$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: dKIatFB/cm3RJbcgiNaJOXrv9D+59HcqpoE0yI3sWjM= Subject key identifier: 7E:E5:22:D6:53:DA:2D:8D:95:EC:72:F9:B9:F1:02:8D:A6:EB:41:37 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 01A0C3A06F11333D9857621A861F2CC00AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0F29 Signing time: Mon 21 Sep 2026 11:01:06 +0000 Manifest this update: Mon 21 Sep 2026 11:01:06 +0000 Manifest next update: Tue 22 Sep 2026 11:01:06 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: A1CXr4dOt7xuCmQiPBtgt3iWtAo.roa (hash: GtPqaBuYk/tZ5YQVdapU19lv8Ijc7CBMwLU16C7BxnM=) 3: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 4: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: tsUZeaubF6nBCLMaN7ccE3RALmZkDtydyH7uqIMTUbY=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 8: eqKnQgR3Z3QzGQfveZTC-r9HgHg.asa (hash: zwc2/cXGVh90A6S8KR+/k+8p7KQXn9Hn6gTyZ7Bdy4M=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:a0:6f:11:33:3d:98:57:62:1a:86:1f:2c:c0:0a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Sep 21 11:01:06 2026 GMT Not After : Sep 22 11:01:06 2026 GMT Subject: CN=7ee522d653da2d8d95ec72f9b9f1028da6eb4137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:4f:0d:15:bc:f2:08:34:ef:1b:52:5f:a0: 96:2e:87:55:ca:ee:05:58:96:db:fa:2d:fa:55:b5: af:a4:d9:6d:54:8e:88:0e:4b:cf:1d:6e:69:74:35: d0:0c:59:08:6d:85:e4:97:6a:07:e3:b0:6d:cf:81: 24:7a:b8:6f:cc:99:c9:40:f8:cd:99:6e:d3:b9:9d: 23:8d:31:7c:69:d9:c6:e5:55:20:02:1e:55:01:5b: f1:bb:5f:32:f4:15:ec:e2:83:92:b6:b1:c2:9f:b2: 07:3c:71:1e:cb:d1:d2:fe:70:5f:26:29:2a:90:cf: cd:ba:68:48:df:0a:96:74:f3:21:a3:33:6b:8e:b6: ec:39:1d:b1:de:0f:ac:d9:a2:9a:e2:cd:32:38:c8: 54:21:41:f4:8d:77:60:40:ac:f1:e3:19:d6:16:34: 94:32:ab:ff:8b:11:62:0f:87:7d:be:93:e1:52:61: 9b:dd:5e:24:ca:17:4a:37:9d:10:ea:ac:a1:16:14: 76:19:a3:38:4b:c4:ce:00:2a:69:d3:67:22:9c:85: b6:db:1c:b2:8e:3e:cd:35:4a:2f:86:6d:44:7d:38: 96:14:af:4d:3e:b4:46:6e:1f:59:fb:21:19:e9:81: 66:fa:2c:e0:4c:9b:30:b8:ea:fc:df:77:18:8a:fa: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E5:22:D6:53:DA:2D:8D:95:EC:72:F9:B9:F1:02:8D:A6:EB:41:37 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c7:e2:ff:76:73:9c:d0:79:ce:ed:e6:62:07:7b:ca:78:aa: b7:6e:63:29:d0:62:5a:f0:f9:93:0b:25:04:7f:15:98:87:39: 5b:8d:67:a4:4e:23:52:cc:47:cc:f6:bb:fa:67:bc:ff:8b:bc: 47:6e:6c:d6:4c:f9:c2:9c:22:0d:47:28:eb:05:df:c4:ed:bf: 97:e4:60:84:94:0f:a6:85:ed:29:9c:74:22:d5:a6:3d:92:05: ff:61:fe:05:07:d6:d1:a7:82:bc:80:30:5a:ad:b6:fa:23:6e: 7e:0c:5d:41:98:d3:9c:25:f5:47:0e:fe:f7:aa:ee:4e:a7:eb: 74:cc:d1:0e:fa:89:e1:eb:18:66:13:28:3e:59:c4:a8:ab:7d: 6c:06:93:a1:66:ee:9f:b0:2a:a7:d0:be:7f:75:b9:b0:8f:56: b1:36:d0:9a:07:18:67:55:a3:29:34:31:ce:f8:83:8f:66:66: a4:cb:a9:a5:1b:82:a5:00:f4:b3:b9:40:17:e6:3e:51:e3:2b: 54:e5:2b:44:7e:1b:30:e9:e2:da:cc:51:c9:85:c3:be:c6:cd: b7:e5:49:96:51:9a:be:c5:fc:51:c9:0f:2d:76:09:c6:a6:9b: 41:56:23:a5:be:ff:20:7e:6a:a2:8d:b5:0a:4f:d3:10:c5:43: 69:92:88:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDoG8RMz2YV2Iahh8swAq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwOTIxMTEwMTA2WhcNMjYwOTIyMTEwMTA2WjAzMTEwLwYDVQQD Eyg3ZWU1MjJkNjUzZGEyZDhkOTVlYzcyZjliOWYxMDI4ZGE2ZWI0MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtidPDRW88gg07xtSX6CWLodVyu4F WJbb+i36VbWvpNltVI6IDkvPHW5pdDXQDFkIbYXkl2oH47Btz4EkerhvzJnJQPjN mW7TuZ0jjTF8adnG5VUgAh5VAVvxu18y9BXs4oOStrHCn7IHPHEey9HS/nBfJikq kM/NumhI3wqWdPMhozNrjrbsOR2x3g+s2aKa4s0yOMhUIUH0jXdgQKzx4xnWFjSU Mqv/ixFiD4d9vpPhUmGb3V4kyhdKN50Q6qyhFhR2GaM4S8TOACpp02cinIW22xyy jj7NNUovhm1EfTiWFK9NPrRGbh9Z+yEZ6YFm+izgTJswuOr833cYivrMewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7lItZT2i2Nlexy+bnxAo2m60E3MB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcfi/3Zz nNB5zu3mYgd7yniqt25jKdBiWvD5kwslBH8VmIc5W41npE4jUsxHzPa7+me8/4u8 R25s1kz5wpwiDUco6wXfxO2/l+RghJQPpoXtKZx0ItWmPZIF/2H+BQfW0aeCvIAw Wq22+iNufgxdQZjTnCX1Rw7+96ruTqfrdMzRDvqJ4esYZhMoPlnEqKt9bAaToWbu n7Aqp9C+f3W5sI9WsTbQmgcYZ1WjKTQxzviDj2ZmpMuppRuCpQD0s7lAF+Y+UeMr VOUrRH4bMOni2sxRyYXDvsbNt+VJllGavsX8UckPLXYJxqabQVYjpb7/IH5qoo21 Ck/TEMVDaZKIgA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:36 2026 by rpki-client