$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: 5W2TMdySrJvb1YkM1bhi/BcoSCLRoftlA5dyHxBTlBY= Subject key identifier: 40:9A:FE:B6:FD:18:0B:B9:E8:1F:73:E9:82:AD:0A:EC:75:80:58:EF Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019FAB9A0FD28713F395BD5A623FF5D918B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0D3C Signing time: Wed 29 Jul 2026 02:00:28 +0000 Manifest this update: Wed 29 Jul 2026 02:00:28 +0000 Manifest next update: Thu 30 Jul 2026 02:00:28 +0000 Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 3: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 4: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=) 5: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 6: GDpxYSLxVItp_NOPYubGX5UYZok.roa (hash: VWyhjhW15PBvlxYZCfYoqEw7FI0WMEXJbvw8jcCf0xQ=) 7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 8: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 9: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 10: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 11: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 12: WLD8giJwlV_VlnnPyLzzRGD0ZiI.roa (hash: lZpSSUF3j7oFZ9xvIx9PXEappD+S6NL4/bWk3CCPoR8=) 13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: Y1/GitXhJxsmbocaKb4H+kILrsz0/HZqAc8VfQc2bQ8=) 15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 16: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (hash: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=) 17: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 18: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) 19: vAi4XnPWVuNggeUtAfCEZXDontk.roa (hash: RYl6h4oTJftpVOEqSn4HEPzTH4/b0niM4jxD4+euYtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:0f:d2:87:13:f3:95:bd:5a:62:3f:f5:d9:18:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jul 29 02:00:28 2026 GMT Not After : Jul 30 02:00:28 2026 GMT Subject: CN=409afeb6fd180bb9e81f73e982ad0aec758058ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:29:4f:21:4b:1a:c1:ea:f4:fd:30:e0:09: 6b:ed:4d:c6:a2:fc:e2:25:d1:c2:5b:03:e4:93:49: dd:da:1f:f4:2d:3e:f0:eb:10:cc:be:e2:a2:6a:5c: 3a:5b:71:d0:23:41:ec:e9:2d:54:56:47:7c:79:28: 82:7a:52:53:86:3f:2d:ce:e6:51:b5:b3:da:b6:8e: 75:58:64:3d:a4:13:bd:05:4e:3b:ef:ce:16:9e:27: 28:ce:e2:c1:ab:43:03:8b:7e:cc:47:c0:c3:8e:2b: 43:c3:42:2e:00:a7:bf:45:6c:fe:3b:22:b5:15:c4: ae:c0:35:8c:c4:45:48:ed:5a:2c:95:39:22:0a:08: 60:b7:3c:fa:81:ea:82:fe:15:67:12:95:ce:f8:77: 94:bc:d6:99:93:28:28:cf:f7:0e:b5:27:4c:7d:f9: aa:e4:c6:2a:05:8e:49:28:9d:91:13:35:8e:31:3a: 9a:6b:88:b1:c9:25:93:5b:15:5c:f1:fc:1f:a3:81: 42:60:ee:e6:82:d8:87:e1:15:5b:52:a3:68:67:25: 05:e1:3f:cd:d2:5d:a8:b7:3f:b4:fa:65:31:23:ea: 1b:a9:ab:54:59:ab:0d:ed:73:a5:77:89:12:1e:3a: ba:d3:f4:d2:58:16:68:f6:ab:b3:05:44:8f:4b:71: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9A:FE:B6:FD:18:0B:B9:E8:1F:73:E9:82:AD:0A:EC:75:80:58:EF X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f1:e9:4b:a3:22:0e:75:10:24:9d:c0:84:a8:75:d5:df:f6: 22:e6:3a:f1:6b:da:c9:20:a9:04:b4:ef:9d:b1:98:8b:e5:13: cc:3d:6d:95:ed:8f:23:34:0d:4f:cc:89:33:75:53:d5:ed:e0: af:62:b6:b0:71:8b:e3:32:82:57:27:51:5c:e3:8c:21:e3:1a: 92:ab:f2:28:20:70:ac:fc:8b:2a:54:ea:76:d6:ec:59:25:ee: 09:c0:d5:0b:90:db:b1:92:b6:0a:c6:2c:78:a5:bf:95:a3:0e: 71:07:e2:e2:0f:37:c4:01:b7:5d:e6:78:bf:ae:ab:a5:66:44: 81:82:91:38:34:7f:1a:db:f1:34:21:93:e0:89:da:7d:68:6a: 5f:d4:a7:b6:42:d5:7d:ad:08:6d:f1:84:27:a6:88:83:ec:84: ff:fd:85:bc:3c:9c:8c:86:85:72:83:2b:af:f6:08:47:20:e5: 66:98:9d:82:43:21:6c:9e:4e:18:4b:ae:45:e8:ed:4c:23:bd: c5:f2:50:a7:b4:83:e5:63:50:39:cf:3a:de:2f:76:49:10:ee: d5:ea:f9:9f:4e:7f:a7:34:8c:ff:83:e1:72:d2:9c:21:08:40: 77:55:8e:26:32:36:8e:d4:c7:3d:8f:ea:41:19:e6:b2:92:76: b9:d2:82:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmg/ShxPzlb1aYj/12Ri2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwNzI5MDIwMDI4WhcNMjYwNzMwMDIwMDI4WjAzMTEwLwYDVQQD Eyg0MDlhZmViNmZkMTgwYmI5ZTgxZjczZTk4MmFkMGFlYzc1ODA1OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuawpTyFLGsHq9P0w4Alr7U3Govzi JdHCWwPkk0nd2h/0LT7w6xDMvuKialw6W3HQI0Hs6S1UVkd8eSiCelJThj8tzuZR tbPato51WGQ9pBO9BU47784WnicozuLBq0MDi37MR8DDjitDw0IuAKe/RWz+OyK1 FcSuwDWMxEVI7VoslTkiCghgtzz6geqC/hVnEpXO+HeUvNaZkygoz/cOtSdMffmq 5MYqBY5JKJ2REzWOMTqaa4ixySWTWxVc8fwfo4FCYO7mgtiH4RVbUqNoZyUF4T/N 0l2otz+0+mUxI+obqatUWasN7XOld4kSHjq60/TSWBZo9quzBUSPS3FmBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECa/rb9GAu56B9z6YKtCux1gFjvMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfHpS6Mi DnUQJJ3AhKh11d/2IuY68WvaySCpBLTvnbGYi+UTzD1tle2PIzQNT8yJM3VT1e3g r2K2sHGL4zKCVydRXOOMIeMakqvyKCBwrPyLKlTqdtbsWSXuCcDVC5DbsZK2CsYs eKW/laMOcQfi4g83xAG3XeZ4v66rpWZEgYKRODR/GtvxNCGT4InafWhqX9SntkLV fa0IbfGEJ6aIg+yE//2FvDycjIaFcoMrr/YIRyDlZpidgkMhbJ5OGEuuRejtTCO9 xfJQp7SD5WNQOc863i92SRDu1er5n05/pzSM/4PhctKcIQhAd1WOJjI2jtTHPY/q QRnmspJ2udKCbg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:14:27 2026 by rpki-client