$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: lZ2y1bW8dK9EDnQjXyRpd0fnOnHgf2SIKLXoEv7qeGY= Subject key identifier: 32:CF:37:69:C4:AB:27:1D:D5:AA:CE:48:8E:59:23:88:CC:B7:49:B5 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 0198D706175CF3BE9C6A3C00A48CD5A67C39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1664 Signing time: Sat 23 Aug 2025 13:02:37 +0000 Manifest this update: Sat 23 Aug 2025 13:02:37 +0000 Manifest next update: Sun 24 Aug 2025 13:02:37 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: pEwPxpFp/Z10Y5KMcORdUqqrKyFM+BRl/+NydOKIFk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:06:17:5c:f3:be:9c:6a:3c:00:a4:8c:d5:a6:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Aug 23 13:02:37 2025 GMT Not After : Aug 24 13:02:37 2025 GMT Subject: CN=32cf3769c4ab271dd5aace488e592388ccb749b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:e9:3a:0a:10:ad:41:f3:c9:ba:db:c5:f7: 24:0a:02:70:40:49:ee:1f:86:2d:cc:eb:4e:eb:1e: 88:db:65:0e:48:5a:cf:77:de:9f:bc:e2:bf:ad:08: 12:da:95:dd:83:f7:3a:57:16:cf:fa:45:9e:5d:b8: 85:9c:07:79:34:9e:d6:72:d0:3e:b9:3c:e8:c9:05: 1d:01:15:d2:de:a6:2c:e4:ec:40:45:57:11:26:60: 77:55:5e:37:5e:aa:fb:2a:d7:ca:2b:d7:38:31:33: 1b:47:00:91:2e:21:e6:3b:9c:d9:15:67:01:82:7d: 85:d3:86:ff:28:f9:90:7b:6d:e9:c8:8f:cf:fc:b4: 6c:9f:8e:7f:0c:19:fc:2c:9f:e0:82:49:87:cd:ec: 81:4c:bd:f2:88:4a:76:bc:0a:94:16:05:e1:4b:0c: fd:0f:76:8e:23:b0:6d:8a:96:ed:96:0a:80:22:35: 97:82:cf:da:b5:b0:1a:8b:19:3d:bf:84:08:5f:6b: 95:8c:25:2a:22:7a:95:6e:31:8f:a6:30:fb:5a:27: 55:45:e5:8f:cb:a9:e5:ed:03:3d:31:6b:8a:e7:5e: 14:8f:55:a9:36:e1:94:0d:1e:1b:35:45:66:e0:6d: 3e:15:47:2f:dd:ed:6b:84:92:a8:1f:63:7e:e9:60: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CF:37:69:C4:AB:27:1D:D5:AA:CE:48:8E:59:23:88:CC:B7:49:B5 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:87:61:04:da:a1:29:db:f6:c8:ae:89:2a:dd:63:35:6e: 30:c8:ae:b1:b6:36:73:d8:02:bc:2e:54:26:e4:73:d5:b7:39: d9:66:ff:d8:1a:45:82:87:be:0a:fb:83:c7:c5:32:e7:1e:75: 82:8a:5c:a8:ff:d5:3e:7f:57:4a:b1:c2:71:a0:96:64:72:ed: 9f:f3:87:6a:8b:a0:db:c8:5b:49:7f:00:9e:5d:73:77:e6:43: 0f:36:ef:61:d7:4d:8e:7f:90:54:77:4e:be:7b:da:ee:de:0f: 74:a4:56:0d:ae:32:d6:3d:36:d5:be:8a:fa:7b:08:4c:07:85: 59:d8:c8:30:0a:3d:c7:11:9d:e7:73:28:fc:55:dd:29:b5:3a: 89:3c:94:11:e8:5c:68:2b:43:01:e6:8f:60:57:50:df:28:0a: b6:83:50:1e:aa:f3:e0:af:23:45:3f:c4:ab:06:8d:0d:2d:5d: a1:bd:cf:2c:41:c1:20:68:17:6a:d9:46:2d:48:bc:b1:0a:ef: 22:69:dd:6d:60:7f:e4:53:32:ad:b2:2e:1e:b4:0f:9d:7d:c1: 92:75:88:73:8a:59:23:05:e9:93:db:36:a1:71:53:ae:6a:a3: 9c:fc:9c:04:57:48:76:52:7f:08:01:82:de:b0:46:e7:d0:eb: 7e:72:f8:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBhdc876cajwApIzVpnw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUwODIzMTMwMjM3WhcNMjUwODI0MTMwMjM3WjAzMTEwLwYDVQQD EygzMmNmMzc2OWM0YWIyNzFkZDVhYWNlNDg4ZTU5MjM4OGNjYjc0OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLnpOgoQrUHzybrbxfckCgJwQEnu H4YtzOtO6x6I22UOSFrPd96fvOK/rQgS2pXdg/c6VxbP+kWeXbiFnAd5NJ7WctA+ uTzoyQUdARXS3qYs5OxARVcRJmB3VV43Xqr7KtfKK9c4MTMbRwCRLiHmO5zZFWcB gn2F04b/KPmQe23pyI/P/LRsn45/DBn8LJ/ggkmHzeyBTL3yiEp2vAqUFgXhSwz9 D3aOI7BtipbtlgqAIjWXgs/atbAaixk9v4QIX2uVjCUqInqVbjGPpjD7WidVReWP y6nl7QM9MWuK514Uj1WpNuGUDR4bNUVm4G0+FUcv3e1rhJKoH2N+6WBcrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLPN2nEqycd1arOSI5ZI4jMt0m1MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2KHYQTa oSnb9siuiSrdYzVuMMiusbY2c9gCvC5UJuRz1bc52Wb/2BpFgoe+CvuDx8Uy5x51 gopcqP/VPn9XSrHCcaCWZHLtn/OHaoug28hbSX8Anl1zd+ZDDzbvYddNjn+QVHdO vnva7t4PdKRWDa4y1j021b6K+nsITAeFWdjIMAo9xxGd53Mo/FXdKbU6iTyUEehc aCtDAeaPYFdQ3ygKtoNQHqrz4K8jRT/EqwaNDS1dob3PLEHBIGgXatlGLUi8sQrv ImndbWB/5FMyrbIuHrQPnX3BknWIc4pZIwXpk9s2oXFTrmqjnPycBFdIdlJ/CAGC 3rBG59DrfnL4lg== -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:01 2025 by rpki-client