$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: lVF0U8v452BRMH59t60ptZWsKElaRnDL2iD6EtXZuNw= Subject key identifier: 16:F6:6F:79:4E:5A:4E:B6:3C:A4:2D:00:00:F6:55:36:9F:B1:16:A0 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 0199FC588E0229ACA5BD06DB4A0CCFB85C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 16F6 Signing time: Sun 19 Oct 2025 12:01:25 +0000 Manifest this update: Sun 19 Oct 2025 12:01:25 +0000 Manifest next update: Mon 20 Oct 2025 12:01:25 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=) 3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: rUis37PSsxALbDWHU+6SR20Jb42pOXLDOoYxqWRngQo=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) 11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:8e:02:29:ac:a5:bd:06:db:4a:0c:cf:b8:5c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Oct 19 12:01:25 2025 GMT Not After : Oct 20 12:01:25 2025 GMT Subject: CN=16f66f794e5a4eb63ca42d0000f655369fb116a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:60:e4:51:d3:69:4b:a4:e3:2a:11:02:b4: 8e:15:a1:ad:19:5a:56:41:11:71:ac:1c:25:69:e0: 2c:ee:6b:ed:cf:2a:90:06:5a:55:2d:9d:72:bf:06: 80:3e:c2:88:26:d6:1e:41:15:6a:ee:87:61:a7:10: bb:82:fa:0f:89:84:78:a6:69:00:a0:92:c3:9a:3f: cf:6c:91:1e:42:8b:a8:17:81:5f:8e:2a:51:90:5c: 79:76:f8:81:8b:5f:d8:52:22:93:8a:11:40:b0:ba: a0:a4:e9:15:cb:33:c7:fb:12:a7:07:2c:b5:6f:da: 11:78:07:b4:89:c6:59:dc:bc:78:33:ed:70:9b:54: 7f:cf:62:9c:52:9e:64:4c:40:3c:70:97:95:84:22: 30:5e:81:2c:80:5e:a7:cb:0f:a0:56:5d:b4:bf:8e: e3:c8:06:b2:0d:33:34:f7:fe:7b:7d:f4:94:73:7b: 5e:63:c7:44:8b:c4:39:df:b0:2d:50:37:d5:34:79: 47:35:e6:4f:bd:4b:12:32:5e:28:6a:e7:55:fe:d8: 66:29:94:e5:38:01:56:76:05:0b:15:b7:d4:44:4b: ad:55:a7:e2:a3:35:15:f3:af:c3:54:1b:81:d9:31: a4:22:ab:ae:0a:ad:15:2b:70:7a:7f:b3:66:ad:29: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F6:6F:79:4E:5A:4E:B6:3C:A4:2D:00:00:F6:55:36:9F:B1:16:A0 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c7:b7:83:df:3c:fe:42:be:81:fc:0f:0a:d2:2f:d7:60:ce: 3b:ca:a7:5e:1e:cc:48:ee:c4:5e:2b:cd:2b:51:aa:1c:cf:e9: f8:13:db:03:9e:d2:9b:60:e7:79:e3:ef:98:ce:9e:2f:6b:b8: 54:ca:bb:c9:84:2c:88:09:30:bb:06:d1:82:0e:b7:14:16:57: d8:5a:6e:48:61:d9:18:fc:3f:f1:8c:57:26:10:41:2f:3c:63: b0:2c:7a:2a:f0:44:1e:a3:fb:d9:0f:6e:21:08:be:32:24:fb: a9:3a:ea:0f:7b:62:ac:af:cc:33:93:c4:e1:ab:f7:6d:57:d6: 0d:00:06:de:5e:28:3f:62:99:0c:b3:f0:48:8b:79:fe:82:b3: f8:be:fa:d4:3f:2a:12:65:d7:9d:fb:fa:5a:a9:3f:0a:bb:b3: 69:cc:e6:b0:36:27:1e:0b:16:80:fa:1d:6a:aa:bb:5d:c2:40: 1a:9c:1b:da:66:94:2b:2b:a1:16:64:4d:74:1a:a8:44:51:35: 10:c3:5d:3d:f2:90:6c:94:31:61:70:b2:d3:f4:09:fb:76:21: 06:a2:f5:e0:bd:70:70:5d:7d:98:b9:47:bf:18:21:7e:ac:6e: 0c:11:c8:0d:86:8f:0a:35:f0:d3:09:34:90:14:a2:db:53:cf: ee:1e:10:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WI4CKaylvQbbSgzPuFxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUxMDE5MTIwMTI1WhcNMjUxMDIwMTIwMTI1WjAzMTEwLwYDVQQD EygxNmY2NmY3OTRlNWE0ZWI2M2NhNDJkMDAwMGY2NTUzNjlmYjExNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uRg5FHTaUuk4yoRArSOFaGtGVpW QRFxrBwlaeAs7mvtzyqQBlpVLZ1yvwaAPsKIJtYeQRVq7odhpxC7gvoPiYR4pmkA oJLDmj/PbJEeQouoF4FfjipRkFx5dviBi1/YUiKTihFAsLqgpOkVyzPH+xKnByy1 b9oReAe0icZZ3Lx4M+1wm1R/z2KcUp5kTEA8cJeVhCIwXoEsgF6nyw+gVl20v47j yAayDTM09/57ffSUc3teY8dEi8Q537AtUDfVNHlHNeZPvUsSMl4oaudV/thmKZTl OAFWdgULFbfUREutVafiozUV86/DVBuB2TGkIquuCq0VK3B6f7NmrSkDOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBb2b3lOWk62PKQtAAD2VTafsRagMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHse3g988 /kK+gfwPCtIv12DOO8qnXh7MSO7EXivNK1GqHM/p+BPbA57Sm2DneePvmM6eL2u4 VMq7yYQsiAkwuwbRgg63FBZX2FpuSGHZGPw/8YxXJhBBLzxjsCx6KvBEHqP72Q9u IQi+MiT7qTrqD3tirK/MM5PE4av3bVfWDQAG3l4oP2KZDLPwSIt5/oKz+L761D8q EmXXnfv6Wqk/CruzaczmsDYnHgsWgPodaqq7XcJAGpwb2maUKyuhFmRNdBqoRFE1 EMNdPfKQbJQxYXCy0/QJ+3YhBqL14L1wcF19mLlHvxghfqxuDBHIDYaPCjXw0wk0 kBSi21PP7h4QYw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:37:59 2025 by rpki-client