$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: t1z4pJgvhAf/R4QNoPZhcvkLX1mj6ugGjCo+f6mP9UQ= Subject key identifier: 79:F6:2F:D8:F2:13:91:B6:0D:47:41:74:8B:19:BF:74:A9:BD:1D:00 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019EBFFF47EDCF54CC1907BAAE1F6F927FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1969 Signing time: Sat 13 Jun 2026 08:00:38 +0000 Manifest this update: Sat 13 Jun 2026 08:00:38 +0000 Manifest next update: Sun 14 Jun 2026 08:00:38 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: V0IlWimDNHdCYUFO0ozPv7+VwqHRbtgVocpb2a/DCjA=) 12: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 13: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:ff:47:ed:cf:54:cc:19:07:ba:ae:1f:6f:92:7f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jun 13 08:00:38 2026 GMT Not After : Jun 14 08:00:38 2026 GMT Subject: CN=79f62fd8f21391b60d4741748b19bf74a9bd1d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:82:ba:36:98:12:11:0f:9d:0b:55:c8:26: 8a:90:7f:08:2c:6c:f5:49:b1:8b:4e:db:ea:37:ef: 42:cf:93:9a:64:43:0c:bf:bc:56:ba:8f:83:51:fc: 6a:ee:33:5c:81:c5:56:b9:a9:e6:b8:e2:c9:47:51: cc:ff:8b:b9:a0:9c:b5:fa:95:02:06:17:2f:08:a2: 24:56:b0:e5:ce:76:15:08:6b:11:8d:e6:a4:0e:b7: b9:af:2d:eb:f3:4f:2d:28:4a:7b:4d:d8:fc:6b:e2: 79:6f:0d:68:d6:9d:19:2e:22:89:e6:b2:1f:45:ad: 52:32:a6:a1:60:a4:6a:fc:e2:fc:2c:bc:70:f6:bb: c0:04:fd:c1:ba:f7:51:21:00:dd:10:47:e3:92:21: 0c:b7:aa:fd:19:c8:1d:6c:61:e0:e6:b0:1c:23:dc: 40:2e:9f:15:88:47:78:de:f1:3a:d1:fd:45:4d:69: 58:d6:c8:82:45:3b:8d:fb:ca:8d:a2:d9:78:f9:ed: e2:e1:23:a0:0c:ac:f1:c4:a2:d2:15:f9:2e:d0:9c: 42:13:9f:5a:38:b2:98:c0:1a:3b:56:a9:8f:94:91: 2d:b1:9f:9e:26:78:37:25:78:00:90:ee:2a:f4:88: 30:33:7d:48:d8:1e:40:e7:b3:b1:db:e1:44:f5:47: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F6:2F:D8:F2:13:91:B6:0D:47:41:74:8B:19:BF:74:A9:BD:1D:00 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:d5:73:c7:94:76:b3:17:ef:8b:7f:e1:59:65:75:1b:a2: 65:fc:44:d5:9d:4b:f3:15:91:af:4d:58:a8:98:b5:99:3f:b4: f0:39:9d:11:86:3c:15:f8:5a:54:9e:0f:c5:5a:f6:14:3e:02: dd:00:a5:91:74:0c:e8:7c:de:d0:81:e7:7a:9b:72:ce:ec:14: c2:ea:0c:ac:95:16:b5:d2:2e:1a:f6:e4:a7:d4:49:fe:2c:0b: ac:38:e6:6b:3e:38:3c:c6:fd:a5:c3:df:28:b5:74:ef:55:7d: c2:44:cc:27:40:35:07:e2:c9:55:be:53:a7:0f:69:d5:68:a0: 01:be:a4:b0:fb:69:0f:52:7b:c6:65:c1:2d:29:d1:85:5f:e9: 1d:08:f5:f1:94:aa:94:26:0c:d7:a7:71:5d:cd:a9:f6:dd:13: 80:65:f7:20:c0:18:35:44:e7:89:02:81:e7:1a:85:ac:38:23: fa:b3:99:6e:d4:3c:52:19:cc:2b:6b:a6:4a:63:c6:51:c7:2e: 5c:e5:2c:42:17:51:c1:7f:aa:4d:47:e8:3b:ba:d7:ce:80:19: 69:62:f1:e3:a0:b3:08:1f:ff:e5:b8:7d:1d:d7:21:76:d9:14: 5b:c4:22:c6:fa:5f:87:fe:7b:f0:ec:76:8d:ad:e3:a9:ff:9d: f8:4c:32:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6//0ftz1TMGQe6rh9vkn/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwNjEzMDgwMDM4WhcNMjYwNjE0MDgwMDM4WjAzMTEwLwYDVQQD Eyg3OWY2MmZkOGYyMTM5MWI2MGQ0NzQxNzQ4YjE5YmY3NGE5YmQxZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cCCujaYEhEPnQtVyCaKkH8ILGz1 SbGLTtvqN+9Cz5OaZEMMv7xWuo+DUfxq7jNcgcVWuanmuOLJR1HM/4u5oJy1+pUC BhcvCKIkVrDlznYVCGsRjeakDre5ry3r808tKEp7Tdj8a+J5bw1o1p0ZLiKJ5rIf Ra1SMqahYKRq/OL8LLxw9rvABP3BuvdRIQDdEEfjkiEMt6r9GcgdbGHg5rAcI9xA Lp8ViEd43vE60f1FTWlY1siCRTuN+8qNotl4+e3i4SOgDKzxxKLSFfku0JxCE59a OLKYwBo7VqmPlJEtsZ+eJng3JXgAkO4q9IgwM31I2B5A57Ox2+FE9UeCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn2L9jyE5G2DUdBdIsZv3SpvR0AMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcfVc8eU drMX74t/4VlldRuiZfxE1Z1L8xWRr01YqJi1mT+08DmdEYY8FfhaVJ4PxVr2FD4C 3QClkXQM6Hze0IHneptyzuwUwuoMrJUWtdIuGvbkp9RJ/iwLrDjmaz44PMb9pcPf KLV071V9wkTMJ0A1B+LJVb5Tpw9p1WigAb6ksPtpD1J7xmXBLSnRhV/pHQj18ZSq lCYM16dxXc2p9t0TgGX3IMAYNUTniQKB5xqFrDgj+rOZbtQ8UhnMK2umSmPGUccu XOUsQhdRwX+qTUfoO7rXzoAZaWLx46CzCB//5bh9HdchdtkUW8Qixvpfh/578Ox2 ja3jqf+d+EwykA== -----END CERTIFICATE-----Generated at Sat Jun 13 14:49:21 2026 by rpki-client