$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: A0Y1P3FIQCqqB2MjvQg7axZ66eLQ/u5LzwTzR9kNwI0= Subject key identifier: 9F:C9:12:F8:31:EE:FB:44:58:6F:EC:60:39:BB:9A:86:39:F9:8F:13 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 0198D5BBA97946D96E1CE567EB7CB8D1544F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0FB7 Signing time: Sat 23 Aug 2025 07:01:42 +0000 Manifest this update: Sat 23 Aug 2025 07:01:42 +0000 Manifest next update: Sun 24 Aug 2025 07:01:42 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: 7-yY2XLWHLUd9AuKxH5IHfl175M.roa (hash: zG66GAnwYloqOJJfg6bZ7R9P50YwxEBbTOi0v9cAdF8=) 6: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 7: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 8: XBAXnSmCv5-aVjUmot5ATfiEuxI.roa (hash: 6g9dUj0D+s3CKiQ71bKeZNmrEFu0U89VttCxnqum4+4=) 9: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 10: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: 4MrAb3RFbJEgiwIEqu5e1m5X09CmZIdyPcKpkbW7EfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:a9:79:46:d9:6e:1c:e5:67:eb:7c:b8:d1:54:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Aug 23 07:01:42 2025 GMT Not After : Aug 24 07:01:42 2025 GMT Subject: CN=9fc912f831eefb44586fec6039bb9a8639f98f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:7a:ca:a2:23:ac:ba:c1:a3:ee:5d:c4:f1: 77:68:44:d8:ee:1a:ec:a7:19:69:15:55:73:d8:84: 80:17:87:a6:32:c9:de:12:db:8c:9a:b9:32:72:49: 23:c5:8e:35:10:66:4b:58:a7:c5:c1:70:5f:e2:11: 08:28:38:62:2f:41:96:80:92:ad:1d:0f:9f:fb:0a: 1c:80:0b:7c:2c:09:36:3a:db:0d:1e:2d:74:74:26: c4:d8:5d:2b:20:fc:7c:93:0d:b2:55:9c:31:f4:f0: c3:aa:1d:51:ef:8e:27:50:ac:32:6a:e0:6c:1a:1c: 1b:52:7e:22:63:0d:cd:1f:e9:27:1d:fa:94:a4:38: d6:d2:77:16:ee:8f:9b:0a:b9:63:32:00:0f:88:e7: 22:69:b5:f4:77:c4:77:f6:06:16:13:37:d1:c0:b2: f0:93:ab:d4:d8:ee:f7:99:11:20:ff:78:ad:73:e2: 7f:cb:a4:29:26:f6:d4:38:82:8b:f9:b0:e2:e4:50: cd:6c:9c:87:ac:16:cb:d1:f4:f2:bc:c8:8c:05:ec: 22:c2:77:cd:b9:b5:15:a0:9d:c8:9d:4c:5c:da:ea: c4:79:14:df:c8:e6:e4:fe:a2:4e:0d:d4:d1:ed:ec: 28:3b:13:75:fc:15:89:90:54:61:4c:40:88:9a:6d: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:12:F8:31:EE:FB:44:58:6F:EC:60:39:BB:9A:86:39:F9:8F:13 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e3:a4:d4:7b:ae:d2:a1:e7:f3:06:e3:bb:b0:fe:b3:c5:94: c6:14:4c:32:8a:3e:a7:9a:15:13:a1:24:a6:86:17:11:35:04: a2:af:97:9a:51:3a:af:a7:1d:05:92:9b:c9:81:bb:04:38:ff: b1:2e:ba:39:cb:48:de:51:13:6e:4c:da:8d:21:2e:0b:45:ab: 27:a8:c7:c7:95:58:3c:e2:03:74:48:34:9a:9f:76:f5:92:1b: b7:50:02:73:f9:6f:3a:05:f1:fb:c0:35:13:30:c6:c2:2c:13: 56:d5:33:f9:62:e1:76:b3:0d:0c:39:dc:ba:a2:b2:51:75:86: 5c:cc:2e:15:2c:53:d3:a2:39:35:64:dd:c0:8d:a2:5c:75:26: c8:90:d9:e3:20:76:1b:56:1a:8a:e7:2b:1b:63:76:46:48:a1: c7:fe:84:b3:cc:43:04:d4:ea:ca:73:7f:90:f5:a3:65:b7:15: 5b:cb:af:76:08:75:20:f5:85:78:c8:f3:0d:0e:cf:95:90:86: d9:2e:56:b2:2a:6a:b5:e3:ee:45:24:41:36:6d:73:c1:40:9c: a6:94:33:41:43:f4:25:57:b3:06:c6:47:70:7b:98:14:9e:97: 03:61:75:d3:18:69:21:45:95:7c:5c:1b:88:a7:41:f1:28:54: 7f:a8:9b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu6l5RtluHOVn63y40VRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwODIzMDcwMTQyWhcNMjUwODI0MDcwMTQyWjAzMTEwLwYDVQQD Eyg5ZmM5MTJmODMxZWVmYjQ0NTg2ZmVjNjAzOWJiOWE4NjM5Zjk4ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv16yqIjrLrBo+5dxPF3aETY7hrs pxlpFVVz2ISAF4emMsneEtuMmrkyckkjxY41EGZLWKfFwXBf4hEIKDhiL0GWgJKt HQ+f+wocgAt8LAk2OtsNHi10dCbE2F0rIPx8kw2yVZwx9PDDqh1R744nUKwyauBs GhwbUn4iYw3NH+knHfqUpDjW0ncW7o+bCrljMgAPiOciabX0d8R39gYWEzfRwLLw k6vU2O73mREg/3itc+J/y6QpJvbUOIKL+bDi5FDNbJyHrBbL0fTyvMiMBewiwnfN ubUVoJ3InUxc2urEeRTfyObk/qJODdTR7ewoOxN1/BWJkFRhTECImm1AzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/JEvgx7vtEWG/sYDm7moY5+Y8TMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+Ok1Huu 0qHn8wbju7D+s8WUxhRMMoo+p5oVE6EkpoYXETUEoq+XmlE6r6cdBZKbyYG7BDj/ sS66OctI3lETbkzajSEuC0WrJ6jHx5VYPOIDdEg0mp929ZIbt1ACc/lvOgXx+8A1 EzDGwiwTVtUz+WLhdrMNDDncuqKyUXWGXMwuFSxT06I5NWTdwI2iXHUmyJDZ4yB2 G1YaiucrG2N2Rkihx/6Es8xDBNTqynN/kPWjZbcVW8uvdgh1IPWFeMjzDQ7PlZCG 2S5WsipqtePuRSRBNm1zwUCcppQzQUP0JVezBsZHcHuYFJ6XA2F10xhpIUWVfFwb iKdB8ShUf6ibyg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:50:40 2025 by rpki-client