$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: dJ5lxPENY7iGPSDehX3JQt+V/vTvl23pIok6s68H19w= Subject key identifier: 13:C6:52:CA:F0:E1:8A:69:B0:48:1B:5C:38:7C:87:A8:A9:27:07:66 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 0198D47296B71CC8D503409171F81DECACD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 01:02:16 +0000 Manifest this update: Sat 23 Aug 2025 01:02:16 +0000 Manifest next update: Sun 24 Aug 2025 01:02:16 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: yCD9RExlVgcs9lNcHHMznp/l8/uMdxW+aWV3iAw52Lw=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:96:b7:1c:c8:d5:03:40:91:71:f8:1d:ec:ac:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Aug 23 01:02:16 2025 GMT Not After : Aug 24 01:02:16 2025 GMT Subject: CN=13c652caf0e18a69b0481b5c387c87a8a9270766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dc:c2:10:a8:b5:a4:a7:64:9a:da:bc:7f:44: 7c:ea:6b:fc:e1:68:f6:31:d9:e1:1d:01:a3:ae:a0: 7a:81:2a:3e:4b:a3:7a:27:75:0a:08:e8:1f:92:05: 70:b4:fa:c6:01:13:9c:dc:af:63:f8:d3:35:67:49: 22:42:d7:e3:5e:72:83:9a:08:dc:33:41:26:e1:20: db:28:ac:3a:a7:ef:47:b3:99:21:8e:d4:06:49:5d: 11:54:03:7e:7e:b4:c7:d7:85:91:15:03:66:a4:a3: a1:06:09:26:e9:cc:43:bf:e3:8d:71:51:ae:71:77: 09:8b:98:e7:1b:c6:cf:3e:d7:38:b1:cd:05:fb:97: 11:e8:05:f4:70:99:91:81:b4:4d:7b:c8:f0:8f:b7: 6f:59:96:0b:fb:80:2a:8f:f5:3b:26:82:8c:b6:e3: 6b:fd:82:02:fd:20:68:5d:ad:b4:ca:1b:39:2a:50: 58:a6:11:ee:ae:6d:4e:09:34:df:e0:ef:de:59:99: 1e:99:07:84:cf:02:f0:e1:2b:c2:a0:57:f0:66:94: 98:1d:d9:e5:e5:5e:81:86:28:11:7d:32:75:ae:c0: b5:6a:95:e0:a0:06:65:98:9d:9a:70:e9:5b:43:ec: 74:e0:2a:76:d7:4b:ac:7a:68:51:d7:89:ec:5f:e3: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C6:52:CA:F0:E1:8A:69:B0:48:1B:5C:38:7C:87:A8:A9:27:07:66 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a2:8e:3b:2d:88:be:12:88:4f:00:ee:7a:3d:41:c8:93:87: ac:89:d6:a3:f5:ca:43:02:23:ad:6b:71:5d:af:56:56:d0:8a: 0f:14:71:42:fb:4b:44:5c:23:ee:d7:96:ba:5d:21:72:5b:ef: 6d:59:80:82:29:9a:25:70:1f:03:de:80:44:69:aa:e9:b6:73: 43:b7:60:3e:bb:49:da:92:aa:27:49:7f:88:80:58:33:ff:af: a1:d5:41:ce:09:98:93:5e:6e:42:50:1a:c3:07:9e:72:c8:02: 98:91:4f:97:3e:4c:f0:12:60:e8:da:9b:5a:1e:e7:51:95:3f: e8:45:d8:ca:82:b0:39:99:fa:bd:19:a7:75:e4:1b:a1:70:b8: 48:3c:d4:02:36:bf:a4:20:ee:31:23:e4:8a:9c:4a:1c:6d:8a: 81:9c:e1:84:73:cb:f1:30:6e:8a:6b:cc:8e:eb:0a:7e:f1:2a: 1f:0b:33:94:2f:fb:6e:d3:5d:cb:23:e3:39:ac:15:98:bc:1d: e9:5a:af:95:4e:32:1e:18:c0:c0:13:d5:0d:02:33:78:a5:31: ee:24:25:6a:09:5f:28:cf:8c:14:dc:68:f5:e5:1b:06:d9:f4: 9f:eb:87:0d:71:aa:83:8f:45:b3:85:3c:fe:7d:7a:2f:21:fa: 71:d8:f2:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcpa3HMjVA0CRcfgd7KzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwODIzMDEwMjE2WhcNMjUwODI0MDEwMjE2WjAzMTEwLwYDVQQD EygxM2M2NTJjYWYwZTE4YTY5YjA0ODFiNWMzODdjODdhOGE5MjcwNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NzCEKi1pKdkmtq8f0R86mv84Wj2 MdnhHQGjrqB6gSo+S6N6J3UKCOgfkgVwtPrGAROc3K9j+NM1Z0kiQtfjXnKDmgjc M0Em4SDbKKw6p+9Hs5khjtQGSV0RVAN+frTH14WRFQNmpKOhBgkm6cxDv+ONcVGu cXcJi5jnG8bPPtc4sc0F+5cR6AX0cJmRgbRNe8jwj7dvWZYL+4Aqj/U7JoKMtuNr /YIC/SBoXa20yhs5KlBYphHurm1OCTTf4O/eWZkemQeEzwLw4SvCoFfwZpSYHdnl 5V6BhigRfTJ1rsC1apXgoAZlmJ2acOlbQ+x04Cp210usemhR14nsX+OlQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPGUsrw4YppsEgbXDh8h6ipJwdmMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6KOOy2I vhKITwDuej1ByJOHrInWo/XKQwIjrWtxXa9WVtCKDxRxQvtLRFwj7teWul0hclvv bVmAgimaJXAfA96ARGmq6bZzQ7dgPrtJ2pKqJ0l/iIBYM/+vodVBzgmYk15uQlAa wweecsgCmJFPlz5M8BJg6NqbWh7nUZU/6EXYyoKwOZn6vRmndeQboXC4SDzUAja/ pCDuMSPkipxKHG2KgZzhhHPL8TBuimvMjusKfvEqHwszlC/7btNdyyPjOawVmLwd 6VqvlU4yHhjAwBPVDQIzeKUx7iQlaglfKM+MFNxo9eUbBtn0n+uHDXGqg49Fs4U8 /n16LyH6cdjyqQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:28:49 2025 by rpki-client