$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: K+kEAfhJ5JE8+TFwl3L1+zjjPq6BonzZ2F6D6HMdWnM= Subject key identifier: 5A:A5:94:16:B4:F8:F8:8A:3D:FB:56:3C:B6:72:F0:4E:E6:FB:E4:C9 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 0199FDD973BED410F2F996B78048CAB8FC5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 1052 Signing time: Sun 19 Oct 2025 19:01:50 +0000 Manifest this update: Sun 19 Oct 2025 19:01:50 +0000 Manifest next update: Mon 20 Oct 2025 19:01:50 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: 7-yY2XLWHLUd9AuKxH5IHfl175M.roa (hash: zG66GAnwYloqOJJfg6bZ7R9P50YwxEBbTOi0v9cAdF8=) 6: R31VLBewgiodlHNc96NZMod-BMs.roa (hash: L1tzfKdGbqAYKzdHCS4ryKzvNcfxJIW6KvE4rua2XQw=) 7: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 8: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 9: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 10: dNAWbsFoIAa7vbufcHS0hoyCsWg.roa (hash: wscCbu3aT6nDlnhH6Y0eApXWMaH2Q/Fw0Qs8zp46iAc=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: x57lXQyJYcdK4uqZieWMQlfGw7Wa78Zhq9upbhbOyD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d9:73:be:d4:10:f2:f9:96:b7:80:48:ca:b8:fc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Oct 19 19:01:50 2025 GMT Not After : Oct 20 19:01:50 2025 GMT Subject: CN=5aa59416b4f8f88a3dfb563cb672f04ee6fbe4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:dc:1f:5c:1f:18:0d:bd:d4:95:fb:9c:db: 85:f6:f3:eb:a8:f5:39:dd:94:77:93:2a:cd:c8:8a: 69:c8:7d:04:93:1b:e7:27:e3:d0:7c:72:79:b5:f8: 22:15:b8:c7:1e:d3:20:c5:59:74:2f:19:06:49:fd: 8b:0d:f8:a4:51:3e:1b:97:80:c5:7a:ff:21:8d:d6: 6c:e7:35:ed:1d:3d:ce:19:f6:7f:4b:af:9c:33:34: 34:75:f3:d7:92:26:d1:22:41:19:ff:68:73:36:e9: fb:4c:5a:dd:df:06:f4:03:32:71:88:56:c7:98:78: 4b:67:38:db:7a:e3:df:a2:bd:31:0b:f9:09:6f:cd: 4e:8b:03:de:f4:f3:c0:02:90:e8:82:16:2e:eb:6e: 39:e7:9f:64:ef:f1:ba:9c:38:a1:8c:eb:a1:3f:2f: 19:1b:74:99:77:e0:d6:03:82:99:d2:ff:37:ad:71: fa:30:f1:b0:1f:98:bb:0e:0b:fc:f8:61:f6:88:db: 9e:7e:5b:e6:9e:51:47:88:68:35:77:f0:3b:61:0c: 94:fd:11:ba:fb:60:bd:74:22:19:19:88:a9:a0:46: f8:ba:7f:f5:39:fa:36:e7:b2:41:72:27:b5:4b:0d: 47:da:07:5e:42:2a:48:f2:d3:c0:99:8b:81:b0:98: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A5:94:16:B4:F8:F8:8A:3D:FB:56:3C:B6:72:F0:4E:E6:FB:E4:C9 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f0:83:c0:e3:9e:7b:4b:1e:09:05:43:a0:07:65:34:94:3a: 41:5e:66:6f:ec:39:e1:7f:18:b7:38:76:58:4b:c6:99:cc:9d: 1c:9e:8d:89:33:a6:8f:71:7c:48:7e:b7:c0:85:54:99:5c:ee: fd:ef:42:ad:c5:0c:ef:9a:31:1b:89:62:98:ef:18:a4:f1:09: 82:30:58:b8:ef:19:00:b4:2f:87:cd:a2:b1:1d:13:be:fd:d0: cb:03:2d:94:43:64:22:b2:77:ff:69:59:a6:21:85:43:07:36: a5:dc:22:93:93:64:b7:ef:44:b7:80:f0:61:22:7e:49:47:07: f8:6a:82:db:be:c3:6d:75:14:fa:5e:bf:54:a9:7d:70:60:69: 0c:10:70:2c:b8:12:37:00:e9:d9:30:cd:57:46:65:4a:47:8e: b1:2f:57:99:d5:75:51:c4:b1:50:b2:84:2b:b8:07:c4:5e:17: 96:cf:84:5b:96:93:26:53:a0:4d:30:26:c8:98:1e:08:81:8a: 08:7d:00:1d:50:3c:0f:ce:88:cb:89:a8:f5:84:0f:49:18:a1: f6:4f:d5:75:67:3a:3b:c5:09:b4:65:ce:20:f5:2e:09:5c:a1: 4f:68:2a:52:4b:cd:23:f2:0b:97:1f:15:6a:69:f5:d2:fd:47: 03:ca:31:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92XO+1BDy+Za3gEjKuPxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUxMDE5MTkwMTUwWhcNMjUxMDIwMTkwMTUwWjAzMTEwLwYDVQQD Eyg1YWE1OTQxNmI0ZjhmODhhM2RmYjU2M2NiNjcyZjA0ZWU2ZmJlNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QncH1wfGA291JX7nNuF9vPrqPU5 3ZR3kyrNyIppyH0EkxvnJ+PQfHJ5tfgiFbjHHtMgxVl0LxkGSf2LDfikUT4bl4DF ev8hjdZs5zXtHT3OGfZ/S6+cMzQ0dfPXkibRIkEZ/2hzNun7TFrd3wb0AzJxiFbH mHhLZzjbeuPfor0xC/kJb81OiwPe9PPAApDoghYu6245559k7/G6nDihjOuhPy8Z G3SZd+DWA4KZ0v83rXH6MPGwH5i7Dgv8+GH2iNueflvmnlFHiGg1d/A7YQyU/RG6 +2C9dCIZGYipoEb4un/1Ofo257JBcie1Sw1H2gdeQipI8tPAmYuBsJge0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqllBa0+PiKPftWPLZy8E7m++TJMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvCDwOOe e0seCQVDoAdlNJQ6QV5mb+w54X8Ytzh2WEvGmcydHJ6NiTOmj3F8SH63wIVUmVzu /e9CrcUM75oxG4limO8YpPEJgjBYuO8ZALQvh82isR0Tvv3QywMtlENkIrJ3/2lZ piGFQwc2pdwik5Nkt+9Et4DwYSJ+SUcH+GqC277DbXUU+l6/VKl9cGBpDBBwLLgS NwDp2TDNV0ZlSkeOsS9XmdV1UcSxULKEK7gHxF4Xls+EW5aTJlOgTTAmyJgeCIGK CH0AHVA8D86Iy4mo9YQPSRih9k/VdWc6O8UJtGXOIPUuCVyhT2gqUkvNI/ILlx8V amn10v1HA8oxiw== -----END CERTIFICATE-----Generated at Sun Oct 19 23:13:11 2025 by rpki-client