$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: rA6PFoQWxLmZkpMt9r2XARRYcWBA6B9dDWGJJoRFwUs= Subject key identifier: 71:43:C0:4D:59:DC:50:2C:F2:8F:AA:F0:9B:7A:29:CE:8C:E9:26:BD Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 0198D4E099E2E83CE76A284D690EAFC899A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1790 Signing time: Sat 23 Aug 2025 03:02:25 +0000 Manifest this update: Sat 23 Aug 2025 03:02:25 +0000 Manifest next update: Sun 24 Aug 2025 03:02:25 +0000 Files and hashes: 1: 2MknCTAqPrL-JBVm-a7dCcSPR7A.roa (hash: QgeWbSBTUKGBsvwbQgC/fRYVcUxNWpLiMOHrMsaO2LA=) 2: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=) 3: 81KZQ-u5F9g0MOVoHU9ewgY-QXg.roa (hash: 8UjV0Jm7R1QguHBx9y2wyolm/VjFBkdN2Pr8OyUJ+mY=) 4: Au9bXszlocyVoMwtR7yHKJSJdd8.roa (hash: nwgXyCp2VJCxj54VlqhKlW+GmuQayPyEYrSPMy4MTwc=) 5: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (hash: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=) 6: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 7: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 8: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 10: Mfhs8jmocGTaGuB0fg_x0qnHXQY.roa (hash: P75mvG00MMw6xQyOke8+iOXUOpf6sb8l40ULEZSs1Co=) 11: MkpuHlRFeXINy7SEDa2LV04onKw.roa (hash: X0Zsw3yhNAPz8F6U1Ym4lWPzkmaxW3raaydI0FX0eOA=) 12: RabFVP9_l7NvhFArTWX9C0fHl8A.roa (hash: i69bKSISEEfsZkRf2LJ6xdjL0YTgWRsBj/o5W7RYyXc=) 13: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 14: XJ123o6tZlSfzKNNo89Uqq3cEoc.roa (hash: DDNQsDmpGvCIwHRzgWySzrbyMPFC2+Bkq7hUOsilKCE=) 15: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 16: hJRteb8bEkgySxcL9S5NMiiupgM.roa (hash: vxtw10J/SZine/uT+6I0LxNHzRbai47j6L9YN842cVg=) 17: h_aVeyWAhyIXUAM9oeSx15liAiM.roa (hash: hv39e2N25/bI+YhyIVAOqVFMdikRy2tXVlzLcuRexMM=) 18: jZQHuYGZ_BzJ0_CPffijNvGjoD4.roa (hash: oNa1hwlsmstQ0sAKmsfIRqvEXfj92rgiiikTtvbNxKU=) 19: n2vcpbDZB6xrxLYvzTHCKhSNz7E.roa (hash: 5XRyQTD9tl7LBp5vTwaP2Vb/AmIajhXwhSGXa4ngEUA=) 20: pR8X201cE488GDij0jEDtJgNAT4.roa (hash: 55G0ARH5uqyYFb+VPNX9cf5T1AwygrlThtDL14wWHjY=) 21: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 22: s5TEpCg45yxgX3PDwNw2nyaCVTc.roa (hash: pDdDr/v29Ue4vxXj8MxhyP4D04jg9B0/UrZD3UMEp9w=) 23: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 24: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=) 25: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: W8ujd0pLRUy6oSAIx782jOT2zK23qSy3GX9hGQ8PXjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:99:e2:e8:3c:e7:6a:28:4d:69:0e:af:c8:99:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Aug 23 03:02:25 2025 GMT Not After : Aug 24 03:02:25 2025 GMT Subject: CN=7143c04d59dc502cf28faaf09b7a29ce8ce926bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:88:3c:f7:a2:85:a8:5b:f0:f0:a7:d1:d2: fd:ef:1f:54:56:2c:fe:a8:ee:90:9c:3a:27:bc:e4: 84:c4:1c:c2:19:ff:70:e8:c0:d7:18:84:88:6e:64: 12:c3:8a:24:20:08:e4:81:5e:54:aa:93:4c:03:b4: 97:c3:91:2d:82:7e:00:65:58:9c:76:f9:14:ed:5c: 2a:1c:b2:02:15:15:1c:01:7b:da:99:b3:a2:51:4e: c0:63:a8:ac:ee:19:07:d1:56:51:2b:cf:97:5c:51: 5d:44:30:12:6c:51:ac:c7:60:b4:2a:ce:26:ee:cc: 70:07:12:ed:f8:57:7c:22:05:60:d8:72:f0:82:43: 59:86:02:af:1d:4e:9d:41:ae:4f:f2:1f:ba:6f:77: 71:7a:f3:24:a1:77:d7:da:7c:80:9d:fe:dd:70:e4: 97:cc:48:56:82:26:58:b4:45:57:ee:2b:11:f6:3f: a2:99:28:cf:2c:cc:c2:ea:20:b1:30:fa:d9:1d:2e: b0:9e:9a:03:17:e9:72:fa:ef:33:35:a5:65:98:68: d2:fb:3f:f2:b0:cc:8b:5f:c8:a3:ca:cb:09:b1:be: d8:25:df:f1:b7:45:be:d7:b3:34:fe:d1:f3:2e:f1: e2:37:7e:f9:22:2a:d1:5c:e4:d2:6f:ab:a4:a8:dd: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:C0:4D:59:DC:50:2C:F2:8F:AA:F0:9B:7A:29:CE:8C:E9:26:BD X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1d:cb:c0:a0:d6:79:30:a1:57:16:0a:3c:4b:ca:f2:03:21: ce:c8:f3:39:f6:4e:b7:72:6f:b4:f4:25:cb:c8:ed:9d:27:03: 3b:a4:fd:81:92:b3:11:78:fb:f2:28:79:88:f8:4f:e8:2f:41: c0:0a:b2:4b:09:d6:62:0c:1d:41:95:d9:d3:0f:4e:53:91:9b: a6:3a:e1:3d:5e:c4:0e:2b:78:5c:65:0c:0a:96:be:db:5e:cc: 99:4a:db:03:6b:2b:b1:53:89:1e:0a:a3:77:2a:0d:7c:e6:3f: 75:6f:71:cc:7c:6b:67:e2:33:c2:47:d9:74:b6:0d:ba:75:96: f7:47:f4:e3:ba:d0:83:36:82:f9:a7:91:16:ac:ac:83:d6:ea: dd:37:ee:a1:77:86:fb:23:a5:31:61:4d:7d:4d:b1:5a:18:98: a8:95:d5:bf:63:1b:01:cc:0f:0c:7e:78:11:8e:dd:91:03:e3: 3b:9e:4a:2f:e8:60:a0:77:f4:51:d0:d2:99:62:43:b4:f5:e0: 03:ec:aa:8a:02:51:b0:fe:94:71:d1:b7:b7:df:fd:94:0e:5b: 2e:41:6d:50:18:6b:b5:4b:72:b9:cb:bf:65:3a:2b:81:7c:b2: 06:fa:42:22:d1:47:19:b4:5b:d6:91:f4:cf:87:74:9c:6f:1d: 31:8c:c6:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4Jni6DznaihNaQ6vyJmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUwODIzMDMwMjI1WhcNMjUwODI0MDMwMjI1WjAzMTEwLwYDVQQD Eyg3MTQzYzA0ZDU5ZGM1MDJjZjI4ZmFhZjA5YjdhMjljZThjZTkyNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArouIPPeihahb8PCn0dL97x9UViz+ qO6QnDonvOSExBzCGf9w6MDXGISIbmQSw4okIAjkgV5UqpNMA7SXw5Etgn4AZVic dvkU7VwqHLICFRUcAXvambOiUU7AY6is7hkH0VZRK8+XXFFdRDASbFGsx2C0Ks4m 7sxwBxLt+Fd8IgVg2HLwgkNZhgKvHU6dQa5P8h+6b3dxevMkoXfX2nyAnf7dcOSX zEhWgiZYtEVX7isR9j+imSjPLMzC6iCxMPrZHS6wnpoDF+ly+u8zNaVlmGjS+z/y sMyLX8ijyssJsb7YJd/xt0W+17M0/tHzLvHiN375IirRXOTSb6ukqN1hnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFDwE1Z3FAs8o+q8Jt6Kc6M6Sa9MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaB3LwKDW eTChVxYKPEvK8gMhzsjzOfZOt3JvtPQly8jtnScDO6T9gZKzEXj78ih5iPhP6C9B wAqySwnWYgwdQZXZ0w9OU5GbpjrhPV7EDit4XGUMCpa+217MmUrbA2srsVOJHgqj dyoNfOY/dW9xzHxrZ+IzwkfZdLYNunWW90f047rQgzaC+aeRFqysg9bq3TfuoXeG +yOlMWFNfU2xWhiYqJXVv2MbAcwPDH54EY7dkQPjO55KL+hgoHf0UdDSmWJDtPXg A+yqigJRsP6UcdG3t9/9lA5bLkFtUBhrtUtyucu/ZTorgXyyBvpCItFHGbRb1pH0 z4d0nG8dMYzGmA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:31:12 2025 by rpki-client