$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: rT9U9m302MAs8Dsof5Zou7wrWOwVFMWreUMri3TfY7s= Subject key identifier: 2F:A9:E0:8B:6B:81:4E:FA:6E:EF:26:D7:FE:96:23:49:A5:3A:71:9E Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 0198D404C3ACC35EFD2177FCADCB1AB215D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 16DF Signing time: Fri 22 Aug 2025 23:02:18 +0000 Manifest this update: Fri 22 Aug 2025 23:02:18 +0000 Manifest next update: Sat 23 Aug 2025 23:02:18 +0000 Files and hashes: 1: 0Xu9MwyoHkfp7GLAOKKRl3-RnUQ.roa (hash: VyIx7EHEZctcI6C3p3OjyiQ9ZrYWF3YW1EKBVSDH0tQ=) 2: 1-YvEReZaLsTO0jjKZ78pRhHRfsQ.roa (hash: zdufkDo+ZHpmPAX/tYX0aFypSlJTt9HUATtQVpaRiJ0=) 3: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=) 4: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=) 5: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=) 6: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=) 7: 9la_AU58bMd-3pCNHt8w31jQCl4.roa (hash: E9TsWgVQ3BFPUDXwzoZMZ0b6bAsHWFerURHLZ/QkqCc=) 8: CCpeBz282waZWIp6wfY2xNGCC9E.roa (hash: vV/uCDu7bu0Kj5ZjmV2IVmbVX66D/TiH8HiOBPDsfV4=) 9: CjeSZR86nfS6K8sFUbh397KLlSg.roa (hash: VvUNYRmECbisLlM1k5o1a+U0OGBTt8KDFsxxt+vB35I=) 10: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=) 11: LHhc_a5ROGSUtw6wcT-sPhDhr1M.roa (hash: p/vM2J4TZw167L9VNt16GhD88WXBue8q+Ndc+jHHLFs=) 12: LdSX0TNAWu1GANikgGHJZKbN5ts.roa (hash: XzH2guM8uD41A2haqYmLeH+1CfMtNp2yUb4pKTWFFOk=) 13: LwiKFQb5NXEk7Oaggp_P4meqxSY.roa (hash: gSctbJTrUeV/PjIbJWVbdhLqycF/J2VYj2W1aXj1i7s=) 14: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=) 15: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=) 16: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=) 17: WO5iMFxx-F4JF78W9Ca0mfMOiYc.roa (hash: uBIHUV8mnwau9Fyw3ey0VTaOO0smiERX1iJx5QMdF/M=) 18: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=) 19: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: MT1T3iSB1jC+qmDiTV7dUOHZlImPXbz6Jj5B1QhcsqM=) 20: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (hash: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=) 21: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=) 22: mDv8MzFAuvTVIARuxN1G5ZV4tJA.roa (hash: BjwmiZa9oIbZzTPO9rJht/3cWnP/fYAMoo6mGH8xFHw=) 23: qWpzvRDGfVICOAas6EpA5TLROBI.roa (hash: 0F40XY0fiwK+HQCyTtXfsCoNfyawPos3cmHr8KSTvbw=) 24: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=) 25: z3lPRmyZVa0AhSF1xvxZacOT-_Y.roa (hash: 4ZI2CK9RanGXlpJndY14l4cAiHVOnZTCRT+JSh1an14=) 26: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:c3:ac:c3:5e:fd:21:77:fc:ad:cb:1a:b2:15:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Aug 22 23:02:18 2025 GMT Not After : Aug 23 23:02:18 2025 GMT Subject: CN=2fa9e08b6b814efa6eef26d7fe962349a53a719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:a1:76:be:27:98:02:88:16:1d:cb:3a:0e: 4b:4d:f0:98:ba:df:10:0e:f3:94:3b:98:2b:c3:62: 38:db:21:f0:0f:e0:04:b4:2e:a0:14:64:54:34:b4: ba:6a:42:6b:b4:e8:14:57:40:7c:5b:ec:a1:71:b7: 7b:cd:38:de:34:8f:9f:53:90:0a:ab:9c:3c:d9:ca: cb:44:7c:32:4d:7f:64:9d:dc:58:2f:04:5b:c8:60: 19:f7:b7:f3:7c:4f:cd:d0:b1:d4:cf:9d:28:93:34: d3:c4:c5:6d:03:8d:eb:74:24:e9:f2:12:19:d2:bf: 2f:d1:c9:b9:ed:b8:6b:6a:cb:4e:fe:1e:63:1e:c0: 14:0a:f7:53:64:1d:b3:9b:2e:6d:28:13:7c:3a:1f: 43:73:dd:8d:a7:71:28:17:d1:7d:5b:b8:17:08:68: 10:83:f6:81:40:20:eb:18:4a:29:0f:19:07:7e:39: 25:fe:cf:96:f7:74:4b:15:ea:1f:93:d7:fe:e1:63: 2c:5f:c3:42:82:1d:d1:ec:0f:40:05:99:5c:62:eb: e8:bc:ee:58:94:e5:e9:9f:ff:0d:d3:74:73:e3:9a: 1b:ae:57:01:5a:aa:a1:5b:b5:8c:fe:8f:70:bc:c8: 31:71:40:04:51:05:57:1d:a9:6e:16:58:6a:d5:d8: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:E0:8B:6B:81:4E:FA:6E:EF:26:D7:FE:96:23:49:A5:3A:71:9E X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b7:42:b4:65:d1:93:a0:a4:d5:fe:df:7b:d7:28:e9:0d:0b: ac:d5:31:2f:8d:ff:36:1d:1f:6e:ca:8c:60:0a:6e:22:e6:84: 60:01:bc:f7:42:f6:c8:0a:ba:11:f3:3b:47:f7:df:08:d6:0e: f6:65:21:5b:24:f5:80:c2:c3:ce:0e:dd:c4:d3:a6:54:27:c8: cc:21:68:ac:c2:b3:96:d2:ee:00:d5:2f:28:4b:98:21:df:6b: a7:10:f5:fe:ef:cc:5a:34:19:d4:00:6b:27:f6:91:57:71:00: 36:5b:d0:88:6f:c7:e3:ea:a8:72:f7:b7:55:63:f7:39:df:21: df:94:2c:ff:31:49:d8:05:a5:d7:09:aa:31:1b:ae:bb:a5:c5: 5e:00:6e:99:da:75:59:da:d0:5e:eb:4c:bc:be:77:c8:9d:ab: a9:9c:ca:7a:8f:2e:cc:2e:dd:08:ce:a2:b0:90:c0:42:9b:dc: 25:62:16:26:42:26:7c:7c:32:8b:a2:c3:06:14:a1:0d:17:be: be:0d:f6:61:e2:5d:aa:1b:cd:74:10:2c:44:3c:d1:ce:d7:26: 73:e8:0b:9c:49:f5:21:21:0a:00:9d:47:30:b5:8f:7d:07:20: b6:9d:9c:b5:f6:6f:7a:ba:5c:f4:cf:13:e0:24:5f:f3:e9:fc: bb:fd:28:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBMOsw179IXf8rcsashXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUwODIyMjMwMjE4WhcNMjUwODIzMjMwMjE4WjAzMTEwLwYDVQQD EygyZmE5ZTA4YjZiODE0ZWZhNmVlZjI2ZDdmZTk2MjM0OWE1M2E3MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSOhdr4nmAKIFh3LOg5LTfCYut8Q DvOUO5grw2I42yHwD+AEtC6gFGRUNLS6akJrtOgUV0B8W+yhcbd7zTjeNI+fU5AK q5w82crLRHwyTX9kndxYLwRbyGAZ97fzfE/N0LHUz50okzTTxMVtA43rdCTp8hIZ 0r8v0cm57bhrastO/h5jHsAUCvdTZB2zmy5tKBN8Oh9Dc92Np3EoF9F9W7gXCGgQ g/aBQCDrGEopDxkHfjkl/s+W93RLFeofk9f+4WMsX8NCgh3R7A9ABZlcYuvovO5Y lOXpn/8N03Rz45obrlcBWqqhW7WM/o9wvMgxcUAEUQVXHaluFlhq1dinoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+p4ItrgU76bu8m1/6WI0mlOnGeMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrdCtGXR k6Ck1f7fe9co6Q0LrNUxL43/Nh0fbsqMYApuIuaEYAG890L2yAq6EfM7R/ffCNYO 9mUhWyT1gMLDzg7dxNOmVCfIzCForMKzltLuANUvKEuYId9rpxD1/u/MWjQZ1ABr J/aRV3EANlvQiG/H4+qocve3VWP3Od8h35Qs/zFJ2AWl1wmqMRuuu6XFXgBumdp1 WdrQXutMvL53yJ2rqZzKeo8uzC7dCM6isJDAQpvcJWIWJkImfHwyi6LDBhShDRe+ vg32YeJdqhvNdBAsRDzRztcmc+gLnEn1ISEKAJ1HMLWPfQcgtp2ctfZverpc9M8T 4CRf8+n8u/0oog== -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:56 2025 by rpki-client