$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: X6ZpDVSDJ336qPXUv8W925ojoA8RuVnhyrtpnjZa/b0= Subject key identifier: A9:1D:60:3D:F6:F7:F6:C8:EE:8E:6C:76:35:72:20:D0:38:5F:52:4E Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 0197C3EDFAB6D4A8BDFE18BB9D8EFB84EE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0916 Signing time: Tue 01 Jul 2025 03:00:42 +0000 Manifest this update: Tue 01 Jul 2025 03:00:42 +0000 Manifest next update: Wed 02 Jul 2025 03:00:42 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 2pvIQqdrnc-BOV2vOiV82aU9KnE.roa (hash: JAA8g6YNbUGTGs3DmgxNRM+sH++rPd6SoVFBQv/ksXw=) 4: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 5: 9-Lq9NSY6nMi32xtrHchy0u9eLo.roa (hash: Z9AqNkkBI9qUeSw20awtQHkRxTjGqDrKUrCkhNF8va8=) 6: AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa (hash: MeOMNj8M3otSolym8ILgKTUapqaRLBLDFhuT2M87Jfs=) 7: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 8: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 9: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 10: T9T4J6edlfy_i5-slOG4aV_QdIQ.roa (hash: eu2IweeoPyVHQt7dr15SgVjejr4+xNgXU9dFpcwWirI=) 11: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 12: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 13: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: AZvkikLd6CyzaMepkUonRc5RHGl8+qNwsnqeWm9Ot0k=) 14: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 15: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 16: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 17: j60P2U9ew9b40KT1eQixMF89Kiw.roa (hash: 6QyYZiDRnfs4gi+c7xIeW7neFF2AWa/7UFLNyJVZkkI=) 18: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 19: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c3:ed:fa:b6:d4:a8:bd:fe:18:bb:9d:8e:fb:84:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jul 1 03:00:42 2025 GMT Not After : Jul 2 03:00:42 2025 GMT Subject: CN=a91d603df6f7f6c8ee8e6c76357220d0385f524e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:9b:b6:ed:70:a4:83:f8:00:0a:68:07:18: e0:b7:99:1e:c3:0b:2e:13:90:e1:f3:14:33:86:0a: 42:b9:5d:da:ba:0d:4d:3d:3d:c6:66:73:5a:12:dc: 02:07:cd:26:8d:63:35:8f:07:fb:b9:c2:f1:54:a3: f1:3d:df:33:39:69:f0:cf:65:51:ce:59:48:82:11: 8e:c3:26:a9:e3:29:e6:dc:8d:19:a1:04:20:98:c0: 78:91:cc:21:43:c9:43:52:64:9e:cf:1f:20:61:a0: f2:c5:0f:d3:d1:e5:2e:da:24:2b:89:f4:00:e1:b7: 4b:08:9e:47:9b:1f:20:71:d1:7c:fa:23:17:0d:ea: 65:54:1c:24:df:b7:b2:5f:e9:ba:c7:29:37:e4:63: c2:91:f0:f3:08:b2:9f:f6:48:d8:1e:f2:cb:f8:91: d4:1f:ba:bc:a1:9b:06:05:9c:25:58:9d:fc:90:0b: 89:f5:2a:59:17:e0:db:18:73:3e:49:2d:8c:2e:bd: 87:a6:b4:72:40:fb:d3:f1:65:65:fc:30:02:97:1a: 3e:30:09:15:08:0f:7a:67:d6:b8:0e:f5:e2:c2:43: 7d:c9:e9:80:8e:63:de:09:ff:fc:3c:f2:21:ff:80: 7a:00:94:fe:5e:5f:40:0f:86:e8:cb:3c:20:1a:15: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:60:3D:F6:F7:F6:C8:EE:8E:6C:76:35:72:20:D0:38:5F:52:4E X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ea:f4:8d:29:2b:19:02:e1:d0:de:0c:c1:70:01:2d:4e:b8: 2a:4e:b0:3e:c6:ac:ce:4c:7c:2e:a4:23:79:a3:a3:0f:0e:3f: f0:8b:7b:2c:d3:78:a6:d6:87:dc:98:44:6d:55:e0:72:23:a6: 2d:0a:26:cd:0b:d1:9f:23:90:55:fc:47:a3:b5:23:ff:7d:27: b8:bb:a8:b7:ac:e1:26:7f:30:14:89:2e:b2:73:d0:80:13:1a: 17:eb:9a:36:ec:aa:93:3d:44:bf:0e:61:68:4b:44:8e:c3:49: 68:fc:ec:91:8e:4a:93:04:75:01:f7:fb:5a:80:17:89:5a:3e: 05:3d:c9:1f:d7:72:a3:2b:04:a7:1a:02:1b:d3:e6:bc:b4:29: f8:df:d5:0c:db:42:8b:6b:1f:62:62:ca:4f:38:7f:a7:ff:1a: 16:33:3d:fd:ae:bf:ca:d2:b0:48:8d:ef:85:2e:55:6c:59:a3: 9e:7c:df:18:1e:c7:96:83:49:1a:c1:c5:eb:77:3f:c0:d5:17: 58:86:37:6e:22:3b:ff:be:cc:67:4c:59:9b:9f:70:71:24:1e: 01:3d:4c:6c:6b:f0:a2:0b:82:95:45:01:54:72:ca:83:37:2b: b3:bd:c3:d3:01:df:17:36:66:45:ac:9d:52:ea:33:5c:c7:23: 4b:06:5b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfD7fq21Ki9/hi7nY77hO5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUwNzAxMDMwMDQyWhcNMjUwNzAyMDMwMDQyWjAzMTEwLwYDVQQD EyhhOTFkNjAzZGY2ZjdmNmM4ZWU4ZTZjNzYzNTcyMjBkMDM4NWY1MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhabtu1wpIP4AApoBxjgt5kewwsu E5Dh8xQzhgpCuV3aug1NPT3GZnNaEtwCB80mjWM1jwf7ucLxVKPxPd8zOWnwz2VR zllIghGOwyap4ynm3I0ZoQQgmMB4kcwhQ8lDUmSezx8gYaDyxQ/T0eUu2iQrifQA 4bdLCJ5Hmx8gcdF8+iMXDeplVBwk37eyX+m6xyk35GPCkfDzCLKf9kjYHvLL+JHU H7q8oZsGBZwlWJ38kAuJ9SpZF+DbGHM+SS2MLr2HprRyQPvT8WVl/DAClxo+MAkV CA96Z9a4DvXiwkN9yemAjmPeCf/8PPIh/4B6AJT+Xl9AD4boyzwgGhXs2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkdYD329/bI7o5sdjVyINA4X1JOMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+r0jSkr GQLh0N4MwXABLU64Kk6wPsaszkx8LqQjeaOjDw4/8It7LNN4ptaH3JhEbVXgciOm LQomzQvRnyOQVfxHo7Uj/30nuLuot6zhJn8wFIkusnPQgBMaF+uaNuyqkz1Evw5h aEtEjsNJaPzskY5KkwR1Aff7WoAXiVo+BT3JH9dyoysEpxoCG9PmvLQp+N/VDNtC i2sfYmLKTzh/p/8aFjM9/a6/ytKwSI3vhS5VbFmjnnzfGB7HloNJGsHF63c/wNUX WIY3biI7/77MZ0xZm59wcSQeAT1MbGvwoguClUUBVHLKgzcrs73D0wHfFzZmRayd UuozXMcjSwZb/w== -----END CERTIFICATE-----Generated at Tue Jul 1 13:11:21 2025 by rpki-client