$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: DTEogdKbQyJnCUxIRCpOZMv73N7QLFDTRf3jhm1+JIM= Subject key identifier: 4A:2F:2B:3D:EC:45:68:25:E8:2E:A3:06:D0:CD:B5:9F:D4:05:81:11 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 0199FCC65A1A5687F3AC5C3FDED87F6B1A6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0A40 Signing time: Sun 19 Oct 2025 14:01:21 +0000 Manifest this update: Sun 19 Oct 2025 14:01:21 +0000 Manifest next update: Mon 20 Oct 2025 14:01:21 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 4: AcjZPvLVEctq4aWtM9Se4g1Hez4.roa (hash: m4DjUNQ10CarUgcdKKVdQWZBHX6pVTG/J1Gv/VX/MoI=) 5: AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa (hash: MeOMNj8M3otSolym8ILgKTUapqaRLBLDFhuT2M87Jfs=) 6: CNNo6sJtcsVyHQty59h4qZzMc2Y.roa (hash: xoDyTFUhZm+5tdI2D1IzKY3vd2lTLUJ1UzcZ28pMODY=) 7: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 8: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 9: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 10: T9T4J6edlfy_i5-slOG4aV_QdIQ.roa (hash: eu2IweeoPyVHQt7dr15SgVjejr4+xNgXU9dFpcwWirI=) 11: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 12: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 13: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: h1o+/TQwqMc1a4aXtwlSfnrKcwLYiu/rjZRdyqrYx2U=) 14: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 15: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 16: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 17: e7z0oRKCehd6Ea7tsIDH_CrT8g0.roa (hash: rqMdlglqnoJd6sqLsXF+uIqk3nINirrRe1Hs5mOfPEU=) 18: iCveD-Xjd5JabG_WX6frr5x6in0.roa (hash: 95l1uR3aj9xTQRq9TbMrNh9RKHM6w6gjilx0WBwNahE=) 19: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 20: qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa (hash: EfOedSZueUJgPg3V0RQ+mS3lngajdnN3iZ8o0TSNE3A=) 21: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:5a:1a:56:87:f3:ac:5c:3f:de:d8:7f:6b:1a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Oct 19 14:01:21 2025 GMT Not After : Oct 20 14:01:21 2025 GMT Subject: CN=4a2f2b3dec456825e82ea306d0cdb59fd4058111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:f7:d9:ec:ae:e0:bf:8c:18:eb:f2:05:f1: 9a:2a:43:da:67:09:5f:c4:5e:3a:d0:d9:4b:04:7f: 80:0e:b8:17:5c:d7:d1:ba:4d:89:0f:5f:9a:79:68: a7:78:98:d5:6a:8c:27:7f:e1:80:32:7c:fe:30:93: b8:d1:06:04:22:c4:4f:81:5e:ab:20:02:c5:96:ba: a9:7a:40:e3:0f:33:57:ef:c2:61:39:68:c4:f3:da: 52:0b:5f:bf:c6:f9:28:7c:a0:92:5d:1e:95:b0:59: fe:83:8b:98:63:e5:a0:47:12:f7:b9:8d:1f:a7:c0: 2e:6a:6a:a2:48:3b:0e:24:ee:7c:d5:80:be:eb:7a: a6:9f:9c:ea:3a:1e:c1:8d:c9:f4:48:50:e5:37:24: 40:e0:f9:3b:da:e3:23:f3:42:45:5f:ad:71:cd:5e: d0:97:3e:45:ab:f1:a8:7d:f1:40:20:2f:2c:e3:c7: 92:15:87:20:59:84:3a:a0:e8:26:81:d0:ad:37:30: 1b:c8:e9:aa:14:d1:d7:c6:18:09:f3:fb:9b:0e:26: d4:55:19:67:35:73:d1:64:d9:2d:c3:63:5d:93:d1: e8:7b:d0:df:61:1e:1f:ba:4d:3a:2a:39:69:b1:f6: 1c:7b:7a:fb:a1:4e:db:93:ff:b0:93:a8:8c:46:07: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:2B:3D:EC:45:68:25:E8:2E:A3:06:D0:CD:B5:9F:D4:05:81:11 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:86:45:2b:29:33:a7:3b:e1:8e:38:e9:3a:ad:f6:f2:3c:b9: 81:44:74:9b:6d:ba:d2:28:c1:ac:9a:1d:65:85:47:71:ad:e6: fe:0e:5e:d8:d5:42:c9:14:79:39:6d:7f:ac:59:37:10:c0:1c: 60:9d:1d:e8:13:86:64:33:1e:06:58:14:9a:53:09:e7:d4:e7: 5c:7b:35:a1:cc:46:53:51:66:35:72:e3:c7:74:d4:48:dc:ca: 94:ce:86:63:b0:80:f6:f7:b7:eb:07:96:4b:34:d4:78:7b:42: 1f:5c:f2:df:27:73:b3:8d:df:97:55:1a:56:e7:7a:25:7a:c5: 36:81:fd:f5:47:23:94:f1:6a:6a:99:43:e3:4d:d1:54:5e:60: fc:ba:2e:2e:5f:89:07:77:a5:d2:d2:45:cc:e1:87:4d:b9:ed: 51:ac:ce:5e:47:62:87:c6:c3:77:fc:13:05:cc:d6:37:43:47: 00:5c:48:e2:69:90:6d:52:26:da:b6:5d:07:df:33:ca:b0:ed: 84:e8:35:b3:c4:4e:20:22:0e:bd:88:2f:7e:b7:fd:1c:11:60: 1e:50:35:db:da:df:a4:92:49:84:c4:8a:a4:53:46:a5:9d:b3: bc:96:18:08:e5:1f:72:7d:5b:e9:5b:c4:00:33:17:c5:e8:05: 47:5c:1f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xloaVofzrFw/3th/axpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUxMDE5MTQwMTIxWhcNMjUxMDIwMTQwMTIxWjAzMTEwLwYDVQQD Eyg0YTJmMmIzZGVjNDU2ODI1ZTgyZWEzMDZkMGNkYjU5ZmQ0MDU4MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpH32eyu4L+MGOvyBfGaKkPaZwlf xF460NlLBH+ADrgXXNfRuk2JD1+aeWineJjVaownf+GAMnz+MJO40QYEIsRPgV6r IALFlrqpekDjDzNX78JhOWjE89pSC1+/xvkofKCSXR6VsFn+g4uYY+WgRxL3uY0f p8AuamqiSDsOJO581YC+63qmn5zqOh7Bjcn0SFDlNyRA4Pk72uMj80JFX61xzV7Q lz5Fq/GoffFAIC8s48eSFYcgWYQ6oOgmgdCtNzAbyOmqFNHXxhgJ8/ubDibUVRln NXPRZNktw2Ndk9Hoe9DfYR4fuk06KjlpsfYce3r7oU7bk/+wk6iMRgetPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEovKz3sRWgl6C6jBtDNtZ/UBYERMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4ZFKykz pzvhjjjpOq328jy5gUR0m2260ijBrJodZYVHca3m/g5e2NVCyRR5OW1/rFk3EMAc YJ0d6BOGZDMeBlgUmlMJ59TnXHs1ocxGU1FmNXLjx3TUSNzKlM6GY7CA9ve36weW SzTUeHtCH1zy3ydzs43fl1UaVud6JXrFNoH99UcjlPFqaplD403RVF5g/LouLl+J B3el0tJFzOGHTbntUazOXkdih8bDd/wTBczWN0NHAFxI4mmQbVIm2rZdB98zyrDt hOg1s8ROICIOvYgvfrf9HBFgHlA129rfpJJJhMSKpFNGpZ2zvJYYCOUfcn1b6VvE ADMXxegFR1wfmw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:34:10 2025 by rpki-client