$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: i+v1GgKHwcE2S58tuD2LYV1rPcwxBBCPBK6hnxuAhYA= Subject key identifier: F1:C5:6E:BE:A3:55:99:C4:2D:33:C3:B6:1B:8A:E8:F1:28:07:7E:CD Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019DA3AEEAAAE3496D85F80F968652FC5B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0D89 Signing time: Sun 19 Apr 2026 03:00:42 +0000 Manifest this update: Sun 19 Apr 2026 03:00:42 +0000 Manifest next update: Mon 20 Apr 2026 03:00:42 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: UVAdcV0UTqf2tj3wGO6AnPCGoipxRYWhwRIHfgNxk5Q=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:ae:ea:aa:e3:49:6d:85:f8:0f:96:86:52:fc:5b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Apr 19 03:00:42 2026 GMT Not After : Apr 20 03:00:42 2026 GMT Subject: CN=f1c56ebea35599c42d33c3b61b8ae8f128077ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:c8:92:d8:68:e4:42:91:9c:f3:41:df:f1: b4:43:fc:e7:6d:c5:f2:e7:57:94:7a:89:3c:46:c3: 1a:d2:84:1b:c0:75:7a:7c:4a:01:b0:d6:31:92:fb: a6:b7:42:30:db:6d:a5:71:41:a0:84:aa:79:cb:31: 28:40:07:f9:46:3a:89:0f:d4:4d:14:5a:d5:e3:9c: f5:97:06:3c:cb:44:e8:a1:e0:20:83:fd:34:07:29: f2:4e:d7:8e:70:a7:7e:be:bb:8a:7e:fe:60:9a:f5: e5:a8:a2:54:5e:50:21:69:73:fd:79:f7:74:ec:ad: 29:e0:9b:70:3a:0b:22:a8:99:94:ca:a9:78:1b:c4: 7d:51:b6:0d:df:58:74:80:1d:b6:c5:fd:28:32:6b: 94:c5:82:16:da:a7:91:ff:23:dc:9d:1c:2f:c4:5d: e2:6f:ca:47:ad:8e:77:5d:36:66:11:8f:0f:82:73: d6:b3:94:f6:f6:e0:01:ec:38:04:0a:76:00:fc:85: 1e:da:5a:2f:86:d7:8b:72:47:05:93:07:09:37:49: b9:00:ff:78:b9:00:e2:db:a2:1d:7b:57:55:1a:b2: 36:de:f1:eb:8d:80:87:41:59:13:c1:41:d3:72:4f: 11:4a:88:d7:9a:2c:28:c7:ed:89:c4:5e:bc:56:6e: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:6E:BE:A3:55:99:C4:2D:33:C3:B6:1B:8A:E8:F1:28:07:7E:CD X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3b:a1:0f:fb:d9:d1:62:03:f4:d0:4f:88:be:e4:88:ec:5c: 3a:c6:3e:5c:3e:f0:03:bd:30:d6:37:29:c7:25:09:76:a7:52: a9:11:73:75:93:39:a0:ee:9f:a4:8d:0d:60:44:99:9d:32:d1: b4:b2:da:50:cc:56:14:18:e3:34:42:c0:a5:ca:46:a0:7c:e2: 9a:30:de:81:d2:5d:d1:b3:d0:2d:f0:26:6c:9f:dc:1f:d3:5d: dd:9d:7d:2c:56:86:41:03:0a:27:34:e4:8b:bc:07:ab:9c:f4: e6:98:02:e1:ef:87:eb:6d:7d:c0:a8:b2:60:35:3a:cc:df:08: 4a:f1:8a:b7:5a:c2:19:c6:a5:eb:e6:41:16:41:a3:1e:17:a2: f1:ea:35:97:7a:cd:ed:c3:e0:8d:9b:28:2a:41:28:9f:cb:2f: 00:e1:a0:65:7f:e9:5b:aa:0f:72:97:e0:dc:67:6d:7d:df:32: 09:08:5f:04:0b:83:06:79:cc:28:7e:f4:46:3e:e8:77:5a:de: 51:88:5b:c1:69:98:25:30:26:7b:5e:85:80:7e:aa:da:97:ab: 04:f1:53:77:38:a0:4e:d1:1a:1c:e1:a9:3b:f6:fc:98:43:d7: 6d:f4:df:0b:b6:0a:94:63:a2:ec:52:f3:1d:30:0a:29:ef:e5: 2f:30:d0:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jruqq40lthfgPloZS/FtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwNDE5MDMwMDQyWhcNMjYwNDIwMDMwMDQyWjAzMTEwLwYDVQQD EyhmMWM1NmViZWEzNTU5OWM0MmQzM2MzYjYxYjhhZThmMTI4MDc3ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3Iktho5EKRnPNB3/G0Q/znbcXy 51eUeok8RsMa0oQbwHV6fEoBsNYxkvumt0Iw222lcUGghKp5yzEoQAf5RjqJD9RN FFrV45z1lwY8y0TooeAgg/00BynyTteOcKd+vruKfv5gmvXlqKJUXlAhaXP9efd0 7K0p4JtwOgsiqJmUyql4G8R9UbYN31h0gB22xf0oMmuUxYIW2qeR/yPcnRwvxF3i b8pHrY53XTZmEY8PgnPWs5T29uAB7DgECnYA/IUe2lovhteLckcFkwcJN0m5AP94 uQDi26Ide1dVGrI23vHrjYCHQVkTwUHTck8RSojXmiwox+2JxF68Vm7lYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHFbr6jVZnELTPDthuK6PEoB37NMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDuhD/vZ 0WID9NBPiL7kiOxcOsY+XD7wA70w1jcpxyUJdqdSqRFzdZM5oO6fpI0NYESZnTLR tLLaUMxWFBjjNELApcpGoHzimjDegdJd0bPQLfAmbJ/cH9Nd3Z19LFaGQQMKJzTk i7wHq5z05pgC4e+H6219wKiyYDU6zN8ISvGKt1rCGcal6+ZBFkGjHhei8eo1l3rN 7cPgjZsoKkEon8svAOGgZX/pW6oPcpfg3Gdtfd8yCQhfBAuDBnnMKH70Rj7od1re UYhbwWmYJTAme16FgH6q2perBPFTdzigTtEaHOGpO/b8mEPXbfTfC7YKlGOi7FLz HTAKKe/lLzDQog== -----END CERTIFICATE-----Generated at Sun Apr 19 09:31:37 2026 by rpki-client