$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: BSg81u/T3tctc/63rdW5uB4IeN9x3zNTZZzt88G9cuA= Subject key identifier: E3:3E:EB:95:51:27:5C:53:54:B4:FB:81:20:33:B8:D1:00:4F:FF:82 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 0199FC21A1048AA6ED94EBDAB242903846C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 1783 Signing time: Sun 19 Oct 2025 11:01:26 +0000 Manifest this update: Sun 19 Oct 2025 11:01:26 +0000 Manifest next update: Mon 20 Oct 2025 11:01:26 +0000 Files and hashes: 1: 0Xu9MwyoHkfp7GLAOKKRl3-RnUQ.roa (hash: VyIx7EHEZctcI6C3p3OjyiQ9ZrYWF3YW1EKBVSDH0tQ=) 2: 0laar789lWX2-65-BfO0C43Kjqw.roa (hash: qA62Wk12qtwW9Q6Z6JfBejGbdGShPZxSeZLDsIRfnAM=) 3: 15zRjTXVNBGuDrUDEqN5UuwIids.roa (hash: FwYZwxMG1QLtJeFhKkER9dDPt8BpPk0Q+1jXXZv9EiM=) 4: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=) 5: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=) 6: 36ON7UJf6RKUVtPkHxjJbIPu6wI.roa (hash: avWtErCBxgMuS2W52KAD2WqaiRKt44F6kD+P9GJZHVc=) 7: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=) 8: 6EY_VCJpg8TJEyV90mnhu97g-NE.roa (hash: x5jwufeU6KO3TQwWZ79Pk418O4crpsgwEI7vweQ9IdQ=) 9: 8cHwMfOElAOtUhKJMQnFdtVynac.roa (hash: BX5kiADLkG8Ax4FiuAtWSeygXw2CbkULb5L6Dz7ZXb8=) 10: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=) 11: 9la_AU58bMd-3pCNHt8w31jQCl4.roa (hash: E9TsWgVQ3BFPUDXwzoZMZ0b6bAsHWFerURHLZ/QkqCc=) 12: CCpeBz282waZWIp6wfY2xNGCC9E.roa (hash: vV/uCDu7bu0Kj5ZjmV2IVmbVX66D/TiH8HiOBPDsfV4=) 13: CjeSZR86nfS6K8sFUbh397KLlSg.roa (hash: VvUNYRmECbisLlM1k5o1a+U0OGBTt8KDFsxxt+vB35I=) 14: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=) 15: LHhc_a5ROGSUtw6wcT-sPhDhr1M.roa (hash: p/vM2J4TZw167L9VNt16GhD88WXBue8q+Ndc+jHHLFs=) 16: LdSX0TNAWu1GANikgGHJZKbN5ts.roa (hash: XzH2guM8uD41A2haqYmLeH+1CfMtNp2yUb4pKTWFFOk=) 17: LwiKFQb5NXEk7Oaggp_P4meqxSY.roa (hash: gSctbJTrUeV/PjIbJWVbdhLqycF/J2VYj2W1aXj1i7s=) 18: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=) 19: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=) 20: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=) 21: WO5iMFxx-F4JF78W9Ca0mfMOiYc.roa (hash: uBIHUV8mnwau9Fyw3ey0VTaOO0smiERX1iJx5QMdF/M=) 22: Wzq1y0doG8WfM1zNpgf4G6VhY_I.roa (hash: ANi9PNCi24CfK53dgbxV1jDB/S5TR8D7gFN/whY98FI=) 23: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=) 24: Z1mAh7dnk6Rh8hMBVveYuVVKQhw.roa (hash: c4iSRYoWCrKro/VyPAI3QKrwxaiFQdNixwwM9DnplJk=) 25: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: Emi4V3Z6AhBBLaX/l8MKLIJTJ9eCQZdCUwT2RX3ViQ0=) 26: ZeS20_oHUJMluTQ0NLKvA8MddlQ.roa (hash: dG98OYoIHXRu6CU/AFyTQ7Ffl0Qa040yf0xbzK4lVB0=) 27: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (hash: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=) 28: ldsSV8XkUxgRsN1Mt_5-mRILoaY.roa (hash: 2KvQ5LUfWObgEEs4hfrZe98s+DulmLTkOugxEUCQvZg=) 29: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=) 30: qWpzvRDGfVICOAas6EpA5TLROBI.roa (hash: 0F40XY0fiwK+HQCyTtXfsCoNfyawPos3cmHr8KSTvbw=) 31: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:a1:04:8a:a6:ed:94:eb:da:b2:42:90:38:46:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Oct 19 11:01:26 2025 GMT Not After : Oct 20 11:01:26 2025 GMT Subject: CN=e33eeb9551275c5354b4fb812033b8d1004fff82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:1d:7b:bb:ee:62:d3:ee:41:82:39:50:f5: e8:be:06:19:fa:f6:b4:3f:37:f5:63:11:ec:12:54: fa:52:8a:7e:85:ea:52:74:69:18:e1:d1:4d:0b:d6: 70:f6:8a:30:d7:58:0b:9d:f9:1e:0e:d0:5e:4a:5e: 79:0d:4e:15:4d:13:b6:8e:80:7f:5d:e6:2b:2d:b5: 1f:9a:4d:7e:c7:2c:33:fa:7b:a5:41:8e:7f:5c:7f: 9b:0a:97:47:2c:b0:2f:6f:4b:7d:7a:16:e4:09:41: cc:e0:10:20:79:da:01:4b:e2:a6:4c:a3:9f:0f:3a: 6e:c9:c1:c7:3e:29:8a:42:90:bf:4e:d5:c3:1b:a5: be:b1:12:38:6f:5c:59:c6:c2:6f:fe:83:5d:9d:80: b6:95:a9:04:60:cb:6d:11:03:28:8d:70:f6:45:b1: 2f:68:b2:f5:b0:9c:7c:95:e1:25:1b:ed:de:72:3e: 92:04:59:71:f1:86:f2:49:e6:c3:6f:19:cc:e8:d2: 21:c3:d4:99:48:39:7b:6e:fc:f7:d0:f1:28:4e:53: 18:2e:f4:0f:76:b5:c1:d2:d9:c5:82:dc:30:ac:ef: b7:a3:87:5a:d3:46:21:c4:74:b8:0f:f3:d6:d2:94: a2:d2:c4:6f:14:18:f7:2d:a1:85:84:76:20:44:66: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:EB:95:51:27:5C:53:54:B4:FB:81:20:33:B8:D1:00:4F:FF:82 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:65:ba:44:12:81:89:69:39:c5:2b:84:4f:5b:95:f6:25:cb: c8:63:1a:64:56:79:fa:4f:89:bd:6e:a6:09:30:d7:4b:d6:ba: 06:bb:ba:e2:44:d8:67:bc:47:25:57:e2:3b:36:a7:13:e6:e4: 15:ee:a4:f5:fa:3f:b3:b3:7d:23:e8:0a:1d:29:16:59:e2:5b: a0:88:a3:4c:ae:a2:d4:02:78:78:37:ac:89:f6:37:3e:50:9e: 01:d4:bf:8c:3e:07:0c:a2:69:4c:0c:14:b1:4b:b6:96:0a:e5: fd:1a:b1:b7:53:ed:7e:11:d3:97:ae:29:04:eb:10:96:f4:6f: df:cd:b1:76:c9:7a:a2:b0:5f:61:48:00:e3:ad:08:8b:d8:54: 99:41:fa:be:8c:77:d1:e6:0d:94:7b:d1:86:ad:34:6d:08:3e: 31:52:39:82:9a:35:51:3d:59:cc:df:4e:24:cd:fb:9a:c4:f0: 65:44:f1:16:f7:35:35:d7:e4:86:00:94:18:8b:0a:a1:74:c2: dc:86:17:18:40:db:00:9e:c9:d6:96:21:fd:16:83:13:25:e4: e3:5f:07:9c:7e:e7:af:28:b3:36:4b:79:21:73:02:f7:8e:5c: de:40:21:88:40:df:7e:84:b4:7c:f8:f3:5b:15:63:97:36:df: d5:ea:1f:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IaEEiqbtlOvaskKQOEbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUxMDE5MTEwMTI2WhcNMjUxMDIwMTEwMTI2WjAzMTEwLwYDVQQD EyhlMzNlZWI5NTUxMjc1YzUzNTRiNGZiODEyMDMzYjhkMTAwNGZmZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgQde7vuYtPuQYI5UPXovgYZ+va0 Pzf1YxHsElT6Uop+hepSdGkY4dFNC9Zw9oow11gLnfkeDtBeSl55DU4VTRO2joB/ XeYrLbUfmk1+xywz+nulQY5/XH+bCpdHLLAvb0t9ehbkCUHM4BAgedoBS+KmTKOf DzpuycHHPimKQpC/TtXDG6W+sRI4b1xZxsJv/oNdnYC2lakEYMttEQMojXD2RbEv aLL1sJx8leElG+3ecj6SBFlx8YbySebDbxnM6NIhw9SZSDl7bvz30PEoTlMYLvQP drXB0tnFgtwwrO+3o4da00YhxHS4D/PW0pSi0sRvFBj3LaGFhHYgRGZMDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM+65VRJ1xTVLT7gSAzuNEAT/+CMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGW6RBKB iWk5xSuET1uV9iXLyGMaZFZ5+k+JvW6mCTDXS9a6Bru64kTYZ7xHJVfiOzanE+bk Fe6k9fo/s7N9I+gKHSkWWeJboIijTK6i1AJ4eDesifY3PlCeAdS/jD4HDKJpTAwU sUu2lgrl/Rqxt1PtfhHTl64pBOsQlvRv382xdsl6orBfYUgA460Ii9hUmUH6vox3 0eYNlHvRhq00bQg+MVI5gpo1UT1ZzN9OJM37msTwZUTxFvc1NdfkhgCUGIsKoXTC 3IYXGEDbAJ7J1pYh/RaDEyXk418HnH7nryizNkt5IXMC945c3kAhiEDffoS0fPjz WxVjlzbf1eof6w== -----END CERTIFICATE-----Generated at Sun Oct 19 15:11:29 2025 by rpki-client