$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: MjO6Z0DKxejR2FcSwp13m5qljneJ/Sm5yeFUTINo6Uo= Subject key identifier: 80:BF:E3:DD:12:5F:60:A2:7D:DD:21:7B:9F:14:22:D8:E4:0A:D2:7B Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 0199FC583A9228CCE622F6F64C0433AC6944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 172F Signing time: Sun 19 Oct 2025 12:01:04 +0000 Manifest this update: Sun 19 Oct 2025 12:01:04 +0000 Manifest next update: Mon 20 Oct 2025 12:01:04 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 44H6reyMjlJh9wXB8StInUQIzhY.roa (hash: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=) 3: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 4: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 5: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 6: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: 9LjJW8dByHKXZSXEEuMLECWYoJZbo9cfe0YH5YxndxA=) 7: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 8: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 9: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 10: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 11: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 12: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:3a:92:28:cc:e6:22:f6:f6:4c:04:33:ac:69:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Oct 19 12:01:04 2025 GMT Not After : Oct 20 12:01:04 2025 GMT Subject: CN=80bfe3dd125f60a27ddd217b9f1422d8e40ad27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:01:53:9b:14:36:95:82:8a:17:39:52:e1: 0b:11:d7:f4:cc:95:ff:9d:7f:f5:06:4a:3e:d6:69: d7:08:b5:1d:e5:a0:a2:86:25:61:73:29:9e:08:fc: 91:ed:59:01:1d:51:77:22:48:37:47:fb:3e:dc:c8: 22:7a:04:7c:e2:0d:d1:f6:ad:58:5e:18:48:60:7f: 3b:7f:c6:f7:bf:a8:5b:06:5d:9d:fc:29:54:c1:38: 47:0b:a1:bb:58:9b:6e:ef:04:ad:01:c0:ec:83:7b: 48:7b:f7:71:03:b8:95:ae:08:f0:e2:d6:c6:f1:75: 96:a6:94:6e:82:36:ee:cc:ae:7e:e8:38:53:d6:0a: 95:1b:c0:73:f2:42:11:5b:79:b8:2b:66:da:6a:f8: 99:6b:b2:7f:57:e5:0a:ed:a2:30:53:80:89:a5:56: cc:6d:14:dd:a5:8b:42:1c:70:36:da:ec:e1:e5:39: 25:ae:48:d8:e3:d0:b7:32:ff:56:fd:cc:f6:50:b6: 37:bf:46:68:c1:ac:9d:8b:62:97:a4:c0:08:9c:fb: a4:9b:c2:71:38:ee:d3:df:19:62:2d:5b:82:ef:02: 43:d3:cf:81:f4:a2:91:3d:db:f4:e3:30:18:24:14: 11:2b:88:72:12:e5:b8:27:a6:67:70:cf:f9:87:c3: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:E3:DD:12:5F:60:A2:7D:DD:21:7B:9F:14:22:D8:E4:0A:D2:7B X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:c7:a9:f9:ac:fe:70:61:48:4f:e4:4e:00:af:ff:ea:08: c7:b1:e4:62:0f:26:b8:cd:1f:c0:00:85:95:44:c5:8e:27:4c: 28:3a:d4:88:53:da:53:4b:78:d7:8f:ef:e9:ba:57:28:9f:af: 26:ef:c0:14:37:ff:b1:d4:bc:fd:14:70:ac:ae:94:89:d5:df: 43:bb:3d:15:76:32:e3:f4:89:8d:78:32:95:78:c9:b5:49:1c: 65:64:33:03:bc:d2:16:b9:41:10:63:d8:1d:e8:94:79:15:84: 50:0a:a5:89:08:a6:22:d7:30:6e:31:50:86:77:a4:f3:29:05: 98:02:93:fe:a6:d9:7c:21:07:d0:5e:3d:b7:ee:d7:64:bf:75: 72:d6:d1:d9:45:60:ed:2d:fb:74:cd:8e:75:6b:a5:ad:c4:9b: cd:1d:bd:0f:4b:35:30:68:a4:a2:0d:2e:83:73:cb:62:83:9d: b3:0f:48:0f:d6:fc:00:c9:4e:e6:3c:03:a8:55:b6:aa:f8:c6: 14:e2:8f:b4:17:34:12:d2:6d:8d:86:51:40:c6:ed:9d:a4:77: b4:ce:78:d9:4b:09:c7:86:11:1c:3a:d3:72:63:fb:c7:7a:14: 34:e2:db:55:a4:f7:f3:c5:14:5c:db:49:3c:f3:ec:b3:9f:57: c4:fa:3e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WDqSKMzmIvb2TAQzrGlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMDE5MTIwMTA0WhcNMjUxMDIwMTIwMTA0WjAzMTEwLwYDVQQD Eyg4MGJmZTNkZDEyNWY2MGEyN2RkZDIxN2I5ZjE0MjJkOGU0MGFkMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+sBU5sUNpWCihc5UuELEdf0zJX/ nX/1Bko+1mnXCLUd5aCihiVhcymeCPyR7VkBHVF3Ikg3R/s+3MgiegR84g3R9q1Y XhhIYH87f8b3v6hbBl2d/ClUwThHC6G7WJtu7wStAcDsg3tIe/dxA7iVrgjw4tbG 8XWWppRugjbuzK5+6DhT1gqVG8Bz8kIRW3m4K2baaviZa7J/V+UK7aIwU4CJpVbM bRTdpYtCHHA22uzh5TklrkjY49C3Mv9W/cz2ULY3v0Zowaydi2KXpMAInPukm8Jx OO7T3xliLVuC7wJD08+B9KKRPdv04zAYJBQRK4hyEuW4J6ZncM/5h8NV0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC/490SX2Cifd0he58UItjkCtJ7MB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnLHqfms /nBhSE/kTgCv/+oIx7HkYg8muM0fwACFlUTFjidMKDrUiFPaU0t414/v6bpXKJ+v Ju/AFDf/sdS8/RRwrK6UidXfQ7s9FXYy4/SJjXgylXjJtUkcZWQzA7zSFrlBEGPY HeiUeRWEUAqliQimItcwbjFQhnek8ykFmAKT/qbZfCEH0F49t+7XZL91ctbR2UVg 7S37dM2OdWulrcSbzR29D0s1MGikog0ug3PLYoOdsw9ID9b8AMlO5jwDqFW2qvjG FOKPtBc0EtJtjYZRQMbtnaR3tM542UsJx4YRHDrTcmP7x3oUNOLbVaT388UUXNtJ PPPss59XxPo+Ww== -----END CERTIFICATE-----Generated at Sun Oct 19 15:22:35 2025 by rpki-client