$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: JYtbihoVKv6tJ4McDd6L0FX1D3lZkDfnuYqykXR+C1k= Subject key identifier: 04:DD:F5:71:33:F6:DE:C2:75:FE:78:2B:5A:B3:C3:71:F3:93:DB:BF Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 0197B70EFCDED2F26D40B0EDF3B28D8DE7CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1600 Signing time: Sat 28 Jun 2025 15:01:42 +0000 Manifest this update: Sat 28 Jun 2025 15:01:42 +0000 Manifest next update: Sun 29 Jun 2025 15:01:42 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: IsxMtNlQJ4J5OkWPRRyBdod8aQg.roa (hash: G37zdezcJTNVKE89wqIfwLZT3BTcN0qsQ2l0rpiM6Xo=) 3: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 4: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 5: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 6: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: ICg+UITmrOg9gtJhjmspMTxJpLexIzF/fzt+A208rBU=) 7: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 8: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 9: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 10: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 11: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 12: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) 14: wzbAA_7v4SO8gotTxJQmyHJivbA.roa (hash: yFDcInj33yWnnvdYVc/TUwbE4elU5cTUQYixYyOr5So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:fc:de:d2:f2:6d:40:b0:ed:f3:b2:8d:8d:e7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jun 28 15:01:42 2025 GMT Not After : Jun 29 15:01:42 2025 GMT Subject: CN=04ddf57133f6dec275fe782b5ab3c371f393dbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:02:95:3d:dc:68:61:79:eb:69:8d:98:0a: 66:54:3b:07:f4:b9:9e:21:49:a6:e9:40:16:1d:f8: 4d:03:b0:db:45:0f:06:51:4e:d8:51:81:8d:4c:9e: 70:e6:79:4b:3f:22:90:91:4d:ef:55:90:ae:5b:90: 5b:14:3c:df:1a:4e:72:11:a4:45:5b:68:78:d3:60: 7f:91:e1:0a:bc:2a:69:c5:92:1f:30:90:d9:97:d8: 1b:02:76:c8:0b:ab:64:31:ad:e1:69:d5:8a:0e:78: 5d:68:0b:78:cf:94:11:b2:79:9b:3d:67:aa:af:53: 4f:d1:05:be:e3:bf:d8:8f:1e:56:c2:d3:45:e0:9c: 20:b3:db:3d:f4:99:2b:72:5a:53:58:44:2b:19:9a: e0:fa:53:fe:59:79:d6:86:01:2e:f2:f0:3d:b1:5e: a8:0b:e3:5c:42:92:22:b8:66:3c:e5:51:39:40:e4: 1f:d8:a5:b3:60:0b:3e:dd:19:39:a0:78:40:b0:11: 8a:22:d6:d0:44:8f:01:3b:a8:14:d6:08:6f:ba:18: 11:8d:81:18:16:b4:82:db:8b:0c:2d:35:b6:65:a3: 3b:c4:25:e2:b1:30:4a:b5:0c:42:fa:6a:94:c5:2c: bb:5f:50:32:a3:3b:06:20:5e:00:48:17:bc:f6:23: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DD:F5:71:33:F6:DE:C2:75:FE:78:2B:5A:B3:C3:71:F3:93:DB:BF X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:55:f5:af:f6:d1:be:da:ff:34:68:7e:84:f1:06:b1:2c:ff: 96:8e:1c:cc:53:5f:2b:0b:b5:60:9d:18:d3:99:b3:2e:87:aa: af:e6:d8:b2:2a:56:90:9b:84:75:a7:6b:28:87:6e:03:35:75: eb:3d:3f:f1:a2:e3:9f:09:58:eb:4c:7e:05:36:f2:e1:fb:13: 2d:25:5a:c1:53:1e:5c:4a:7d:2e:82:20:91:77:1a:73:5c:09: 32:36:81:e9:fe:f7:10:55:f0:57:8e:cf:14:d8:46:6d:1d:3b: 08:36:a5:41:e8:f1:08:07:02:d7:75:f2:56:1d:cf:fb:72:c9: f4:2c:3a:0b:2e:11:fd:5c:de:1d:47:68:08:11:e9:42:93:f6: 57:11:3c:92:86:45:f6:33:4f:a4:41:42:9a:8d:92:6e:fc:1f: 7b:cb:89:7f:de:6c:23:8a:8d:2e:00:f5:7b:24:4c:0a:f8:59: f0:cf:42:63:7c:d5:53:b7:b2:1f:55:7d:9c:98:ae:da:46:b3: 6d:ea:be:d9:16:57:96:5c:4f:5e:ee:6f:cb:9a:65:79:93:94: 31:92:c1:d6:89:41:cb:3c:0d:50:93:b5:13:ad:46:47:49:b1: 8b:06:90:cf:02:12:9e:66:ec:42:8c:0b:5f:9e:f7:fe:36:d1: 67:fa:39:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dvze0vJtQLDt87KNjefNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwNjI4MTUwMTQyWhcNMjUwNjI5MTUwMTQyWjAzMTEwLwYDVQQD EygwNGRkZjU3MTMzZjZkZWMyNzVmZTc4MmI1YWIzYzM3MWYzOTNkYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wUClT3caGF562mNmApmVDsH9Lme IUmm6UAWHfhNA7DbRQ8GUU7YUYGNTJ5w5nlLPyKQkU3vVZCuW5BbFDzfGk5yEaRF W2h402B/keEKvCppxZIfMJDZl9gbAnbIC6tkMa3hadWKDnhdaAt4z5QRsnmbPWeq r1NP0QW+47/Yjx5WwtNF4Jwgs9s99JkrclpTWEQrGZrg+lP+WXnWhgEu8vA9sV6o C+NcQpIiuGY85VE5QOQf2KWzYAs+3Rk5oHhAsBGKItbQRI8BO6gU1ghvuhgRjYEY FrSC24sMLTW2ZaM7xCXisTBKtQxC+mqUxSy7X1AyozsGIF4ASBe89iOl6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATd9XEz9t7Cdf54K1qzw3Hzk9u/MB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVX1r/bR vtr/NGh+hPEGsSz/lo4czFNfKwu1YJ0Y05mzLoeqr+bYsipWkJuEdadrKIduAzV1 6z0/8aLjnwlY60x+BTby4fsTLSVawVMeXEp9LoIgkXcac1wJMjaB6f73EFXwV47P FNhGbR07CDalQejxCAcC13XyVh3P+3LJ9Cw6Cy4R/VzeHUdoCBHpQpP2VxE8koZF 9jNPpEFCmo2Sbvwfe8uJf95sI4qNLgD1eyRMCvhZ8M9CY3zVU7eyH1V9nJiu2kaz beq+2RZXllxPXu5vy5pleZOUMZLB1olByzwNUJO1E61GR0mxiwaQzwISnmbsQowL X573/jbRZ/o5Gg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:38:42 2025 by rpki-client