$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: nY6vtOKII7wjKnNOzolHLHmT7SqkyC6iDWjHLsqU18I= Subject key identifier: CB:ED:88:50:4A:EB:56:F3:A5:6F:03:C8:F2:5D:93:25:59:07:8E:22 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 0199FB0EF588B67B9953942132B2B762D895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 096A Signing time: Sun 19 Oct 2025 06:01:25 +0000 Manifest this update: Sun 19 Oct 2025 06:01:25 +0000 Manifest next update: Mon 20 Oct 2025 06:01:25 +0000 Files and hashes: 1: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (hash: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=) 2: 1-O322bBLVOWQDNMjFywrUKIxIw0.roa (hash: 7vlxbPUiv3Std38MYSGtKLa+JRa87TkvQmUti3lj/M0=) 3: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (hash: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=) 4: 2dZgvqLVnr3L7YBNwa-dmAKuNeI.roa (hash: x4ULifAZk0DVtPg0u1emvRD3DI0t8YVOlw3nhG2CXgs=) 5: 49CKyADgLLIvTuESaHIzqHu2gtg.roa (hash: 5CuCUUa8X7/ocW7RyLEv8Vb6VI17HgQju5mFySfuyAs=) 6: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (hash: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=) 7: E2CsRwz9g826xgce9UMdi-jpNc0.roa (hash: p8vKwGNWyPepiaRRxHDNJ9XMoMoNlWP3l1RLiZkb2+U=) 8: Gs6wyM63OMnbKZMOf0cda_N7OHI.roa (hash: klxL/qsoExOmtoi4MkmdkNuAIFKSpx+D0u3x1SSJEX0=) 9: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (hash: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=) 10: M_Vi73CFA0pYsLc_tnhRMlqnyzw.roa (hash: Sa1IToWhunFsh7PNrbHTSOaXwck3hxZREJV3TqwmoFA=) 11: NfFWK6CE2t9Pa-x8zwAV9BuwlEI.roa (hash: YfoMWCybmpdOuYSX8n89Rg3jlFAY6S7JvtkdJ5G+mxc=) 12: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (hash: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=) 13: VZZ9WawBePhv4LDIZfO_F9oGyz0.roa (hash: tpSdt2I+RDE+fPAieXAjll9NyOZ/5yWRInrrSwy0o3Y=) 14: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: uGIE8UtdD5ra5B/JNA+RUsc36OAaM9Xua3+9kgC9k0U=) 15: dGULqhrcL_ANSs7BLhleecesMvA.roa (hash: eOOIkAUS4EOg9hUCyRisXwLNCWdAEMdVK4NcFcmfEBA=) 16: el3s5FU97XWZHwIp4vnzG1ZyhVA.roa (hash: Un8MbL+EOz96ZIqKNXFdGfjM2fM+efAGzm2lPyUt4cY=) 17: hTvlytGQdE4bMSxFpu4pwOqOzAs.roa (hash: sjwfg5+KO0tm6ztHfkhFPbdkaAWRxRv1HZmf8qkebNc=) 18: hUld0bztgVsjCx1wOfJFp5IoOW8.roa (hash: yhAFJhhqEely7Z+gYD2UjZa+MFUNj+TLxyxBcw9l33Y=) 19: lpP2NtJrOsnyJY4GK-9DeCM-P_Q.roa (hash: CsUk7QdVZqmzvlB30KB4KWvPaPIZZBhOOH3ZXiNwIvg=) 20: podfBbvblbujwJeMWZwGbU0sPNA.roa (hash: +aCb+Gg3Ip7BjJ/sgR8dzhKxDrlUXm7AtkYxnTfteRk=) 21: yhkS5lsjYYscgr4foRJtRjpwYWM.roa (hash: iY9LNop7X5Mq1+wEqI5l+HA0vGg7zxCKH5e1YxqKboA=) 22: zWfpDcDGP8ZBOnbHTD2rBjXz78M.roa (hash: kQIUbN3JJr8uLsYWLB80RGyd2JN8/nPj/Xb7OpSz18k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0e:f5:88:b6:7b:99:53:94:21:32:b2:b7:62:d8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Oct 19 06:01:25 2025 GMT Not After : Oct 20 06:01:25 2025 GMT Subject: CN=cbed88504aeb56f3a56f03c8f25d932559078e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:61:b1:d8:3c:5d:b2:7d:0d:d4:f5:0e:b4: dd:0d:74:39:d5:b2:54:16:e4:0d:33:18:66:dd:41: 5a:41:fa:cf:4c:5e:15:b9:cb:f3:36:40:8d:18:bf: 33:6d:45:53:d7:77:c5:3f:d4:23:ce:f2:2a:34:f6: 66:6f:20:e6:85:1d:fb:6a:3b:f5:b5:3c:61:7f:08: 6e:ff:09:b2:e2:18:c3:45:76:57:69:ae:39:c6:7f: 99:1a:06:ea:99:a0:ea:91:ce:ae:51:ee:d5:e4:5b: 9f:59:b9:a8:d7:8d:f6:40:a7:52:f5:11:a8:ec:f3: 52:b0:ff:67:41:29:50:6b:5d:a9:de:a2:c2:62:33: a3:09:5e:43:9f:b9:ba:f3:1f:9f:3c:76:5a:c7:01: 60:ac:14:56:12:03:39:d0:72:02:db:d4:60:e6:90: de:3d:e7:18:50:95:61:74:5c:78:4d:a5:5e:e5:0d: 63:6f:21:44:17:88:48:84:c7:2e:81:a5:8b:e5:57: ab:99:8b:1d:f8:64:c8:7b:11:b4:79:1f:f0:44:bc: 7d:dd:9a:ab:e2:69:29:cc:30:e9:8e:99:49:a3:bd: e2:62:8a:f8:88:1d:f7:85:9f:a0:fd:08:df:b6:8a: 1c:05:86:d7:78:01:a2:0b:3a:23:a9:cd:97:a4:fc: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:88:50:4A:EB:56:F3:A5:6F:03:C8:F2:5D:93:25:59:07:8E:22 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e6:97:a9:65:be:ee:07:18:ee:48:d4:5d:3b:db:f7:32:28: ce:70:18:f1:4b:c9:95:61:27:5d:a9:3f:38:07:24:8c:22:a2: 62:b6:c5:eb:b3:b8:0c:9c:d4:c8:6d:f3:91:49:60:1b:3b:8a: 59:d2:7f:38:83:10:bc:8b:82:25:a2:fc:02:17:02:bc:24:9e: 1e:2c:9d:f9:59:d7:2c:ac:70:e4:d6:c9:ae:87:89:06:4e:fc: 0a:34:40:a0:8e:54:b6:ec:a6:3d:78:30:15:e3:bb:0e:fc:d7: 2f:ac:d3:a4:39:4c:1d:ac:30:31:cb:f3:64:ab:ba:0e:e4:a1: 28:75:6e:8d:e1:18:b4:68:7e:34:88:41:ed:00:89:d5:f0:90: 18:55:77:fb:07:b5:4c:ad:62:e4:71:7b:b4:cd:8c:d8:b4:f4: e3:4d:3e:16:24:0c:7c:7f:65:aa:69:f6:19:88:a6:68:15:92: 96:70:51:52:66:dc:cb:ca:0e:62:1a:b4:49:e8:20:4d:b3:c8: c8:53:5b:36:94:35:65:b1:4b:bb:5f:da:16:1e:6d:50:c8:68: ee:d0:6c:05:5f:99:43:d5:97:94:ce:4a:f0:90:80:30:a5:7f: a8:13:ff:f3:7e:9d:69:f3:c3:e6:26:4a:ad:53:97:e9:a2:c1: ef:06:36:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7DvWItnuZU5QhMrK3YtiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjUxMDE5MDYwMTI1WhcNMjUxMDIwMDYwMTI1WjAzMTEwLwYDVQQD EyhjYmVkODg1MDRhZWI1NmYzYTU2ZjAzYzhmMjVkOTMyNTU5MDc4ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh1hsdg8XbJ9DdT1DrTdDXQ51bJU FuQNMxhm3UFaQfrPTF4VucvzNkCNGL8zbUVT13fFP9QjzvIqNPZmbyDmhR37ajv1 tTxhfwhu/wmy4hjDRXZXaa45xn+ZGgbqmaDqkc6uUe7V5FufWbmo1432QKdS9RGo 7PNSsP9nQSlQa12p3qLCYjOjCV5Dn7m68x+fPHZaxwFgrBRWEgM50HIC29Rg5pDe PecYUJVhdFx4TaVe5Q1jbyFEF4hIhMcugaWL5VermYsd+GTIexG0eR/wRLx93Zqr 4mkpzDDpjplJo73iYor4iB33hZ+g/QjftoocBYbXeAGiCzojqc2XpPwXwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvtiFBK61bzpW8DyPJdkyVZB44iMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOaXqWW+ 7gcY7kjUXTvb9zIoznAY8UvJlWEnXak/OAckjCKiYrbF67O4DJzUyG3zkUlgGzuK WdJ/OIMQvIuCJaL8AhcCvCSeHiyd+VnXLKxw5NbJroeJBk78CjRAoI5UtuymPXgw FeO7DvzXL6zTpDlMHawwMcvzZKu6DuShKHVujeEYtGh+NIhB7QCJ1fCQGFV3+we1 TK1i5HF7tM2M2LT0400+FiQMfH9lqmn2GYimaBWSlnBRUmbcy8oOYhq0SeggTbPI yFNbNpQ1ZbFLu1/aFh5tUMho7tBsBV+ZQ9WXlM5K8JCAMKV/qBP/836dafPD5iZK rVOX6aLB7wY2xw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:19:51 2025 by rpki-client