$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: DbBobNXdmNETMe8Ihl8mUqIgujdtXJ22+hQEkW9W51U= Subject key identifier: B7:21:22:DE:AE:BB:BF:C0:FF:58:95:2D:43:20:2B:C2:C5:76:B6:85 Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 019FAB640468A08649759D900213AF714FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: 4E Signing time: Wed 29 Jul 2026 01:01:26 +0000 Manifest this update: Wed 29 Jul 2026 01:01:26 +0000 Manifest next update: Thu 30 Jul 2026 01:01:26 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 7: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (hash: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=) 8: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 9: W4KN4SDNmRYOwyhHxjuSolYafls.roa (hash: BQApeMUmBw8ONYahKVhEqtOAad+aaUlEyEzjh8Jh3Ok=) 10: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 11: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 12: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 13: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (hash: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=) 14: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 15: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: dlGkDLYGvTP3MIXbUbodGH2DQhGqU5RMD/S1LgPceaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:64:04:68:a0:86:49:75:9d:90:02:13:af:71:4f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Jul 29 01:01:26 2026 GMT Not After : Jul 30 01:01:26 2026 GMT Subject: CN=b72122deaebbbfc0ff58952d43202bc2c576b685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:f6:57:20:d7:49:ff:72:f4:b5:ce:d1:a3: a7:8d:c0:d5:db:ea:65:5b:c1:a5:01:1f:b8:b9:4f: 3f:6f:ae:a9:91:f9:f6:ba:0b:76:ef:7c:be:ed:0b: d9:ed:37:c7:e0:dc:aa:23:24:21:32:b9:50:ee:72: 23:4c:1a:01:07:1d:9a:76:b1:e2:70:40:a3:ea:1d: 2b:7a:b6:eb:ce:6b:e9:a0:d2:ea:fb:50:1f:11:35: 7b:d0:4b:df:b2:cf:14:e9:69:90:0d:b2:50:f1:21: df:ae:83:fd:70:12:26:1d:d3:18:9d:54:e9:ea:e8: 82:4a:5c:36:be:eb:3b:80:12:79:e4:ff:6a:25:88: 35:23:33:e2:f6:96:d5:58:54:b7:b0:ae:70:07:8c: b8:77:b5:cc:67:f0:9b:9a:96:95:05:73:58:d0:42: 3f:5d:c5:13:21:5b:62:a9:6f:01:57:16:3f:8e:d3: 1e:a0:0f:ff:db:f8:6e:11:ae:28:40:ba:f6:d8:78: 90:20:9c:8d:d3:7c:bc:4b:aa:18:f7:e1:07:6a:8b: b8:e3:c9:12:33:fa:74:75:8f:4e:d8:03:f3:e4:72: f7:7f:bd:d4:ca:11:33:13:0e:de:cb:89:aa:d4:b4: 97:51:05:c7:e7:f4:e7:e8:2a:ee:c8:1d:da:96:8a: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:22:DE:AE:BB:BF:C0:FF:58:95:2D:43:20:2B:C2:C5:76:B6:85 X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6e:ea:be:cf:de:d4:3b:1a:a7:e8:48:d9:6f:c6:85:cf:bb: 32:67:d6:61:5d:47:b9:e0:27:75:29:25:6a:9f:9c:ae:1f:5a: d0:85:bf:ef:0a:2c:71:47:c7:ce:4d:07:a2:e1:e4:66:ec:2e: 75:1c:88:d7:8b:d9:20:3b:68:2b:82:47:d9:e8:51:6d:1b:ac: be:a9:4a:b5:22:8a:95:49:1a:1c:16:67:c2:3f:e7:cf:9d:26: 71:0f:c9:02:10:41:77:ca:c3:b7:a9:7f:ce:5d:d2:5e:0b:3c: 50:9d:4a:56:d7:f3:da:67:ec:9b:d9:b0:4b:1c:7c:46:53:ea: e1:0b:a3:db:34:7c:31:c0:e4:94:c0:08:78:ab:1c:7b:cc:cb: 3b:09:0f:1c:9f:ec:21:51:21:66:37:14:71:ad:4d:97:3c:e1: d0:a4:df:e1:b5:a6:ed:d4:06:5a:b5:4d:f4:25:06:2e:72:d2: a2:b9:a9:2b:75:f6:d3:20:eb:b3:d4:0b:6c:bd:85:54:a3:39: ac:c8:a1:e1:0e:4c:7c:c2:df:3e:76:aa:be:65:0b:6e:21:d2: bb:0a:cf:35:9b:69:39:14:bc:4a:df:d2:b0:30:88:08:95:a4: 1b:0f:3f:5c:fd:16:0c:91:b3:8b:c5:91:7d:f3:3b:2f:74:d1: 6b:e4:56:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rZARooIZJdZ2QAhOvcU/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYwNzI5MDEwMTI2WhcNMjYwNzMwMDEwMTI2WjAzMTEwLwYDVQQD EyhiNzIxMjJkZWFlYmJiZmMwZmY1ODk1MmQ0MzIwMmJjMmM1NzZiNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte72VyDXSf9y9LXO0aOnjcDV2+pl W8GlAR+4uU8/b66pkfn2ugt273y+7QvZ7TfH4NyqIyQhMrlQ7nIjTBoBBx2adrHi cECj6h0rerbrzmvpoNLq+1AfETV70Evfss8U6WmQDbJQ8SHfroP9cBImHdMYnVTp 6uiCSlw2vus7gBJ55P9qJYg1IzPi9pbVWFS3sK5wB4y4d7XMZ/CbmpaVBXNY0EI/ XcUTIVtiqW8BVxY/jtMeoA//2/huEa4oQLr22HiQIJyN03y8S6oY9+EHaou448kS M/p0dY9O2APz5HL3f73UyhEzEw7ey4mq1LSXUQXH5/Tn6CruyB3alorxHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLchIt6uu7/A/1iVLUMgK8LFdraFMB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB27qvs/e 1Dsap+hI2W/Ghc+7MmfWYV1HueAndSklap+crh9a0IW/7woscUfHzk0HouHkZuwu dRyI14vZIDtoK4JH2ehRbRusvqlKtSKKlUkaHBZnwj/nz50mcQ/JAhBBd8rDt6l/ zl3SXgs8UJ1KVtfz2mfsm9mwSxx8RlPq4Quj2zR8McDklMAIeKsce8zLOwkPHJ/s IVEhZjcUca1Nlzzh0KTf4bWm7dQGWrVN9CUGLnLSormpK3X20yDrs9QLbL2FVKM5 rMih4Q5MfMLfPnaqvmULbiHSuwrPNZtpORS8St/SsDCICJWkGw8/XP0WDJGzi8WR ffM7L3TRa+RWAA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:57:20 2026 by rpki-client