$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: d1ijk1bmVFsRSnNmTsNF2tQHAIizRHPXYM2R+B4V5RQ= Subject key identifier: DA:E0:A9:DF:06:AF:FB:AD:8C:58:24:39:2B:35:45:14:01:01:A0:D8 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019EBEEC67D5020CE700901B6EC497324410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1964 Signing time: Sat 13 Jun 2026 03:00:24 +0000 Manifest this update: Sat 13 Jun 2026 03:00:24 +0000 Manifest next update: Sun 14 Jun 2026 03:00:24 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: L7/1BxdiSmXE6TsQ05rsrj8OOc/+OOGzLN8l2fjBL1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ec:67:d5:02:0c:e7:00:90:1b:6e:c4:97:32:44:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jun 13 03:00:24 2026 GMT Not After : Jun 14 03:00:24 2026 GMT Subject: CN=dae0a9df06affbad8c5824392b3545140101a0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:fb:d1:5f:1f:3b:68:be:74:75:15:8d:93: 46:ee:50:35:33:a9:8b:20:b9:4e:03:6b:d3:70:01: 18:3d:eb:e6:51:ca:78:38:99:58:4b:63:78:1d:7e: b7:f6:5c:8f:c1:00:ca:a4:cc:8a:f5:bf:e6:de:cd: ae:21:ac:aa:9e:96:90:79:8a:b1:f5:6b:fd:06:f3: 89:68:ac:58:61:e6:80:3c:ec:de:0f:25:1b:c8:78: 8e:fb:39:ea:3e:66:cf:99:18:69:95:86:2d:29:25: cd:20:c7:32:08:04:56:68:09:4c:04:8e:28:b0:7c: 7c:98:10:07:fd:e9:be:58:0d:a2:c1:e5:2c:f6:91: ec:7f:98:2b:17:98:55:27:e3:45:53:a4:ac:a8:c7: 68:cf:08:e8:84:4a:b3:ce:86:d4:d7:93:62:18:da: bd:c1:3f:be:d7:ab:11:6e:21:c1:2b:a3:c4:80:0e: 98:09:b3:0e:9f:c3:d8:61:9f:da:bb:34:9b:75:a5: b8:af:8a:ae:9c:68:82:e4:d5:c2:b1:95:9b:6a:98: 7e:60:b0:57:34:9c:5f:ce:8f:3d:77:f6:60:c8:8a: 1a:7c:62:03:4e:69:74:ed:1e:d8:2d:7a:89:a6:40: 3b:6c:1a:5e:5b:a1:12:cc:6d:7d:eb:2c:27:e1:66: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E0:A9:DF:06:AF:FB:AD:8C:58:24:39:2B:35:45:14:01:01:A0:D8 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b2:d6:90:61:dc:1b:68:05:b0:33:e6:7c:61:6e:00:59:f0: e7:23:ca:02:ac:92:dd:2f:cd:7c:3d:f9:8c:93:c3:61:37:02: 53:af:6f:32:c8:d1:7b:a2:d8:b1:18:d0:d6:e8:d1:c3:c6:44: dd:14:ab:44:6a:99:42:41:f4:36:77:ae:31:25:79:88:5c:30: 2a:f9:9a:8e:3c:51:33:38:d4:18:8e:22:46:25:61:86:38:03: 61:7f:7c:78:0f:67:d1:82:89:f7:0b:67:7d:57:c3:ea:7a:41: 1b:57:bd:a7:c6:c4:4f:42:fa:07:23:20:67:b6:c5:a6:a9:e8: 02:10:b9:f8:4a:47:74:39:45:cb:a8:62:4c:86:c7:73:48:27: b6:fe:93:c7:ce:ce:11:9f:72:ef:78:a3:12:b5:a8:74:9b:de: 84:cb:44:f3:4f:df:4a:ee:a6:a2:84:15:9e:50:82:e8:c9:d2: 33:6c:35:6b:29:09:b3:7e:24:c0:60:0c:f6:9d:a8:9e:19:9b: 32:a0:a4:67:63:60:62:2d:0f:d9:73:e6:36:fc:5c:9f:f3:dd: e6:4d:fa:59:d8:b6:93:32:56:aa:ae:94:84:cc:6e:3e:ee:03: 01:40:98:07:77:ab:b2:f2:f6:f1:69:76:59:17:d4:2b:e5:19: 6a:6b:61:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7GfVAgznAJAbbsSXMkQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwNjEzMDMwMDI0WhcNMjYwNjE0MDMwMDI0WjAzMTEwLwYDVQQD EyhkYWUwYTlkZjA2YWZmYmFkOGM1ODI0MzkyYjM1NDUxNDAxMDFhMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsur70V8fO2i+dHUVjZNG7lA1M6mL ILlOA2vTcAEYPevmUcp4OJlYS2N4HX639lyPwQDKpMyK9b/m3s2uIayqnpaQeYqx 9Wv9BvOJaKxYYeaAPOzeDyUbyHiO+znqPmbPmRhplYYtKSXNIMcyCARWaAlMBI4o sHx8mBAH/em+WA2iweUs9pHsf5grF5hVJ+NFU6SsqMdozwjohEqzzobU15NiGNq9 wT++16sRbiHBK6PEgA6YCbMOn8PYYZ/auzSbdaW4r4qunGiC5NXCsZWbaph+YLBX NJxfzo89d/ZgyIoafGIDTml07R7YLXqJpkA7bBpeW6ESzG196ywn4WZlKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrgqd8Gr/utjFgkOSs1RRQBAaDYMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7LWkGHc G2gFsDPmfGFuAFnw5yPKAqyS3S/NfD35jJPDYTcCU69vMsjRe6LYsRjQ1ujRw8ZE 3RSrRGqZQkH0NneuMSV5iFwwKvmajjxRMzjUGI4iRiVhhjgDYX98eA9n0YKJ9wtn fVfD6npBG1e9p8bET0L6ByMgZ7bFpqnoAhC5+EpHdDlFy6hiTIbHc0gntv6Tx87O EZ9y73ijErWodJvehMtE80/fSu6mooQVnlCC6MnSM2w1aykJs34kwGAM9p2onhmb MqCkZ2NgYi0P2XPmNvxcn/Pd5k36Wdi2kzJWqq6UhMxuPu4DAUCYB3ersvL28Wl2 WRfUK+UZamthLg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:49:23 2026 by rpki-client