$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: c4EJLohbrPR6bPYuX3WLlRtEo8BZ1KPb1EnO76U28aw= Subject key identifier: 66:FE:FB:66:5D:E7:08:EA:28:7E:1C:3A:3E:84:00:2C:3D:C0:FA:37 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 0199FDD920EF9EBD110BDA65B774529262C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1831 Signing time: Sun 19 Oct 2025 19:01:29 +0000 Manifest this update: Sun 19 Oct 2025 19:01:29 +0000 Manifest next update: Mon 20 Oct 2025 19:01:29 +0000 Files and hashes: 1: 2MknCTAqPrL-JBVm-a7dCcSPR7A.roa (hash: QgeWbSBTUKGBsvwbQgC/fRYVcUxNWpLiMOHrMsaO2LA=) 2: 81KZQ-u5F9g0MOVoHU9ewgY-QXg.roa (hash: 8UjV0Jm7R1QguHBx9y2wyolm/VjFBkdN2Pr8OyUJ+mY=) 3: Au9bXszlocyVoMwtR7yHKJSJdd8.roa (hash: nwgXyCp2VJCxj54VlqhKlW+GmuQayPyEYrSPMy4MTwc=) 4: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (hash: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=) 5: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 6: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 7: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 8: I5sUW94nv-LxzV80hMGX3qTQCs4.roa (hash: uL5F8RVKhWM570kSM8rrD/tTcGTu5/K9W9VpY2ciAEQ=) 9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 10: Mfhs8jmocGTaGuB0fg_x0qnHXQY.roa (hash: P75mvG00MMw6xQyOke8+iOXUOpf6sb8l40ULEZSs1Co=) 11: R2ldoXhi8yWQOntF1DnCjSdvZHU.roa (hash: rEkBBSJ/AxqPUULu5r8GdT5K+bRn1TC46uKfQvy074k=) 12: RabFVP9_l7NvhFArTWX9C0fHl8A.roa (hash: i69bKSISEEfsZkRf2LJ6xdjL0YTgWRsBj/o5W7RYyXc=) 13: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 14: T7IjBrYrggA-fhq6ldUZ_3bbRAM.roa (hash: uvE5iKVkYEQQo3ln8x8eOoRQL4ODeOvhvfo6hm9IKvw=) 15: fJpkT-437me05--9YcoG-Z-gtp0.roa (hash: S3/+Mf1eiHqBI2upibbtw3ImJd6HoVXmnaOiOtu8vFs=) 16: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 17: gbl3K87pq61HBpBF-ynT8FRiuRc.roa (hash: cXfO4y1iR7IIc0IloXuoSNqbZybBreBshUvynFBvAaA=) 18: jaX_pSZTt2QtAFyBzi9jHzupc6I.roa (hash: Q4Lsi4Y8P1kMxlNLWX66TTwTUzaof2icuH2ghly6BCM=) 19: n2vcpbDZB6xrxLYvzTHCKhSNz7E.roa (hash: 5XRyQTD9tl7LBp5vTwaP2Vb/AmIajhXwhSGXa4ngEUA=) 20: pR8X201cE488GDij0jEDtJgNAT4.roa (hash: 55G0ARH5uqyYFb+VPNX9cf5T1AwygrlThtDL14wWHjY=) 21: pcNjPd963pJ-veR3THrsEue-HI8.roa (hash: WY3JRHM86xMcBBANb6NZ6B6Gt06IYrTWP+TpFrDA6VY=) 22: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 23: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 24: wlCqpCf6WqXLzJVszqz1Q1gTyss.roa (hash: VxRQNGxkKhRbXtEdjFiDmjDt1hmaWIKUoy1RTW4daSE=) 25: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: F2X24lHfR8btPk5IefnxiYEazcf4JVbQPUqEC7Dug1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d9:20:ef:9e:bd:11:0b:da:65:b7:74:52:92:62:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Oct 19 19:01:29 2025 GMT Not After : Oct 20 19:01:29 2025 GMT Subject: CN=66fefb665de708ea287e1c3a3e84002c3dc0fa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:9d:da:80:d8:66:e6:c6:02:4e:41:2e:7f: 4e:54:86:8b:c9:35:ae:aa:0f:48:ee:c3:73:b6:8e: 00:53:cb:83:2f:cc:66:e8:09:f6:e6:ef:e1:92:7c: 31:bf:04:a8:84:c0:57:21:59:b3:00:52:28:15:ba: 5b:e7:d3:15:14:21:62:6f:b6:90:55:80:0a:ac:15: 08:4c:1d:31:8d:b9:70:94:3f:29:b1:3c:27:92:dc: f4:96:c7:4b:ba:2a:c9:bf:09:44:4d:88:6e:d4:bf: 0c:c7:44:20:da:30:f9:b5:a2:99:23:a4:2a:e6:e3: a6:97:99:f2:90:43:43:99:1e:4b:37:23:07:28:87: 24:e2:44:df:ed:d1:4a:1d:ee:1e:61:be:c6:dd:26: da:b2:68:b4:cb:4c:4a:54:ca:0f:8f:41:8e:81:e7: d6:ac:ea:01:d1:dc:21:bc:f3:0e:23:82:af:58:a1: 06:26:fa:88:05:20:ea:13:64:33:f0:45:21:82:fa: 12:31:71:4f:2d:3b:64:25:7c:27:71:ce:60:ab:33: 90:57:95:2d:55:41:4b:d7:98:f2:27:9b:7d:af:17: b4:d5:d2:43:5e:8d:23:19:2e:b3:e5:30:50:33:74: 17:4c:51:2c:0c:3a:e0:6b:c1:95:19:46:b5:d6:3d: 70:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:FB:66:5D:E7:08:EA:28:7E:1C:3A:3E:84:00:2C:3D:C0:FA:37 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ba:12:7e:20:16:92:b8:b4:81:db:71:ba:ab:58:df:19:1f: 37:88:57:14:0e:65:06:79:9c:4d:79:f2:fa:5e:2f:00:cb:f6: fb:61:56:8f:47:26:6a:64:8f:a9:81:c1:94:d4:9c:36:d3:e9: 07:77:0f:a3:84:ef:af:73:b4:13:61:3d:c1:dd:e2:d8:08:51: 2d:4e:8b:c6:22:60:f6:d3:1b:72:d2:93:32:b3:ff:df:6c:9a: 87:55:cc:4b:8a:6d:5f:41:4f:9d:48:bf:8f:f2:77:a7:77:fa: 69:12:20:d2:14:2f:bf:aa:a9:2b:36:62:b5:38:3c:49:eb:4c: 9d:9e:f7:60:33:44:a3:23:bb:61:6a:70:b9:a8:70:2e:88:c9: a5:e7:ac:6d:39:a0:73:cc:3e:e0:fe:6a:5a:a4:56:0e:ee:0a: 87:04:f8:52:29:c5:a0:dc:b9:9a:e8:93:f3:30:c4:b9:a7:cc: b8:83:b7:82:ef:80:6d:a6:68:c2:54:a2:51:07:2f:d3:0e:7c: 1e:3c:66:dc:b0:72:0d:6e:44:6c:07:20:07:8d:da:35:b8:4f: fa:24:c9:f8:72:1e:b9:85:72:71:29:82:7c:f9:e2:fb:28:61: ff:0e:09:9d:75:cd:73:9d:da:29:b1:06:b4:2b:e1:02:df:95: e2:29:6e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92SDvnr0RC9plt3RSkmLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMDE5MTkwMTI5WhcNMjUxMDIwMTkwMTI5WjAzMTEwLwYDVQQD Eyg2NmZlZmI2NjVkZTcwOGVhMjg3ZTFjM2EzZTg0MDAyYzNkYzBmYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL6d2oDYZubGAk5BLn9OVIaLyTWu qg9I7sNzto4AU8uDL8xm6An25u/hknwxvwSohMBXIVmzAFIoFbpb59MVFCFib7aQ VYAKrBUITB0xjblwlD8psTwnktz0lsdLuirJvwlETYhu1L8Mx0Qg2jD5taKZI6Qq 5uOml5nykENDmR5LNyMHKIck4kTf7dFKHe4eYb7G3Sbasmi0y0xKVMoPj0GOgefW rOoB0dwhvPMOI4KvWKEGJvqIBSDqE2Qz8EUhgvoSMXFPLTtkJXwncc5gqzOQV5Ut VUFL15jyJ5t9rxe01dJDXo0jGS6z5TBQM3QXTFEsDDrga8GVGUa11j1wXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb++2Zd5wjqKH4cOj6EACw9wPo3MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAproSfiAW kri0gdtxuqtY3xkfN4hXFA5lBnmcTXny+l4vAMv2+2FWj0cmamSPqYHBlNScNtPp B3cPo4Tvr3O0E2E9wd3i2AhRLU6LxiJg9tMbctKTMrP/32yah1XMS4ptX0FPnUi/ j/J3p3f6aRIg0hQvv6qpKzZitTg8SetMnZ73YDNEoyO7YWpwuahwLojJpeesbTmg c8w+4P5qWqRWDu4KhwT4UinFoNy5muiT8zDEuafMuIO3gu+AbaZowlSiUQcv0w58 Hjxm3LByDW5EbAcgB43aNbhP+iTJ+HIeuYVycSmCfPni+yhh/w4JnXXNc53aKbEG tCvhAt+V4iluQw== -----END CERTIFICATE-----Generated at Sun Oct 19 22:27:09 2025 by rpki-client