$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: qALD63Y/C/h2ibl/5k351N1nXwO26KjDNdKmqCg4y9A= Subject key identifier: E5:56:34:72:3E:8C:C5:5F:43:62:67:E8:A9:88:03:62:3D:D0:86:62 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 0198D54EB2DF53F39556ECC345C71A971C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1695 Signing time: Sat 23 Aug 2025 05:02:41 +0000 Manifest this update: Sat 23 Aug 2025 05:02:41 +0000 Manifest next update: Sun 24 Aug 2025 05:02:41 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 1on02s47SmwkekNYRvvqPMKKs1s.roa (hash: PVU8TQ1XVWLL41acJ/qMMaJx5HekZ2LfJTCmhfZN/cY=) 3: EfIYNiM608dw9De4gr0QoLFH8AU.roa (hash: 2TaK0wfXNwHYOVXohwQvDaJR6X0XqbjEaNjkMp4hvKo=) 4: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=) 5: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 6: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 7: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: HBiIgD1xvMCWpDEKTUNNXXr+8JDMeTQ6IKRzM2iqXm4=) 8: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 9: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 10: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 11: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 12: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 13: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 14: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:b2:df:53:f3:95:56:ec:c3:45:c7:1a:97:1c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Aug 23 05:02:41 2025 GMT Not After : Aug 24 05:02:41 2025 GMT Subject: CN=e55634723e8cc55f436267e8a98803623dd08662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:ff:10:6b:ce:2c:d1:99:7d:27:e6:cd:d0: 71:d7:c9:7c:2e:95:07:0a:40:06:52:35:36:19:3e: d6:05:1a:c8:21:2a:92:76:15:ac:2c:03:a4:73:de: 80:1d:ad:da:41:89:f9:76:e8:d8:e4:1c:89:dc:25: c6:4a:16:48:34:a8:fd:67:0f:3e:1e:a8:69:38:61: 2f:7e:19:1f:a7:16:e0:6a:09:2c:26:95:85:0b:15: df:08:0b:09:41:50:1d:14:36:d7:a2:13:18:3c:16: f3:0a:28:2d:3b:95:a0:9b:31:35:98:55:12:13:6c: 4f:8b:7d:95:08:45:ac:2d:dc:2a:4c:98:5a:63:2a: 93:7f:de:b8:22:7f:3d:8f:0b:06:8e:8a:d9:3c:36: b4:a2:58:1b:59:fd:05:05:c8:01:73:b3:8c:ce:d4: ef:57:e6:fa:85:19:d1:72:00:75:9f:1b:2f:b3:ae: f4:6a:ce:7d:c2:20:8a:14:4b:d3:bd:88:17:a0:30: 33:3a:5b:ec:7d:85:dc:a7:37:40:14:ce:2d:d2:d1: 20:72:d3:1f:a8:4e:eb:57:f1:85:a7:ff:8d:c6:3c: c3:65:1b:84:b8:e3:b2:a8:42:6d:61:13:1f:e7:c6: 7c:fa:db:45:8f:c5:66:04:da:4f:5b:d5:4c:86:20: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:56:34:72:3E:8C:C5:5F:43:62:67:E8:A9:88:03:62:3D:D0:86:62 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ac:b4:d0:39:41:eb:d7:30:f3:25:e8:af:d0:af:4c:f0:d4: 46:ae:ed:7c:dd:e4:a7:ad:fe:13:8a:cf:35:10:9a:c4:8a:b3: 48:f6:bc:83:9f:54:59:33:a9:73:91:66:42:b8:14:6b:dd:65: 73:ef:16:23:36:ea:4f:d6:44:a1:51:93:f6:ba:1b:d2:b0:cb: 61:0c:1c:6c:a8:69:99:d2:84:9d:66:fc:5e:4b:80:cc:9e:2e: a4:ae:5e:17:d8:76:d7:dd:d1:33:4b:f1:68:8a:e8:d5:a4:d3: 22:c8:2f:88:c7:c2:f5:e7:d7:92:70:d9:dc:61:90:fd:59:1b: 84:a9:9e:79:df:0b:ab:43:03:06:29:64:5a:25:c1:bc:06:4c: 9b:89:54:86:05:69:87:4c:d8:6a:3e:95:f2:b6:e9:d4:88:1e: 63:07:d0:05:6f:b7:b5:f6:64:4a:4c:45:7b:f5:a7:1c:c7:b7: 72:d0:fa:ae:43:54:53:da:66:d7:59:12:84:18:4e:08:f4:e9: fe:f1:b1:21:43:48:89:cd:e0:c7:2a:21:81:0d:bb:6b:ea:aa: 98:af:d0:ce:02:5d:88:f1:b4:22:a2:f2:31:ac:18:8b:14:0f: 0b:93:73:26:28:2c:ae:0b:89:80:b4:51:67:94:41:22:be:5f: bf:af:6a:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTrLfU/OVVuzDRccalxxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwODIzMDUwMjQxWhcNMjUwODI0MDUwMjQxWjAzMTEwLwYDVQQD EyhlNTU2MzQ3MjNlOGNjNTVmNDM2MjY3ZThhOTg4MDM2MjNkZDA4NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKH/EGvOLNGZfSfmzdBx18l8LpUH CkAGUjU2GT7WBRrIISqSdhWsLAOkc96AHa3aQYn5dujY5ByJ3CXGShZINKj9Zw8+ HqhpOGEvfhkfpxbgagksJpWFCxXfCAsJQVAdFDbXohMYPBbzCigtO5WgmzE1mFUS E2xPi32VCEWsLdwqTJhaYyqTf964In89jwsGjorZPDa0olgbWf0FBcgBc7OMztTv V+b6hRnRcgB1nxsvs670as59wiCKFEvTvYgXoDAzOlvsfYXcpzdAFM4t0tEgctMf qE7rV/GFp/+NxjzDZRuEuOOyqEJtYRMf58Z8+ttFj8VmBNpPW9VMhiDNnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVWNHI+jMVfQ2Jn6KmIA2I90IZiMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKy00DlB 69cw8yXor9CvTPDURq7tfN3kp63+E4rPNRCaxIqzSPa8g59UWTOpc5FmQrgUa91l c+8WIzbqT9ZEoVGT9rob0rDLYQwcbKhpmdKEnWb8XkuAzJ4upK5eF9h2193RM0vx aIro1aTTIsgviMfC9efXknDZ3GGQ/VkbhKmeed8Lq0MDBilkWiXBvAZMm4lUhgVp h0zYaj6V8rbp1IgeYwfQBW+3tfZkSkxFe/WnHMe3ctD6rkNUU9pm11kShBhOCPTp /vGxIUNIic3gxyohgQ27a+qqmK/QzgJdiPG0IqLyMawYixQPC5NzJigsrguJgLRR Z5RBIr5fv69qJw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:43 2025 by rpki-client