$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json) Hash identifier: cQ1EwnKdb41VkIUISMgJsrEmXaiJTn4woWWP5SpEbB8= Subject key identifier: AE:B9:A8:08:D6:46:BF:AD:E8:7E:45:52:87:CB:91:E5:42:86:80:F1 Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019FA8CFC6D1A3D377A79AD7659408C6BD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft Manifest number: 03F7 Signing time: Tue 28 Jul 2026 13:00:16 +0000 Manifest this update: Tue 28 Jul 2026 13:00:16 +0000 Manifest next update: Wed 29 Jul 2026 13:00:16 +0000 Files and hashes: 1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=) 2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=) 3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=) 4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=) 5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=) 6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=) 7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: RunRkruMVaPweo/Ef3/35Ip0aYsYKq6ulJ0t0Yk2PXg=) 8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=) 9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=) 10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:cf:c6:d1:a3:d3:77:a7:9a:d7:65:94:08:c6:bd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jul 28 13:00:16 2026 GMT Not After : Jul 29 13:00:16 2026 GMT Subject: CN=aeb9a808d646bfade87e455287cb91e5428680f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:c8:cb:51:a6:6c:1c:04:52:be:04:14:61: f6:04:0d:9f:c1:80:e3:c4:d3:41:7e:76:a4:dd:6e: d0:80:d9:7f:90:b4:3d:f4:e5:08:01:43:e0:aa:4b: 6a:d0:40:37:64:a8:20:b3:ec:b5:0f:19:30:73:49: a9:04:f1:39:c2:b2:ea:9b:a8:ac:66:a8:9a:be:c7: a0:e1:1d:54:18:34:44:bd:96:68:8a:ba:71:08:72: 7d:80:f8:e1:dd:be:17:6f:e4:b9:4e:e1:7b:59:07: 84:0f:d4:fd:05:02:ef:49:c7:ca:5a:10:53:a0:94: 18:72:6f:26:44:11:9f:e3:51:5e:4c:2c:8e:cd:d6: f9:23:e1:63:a2:7c:e6:e2:77:40:b7:68:49:ab:e9: eb:2f:7c:dd:c3:ab:cc:03:45:2a:f8:7a:8e:3c:71: 70:18:67:2e:17:44:da:c8:f1:e7:92:11:49:e9:7b: 3a:8a:cd:10:1a:35:38:08:82:7e:6b:a8:76:73:ae: a4:bc:b9:64:1f:a8:18:36:df:ac:e2:72:64:95:39: 33:8d:86:8a:30:6f:89:55:16:69:94:d8:d2:5e:03: 6c:35:94:b3:96:5f:05:7c:94:fd:0f:5e:c6:31:a7: 92:da:54:29:49:25:64:63:45:6d:62:a8:3d:00:df: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:A8:08:D6:46:BF:AD:E8:7E:45:52:87:CB:91:E5:42:86:80:F1 X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9f:c4:53:74:5a:bf:41:b2:30:92:3e:fb:c8:0e:b3:8a:87: e4:c0:84:56:52:84:5e:ed:26:d1:ad:26:22:e1:07:df:92:0e: 09:fb:9b:b4:a2:9b:a4:f8:64:a9:b1:df:6f:d9:9a:17:f5:1f: 76:54:4d:60:7e:a5:d8:91:57:19:53:5e:8c:b7:fe:04:78:47: 65:85:58:9b:61:6a:66:5d:f9:bd:7d:a0:dc:68:3b:95:a6:72: 02:cc:75:44:ac:88:0c:87:38:a0:2b:e8:ca:77:96:98:df:06: 98:88:c4:25:56:a8:03:b5:ef:ea:53:74:c1:62:10:25:b9:6d: d6:47:03:f0:92:56:c2:6b:60:e0:86:9a:dc:70:61:ec:73:bd: 83:4d:45:ce:3a:7f:cc:38:73:18:48:f6:9b:18:00:5c:a3:95: 75:4c:45:3e:46:a6:3d:68:73:fe:43:c1:99:97:dc:65:4c:99: 08:71:4a:93:22:da:96:5b:77:f7:90:c5:ba:a6:ca:e0:fd:4e: ea:6f:65:33:33:00:ec:32:06:bc:1a:b3:0e:05:b6:ab:f6:14: d0:69:db:a1:8b:c2:68:53:a9:2b:6c:ec:4f:da:95:09:e1:d7: 7a:1a:6c:13:28:a4:6a:1c:5d:c4:fa:5e:c9:c5:d8:3e:bf:32: 96:97:e4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oz8bRo9N3p5rXZZQIxr1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwNzI4MTMwMDE2WhcNMjYwNzI5MTMwMDE2WjAzMTEwLwYDVQQD EyhhZWI5YTgwOGQ2NDZiZmFkZTg3ZTQ1NTI4N2NiOTFlNTQyODY4MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo/Iy1GmbBwEUr4EFGH2BA2fwYDj xNNBfnak3W7QgNl/kLQ99OUIAUPgqktq0EA3ZKggs+y1Dxkwc0mpBPE5wrLqm6is Zqiavseg4R1UGDREvZZoirpxCHJ9gPjh3b4Xb+S5TuF7WQeED9T9BQLvScfKWhBT oJQYcm8mRBGf41FeTCyOzdb5I+Fjonzm4ndAt2hJq+nrL3zdw6vMA0Uq+HqOPHFw GGcuF0TayPHnkhFJ6Xs6is0QGjU4CIJ+a6h2c66kvLlkH6gYNt+s4nJklTkzjYaK MG+JVRZplNjSXgNsNZSzll8FfJT9D17GMaeS2lQpSSVkY0VtYqg9AN9EYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK65qAjWRr+t6H5FUofLkeVChoDxMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJ/EU3Ra v0GyMJI++8gOs4qH5MCEVlKEXu0m0a0mIuEH35IOCfubtKKbpPhkqbHfb9maF/Uf dlRNYH6l2JFXGVNejLf+BHhHZYVYm2FqZl35vX2g3Gg7laZyAsx1RKyIDIc4oCvo yneWmN8GmIjEJVaoA7Xv6lN0wWIQJblt1kcD8JJWwmtg4Iaa3HBh7HO9g01Fzjp/ zDhzGEj2mxgAXKOVdUxFPkamPWhz/kPBmZfcZUyZCHFKkyLallt395DFuqbK4P1O 6m9lMzMA7DIGvBqzDgW2q/YU0GnboYvCaFOpK2zsT9qVCeHXehpsEyikahxdxPpe ycXYPr8ylpfk3w== -----END CERTIFICATE-----Generated at Tue Jul 28 17:17:40 2026 by rpki-client