$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: fFIbQ0+aq7kqWXDS81/rUNBbmy029qKBKYXVxM9DSwg= Subject key identifier: 65:EE:E9:A1:3B:0F:5E:3D:DC:DF:4B:AF:E0:FD:F2:F0:75:B6:32:1F Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 0199FC8F4628E7EED67DA789A98278806F81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 16FC Signing time: Sun 19 Oct 2025 13:01:12 +0000 Manifest this update: Sun 19 Oct 2025 13:01:12 +0000 Manifest next update: Mon 20 Oct 2025 13:01:12 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: nbcW0c8HJqYVpCOS5OwzZhknhFEh1haKhO556oeBDc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:46:28:e7:ee:d6:7d:a7:89:a9:82:78:80:6f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Oct 19 13:01:12 2025 GMT Not After : Oct 20 13:01:12 2025 GMT Subject: CN=65eee9a13b0f5e3ddcdf4bafe0fdf2f075b6321f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:08:7d:f6:3a:6a:fd:b3:31:d2:60:68:8b: 14:f5:19:f0:85:27:23:dd:28:f9:63:0d:32:09:35: e7:39:d4:30:5b:9e:a0:b5:da:3f:bb:16:0c:ea:01: ed:82:57:8f:fa:77:1e:99:6b:0a:8b:b0:c8:aa:00: b6:54:fb:3f:de:9e:0c:af:6b:ed:4f:61:b5:de:c4: ac:14:35:fc:2f:56:f1:fc:be:0c:a8:e8:5f:8a:b1: 3d:cf:5d:2f:59:c1:b6:26:3e:df:31:db:cc:27:ce: ef:fe:d4:67:33:33:d3:5e:c3:c2:c3:91:b1:a5:8d: b9:70:28:a7:75:25:0c:e9:9f:89:94:e4:13:3a:d9: 95:b8:63:f2:7e:a0:75:bb:cb:5d:ad:55:1e:40:5e: 02:34:05:de:2a:6f:f8:fc:9f:b6:5b:69:2a:33:7a: d7:16:14:94:54:16:95:59:58:39:43:d4:9f:b2:53: 41:81:02:4d:df:d0:cd:a2:b6:46:0d:67:06:28:ab: fc:a2:62:0b:04:77:81:93:75:be:86:75:55:85:a0: bc:51:45:c9:22:73:05:df:2f:18:73:00:82:9a:54: c4:bb:99:47:df:9d:00:53:ca:4a:51:8c:9f:cc:07: b1:d3:5c:26:88:d8:f3:3f:2d:59:a1:f2:77:2a:18: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EE:E9:A1:3B:0F:5E:3D:DC:DF:4B:AF:E0:FD:F2:F0:75:B6:32:1F X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6e:b0:b1:d3:f4:7f:4f:2f:af:09:80:2b:5d:6a:3e:c7:47: 29:64:ae:33:bc:3f:5a:36:b8:b9:e6:04:41:3d:2a:96:ce:9a: 22:e8:23:55:98:83:85:26:7d:cb:2a:56:36:f1:9c:79:d6:d3: e2:13:4a:ce:7d:a2:bb:f8:7a:3c:dc:f0:cf:cd:d1:98:f0:d4: 55:44:6e:7e:5a:d1:43:7a:80:f9:35:bc:d6:d0:33:26:bd:d4: f3:93:84:6e:1a:cb:51:d3:d2:5a:58:31:29:42:95:b0:13:cb: 64:90:80:cb:bb:6d:ab:ef:68:8a:92:ac:d3:48:48:a8:f8:70: eb:2d:2a:f7:37:87:20:28:c5:48:7e:4b:41:67:66:b5:92:cb: ee:c4:fb:9c:22:64:0b:30:bf:d1:25:ba:7c:92:c2:1b:c5:35: 3d:71:09:0e:7a:2d:bd:6a:83:f7:cf:a6:5a:44:88:11:60:d2: 8b:aa:c0:50:60:4f:9d:e5:3a:df:8b:64:00:43:dc:43:9f:b0: 86:be:1a:03:8e:48:ce:a5:54:ec:72:fd:72:73:02:18:80:23: 83:fb:fb:ba:cb:41:0d:05:8e:86:14:f0:e4:b7:44:3b:9c:8b: 36:83:38:df:9d:b5:37:97:4b:bc:45:8d:d0:70:ba:55:35:2e: 3c:4a:42:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j0Yo5+7WfaeJqYJ4gG+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUxMDE5MTMwMTEyWhcNMjUxMDIwMTMwMTEyWjAzMTEwLwYDVQQD Eyg2NWVlZTlhMTNiMGY1ZTNkZGNkZjRiYWZlMGZkZjJmMDc1YjYzMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w8IffY6av2zMdJgaIsU9RnwhScj 3Sj5Yw0yCTXnOdQwW56gtdo/uxYM6gHtgleP+ncemWsKi7DIqgC2VPs/3p4Mr2vt T2G13sSsFDX8L1bx/L4MqOhfirE9z10vWcG2Jj7fMdvMJ87v/tRnMzPTXsPCw5Gx pY25cCindSUM6Z+JlOQTOtmVuGPyfqB1u8tdrVUeQF4CNAXeKm/4/J+2W2kqM3rX FhSUVBaVWVg5Q9SfslNBgQJN39DNorZGDWcGKKv8omILBHeBk3W+hnVVhaC8UUXJ InMF3y8YcwCCmlTEu5lH350AU8pKUYyfzAex01wmiNjzPy1ZofJ3Khik9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXu6aE7D1493N9Lr+D98vB1tjIfMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm6wsdP0 f08vrwmAK11qPsdHKWSuM7w/Wja4ueYEQT0qls6aIugjVZiDhSZ9yypWNvGcedbT 4hNKzn2iu/h6PNzwz83RmPDUVURuflrRQ3qA+TW81tAzJr3U85OEbhrLUdPSWlgx KUKVsBPLZJCAy7ttq+9oipKs00hIqPhw6y0q9zeHICjFSH5LQWdmtZLL7sT7nCJk CzC/0SW6fJLCG8U1PXEJDnotvWqD98+mWkSIEWDSi6rAUGBPneU634tkAEPcQ5+w hr4aA45IzqVU7HL9cnMCGIAjg/v7ustBDQWOhhTw5LdEO5yLNoM43521N5dLvEWN 0HC6VTUuPEpCJg== -----END CERTIFICATE-----Generated at Sun Oct 19 21:00:28 2025 by rpki-client