$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: rakNl5jo4qqPcU78BzUfR84Wuj9XfSKT7rQNxdN7vQY= Subject key identifier: AB:88:E2:BF:36:C8:F0:B1:92:2B:A6:73:61:29:D5:64:47:E6:87:04 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 0198D5BC15F094405EF5EB75487D796B732A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 165B Signing time: Sat 23 Aug 2025 07:02:10 +0000 Manifest this update: Sat 23 Aug 2025 07:02:10 +0000 Manifest next update: Sun 24 Aug 2025 07:02:10 +0000 Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=) 2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=) 3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=) 4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=) 5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=) 6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=) 7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=) 8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=) 9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=) 10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=) 11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=) 12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: x+zYB2WPSeQlfXzGEhYw4+chVgybcM5xSgke9tms8ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bc:15:f0:94:40:5e:f5:eb:75:48:7d:79:6b:73:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Aug 23 07:02:10 2025 GMT Not After : Aug 24 07:02:10 2025 GMT Subject: CN=ab88e2bf36c8f0b1922ba6736129d56447e68704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:0b:f7:28:f5:1f:f9:19:91:53:df:99:07: eb:04:6e:30:f5:07:5e:34:e2:1a:c9:63:c9:30:80: ca:5d:ca:3b:5b:71:70:2e:5b:2d:0c:30:3d:21:dc: 8d:b0:7b:c5:d3:ed:ab:fa:f0:48:ef:18:e9:b8:97: af:42:a3:5b:cf:37:96:36:f5:ca:6a:8c:ee:bf:b6: 1a:8a:20:73:22:c8:9f:3d:84:77:e8:88:5d:4a:75: 63:d6:8b:2e:0f:a8:de:72:af:52:f9:9f:35:22:b4: a8:0b:aa:b9:d0:04:5d:6d:5e:cf:b7:fd:ef:fc:f0: 58:cc:5d:13:f6:0c:37:9b:e2:69:f0:5b:7e:49:9a: c5:72:18:37:7e:2b:5b:58:38:10:6a:74:b2:cd:71: 16:ba:77:6c:9c:35:e8:72:4b:19:a1:e2:5a:73:9c: 76:ac:62:7d:23:d5:de:b4:2a:86:bc:a9:46:6e:f8: 24:ed:1f:99:65:d6:97:84:0c:0a:fa:62:2a:40:5a: 23:bb:61:20:a3:63:c0:3d:e1:98:cb:c3:1a:c5:66: 28:a8:32:a2:9b:b6:00:83:eb:cf:22:97:7f:cf:67: c9:ed:fc:75:4f:b6:73:d5:93:02:9f:d5:53:0f:50: bc:57:61:93:f0:90:1b:a4:4e:c2:49:5c:b7:98:c6: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:E2:BF:36:C8:F0:B1:92:2B:A6:73:61:29:D5:64:47:E6:87:04 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:04:ca:76:05:60:78:8c:e3:72:55:9f:e3:25:38:8a:24:61: 60:59:a9:04:fd:cd:30:e1:ca:db:5c:a3:8c:c1:3d:ef:7b:3c: 34:f3:bd:20:b3:67:bb:e8:73:85:13:9c:55:a3:a7:7d:39:9e: 06:74:04:71:22:05:32:f1:6a:71:02:4a:b4:57:07:71:52:0f: a8:59:3f:d9:62:91:9f:cf:a0:71:8d:1c:e9:59:40:f6:4a:4d: 29:e8:28:24:c7:f7:95:ee:57:25:ae:f4:b8:2d:c6:ac:52:f6: bd:bd:65:e1:69:cc:a8:8a:72:88:cb:48:a2:f0:34:91:6a:c4: e8:c7:3b:06:2e:f5:16:cc:73:53:21:c0:82:79:8f:09:13:b2: 05:bf:fb:41:9d:64:b7:0f:98:96:ce:6a:79:fe:d0:a5:b1:3c: a4:e2:0c:81:9f:90:28:ff:8b:b2:11:e8:8c:82:b7:22:70:72: ff:4b:57:7c:ea:d2:03:96:aa:a1:7f:25:f5:e4:b8:7b:84:b3: dd:b1:7b:5c:31:ae:f8:a7:22:e9:0b:b8:77:9b:4c:94:c6:62: 26:dc:49:00:90:76:1b:9e:3e:4d:c4:81:ab:2a:35:8a:c9:31: 82:b8:e9:4b:f1:1b:43:02:f8:10:45:f1:27:35:7f:5b:de:0e: bb:7d:09:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVvBXwlEBe9et1SH15a3MqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjUwODIzMDcwMjEwWhcNMjUwODI0MDcwMjEwWjAzMTEwLwYDVQQD EyhhYjg4ZTJiZjM2YzhmMGIxOTIyYmE2NzM2MTI5ZDU2NDQ3ZTY4NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod0L9yj1H/kZkVPfmQfrBG4w9Qde NOIayWPJMIDKXco7W3FwLlstDDA9IdyNsHvF0+2r+vBI7xjpuJevQqNbzzeWNvXK aozuv7YaiiBzIsifPYR36IhdSnVj1osuD6jecq9S+Z81IrSoC6q50ARdbV7Pt/3v /PBYzF0T9gw3m+Jp8Ft+SZrFchg3fitbWDgQanSyzXEWundsnDXocksZoeJac5x2 rGJ9I9XetCqGvKlGbvgk7R+ZZdaXhAwK+mIqQFoju2Ego2PAPeGYy8MaxWYoqDKi m7YAg+vPIpd/z2fJ7fx1T7Zz1ZMCn9VTD1C8V2GT8JAbpE7CSVy3mMaGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuI4r82yPCxkiumc2Ep1WRH5ocEMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzwTKdgVg eIzjclWf4yU4iiRhYFmpBP3NMOHK21yjjME973s8NPO9ILNnu+hzhROcVaOnfTme BnQEcSIFMvFqcQJKtFcHcVIPqFk/2WKRn8+gcY0c6VlA9kpNKegoJMf3le5XJa70 uC3GrFL2vb1l4WnMqIpyiMtIovA0kWrE6Mc7Bi71FsxzUyHAgnmPCROyBb/7QZ1k tw+Yls5qef7QpbE8pOIMgZ+QKP+LshHojIK3InBy/0tXfOrSA5aqoX8l9eS4e4Sz 3bF7XDGu+Kci6Qu4d5tMlMZiJtxJAJB2G54+TcSBqyo1iskxgrjpS/EbQwL4EEXx JzV/W94Ou30JMw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:42 2025 by rpki-client