$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: 9YDLrTaKvocFCuDHYLzg+j+mqGQF6p1cMijkKT6A46o= Subject key identifier: 98:66:7E:EA:BB:2E:BA:11:D3:C1:E1:4B:A5:F3:B0:29:24:90:78:A6 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 0197B745A90548D1816437AE0A91B4CEE15B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 163C Signing time: Sat 28 Jun 2025 16:01:24 +0000 Manifest this update: Sat 28 Jun 2025 16:01:24 +0000 Manifest next update: Sun 29 Jun 2025 16:01:24 +0000 Files and hashes: 1: 1-YvEReZaLsTO0jjKZ78pRhHRfsQ.roa (hash: zdufkDo+ZHpmPAX/tYX0aFypSlJTt9HUATtQVpaRiJ0=) 2: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=) 3: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=) 4: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=) 5: 6KM2SS07XKB0EkNGkLLkWOu7pWo.roa (hash: Zn3IlZjwpe0f9iL0mejWAewFzAvN1zbKRrqoZP6L2wY=) 6: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=) 7: 9la_AU58bMd-3pCNHt8w31jQCl4.roa (hash: E9TsWgVQ3BFPUDXwzoZMZ0b6bAsHWFerURHLZ/QkqCc=) 8: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=) 9: JhAJAY0YMBqkcCSgA5VfhZsRCFE.roa (hash: UQAouYifx5JZ1tAePEv8Znla2C2D85kJB/NzsdkkpyM=) 10: LDrl5yQ6YgLU4GfM_arnmSz23dU.roa (hash: iKaltE4AvPH8VGJ9xiua62Njowdj21H1MidVFZwr7hc=) 11: LdSX0TNAWu1GANikgGHJZKbN5ts.roa (hash: XzH2guM8uD41A2haqYmLeH+1CfMtNp2yUb4pKTWFFOk=) 12: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=) 13: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=) 14: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=) 15: RBC7xRCUrzAV3xcSRBDVibZqCTI.roa (hash: WHOYeqrd+Q7s/pv59QgW/Re/r+BuES3bFI1GIinCkZM=) 16: WO5iMFxx-F4JF78W9Ca0mfMOiYc.roa (hash: uBIHUV8mnwau9Fyw3ey0VTaOO0smiERX1iJx5QMdF/M=) 17: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=) 18: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: s5bX5r/Lhe7C1Q6iYG24atDKggRYHk2yYwCO4rDhwX0=) 19: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (hash: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=) 20: lSXno5Dt5J6kLBzPmnnVZEXBFTU.roa (hash: zQK7/RzTCcgVdUj9oUunG6zWsfSjW2arxGqZ/qWZ4/I=) 21: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=) 22: qWpzvRDGfVICOAas6EpA5TLROBI.roa (hash: 0F40XY0fiwK+HQCyTtXfsCoNfyawPos3cmHr8KSTvbw=) 23: vwu7c26o7b77RE7SCnU0LMYegrE.roa (hash: E6XIX7EQDjDO8obOi+FPj+e6VA588ayYXUVe16SPD18=) 24: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=) 25: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:a9:05:48:d1:81:64:37:ae:0a:91:b4:ce:e1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jun 28 16:01:24 2025 GMT Not After : Jun 29 16:01:24 2025 GMT Subject: CN=98667eeabb2eba11d3c1e14ba5f3b029249078a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:31:31:6c:5b:77:93:91:8a:15:57:1f:93: 00:a8:b6:e0:ed:fa:5a:95:fa:8a:a3:0b:3d:26:1d: c5:17:7c:f1:f1:5d:fe:f9:a0:5e:95:fa:d2:a4:08: 77:f9:9b:d0:f3:37:96:08:12:8e:8d:a9:5d:03:66: 55:ba:13:e3:cc:2e:31:fa:4b:c1:a0:30:21:9c:46: 1e:f3:06:db:f3:ae:84:a5:b3:fc:79:d8:b8:eb:de: 82:48:aa:9f:3c:c8:a6:0b:19:83:e1:8c:3f:5c:42: ee:87:c5:1c:a2:c9:67:6f:54:d9:32:67:7f:7c:d8: 02:41:5d:f7:ae:1a:24:85:ba:8e:e9:91:7d:e0:4f: 95:f6:2e:8e:e4:56:21:5e:0f:02:08:1b:5c:b8:ba: 26:66:6b:38:6c:d4:9f:52:0f:f8:3a:c1:a0:d1:93: 43:d8:2b:6e:de:4e:e4:8d:a0:ff:11:15:ea:41:ea: 4f:fc:b3:e8:a5:ae:18:32:18:be:bb:7b:6c:c0:cd: 35:cd:d5:7e:fa:2d:0e:b0:51:ca:2f:b6:30:6d:2a: c3:63:6e:f0:07:fd:23:0a:11:01:f4:06:86:6d:95: 21:ef:0f:97:ce:69:4c:a8:47:f8:c9:47:f9:55:d6: 4b:1d:a3:84:28:03:d7:ab:72:ce:d0:fd:69:98:df: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:66:7E:EA:BB:2E:BA:11:D3:C1:E1:4B:A5:F3:B0:29:24:90:78:A6 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:95:2e:d6:8b:0e:19:30:48:f3:58:b5:f9:f9:d0:27:6d:0e: 1d:2f:ea:b3:7e:78:0b:0b:e6:ec:27:f4:d3:06:e4:02:56:31: fb:08:d7:0e:3d:31:98:78:47:db:8c:ea:fb:c0:2f:3c:f5:5c: c6:f2:d3:7f:5e:7b:0e:14:09:76:39:ae:35:69:16:1a:74:24: 34:91:40:96:0f:c5:1f:b7:1f:cc:a1:da:d6:ea:5d:a6:5c:60: cc:a5:3c:71:3b:af:ba:a2:22:df:c3:04:3b:16:20:cd:8a:15: 1f:be:ce:55:83:40:7b:b6:87:7d:e1:95:98:bb:ec:33:f4:63: d4:77:f2:9c:3d:0f:72:87:ef:06:64:e4:06:9a:a3:ce:53:17: c9:56:b8:69:a9:6d:03:76:3b:8a:18:6c:f8:71:56:b5:47:da: bb:ac:72:8e:55:7a:69:a4:23:fa:ea:ae:5e:e7:f6:57:a6:df: 23:d6:5d:69:3b:4c:85:25:32:00:a8:44:6d:7e:d8:f9:99:46: de:86:bc:d4:8f:e9:dc:18:45:08:6f:96:68:b9:f6:14:17:d2: 17:4f:f2:73:14:bf:01:20:a9:bc:40:19:09:f0:c1:c9:2b:4c: da:45:cb:51:de:b1:0b:d4:be:1d:a1:3c:02:be:a0:f6:9d:72: ce:2d:22:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RakFSNGBZDeuCpG0zuFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUwNjI4MTYwMTI0WhcNMjUwNjI5MTYwMTI0WjAzMTEwLwYDVQQD Eyg5ODY2N2VlYWJiMmViYTExZDNjMWUxNGJhNWYzYjAyOTI0OTA3OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3sxMWxbd5ORihVXH5MAqLbg7fpa lfqKows9Jh3FF3zx8V3++aBelfrSpAh3+ZvQ8zeWCBKOjaldA2ZVuhPjzC4x+kvB oDAhnEYe8wbb866EpbP8edi4696CSKqfPMimCxmD4Yw/XELuh8Ucoslnb1TZMmd/ fNgCQV33rhokhbqO6ZF94E+V9i6O5FYhXg8CCBtcuLomZms4bNSfUg/4OsGg0ZND 2Ctu3k7kjaD/ERXqQepP/LPopa4YMhi+u3tswM01zdV++i0OsFHKL7YwbSrDY27w B/0jChEB9AaGbZUh7w+XzmlMqEf4yUf5VdZLHaOEKAPXq3LO0P1pmN8VQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhmfuq7LroR08HhS6XzsCkkkHimMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJUu1osO GTBI81i1+fnQJ20OHS/qs354Cwvm7Cf00wbkAlYx+wjXDj0xmHhH24zq+8AvPPVc xvLTf157DhQJdjmuNWkWGnQkNJFAlg/FH7cfzKHa1updplxgzKU8cTuvuqIi38ME OxYgzYoVH77OVYNAe7aHfeGVmLvsM/Rj1HfynD0PcofvBmTkBpqjzlMXyVa4aalt A3Y7ihhs+HFWtUfau6xyjlV6aaQj+uquXuf2V6bfI9ZdaTtMhSUyAKhEbX7Y+ZlG 3oa81I/p3BhFCG+WaLn2FBfSF0/ycxS/ASCpvEAZCfDByStM2kXLUd6xC9S+HaE8 Ar6g9p1yzi0inw== -----END CERTIFICATE-----Generated at Sat Jun 28 20:33:08 2025 by rpki-client