$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: 2A9qDCOkb8zAM4VWIHzmw7Z7i5NtQZyuHVfh8D99xrg= Subject key identifier: 7E:45:A7:61:4E:1B:CF:12:85:D6:E9:09:0F:7F:32:C4:1E:21:59:46 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 0199FE46FA2491C85423824B296A6EE67BDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 16ED Signing time: Sun 19 Oct 2025 21:01:28 +0000 Manifest this update: Sun 19 Oct 2025 21:01:28 +0000 Manifest next update: Mon 20 Oct 2025 21:01:28 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: TZnwBIS3ezF/G6DljqgWeDpzQINukQjlpS6I5/2Cqco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:46:fa:24:91:c8:54:23:82:4b:29:6a:6e:e6:7b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Oct 19 21:01:28 2025 GMT Not After : Oct 20 21:01:28 2025 GMT Subject: CN=7e45a7614e1bcf1285d6e9090f7f32c41e215946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:01:15:74:5f:09:7b:89:76:2f:1d:c6:3d: 2f:04:00:f9:15:a6:51:ee:f7:a4:ce:43:86:38:db: 30:83:ec:c5:ea:37:3a:c2:54:74:ff:9e:70:a0:a7: 2c:ca:3d:9d:e3:e6:80:59:90:70:ad:c6:87:3d:88: 62:ea:f3:16:94:e5:15:a8:7e:5e:71:e1:69:9c:35: c1:69:65:8e:6e:10:4d:df:2e:35:a8:2e:da:92:b1: 3d:df:b2:e2:e7:9c:e2:c3:82:62:19:50:67:4c:ee: 18:57:a5:ba:82:76:ac:87:83:19:54:fb:10:fb:c5: 7f:f6:29:38:ec:34:84:a6:33:37:05:f7:d3:f8:a8: 92:95:13:59:c6:a8:2d:3d:43:12:37:49:71:25:a8: c1:d3:1b:34:2f:02:31:e8:f2:44:09:d2:15:ee:49: 4a:36:06:54:eb:eb:21:53:87:1e:93:ae:13:69:34: f1:fc:92:12:69:21:8c:77:c9:20:15:8c:46:2d:0e: da:84:e9:14:33:1b:ad:00:de:50:25:8a:1f:18:63: 6e:dc:9c:1a:38:7f:e3:ab:d1:39:73:9b:4d:ac:a9: 4d:93:a8:b5:cd:83:63:58:5a:f4:28:9d:16:7d:79: 0d:5f:35:a9:66:5f:de:14:25:05:b1:05:a0:8e:44: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:A7:61:4E:1B:CF:12:85:D6:E9:09:0F:7F:32:C4:1E:21:59:46 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:44:4c:23:51:a1:2a:54:d9:93:bb:36:9f:33:8b:71:77:8d: dd:4f:f2:63:cc:4d:81:2b:38:39:66:f3:d6:4d:e9:d6:e7:66: 5f:96:d3:67:ba:c8:ce:e8:34:59:3b:9b:c1:58:4e:86:8e:f4: 08:a3:7e:b7:1b:99:c9:45:c2:1f:0f:96:e4:80:04:8b:3d:d2: 94:77:3b:d2:83:10:d4:65:90:d0:5f:82:45:c9:5f:75:44:0b: 40:9f:9a:e6:a4:35:9d:33:e8:37:74:ee:38:0b:f4:15:64:b4: ce:0b:6b:3e:1b:c3:25:2b:a0:1a:f8:1c:77:7c:81:c1:7d:d5: 79:45:ed:1a:df:36:ae:65:b7:40:60:b2:31:89:30:b9:0b:32: a0:de:29:62:1c:8b:9f:20:15:d1:46:8c:b1:9a:da:1b:0e:95: 19:65:06:0c:80:95:01:0e:ec:d5:15:f0:27:08:17:39:66:3e: 91:c3:90:a2:c3:15:11:ea:2a:4f:0e:cb:b1:3e:6d:1a:2b:d6: 65:f9:68:98:df:e9:db:e0:cd:c7:11:25:92:59:b6:22:53:42: 0d:cd:4b:97:c9:84:b0:09:92:40:ca:61:a9:0e:e5:bc:e5:39: 0e:5f:79:bc:3c:8c:49:9f:10:93:66:42:a5:7d:6e:36:21:92: ae:f7:bd:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+RvokkchUI4JLKWpu5nvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUxMDE5MjEwMTI4WhcNMjUxMDIwMjEwMTI4WjAzMTEwLwYDVQQD Eyg3ZTQ1YTc2MTRlMWJjZjEyODVkNmU5MDkwZjdmMzJjNDFlMjE1OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7kBFXRfCXuJdi8dxj0vBAD5FaZR 7vekzkOGONswg+zF6jc6wlR0/55woKcsyj2d4+aAWZBwrcaHPYhi6vMWlOUVqH5e ceFpnDXBaWWObhBN3y41qC7akrE937Li55ziw4JiGVBnTO4YV6W6gnash4MZVPsQ +8V/9ik47DSEpjM3BffT+KiSlRNZxqgtPUMSN0lxJajB0xs0LwIx6PJECdIV7klK NgZU6+shU4cek64TaTTx/JISaSGMd8kgFYxGLQ7ahOkUMxutAN5QJYofGGNu3Jwa OH/jq9E5c5tNrKlNk6i1zYNjWFr0KJ0WfXkNXzWpZl/eFCUFsQWgjkRW0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5Fp2FOG88ShdbpCQ9/MsQeIVlGMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0RMI1Gh KlTZk7s2nzOLcXeN3U/yY8xNgSs4OWbz1k3p1udmX5bTZ7rIzug0WTubwVhOho70 CKN+txuZyUXCHw+W5IAEiz3SlHc70oMQ1GWQ0F+CRclfdUQLQJ+a5qQ1nTPoN3Tu OAv0FWS0zgtrPhvDJSugGvgcd3yBwX3VeUXtGt82rmW3QGCyMYkwuQsyoN4pYhyL nyAV0UaMsZraGw6VGWUGDICVAQ7s1RXwJwgXOWY+kcOQosMVEeoqTw7LsT5tGivW ZflomN/p2+DNxxElklm2IlNCDc1Ll8mEsAmSQMphqQ7lvOU5Dl95vDyMSZ8Qk2ZC pX1uNiGSrve9Cw== -----END CERTIFICATE-----Generated at Mon Oct 20 00:15:01 2025 by rpki-client