$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: amSzrMdbMHLNWH94xLU3Zo98iWsNpJnrIOp5hOFs0Zs= Subject key identifier: 72:94:0E:E5:EF:C0:DB:E9:28:3D:AA:8A:EE:47:F7:4E:27:70:63:08 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 0198D4E012AD899DF832B9591C13FB2D779A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 03:01:51 +0000 Manifest this update: Sat 23 Aug 2025 03:01:51 +0000 Manifest next update: Sun 24 Aug 2025 03:01:51 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: SYW7vJR8jh6OnS0xw0zxS3bgN60.roa (hash: RRdRxhUDlZPMyyr5BdAFCoJYcDMXRiJFFRNcVSSyJoQ=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: 8e9zhZuFyRSgeQKYSiXpNq/bXuAjhklcksEJjx5+r8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:12:ad:89:9d:f8:32:b9:59:1c:13:fb:2d:77:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Aug 23 03:01:51 2025 GMT Not After : Aug 24 03:01:51 2025 GMT Subject: CN=72940ee5efc0dbe9283daa8aee47f74e27706308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:65:de:82:96:a2:e6:91:16:e9:15:84:70: 12:dc:39:a7:a8:e4:88:ad:4c:9e:76:8f:f2:0d:6c: b3:79:63:55:c2:c7:d3:2c:f0:f4:a0:c0:4e:c8:b4: fe:65:df:8f:20:eb:21:b8:cb:93:f7:95:8d:20:5b: 90:0c:aa:fb:23:66:c3:34:a8:33:8e:27:7c:90:e4: 4d:ad:b9:a7:60:93:3b:f6:84:ea:d1:e1:0c:03:9d: 02:97:3c:e5:38:54:1b:e1:cb:21:50:7a:68:6e:df: c8:a9:c5:f7:1f:2d:40:13:0f:9d:64:97:2f:e3:ab: c8:28:41:af:6c:a2:f9:cf:d6:e9:1a:09:24:8c:44: e5:14:47:18:9b:40:e1:da:cf:5b:b7:a2:4f:fe:e5: bd:9a:a0:0b:c8:82:e9:e1:30:8e:e8:2d:2b:6e:68: 7e:65:df:b9:0c:0c:3b:68:56:a8:02:c8:eb:f4:d8: c8:2c:93:97:22:0b:97:28:23:be:9b:94:fb:2f:7b: fd:30:60:bf:cd:14:70:e8:4a:30:9b:c6:21:b4:be: 3d:e5:bd:ab:52:7e:79:10:50:f7:f1:76:43:57:8e: f1:0c:35:f1:0e:07:ea:7d:df:8e:ec:3b:93:88:1e: 00:37:01:67:59:51:e8:63:ae:b7:80:60:2f:03:e3: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:0E:E5:EF:C0:DB:E9:28:3D:AA:8A:EE:47:F7:4E:27:70:63:08 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:46:62:94:4c:64:22:49:29:a4:7f:86:12:7b:17:43:7e:a7: dd:da:28:ab:61:83:78:9c:83:32:b9:76:03:4b:65:73:3d:d9: a4:af:b4:13:33:4e:3e:08:a9:8a:ff:a4:44:f4:91:e3:51:e1: 30:81:4a:92:58:23:ae:4f:51:53:70:75:cc:ec:85:49:2d:26: ee:24:93:60:35:1c:8c:9a:35:7c:05:56:b4:97:37:8c:f2:87: 0f:95:eb:7e:58:f6:0a:0e:59:e0:3d:cc:d5:af:5e:78:c7:cb: c2:cd:50:40:1f:52:46:1c:71:32:1b:24:df:55:36:b1:6e:a8: 5c:84:1f:a5:05:e9:4b:11:a1:70:a2:71:b3:72:d3:f3:22:90: fc:48:83:70:cc:c5:34:dd:95:ef:f2:a4:8c:cc:79:56:f4:cc: 92:3d:8b:c5:e3:8c:75:ff:78:4a:11:2d:d7:35:de:5f:1b:ae: 32:ae:3e:3f:49:05:d9:1c:94:c1:4c:b5:31:04:15:7e:30:1c: 3d:4c:80:54:d5:80:e6:b0:af:dc:b5:17:35:bd:b3:a1:31:41: 8a:b9:81:0e:54:b2:c4:7a:71:c9:0c:e4:6e:2b:1a:52:77:e5: 70:c4:72:de:0f:8e:65:48:a5:4d:ee:45:76:42:10:47:97:e7: 2a:98:b0:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4BKtiZ34MrlZHBP7LXeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUwODIzMDMwMTUxWhcNMjUwODI0MDMwMTUxWjAzMTEwLwYDVQQD Eyg3Mjk0MGVlNWVmYzBkYmU5MjgzZGFhOGFlZTQ3Zjc0ZTI3NzA2MzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Vl3oKWouaRFukVhHAS3DmnqOSI rUyedo/yDWyzeWNVwsfTLPD0oMBOyLT+Zd+PIOshuMuT95WNIFuQDKr7I2bDNKgz jid8kORNrbmnYJM79oTq0eEMA50ClzzlOFQb4cshUHpobt/IqcX3Hy1AEw+dZJcv 46vIKEGvbKL5z9bpGgkkjETlFEcYm0Dh2s9bt6JP/uW9mqALyILp4TCO6C0rbmh+ Zd+5DAw7aFaoAsjr9NjILJOXIguXKCO+m5T7L3v9MGC/zRRw6Eowm8YhtL495b2r Un55EFD38XZDV47xDDXxDgfqfd+O7DuTiB4ANwFnWVHoY663gGAvA+P15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKUDuXvwNvpKD2qiu5H904ncGMIMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEZilExk IkkppH+GEnsXQ36n3dooq2GDeJyDMrl2A0tlcz3ZpK+0EzNOPgipiv+kRPSR41Hh MIFKklgjrk9RU3B1zOyFSS0m7iSTYDUcjJo1fAVWtJc3jPKHD5Xrflj2Cg5Z4D3M 1a9eeMfLws1QQB9SRhxxMhsk31U2sW6oXIQfpQXpSxGhcKJxs3LT8yKQ/EiDcMzF NN2V7/KkjMx5VvTMkj2LxeOMdf94ShEt1zXeXxuuMq4+P0kF2RyUwUy1MQQVfjAc PUyAVNWA5rCv3LUXNb2zoTFBirmBDlSyxHpxyQzkbisaUnflcMRy3g+OZUilTe5F dkIQR5fnKpiwkQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:12 2025 by rpki-client