$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: Hpi1shVGTi6TzjNo9i3KbbIXUMTEUZxExsR/ueUktYw= Subject key identifier: 70:6F:35:62:BF:42:EF:9E:F3:76:09:17:4B:1B:B6:80:F3:CC:D4:51 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 0198D4E00558009BC5C16BAC8D439DB98E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1653 Signing time: Sat 23 Aug 2025 03:01:47 +0000 Manifest this update: Sat 23 Aug 2025 03:01:47 +0000 Manifest next update: Sun 24 Aug 2025 03:01:47 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: Ke0MowG/hzy8Q0XxCbJ1ZV/H/+/FyZ/nWB6T9fPNSZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:05:58:00:9b:c5:c1:6b:ac:8d:43:9d:b9:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Aug 23 03:01:47 2025 GMT Not After : Aug 24 03:01:47 2025 GMT Subject: CN=706f3562bf42ef9ef37609174b1bb680f3ccd451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:ac:98:29:38:47:56:4c:25:d0:a0:0c:c5: dd:72:bb:22:b8:e3:99:62:4e:58:47:57:5d:39:f9: c7:14:18:be:d1:8f:37:28:f7:d4:97:e0:af:3c:dd: 0e:6b:bc:43:d0:33:20:c3:e5:eb:c4:55:38:c1:0d: fd:07:d9:8a:fe:a6:56:4e:e5:15:fe:6f:a4:cb:db: e7:5b:0a:ce:ef:13:73:51:85:f2:6e:6f:dd:cd:0a: 8e:a8:36:bd:41:d5:e5:3b:41:f1:32:00:8b:65:a7: 8e:97:a7:1e:63:79:09:c1:1e:40:b6:38:9c:cf:a4: ed:f0:29:ce:1b:f5:3b:fc:9e:cf:92:fa:01:7b:64: e9:f0:22:69:b2:22:d3:0a:6f:5a:71:57:c7:62:c8: af:0b:64:8c:4f:40:41:d7:1e:44:ec:61:9d:fe:31: 4a:78:90:35:e7:1a:94:02:34:c3:52:ba:b5:21:4d: a8:18:d5:a8:bb:64:51:67:dc:e5:1f:e0:40:52:b7: b5:06:be:55:8d:25:13:12:98:26:fb:03:44:7d:6d: d1:c3:61:0a:91:db:1a:de:9b:7f:d7:d1:ed:80:f9: 14:e2:e4:5f:1e:51:9b:71:09:8f:f8:05:8e:be:ae: c6:9a:39:12:45:b0:d5:14:2d:cf:96:41:6e:3b:9d: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:35:62:BF:42:EF:9E:F3:76:09:17:4B:1B:B6:80:F3:CC:D4:51 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b9:4f:7f:87:2d:76:d7:b1:16:1b:bf:40:15:63:0a:25:25: 78:e5:76:76:2c:ed:2b:45:49:2b:e1:57:28:85:68:2f:93:7d: 8b:ef:c5:37:ad:0f:c8:81:57:d7:79:ef:72:3a:27:34:3d:56: c0:db:b9:6f:4a:fe:59:90:e4:b7:cf:81:a8:81:6d:e0:5e:4f: 22:fb:1e:f6:36:e7:00:c2:93:a3:5c:99:bf:d2:fe:56:14:30: d2:b9:ba:d9:85:9a:b1:c9:71:55:0b:55:f3:47:50:3b:67:47: 85:07:5e:9e:a9:9f:15:61:5f:35:96:5d:da:63:82:10:da:09: 21:06:2a:3f:93:92:2e:73:b7:f8:09:00:94:db:53:89:c3:dd: 8b:c3:ad:ff:16:a5:c1:e2:4b:08:82:c0:de:14:62:56:84:94: 75:80:0f:a9:7a:42:b9:8e:5b:59:13:83:fd:fb:07:3a:c6:5f: 90:4e:46:0c:29:24:5f:45:8f:c7:2b:93:0d:cb:a3:bc:74:a7: 34:0f:5b:4b:f2:8c:fb:7c:17:e7:e1:85:84:df:ab:82:92:75: 49:31:9d:f7:7f:d0:df:10:5d:fc:f8:d9:69:a6:c7:6c:0f:b1: d0:37:1c:38:be:b7:67:94:6e:52:09:5a:a5:f1:81:86:be:66: b8:c6:d4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4AVYAJvFwWusjUOduY5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD Eyg3MDZmMzU2MmJmNDJlZjllZjM3NjA5MTc0YjFiYjY4MGYzY2NkNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfesmCk4R1ZMJdCgDMXdcrsiuOOZ Yk5YR1ddOfnHFBi+0Y83KPfUl+CvPN0Oa7xD0DMgw+XrxFU4wQ39B9mK/qZWTuUV /m+ky9vnWwrO7xNzUYXybm/dzQqOqDa9QdXlO0HxMgCLZaeOl6ceY3kJwR5Atjic z6Tt8CnOG/U7/J7PkvoBe2Tp8CJpsiLTCm9acVfHYsivC2SMT0BB1x5E7GGd/jFK eJA15xqUAjTDUrq1IU2oGNWou2RRZ9zlH+BAUre1Br5VjSUTEpgm+wNEfW3Rw2EK kdsa3pt/19HtgPkU4uRfHlGbcQmP+AWOvq7GmjkSRbDVFC3PlkFuO52L8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBvNWK/Qu+e83YJF0sbtoDzzNRRMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7lPf4ct dtexFhu/QBVjCiUleOV2diztK0VJK+FXKIVoL5N9i+/FN60PyIFX13nvcjonND1W wNu5b0r+WZDkt8+BqIFt4F5PIvse9jbnAMKTo1yZv9L+VhQw0rm62YWasclxVQtV 80dQO2dHhQdenqmfFWFfNZZd2mOCENoJIQYqP5OSLnO3+AkAlNtTicPdi8Ot/xal weJLCILA3hRiVoSUdYAPqXpCuY5bWROD/fsHOsZfkE5GDCkkX0WPxyuTDcujvHSn NA9bS/KM+3wX5+GFhN+rgpJ1STGd93/Q3xBd/PjZaabHbA+x0DccOL63Z5RuUgla pfGBhr5muMbU2w== -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:29 2025 by rpki-client