$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: HB9gAj7wua827e8Zeq7w+E7NHhN/sigwLuMXyfVUYpE= Subject key identifier: 7F:D1:70:F0:A8:5F:A6:C8:8A:0C:D8:5D:03:95:D2:1E:3C:70:A9:03 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 0197B820EFE275F4EDE69950359D4DB07ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0F21 Signing time: Sat 28 Jun 2025 20:00:55 +0000 Manifest this update: Sat 28 Jun 2025 20:00:55 +0000 Manifest next update: Sun 29 Jun 2025 20:00:55 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 4: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 5: AOIzdEpzhrNXngdse05fFibSA0A.roa (hash: WqQWeseGgOQCBOZ7LOgpYVoh0NQJwl9PKyOGFJF4SYo=) 6: KnG8E7kezj3tf5epLozmTXTa310.roa (hash: DtT9ixAjwNWnGrRh0hq/H61cwW7Mp11Bc6qafI15X5M=) 7: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 8: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 9: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 10: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 11: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 12: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: +Byu2S1I/KQCWspkeNwYDY6Jy6YovM/YjAZOIPkn4dA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:20:ef:e2:75:f4:ed:e6:99:50:35:9d:4d:b0:7a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jun 28 20:00:55 2025 GMT Not After : Jun 29 20:00:55 2025 GMT Subject: CN=7fd170f0a85fa6c88a0cd85d0395d21e3c70a903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:b1:68:56:e2:88:a9:4b:fa:a6:21:84:b5: 76:fa:d7:27:07:08:f2:12:17:0c:bc:67:10:ba:a1: 9f:4a:8a:70:d5:a6:35:11:58:fa:0e:69:b6:43:8b: 82:3f:76:4d:00:f5:57:b3:c0:90:b9:4e:00:19:bd: 9a:16:01:31:92:7c:df:a9:43:60:34:de:0b:1b:7b: 5a:5d:86:70:81:e6:d6:80:39:af:d9:df:7a:e6:a9: 8f:38:3d:8e:c7:97:50:73:0c:13:69:d9:c8:7b:2e: f3:78:ed:f0:83:d5:0d:6f:39:a3:de:25:27:15:bb: 21:db:41:80:33:0f:47:ce:c2:32:bc:61:4c:dc:6a: 67:54:1a:08:3b:54:b8:8b:0d:f1:0c:b0:4e:23:b4: 07:a0:c0:9a:c4:92:fc:8b:a4:80:81:0f:7f:9d:59: 1b:ec:44:b2:0b:8f:03:10:fb:1b:4f:5e:83:9e:4b: ea:7a:07:d5:97:ee:15:e4:75:7a:ba:35:2c:42:69: 48:14:03:0d:57:95:ef:49:c1:f0:5a:c6:cd:ee:1b: e0:dd:0c:9d:64:79:1d:65:18:2c:e6:d3:50:e4:5a: aa:5e:60:7a:b6:fc:8a:28:e5:9b:4a:9c:eb:a2:a2: 93:bc:72:8c:e7:93:82:c3:a8:65:b9:03:f5:57:be: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:70:F0:A8:5F:A6:C8:8A:0C:D8:5D:03:95:D2:1E:3C:70:A9:03 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9b:4d:0d:23:84:b1:97:5e:eb:25:c3:74:09:21:14:89:26: 2b:33:e3:da:42:90:13:89:36:57:70:3f:8b:67:64:20:43:5b: d6:ef:e5:65:20:ec:4b:ab:c5:e0:65:7b:36:d0:3e:32:cc:f2: 7c:03:2a:d1:ad:c7:83:64:97:30:2c:d4:32:b1:d2:12:94:17: 31:8e:87:ba:22:f5:6e:97:31:2c:cf:d5:01:de:75:34:58:4f: 0d:17:40:05:ee:b6:4a:81:28:25:a3:e5:e0:8a:49:a8:cd:7c: 59:d4:d6:63:3c:c9:d0:fc:26:44:14:6a:50:d5:ad:dc:f7:1e: 87:f1:fc:f8:0d:3c:7d:91:5e:7b:8d:6a:63:c6:56:21:49:bc: d7:e7:fe:66:e6:9b:db:de:f1:6a:9d:24:be:09:8a:38:06:93: af:3b:9d:e8:4f:70:52:a2:13:fd:74:1c:e4:8f:8f:ec:25:f6: 0a:57:cc:d3:0b:22:b8:b4:6c:33:7c:8c:38:3c:19:19:03:b9: 7c:e6:73:e1:43:0d:a7:8f:cd:8b:3d:fb:ae:f1:da:5a:80:02: 61:de:fc:80:89:bf:93:d4:49:cb:bb:e3:dc:52:fb:eb:26:2e: ae:2a:ba:b2:7e:fe:b1:89:f7:b8:45:19:e5:6e:f1:e6:8b:cb: 59:13:35:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IO/idfTt5plQNZ1NsHrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwNjI4MjAwMDU1WhcNMjUwNjI5MjAwMDU1WjAzMTEwLwYDVQQD Eyg3ZmQxNzBmMGE4NWZhNmM4OGEwY2Q4NWQwMzk1ZDIxZTNjNzBhOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySSxaFbiiKlL+qYhhLV2+tcnBwjy EhcMvGcQuqGfSopw1aY1EVj6Dmm2Q4uCP3ZNAPVXs8CQuU4AGb2aFgExknzfqUNg NN4LG3taXYZwgebWgDmv2d965qmPOD2Ox5dQcwwTadnIey7zeO3wg9UNbzmj3iUn Fbsh20GAMw9HzsIyvGFM3GpnVBoIO1S4iw3xDLBOI7QHoMCaxJL8i6SAgQ9/nVkb 7ESyC48DEPsbT16DnkvqegfVl+4V5HV6ujUsQmlIFAMNV5XvScHwWsbN7hvg3Qyd ZHkdZRgs5tNQ5FqqXmB6tvyKKOWbSpzroqKTvHKM55OCw6hluQP1V75i9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/RcPCoX6bIigzYXQOV0h48cKkDMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJtNDSOE sZde6yXDdAkhFIkmKzPj2kKQE4k2V3A/i2dkIENb1u/lZSDsS6vF4GV7NtA+Mszy fAMq0a3Hg2SXMCzUMrHSEpQXMY6HuiL1bpcxLM/VAd51NFhPDRdABe62SoEoJaPl 4IpJqM18WdTWYzzJ0PwmRBRqUNWt3Pceh/H8+A08fZFee41qY8ZWIUm81+f+Zuab 297xap0kvgmKOAaTrzud6E9wUqIT/XQc5I+P7CX2ClfM0wsiuLRsM3yMODwZGQO5 fOZz4UMNp4/Niz37rvHaWoACYd78gIm/k9RJy7vj3FL76yYuriq6sn7+sYn3uEUZ 5W7x5ovLWRM1TQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:43:00 2025 by rpki-client