:63:3b:62:f8:c8:2e:7b:55:64:e1:d4:1e:18:25:dc:f3:e1: 95:e8:37:9c:fd:7b:61:eb:e1:ff:83:20:0f:ce:00:cd:72:0f: 91:47:73:7f:3a:a9:2a:b4:19:1d:4c:45:f4:49:49:65:76:c1: 5f:e3:02:5f:c8:49:2d:53:af:4e:2e:84:64:c1:03:32:57:7d: 68:a9:b3:b6:34:26:16:99:49:d1:fe:8a:3e:6d:4f:2a:4c:57: 1d:22:18:79:7b:98:cc:7b:94:38:38:62:67:35:ec:b5:76:22: ba:0d:67:5d:94:55:3b:8f:14:f8:3e:50:22:a8:52:1a:57:38: 33:03:ba:97:f0:97:44:e9:e1:a0:63:b2:49:e6:f3:7e:d7:a6: 2c:1b:71:0f:67:17:36:d0:f1:6c:1b:70:03:2a:89:77:b6:bb: 8f:f5:68:5c:1c:42:03:fa:52:db:94:ff:3f:d9:9f:1a:05:23: 91:e3:a3:94:8a:5d:56:07:3b:5b:08:86:de:fe:6d:6f:55:12: ac:e8:bb:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfBkdlvwGxKvHQi03S96OYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjUwNjMwMTYwMDUwWhcNMjUwNzAxMTYwMDUwWjAzMTEwLwYDVQQD EyhiNjJiZWZkMzg4OGRhNTBkNjgzYzdkNDcwMjVmZGZmNTVkYTdlZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B+rrEIsv234S7eQ1q6j5ZQD/JI9 07b8xuRxXII683X9P9HjZmAvaVOroV4QP/X7PGElBdxdJ03xGRLHI5P/sI02BjBo 4/kyUWj3U9YGsy64VygNi+AgprHMvyKk6KiCFBSWdeaTFuj/UdK2rmaekUqeV2sR FtiCzzp55iiZb2KPt/jq6dy2uFxGGKk8+6hw0u51GMXCwdKAjAijXDJeqN3E7Dbi 6iXQYtgyBG3pE0XtEWwzdQ0UTKV99CAQ2D/iXR1Lnp4PVkZibmeilWca/mYj9Q9H Qnr39pfiJmefVOGpONDMI2FdG+PDNN/ly6htr9EmPgJ2MGaqjVF+3FVFHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYr79OIjaUNaDx9RwJf3/Vdp+4wMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRgxozoC 4vV153HzKmIqu+/+hQAtIzsG5rGUGK9mx6WJ7TlL+akPddQPOZa2sSupuw4kOAnh 5WM7YvjILntVZOHUHhgl3PPhleg3nP17Yevh/4MgD84AzXIPkUdzfzqpKrQZHUxF 9ElJZXbBX+MCX8hJLVOvTi6EZMEDMld9aKmztjQmFplJ0f6KPm1PKkxXHSIYeXuY zHuUODhiZzXstXYiug1nXZRVO48U+D5QIqhSGlc4MwO6l/CXROnhoGOySebzftem LBtxD2cXNtDxbBtwAyqJd7a7j/VoXBxCA/pS25T/P9mfGgUjkeOjlIpdVgc7WwiG 3v5tb1USrOi7/w== -----END CERTIFICATE-----Generated at Tue Jul 1 01:36:33 2025 by rpki-client