$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: MPqQcuO//szWxPwJH6xnr8MDpfqK2xia6gYsSaB2iYc= Subject key identifier: 1A:98:06:4C:96:82:03:36:DE:7F:60:64:A1:2B:D0:25:0F:23:4D:CE Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 0196BE25A9ACDE94B4158C4B4A67121C10EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 154E Signing time: Sun 11 May 2025 07:01:01 +0000 Manifest this update: Sun 11 May 2025 07:01:01 +0000 Manifest next update: Mon 12 May 2025 07:01:01 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: K3SR0bebvdQcUkUQFahPUTZ7WxHqihNLaZEtIl6Z+4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:25:a9:ac:de:94:b4:15:8c:4b:4a:67:12:1c:10:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: May 11 07:01:01 2025 GMT Not After : May 12 07:01:01 2025 GMT Subject: CN=1a98064c96820336de7f6064a12bd0250f234dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:c0:f5:a5:4a:24:ac:7c:24:28:18:31:7f: ef:34:58:5a:ff:2b:e4:ec:73:35:cb:4f:4d:83:b4: 45:93:b4:29:3b:e8:30:d3:c4:f9:58:0d:e2:a9:9f: c5:04:1e:96:e2:cd:49:44:cf:15:f8:f7:df:e7:00: cb:4c:d5:84:ae:a9:6c:00:e4:cc:e8:e4:7d:01:55: a2:f2:c8:01:1d:e1:ea:7b:7a:f1:bf:2a:81:b3:eb: 07:d7:d8:6e:c5:68:ce:84:2e:62:77:3d:e5:3e:c8: 06:bf:90:cb:5c:84:56:30:e7:79:a9:d6:70:1c:78: bf:b7:da:5e:f6:0b:e4:6e:08:25:e2:97:5f:ab:8e: a7:6c:55:dc:fc:b7:08:9d:07:72:a1:50:70:4f:c4: 6e:14:a6:18:66:4e:5f:9e:2e:b0:d9:45:a8:3d:20: b0:49:f9:9a:4c:d8:37:81:07:f4:a3:f4:f3:f8:b5: 0e:11:0e:71:de:80:31:aa:19:46:9a:4d:7b:29:65: 26:c5:0d:2a:3f:e2:80:f7:e5:da:34:1c:a3:77:24: cb:32:ee:4d:41:d9:9c:ec:2d:0e:56:b7:75:20:da: c6:e5:55:01:13:cf:83:5e:24:3f:18:1d:41:ab:6b: df:06:74:bd:82:0e:0e:01:18:95:ab:ab:5a:72:62: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:98:06:4C:96:82:03:36:DE:7F:60:64:A1:2B:D0:25:0F:23:4D:CE X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a1:4e:20:cf:1e:d5:c0:75:51:57:44:24:0f:64:8d:ed:0c: 45:5d:4b:1d:6b:9a:4f:88:a2:cb:5a:ca:07:e4:b7:ad:d8:5e: 20:9c:01:1f:92:f8:da:c8:20:50:4c:9e:87:70:7e:7e:f3:3f: 52:7d:20:42:b7:7b:1f:68:20:c5:ee:1b:42:b4:68:d6:35:91: c4:e6:30:c0:39:8d:d2:64:28:44:fc:06:76:07:17:5f:4c:9a: 1e:01:77:16:ba:f1:77:bc:dd:dd:77:8e:35:ac:42:4c:ae:b2: 9b:80:be:c9:ef:97:08:c3:de:c1:c4:2f:d9:09:6e:b7:f5:35: cc:f7:b5:57:09:e1:d9:00:b2:69:13:cb:64:81:6a:fb:ec:a3: b5:cc:9c:48:5f:b6:19:f4:0b:17:bf:20:d0:69:8e:fc:98:58: 52:e3:0e:05:2d:fa:e6:39:90:65:78:b9:e5:46:1b:37:73:c3: 1a:f7:48:14:b5:44:35:a1:ce:76:8d:47:c8:b3:f0:dd:e1:61: e2:93:99:4e:8e:47:60:7d:72:38:3d:48:80:3a:71:1e:d5:a4: 7e:09:a8:14:e8:65:df:2a:20:e5:b5:66:da:75:df:c6:6a:d8: ed:9f:7d:f3:b1:57:f8:8b:d9:1d:8a:aa:b9:2b:52:96:1f:7b: 96:18:21:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+Jams3pS0FYxLSmcSHBDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUwNTExMDcwMTAxWhcNMjUwNTEyMDcwMTAxWjAzMTEwLwYDVQQD EygxYTk4MDY0Yzk2ODIwMzM2ZGU3ZjYwNjRhMTJiZDAyNTBmMjM0ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk3A9aVKJKx8JCgYMX/vNFha/yvk 7HM1y09Ng7RFk7QpO+gw08T5WA3iqZ/FBB6W4s1JRM8V+Pff5wDLTNWErqlsAOTM 6OR9AVWi8sgBHeHqe3rxvyqBs+sH19huxWjOhC5idz3lPsgGv5DLXIRWMOd5qdZw HHi/t9pe9gvkbggl4pdfq46nbFXc/LcInQdyoVBwT8RuFKYYZk5fni6w2UWoPSCw SfmaTNg3gQf0o/Tz+LUOEQ5x3oAxqhlGmk17KWUmxQ0qP+KA9+XaNByjdyTLMu5N Qdmc7C0OVrd1INrG5VUBE8+DXiQ/GB1Bq2vfBnS9gg4OARiVq6tacmI8UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqYBkyWggM23n9gZKEr0CUPI03OMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaFOIM8e 1cB1UVdEJA9kje0MRV1LHWuaT4iiy1rKB+S3rdheIJwBH5L42sggUEyeh3B+fvM/ Un0gQrd7H2ggxe4bQrRo1jWRxOYwwDmN0mQoRPwGdgcXX0yaHgF3Frrxd7zd3XeO NaxCTK6ym4C+ye+XCMPewcQv2Qlut/U1zPe1Vwnh2QCyaRPLZIFq++yjtcycSF+2 GfQLF78g0GmO/JhYUuMOBS365jmQZXi55UYbN3PDGvdIFLVENaHOdo1HyLPw3eFh 4pOZTo5HYH1yOD1IgDpxHtWkfgmoFOhl3yog5bVm2nXfxmrY7Z9987FX+IvZHYqq uStSlh97lhghIw== -----END CERTIFICATE-----Generated at Sun May 11 13:41:46 2025 by rpki-client