$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: tpwD1iwAp/mxbCyUXfkvj7Svln4qqP1nHGf+9wC/UYk= Subject key identifier: 01:CD:A5:6B:E4:78:A4:1C:7D:7E:3B:21:C6:87:25:63:3E:7D:E3:42 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019CAA21589E8645FF094DD16D7F8846FB4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1854 Signing time: Sun 01 Mar 2026 16:00:37 +0000 Manifest this update: Sun 01 Mar 2026 16:00:37 +0000 Manifest next update: Mon 02 Mar 2026 16:00:37 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 5QLlBVyjnj6IP83soRpwfQ1ccWDdutPG4EpzZthkLbc=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 16:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:58:9e:86:45:ff:09:4d:d1:6d:7f:88:46:fb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Mar 1 16:00:37 2026 GMT Not After : Mar 2 16:00:37 2026 GMT Subject: CN=01cda56be478a41c7d7e3b21c68725633e7de342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:d9:9e:c2:b5:ac:39:d7:5d:4e:57:6d:87: 77:ec:92:c2:69:d9:60:86:0a:c9:d4:42:83:37:37: d7:39:1c:51:9c:02:c5:73:7d:45:1c:37:40:e5:b5: 59:4b:89:e4:5d:bb:64:46:1e:9b:3d:05:37:7c:1a: b9:e6:c5:d6:fb:8c:f9:8b:48:db:bf:6d:38:1b:71: 0e:a2:9c:07:d5:3f:a5:4a:58:8f:ca:96:eb:58:b4: 56:33:9c:8d:95:6e:95:c6:58:4c:41:3a:74:f8:1f: fb:1a:d0:e8:58:f9:ff:b7:53:d2:af:8d:44:73:fb: 25:b5:fc:76:ec:48:cc:ae:88:13:c0:0d:76:05:e5: f4:6b:d0:bc:e5:8c:a4:39:72:fb:08:3d:7f:c7:fa: 30:4e:87:fd:bc:a4:14:7b:7a:05:07:01:64:03:40: 85:2d:07:7b:1a:15:51:55:c5:b1:3c:84:bf:ca:d0: 7a:db:46:78:f9:06:7c:c2:f6:2b:57:cd:19:b1:47: a6:c9:01:9e:6e:b0:d1:34:bc:ee:4f:52:11:9e:4d: 0b:c2:ab:39:42:fa:e2:35:39:a9:47:38:3c:c5:4c: 18:a7:be:f5:d9:e5:86:15:68:72:2d:13:4a:57:1c: e9:31:ad:d1:4f:26:b8:45:0b:2b:86:31:22:05:79: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CD:A5:6B:E4:78:A4:1C:7D:7E:3B:21:C6:87:25:63:3E:7D:E3:42 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:36:4f:ce:12:a7:1c:4d:30:6d:83:5b:56:86:7a:56:d9:34: 98:d0:e2:00:fe:a2:06:e8:67:ee:6e:1b:99:b6:6e:94:5f:be: d2:4b:36:5b:a2:d7:73:7c:41:3c:40:3f:ca:f2:43:f5:d2:1b: 8d:86:07:17:25:0d:75:b6:ac:5d:b8:b6:32:74:b6:a5:dc:3b: d1:22:c9:b8:ea:60:19:84:94:11:01:d8:dd:4b:b6:ec:2c:25: 01:4d:c8:14:94:b0:84:b1:2d:f2:9b:a1:42:bf:ba:ad:8f:e0: 65:e0:21:b0:f0:79:b4:4a:96:88:fe:af:15:ba:55:9d:91:d1: 71:61:c0:d1:05:b2:26:27:1d:e6:3c:bf:0e:8d:de:f2:d0:2d: 2a:0c:ee:42:bf:3b:6a:6b:77:5f:87:d1:6a:e6:f8:de:ee:5c: a9:3a:fd:fd:64:77:03:b0:02:a3:22:d7:9f:9a:2d:71:d3:c4: 60:07:97:af:92:46:f0:f8:cd:17:c5:07:90:c7:bb:73:58:b6: 3d:5b:32:13:cb:03:57:c2:89:39:01:46:f9:cf:e7:b3:52:44: 36:2a:06:a0:9f:e3:f5:32:13:d2:b5:df:34:d7:7c:ea:de:ef: dc:ef:ba:0b:f0:aa:cd:82:60:f6:5f:c6:59:00:bd:ef:47:9e: 66:50:bb:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIViehkX/CU3RbX+IRvtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMzAxMTYwMDM3WhcNMjYwMzAyMTYwMDM3WjAzMTEwLwYDVQQD EygwMWNkYTU2YmU0NzhhNDFjN2Q3ZTNiMjFjNjg3MjU2MzNlN2RlMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMPZnsK1rDnXXU5XbYd37JLCadlg hgrJ1EKDNzfXORxRnALFc31FHDdA5bVZS4nkXbtkRh6bPQU3fBq55sXW+4z5i0jb v204G3EOopwH1T+lSliPypbrWLRWM5yNlW6VxlhMQTp0+B/7GtDoWPn/t1PSr41E c/sltfx27EjMrogTwA12BeX0a9C85YykOXL7CD1/x/owTof9vKQUe3oFBwFkA0CF LQd7GhVRVcWxPIS/ytB620Z4+QZ8wvYrV80ZsUemyQGebrDRNLzuT1IRnk0Lwqs5 QvriNTmpRzg8xUwYp7712eWGFWhyLRNKVxzpMa3RTya4RQsrhjEiBXnRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHNpWvkeKQcfX47IcaHJWM+feNCMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTZPzhKn HE0wbYNbVoZ6Vtk0mNDiAP6iBuhn7m4bmbZulF++0ks2W6LXc3xBPEA/yvJD9dIb jYYHFyUNdbasXbi2MnS2pdw70SLJuOpgGYSUEQHY3Uu27CwlAU3IFJSwhLEt8puh Qr+6rY/gZeAhsPB5tEqWiP6vFbpVnZHRcWHA0QWyJicd5jy/Do3e8tAtKgzuQr87 amt3X4fRaub43u5cqTr9/WR3A7ACoyLXn5otcdPEYAeXr5JG8PjNF8UHkMe7c1i2 PVsyE8sDV8KJOQFG+c/ns1JENioGoJ/j9TIT0rXfNNd86t7v3O+6C/CqzYJg9l/G WQC970eeZlC7UQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:27:02 2026 by rpki-client