$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: JlRICwSj1BiPWUICoMYU1AeFimy0zgexsODnhl+Qx1A= Subject key identifier: 55:73:73:6F:06:8F:B6:42:98:0B:0E:AF:0D:3A:EA:AE:BC:1A:F0:9C Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 0199FBEAE6E3B2ADF293C237BB83A2464C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 16F0 Signing time: Sun 19 Oct 2025 10:01:39 +0000 Manifest this update: Sun 19 Oct 2025 10:01:39 +0000 Manifest next update: Mon 20 Oct 2025 10:01:39 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: xn7Pva3r/SdZoUvw8oH4WUW0pSWavdNSkcuueTEBP78=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:e6:e3:b2:ad:f2:93:c2:37:bb:83:a2:46:4c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Oct 19 10:01:39 2025 GMT Not After : Oct 20 10:01:39 2025 GMT Subject: CN=5573736f068fb642980b0eaf0d3aeaaebc1af09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:2d:67:6a:03:89:1a:4d:86:bd:d5:76:92: 92:58:9b:b7:19:f8:b7:3f:eb:5f:dd:1f:7c:2a:99: d4:20:56:65:30:dc:cb:e1:7e:f6:4d:de:7d:29:12: ef:aa:80:b3:bc:ef:7e:82:4b:54:a9:c6:8f:95:5e: 61:12:31:35:b5:9d:83:99:ea:8c:1f:f0:12:64:6f: a3:9f:0a:69:72:10:c6:d1:33:eb:d2:11:12:a6:38: 8a:45:aa:c4:1e:69:67:6e:89:6b:19:cc:ce:4f:42: 7d:82:1d:c8:87:cb:12:a8:1f:04:9d:1a:15:16:c5: c9:6f:b6:0d:49:e9:e0:79:e2:29:ae:cc:9a:f4:32: 01:d8:da:72:6c:54:d8:7c:2a:b9:35:57:50:f9:4a: 52:62:60:c8:af:15:a3:f7:ab:f2:2d:fb:60:00:b9: 2f:7f:91:26:74:19:80:70:b2:ab:fa:80:2f:a7:49: 6a:6a:d3:01:d9:2f:e4:f3:e2:45:a9:22:ea:53:a7: 79:c2:13:6a:e3:d8:bb:4c:45:33:50:75:8d:ea:19: 65:37:f5:42:2d:fb:8c:a5:ab:4c:6e:0d:07:5e:ac: bd:f8:4a:a1:f2:1e:87:39:32:3e:b2:5e:82:6f:68: e6:27:33:e0:d4:73:e9:96:3b:6e:76:e2:7c:41:1a: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:73:73:6F:06:8F:B6:42:98:0B:0E:AF:0D:3A:EA:AE:BC:1A:F0:9C X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:29:43:bf:4a:f8:92:2e:58:0f:a3:f2:86:88:b0:43:a2:3b: 25:ec:03:90:b7:cf:d6:ea:5f:df:77:7f:c0:fa:95:0e:81:2a: 49:c2:71:30:d3:88:3c:f1:53:f2:5e:41:c0:55:f3:90:cb:43: 51:6b:b8:b6:40:5e:21:28:70:db:4a:35:70:0f:3f:f1:74:52: 7a:16:e4:43:84:6e:df:8e:9e:49:dd:84:2e:06:b4:e0:16:73: ea:d6:dd:fb:ca:94:60:30:2e:75:f4:8f:dd:fc:8c:e0:c1:a7: 47:1e:05:04:f3:d8:ab:c9:ff:3e:75:9f:01:a7:30:fa:80:01: 3f:41:ba:3e:cd:9c:c0:4b:1a:e7:65:76:63:79:f4:e7:49:bf: 7c:27:fe:bc:5a:f2:0e:a9:d3:ac:6a:0a:f7:ec:58:90:6f:68: f2:ac:80:88:bf:7a:aa:81:5f:7e:1e:04:26:3d:36:4f:1c:db: c4:de:70:37:e1:0c:d3:34:de:17:6f:38:93:be:a1:2a:70:07: d6:96:42:dc:c6:32:98:0e:3c:ca:ba:66:73:ce:17:88:88:17: 45:ee:da:d5:a7:d0:f8:67:1a:45:f3:d5:b5:bd:ae:41:21:b6: 3b:4f:07:cd:5c:93:6c:64:da:fd:fa:0d:ee:bc:30:41:d9:ca: 5e:34:92:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76ubjsq3yk8I3u4OiRkwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMDE5MTAwMTM5WhcNMjUxMDIwMTAwMTM5WjAzMTEwLwYDVQQD Eyg1NTczNzM2ZjA2OGZiNjQyOTgwYjBlYWYwZDNhZWFhZWJjMWFmMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt4tZ2oDiRpNhr3VdpKSWJu3Gfi3 P+tf3R98KpnUIFZlMNzL4X72Td59KRLvqoCzvO9+gktUqcaPlV5hEjE1tZ2DmeqM H/ASZG+jnwppchDG0TPr0hESpjiKRarEHmlnbolrGczOT0J9gh3Ih8sSqB8EnRoV FsXJb7YNSengeeIprsya9DIB2NpybFTYfCq5NVdQ+UpSYmDIrxWj96vyLftgALkv f5EmdBmAcLKr+oAvp0lqatMB2S/k8+JFqSLqU6d5whNq49i7TEUzUHWN6hllN/VC LfuMpatMbg0HXqy9+Eqh8h6HOTI+sl6Cb2jmJzPg1HPpljtuduJ8QRrbJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVzc28Gj7ZCmAsOrw066q68GvCcMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSlDv0r4 ki5YD6PyhoiwQ6I7JewDkLfP1upf33d/wPqVDoEqScJxMNOIPPFT8l5BwFXzkMtD UWu4tkBeIShw20o1cA8/8XRSehbkQ4Ru346eSd2ELga04BZz6tbd+8qUYDAudfSP 3fyM4MGnRx4FBPPYq8n/PnWfAacw+oABP0G6Ps2cwEsa52V2Y3n050m/fCf+vFry DqnTrGoK9+xYkG9o8qyAiL96qoFffh4EJj02TxzbxN5wN+EM0zTeF284k76hKnAH 1pZC3MYymA48yrpmc84XiIgXRe7a1afQ+GcaRfPVtb2uQSG2O08HzVyTbGTa/foN 7rwwQdnKXjSSsw== -----END CERTIFICATE-----Generated at Sun Oct 19 12:52:37 2025 by rpki-client