$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: EH3wkNI9im7d/yLUeZf/cNOoGQZTTkHCVxoB2gTNQWg= Subject key identifier: 06:BF:30:28:70:0F:0A:8C:7A:76:98:FA:AB:7E:B8:87:BC:84:45:DE Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 0197B8212370E8466F3F27B5988EFBA837EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 15C3 Signing time: Sat 28 Jun 2025 20:01:08 +0000 Manifest this update: Sat 28 Jun 2025 20:01:08 +0000 Manifest next update: Sun 29 Jun 2025 20:01:08 +0000 Files and hashes: 1: 2PiS2J9-ItXkVvnefA7xUJmmHco.roa (hash: fm4Z7vvzHDMokg8lvCFW4L0Rre6/U9BEbHKtNsNHxxs=) 2: 9TwneljnoP6bcfYQvihrxla0RcI.roa (hash: Zr2Ui8lpKBSfU5vJuPYuh/1cm8NiWiUfV6M604x4ojg=) 3: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 4: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 5: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 6: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 7: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 8: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 9: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 10: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 11: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 12: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 13: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 14: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 15: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 16: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 17: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 18: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 19: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 20: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 21: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 22: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 23: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 24: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 25: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: j5zgYZ95W0K4K3isIQbq41hMSZSDy/WB8myDP/LaHlk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:21:23:70:e8:46:6f:3f:27:b5:98:8e:fb:a8:37:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jun 28 20:01:08 2025 GMT Not After : Jun 29 20:01:08 2025 GMT Subject: CN=06bf3028700f0a8c7a7698faab7eb887bc8445de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:d0:66:13:93:88:dd:ee:ef:5c:b8:fb:41: b2:65:15:42:31:65:a6:53:ee:8a:ca:4b:66:e7:28: 61:9e:53:43:dc:a1:bc:f8:43:e4:88:f8:2a:db:d3: f4:20:1c:68:02:75:d5:28:85:16:2b:e6:b7:c8:26: af:73:a1:15:02:0b:97:35:25:fd:44:cd:bb:08:6c: d0:16:83:80:f7:6c:bb:d2:85:37:94:ef:a3:23:b5: e0:d2:2e:9e:fa:80:c9:4c:30:1f:69:fb:7a:32:c4: 5d:07:c9:60:4c:f3:d3:58:45:39:d4:f2:d9:eb:28: 62:44:0b:48:77:8a:0e:a1:ec:e5:b9:64:62:6b:26: 81:03:f1:fd:93:22:33:25:55:df:2b:1f:d6:22:ba: ea:db:0d:b5:b7:12:ac:c2:75:cf:59:93:1b:be:c4: 5f:c1:94:ad:1e:1c:14:d5:71:e1:a6:ea:62:57:12: 88:db:e8:00:88:e8:ec:f3:56:13:87:1b:28:c0:79: f3:33:ce:57:50:7a:0a:2b:6d:fc:a6:db:d5:dc:33: 73:81:7c:a7:aa:ad:97:cd:e4:ad:fe:84:e5:c4:1c: 83:8d:ee:0a:b8:95:cc:b3:7e:02:54:39:17:69:c0: a7:ed:d3:89:b1:c2:8c:17:3c:58:65:28:7f:07:20: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:30:28:70:0F:0A:8C:7A:76:98:FA:AB:7E:B8:87:BC:84:45:DE X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a7:78:bb:b4:81:c4:22:2e:3e:00:0f:12:87:17:53:da:6c: 97:05:19:34:55:14:2a:2c:55:5b:9b:89:82:10:cc:8f:e1:56: 28:87:aa:c9:28:08:1e:ab:fb:61:0f:23:72:25:69:b1:02:88: 37:32:1b:58:94:7d:9c:15:45:5b:1e:93:91:f4:e8:5d:f7:27: a2:a5:f7:bc:cf:09:cc:39:b1:e8:35:94:7f:ec:c1:7f:b4:68: 87:2b:af:88:75:35:b4:c5:20:04:01:de:87:46:95:67:f9:93: 07:7d:a0:fd:67:d2:9c:25:7e:69:df:de:86:0e:50:6e:cc:44: 89:89:9e:49:91:0d:dd:ab:e1:b7:24:66:e0:33:a1:ff:45:cc: 36:90:c6:f1:7e:6b:0e:7f:5c:92:bb:2d:02:95:aa:23:12:2a: 43:81:2d:85:ad:54:bf:e6:fd:d3:46:e6:40:d0:76:99:66:93: 31:0a:1a:40:ec:0e:1c:6c:19:94:8a:5e:60:1a:4d:4a:88:dc: d0:d3:83:ce:f2:f2:28:11:8e:20:ea:52:aa:45:05:eb:08:89: 21:09:93:c0:77:7d:bf:29:0c:64:fd:dd:c6:e7:d9:21:38:4f: a0:4a:2d:15:42:44:a8:6c:be:04:58:84:ee:33:9c:5c:87:70: 00:61:0d:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4ISNw6EZvPye1mI77qDfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUwNjI4MjAwMTA4WhcNMjUwNjI5MjAwMTA4WjAzMTEwLwYDVQQD EygwNmJmMzAyODcwMGYwYThjN2E3Njk4ZmFhYjdlYjg4N2JjODQ0NWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCTQZhOTiN3u71y4+0GyZRVCMWWm U+6Kyktm5yhhnlND3KG8+EPkiPgq29P0IBxoAnXVKIUWK+a3yCavc6EVAguXNSX9 RM27CGzQFoOA92y70oU3lO+jI7Xg0i6e+oDJTDAfaft6MsRdB8lgTPPTWEU51PLZ 6yhiRAtId4oOoezluWRiayaBA/H9kyIzJVXfKx/WIrrq2w21txKswnXPWZMbvsRf wZStHhwU1XHhpupiVxKI2+gAiOjs81YThxsowHnzM85XUHoKK238ptvV3DNzgXyn qq2XzeSt/oTlxByDje4KuJXMs34CVDkXacCn7dOJscKMFzxYZSh/ByA7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa/MChwDwqMenaY+qt+uIe8hEXeMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqd4u7SB xCIuPgAPEocXU9pslwUZNFUUKixVW5uJghDMj+FWKIeqySgIHqv7YQ8jciVpsQKI NzIbWJR9nBVFWx6TkfToXfcnoqX3vM8JzDmx6DWUf+zBf7RohyuviHU1tMUgBAHe h0aVZ/mTB32g/WfSnCV+ad/ehg5QbsxEiYmeSZEN3avhtyRm4DOh/0XMNpDG8X5r Dn9ckrstApWqIxIqQ4Etha1Uv+b900bmQNB2mWaTMQoaQOwOHGwZlIpeYBpNSojc 0NODzvLyKBGOIOpSqkUF6wiJIQmTwHd9vykMZP3dxufZIThPoEotFUJEqGy+BFiE 7jOcXIdwAGENZQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:51:24 2025 by rpki-client