$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: Qa8ay25D30Qr4oDB+Cn7Mk10hvEdIYr0492WIvjpJfo= Subject key identifier: A5:A1:AD:17:E3:35:D2:2D:11:38:7D:4B:54:76:89:B2:B0:4C:2F:E6 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 0197B6A0A55A79DA96A001A5FF3673B5BFC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 15C3 Signing time: Sat 28 Jun 2025 13:01:10 +0000 Manifest this update: Sat 28 Jun 2025 13:01:10 +0000 Manifest next update: Sun 29 Jun 2025 13:01:10 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 4wdR6V0d1GrPLRywqdnHSUBiZWeJdNQyE1k9p4l5Xp0=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:a5:5a:79:da:96:a0:01:a5:ff:36:73:b5:bf:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jun 28 13:01:10 2025 GMT Not After : Jun 29 13:01:10 2025 GMT Subject: CN=a5a1ad17e335d22d11387d4b547689b2b04c2fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:c8:f9:81:13:c7:2f:c1:95:5e:50:8f:4e: 2c:c7:7b:e1:73:28:5c:77:2d:c4:a1:3e:5c:22:de: b9:cd:93:1a:c7:6b:d2:b7:48:ef:dc:50:c7:4d:fc: b0:8e:6b:6a:4b:c2:c8:da:05:6e:aa:cb:50:a4:fa: bc:c7:21:4a:2a:f7:bf:68:cf:b5:4e:08:cd:33:4e: 7f:7a:77:fe:ab:d2:4a:37:95:6c:ed:88:94:1e:fa: f5:48:72:9a:10:12:f3:bc:b4:b5:fa:4d:85:ba:d2: 3d:f0:e5:6f:35:4f:ce:bf:29:37:22:f5:e0:8f:f8: 56:8c:d6:d7:1b:f4:74:ed:52:83:6d:57:49:ba:a6: e3:58:48:f9:bc:c3:7c:12:0a:66:40:c4:9a:9a:48: a2:36:ea:7f:38:3a:36:41:72:d4:cc:ba:31:37:de: 98:81:59:f9:5f:2d:ee:c9:36:00:c9:3c:0c:95:6a: 48:a3:d5:47:d8:ab:11:92:e3:45:7c:2b:56:5b:6a: 82:8c:27:68:87:f7:03:45:8c:d0:0f:b4:75:b5:49: 76:fc:cf:ec:31:d7:21:d9:81:d6:a6:32:c0:5a:c6: 8a:66:26:0b:a0:d3:5d:d4:31:82:31:18:d0:ba:84: 06:7a:a9:10:e4:3b:31:1f:fb:9a:57:80:7e:6a:60: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A1:AD:17:E3:35:D2:2D:11:38:7D:4B:54:76:89:B2:B0:4C:2F:E6 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:51:00:41:bf:eb:a2:25:1a:b1:a5:35:54:21:0b:5a:3a:8d: 65:7e:d9:eb:d5:c8:e7:92:6d:d2:e7:27:8b:b9:f0:1e:4d:c9: e0:55:20:d4:33:4f:45:d4:63:ea:db:13:75:e5:6d:c5:ba:64: 10:92:a4:44:bf:5a:30:ac:5d:9d:ff:05:bb:6a:6c:6c:eb:34: 04:b7:29:4e:f0:e7:a2:33:7d:66:87:9f:14:3e:a2:eb:a6:de: d9:35:94:f2:2c:12:27:a9:04:96:a6:ed:4a:a5:2a:fa:13:12: 7a:85:7a:d7:8d:2c:0a:c4:33:36:45:43:1c:7f:11:86:d8:ac: 76:50:1d:8f:f3:88:30:e4:9c:fc:3c:af:e1:bf:f1:56:54:b3: 78:99:e8:51:61:4c:0b:1b:8f:4c:b8:a5:84:cc:e7:62:d0:b0: 60:f7:73:60:ac:49:2b:dc:a6:62:c0:d3:f3:51:c8:fc:ce:73: 09:5f:af:d5:dd:db:d2:22:d5:4a:df:10:80:99:f9:b8:8f:5b: cb:e0:43:ff:e6:05:52:20:d8:52:13:91:0e:7d:f6:64:04:7c: 38:38:6c:54:ed:1f:43:a7:1e:87:00:04:06:b7:83:d1:aa:6a: 3c:06:d3:05:89:85:50:cd:12:3e:0a:26:36:dd:29:01:ab:d5: 41:91:fb:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oKVaedqWoAGl/zZztb/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwNjI4MTMwMTEwWhcNMjUwNjI5MTMwMTEwWjAzMTEwLwYDVQQD EyhhNWExYWQxN2UzMzVkMjJkMTEzODdkNGI1NDc2ODliMmIwNGMyZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTXI+YETxy/BlV5Qj04sx3vhcyhc dy3EoT5cIt65zZMax2vSt0jv3FDHTfywjmtqS8LI2gVuqstQpPq8xyFKKve/aM+1 TgjNM05/enf+q9JKN5Vs7YiUHvr1SHKaEBLzvLS1+k2FutI98OVvNU/Ovyk3IvXg j/hWjNbXG/R07VKDbVdJuqbjWEj5vMN8EgpmQMSamkiiNup/ODo2QXLUzLoxN96Y gVn5Xy3uyTYAyTwMlWpIo9VH2KsRkuNFfCtWW2qCjCdoh/cDRYzQD7R1tUl2/M/s Mdch2YHWpjLAWsaKZiYLoNNd1DGCMRjQuoQGeqkQ5DsxH/uaV4B+amDjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWhrRfjNdItETh9S1R2ibKwTC/mMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVEAQb/r oiUasaU1VCELWjqNZX7Z69XI55Jt0ucni7nwHk3J4FUg1DNPRdRj6tsTdeVtxbpk EJKkRL9aMKxdnf8Fu2psbOs0BLcpTvDnojN9ZoefFD6i66be2TWU8iwSJ6kElqbt SqUq+hMSeoV6140sCsQzNkVDHH8RhtisdlAdj/OIMOSc/Dyv4b/xVlSzeJnoUWFM CxuPTLilhMznYtCwYPdzYKxJK9ymYsDT81HI/M5zCV+v1d3b0iLVSt8QgJn5uI9b y+BD/+YFUiDYUhORDn32ZAR8ODhsVO0fQ6cehwAEBreD0apqPAbTBYmFUM0SPgom Nt0pAavVQZH7zA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:20:59 2025 by rpki-client