$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: 0d4IuAqcz9IwDaiuYoDD+pEijZhOkjI/9hn+/T8TO6I= Subject key identifier: 91:80:18:0E:65:D1:D5:F0:5C:27:5F:D6:7B:74:9C:E5:9D:5C:3C:8A Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01A0C39FDAD7EC23F8137B1FBFF829821CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1A75 Signing time: Mon 21 Sep 2026 11:00:28 +0000 Manifest this update: Mon 21 Sep 2026 11:00:28 +0000 Manifest next update: Tue 22 Sep 2026 11:00:28 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: Ld2SaDdzg22Ej8DmSUZTkIdfWzIpqtAjlOrGTfmz0Xo=) 11: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (hash: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:9f:da:d7:ec:23:f8:13:7b:1f:bf:f8:29:82:1c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Sep 21 11:00:28 2026 GMT Not After : Sep 22 11:00:28 2026 GMT Subject: CN=9180180e65d1d5f05c275fd67b749ce59d5c3c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:e3:28:28:0c:33:a7:20:48:c9:22:97:23: 30:ae:f5:53:ae:dd:6a:bc:bf:cf:d1:ad:52:c0:83: 96:f1:17:41:91:f5:7e:ba:50:86:88:7a:9e:c4:18: 61:66:19:0b:b6:21:65:4f:5f:80:b3:7c:92:07:7a: c5:43:57:59:96:17:32:e7:e2:ed:16:c3:e8:eb:d1: 7b:7e:bc:8b:a0:13:d6:34:c1:97:8b:e2:0e:88:eb: bf:20:73:81:55:38:92:8a:db:37:f3:8e:89:7d:6d: 87:26:55:76:5d:6c:02:d1:84:13:74:0e:ad:21:16: 61:e2:ee:43:70:5c:a3:0a:7c:ea:9a:b4:3a:17:bc: f0:c8:ff:58:b6:c5:6d:e3:8f:86:17:10:15:10:f9: dc:ac:44:00:f1:3e:38:49:d4:83:53:78:9d:77:63: ee:bc:7c:55:21:fb:7a:89:b1:37:b8:e0:f0:78:7b: f8:d2:a4:f4:48:0f:7a:49:70:4b:8f:08:84:1f:2b: fc:9c:c5:90:e4:da:dc:e7:9e:a6:87:86:5f:95:8b: aa:c7:56:1f:95:f8:fa:19:dc:24:97:de:68:95:87: 3c:00:b7:cb:98:51:b2:a1:b8:f2:29:74:78:8b:b6: ab:d0:24:43:06:46:40:45:f8:4d:5f:79:1b:f5:45: 20:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:80:18:0E:65:D1:D5:F0:5C:27:5F:D6:7B:74:9C:E5:9D:5C:3C:8A X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:48:8a:6c:b6:d0:f9:4b:b4:f9:68:9d:fc:6d:96:88:98:57: a6:49:77:79:48:cf:6c:93:97:57:a1:4f:e7:74:fe:70:29:49: 5f:c6:08:42:b0:19:cb:f4:14:4f:68:7f:28:22:ee:cd:e8:9b: d0:13:7b:59:51:b3:a9:87:20:03:13:cf:48:03:93:96:2e:a8: f2:3c:a5:02:f5:2f:29:ff:82:9b:7d:e3:b7:8b:69:15:b7:20: a3:37:5a:a6:d1:4a:88:33:f0:9a:18:b5:a1:c4:ff:37:1e:76: 41:82:ec:87:59:28:47:9f:e3:38:6e:41:fd:5c:b6:fa:50:e8: 1a:9e:97:7e:9c:fe:0c:ce:6a:39:2f:c9:61:b0:43:df:27:6a: 46:7b:6e:a0:0a:84:8b:7d:64:de:b1:c8:1e:fe:86:88:e3:be: 06:b9:52:48:0d:c7:a4:f5:05:2a:77:09:66:ff:dd:82:1f:dc: e1:56:bc:b8:39:9e:8a:b0:04:1c:e8:89:c5:53:bd:c3:6e:30: f0:ef:ff:49:82:fc:08:67:d7:cf:d1:0d:98:e3:9a:13:ac:f1: 6e:6a:1a:85:10:ef:49:5d:15:71:7a:01:cc:12:a1:11:ae:0b: b7:20:88:7d:f3:f1:b2:2a:df:ab:fb:ee:da:da:47:9c:cc:23: b9:8f:23:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDn9rX7CP4E3sfv/gpghzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwOTIxMTEwMDI4WhcNMjYwOTIyMTEwMDI4WjAzMTEwLwYDVQQD Eyg5MTgwMTgwZTY1ZDFkNWYwNWMyNzVmZDY3Yjc0OWNlNTlkNWMzYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6bjKCgMM6cgSMkilyMwrvVTrt1q vL/P0a1SwIOW8RdBkfV+ulCGiHqexBhhZhkLtiFlT1+As3ySB3rFQ1dZlhcy5+Lt FsPo69F7fryLoBPWNMGXi+IOiOu/IHOBVTiSits3846JfW2HJlV2XWwC0YQTdA6t IRZh4u5DcFyjCnzqmrQ6F7zwyP9YtsVt44+GFxAVEPncrEQA8T44SdSDU3idd2Pu vHxVIft6ibE3uODweHv40qT0SA96SXBLjwiEHyv8nMWQ5Nrc556mh4ZflYuqx1Yf lfj6Gdwkl95olYc8ALfLmFGyobjyKXR4i7ar0CRDBkZARfhNX3kb9UUgswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGAGA5l0dXwXCdf1nt0nOWdXDyKMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckiKbLbQ +Uu0+Wid/G2WiJhXpkl3eUjPbJOXV6FP53T+cClJX8YIQrAZy/QUT2h/KCLuzeib 0BN7WVGzqYcgAxPPSAOTli6o8jylAvUvKf+Cm33jt4tpFbcgozdaptFKiDPwmhi1 ocT/Nx52QYLsh1koR5/jOG5B/Vy2+lDoGp6Xfpz+DM5qOS/JYbBD3ydqRntuoAqE i31k3rHIHv6GiOO+BrlSSA3HpPUFKncJZv/dgh/c4Va8uDmeirAEHOiJxVO9w24w 8O//SYL8CGfXz9ENmOOaE6zxbmoahRDvSV0VcXoBzBKhEa4LtyCIffPxsirfq/vu 2tpHnMwjuY8j/Q== -----END CERTIFICATE-----Generated at Mon Sep 21 16:19:07 2026 by rpki-client