$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: eskxvGKjOVf890gsFKH2xwmUZ+H3CW5/g0/ds7b156M= Subject key identifier: C1:12:5A:C7:FD:3D:AF:5B:2E:4E:9E:D2:FC:5E:05:2F:0E:86:54:4A Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019FAB99EFDDD7A5007E708DE50AB9996088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 19E4 Signing time: Wed 29 Jul 2026 02:00:20 +0000 Manifest this update: Wed 29 Jul 2026 02:00:20 +0000 Manifest next update: Thu 30 Jul 2026 02:00:20 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: mC8mPPdotxvqZ+LQz0mwCKBgpqjfQi+j9GwYhwJ7PVg=) 11: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (hash: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:99:ef:dd:d7:a5:00:7e:70:8d:e5:0a:b9:99:60:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jul 29 02:00:20 2026 GMT Not After : Jul 30 02:00:20 2026 GMT Subject: CN=c1125ac7fd3daf5b2e4e9ed2fc5e052f0e86544a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:f1:38:00:c9:be:4c:7b:9d:54:6f:99:40: 4f:74:54:0b:a8:6d:52:14:af:64:27:2f:82:0e:48: 81:28:48:e8:49:d1:88:56:65:d7:ab:e8:a7:a0:a1: d1:01:f6:76:08:fe:bc:08:dd:c6:02:3c:ae:80:c8: 99:bc:a6:cb:99:e3:84:12:d1:bd:61:d6:05:e4:6d: 64:28:11:f5:34:db:51:de:70:20:05:09:ab:8b:f7: 52:be:74:47:f9:bb:72:bb:05:04:6d:1f:e4:67:06: 3a:77:22:b3:c7:e0:e9:d8:a0:61:32:ab:be:ac:ef: 4a:ff:0d:2e:0f:27:15:63:a3:58:fd:55:2c:f2:f7: 58:4c:8a:2c:41:f3:f8:0b:2f:07:58:f1:01:0b:0a: f7:99:5f:3a:41:b0:8a:b1:fb:03:c9:64:45:b7:77: 6b:0b:e1:29:60:98:67:8c:3a:8b:9c:24:13:29:5c: 1c:89:02:60:1f:fc:53:8e:49:bf:3d:ea:5c:8f:57: bf:14:e5:31:65:c8:04:b5:9b:39:70:54:48:d3:b9: 29:e5:b1:6a:23:43:55:04:1d:3b:ad:c5:03:06:05: 6d:46:03:bb:68:17:42:58:06:5b:e1:48:29:f0:0c: d4:3c:10:d5:5a:9f:61:3c:40:0d:d1:13:04:83:7c: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:12:5A:C7:FD:3D:AF:5B:2E:4E:9E:D2:FC:5E:05:2F:0E:86:54:4A X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bb:31:dd:00:da:d8:ec:d7:c2:1a:42:33:58:6c:3d:0b:1a: 45:54:df:22:1e:1e:89:11:8c:c2:ec:8b:92:c3:52:46:3e:d5: 08:62:5b:4e:d3:c0:9f:48:37:ae:9d:1c:e3:3a:d1:37:5a:5d: 24:7a:bb:95:da:a0:d0:69:d8:b8:1b:5b:ed:5a:9c:72:98:9b: 2f:20:24:2c:19:93:29:d2:36:87:ae:28:f4:b9:f7:3e:d3:37: e1:80:3b:79:86:98:d7:f3:4e:57:f2:01:e9:30:65:35:70:eb: 79:63:6c:63:8f:02:5a:19:8e:66:62:6a:2b:49:de:a4:9f:e7: e7:7e:de:18:6d:34:f9:b1:e5:c7:3b:26:76:08:93:ae:f2:67: 2f:15:a7:ff:72:25:ed:05:ac:ad:5a:fc:0c:f5:e8:1f:82:8a: af:91:d1:1f:01:5e:db:81:fa:48:6b:8f:ad:c9:a7:ee:63:db: 0a:56:4e:93:28:ff:33:16:ae:40:29:b5:4d:be:b0:93:f0:dc: 23:1e:2b:88:99:b8:81:55:4a:2a:da:77:7d:09:89:50:48:27: ab:93:a8:97:f5:e7:68:cb:00:0f:af:cb:9a:61:b5:53:7c:58: 2c:39:99:dc:bc:6c:36:92:b6:14:78:88:73:30:6d:6a:7f:47: df:e7:46:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rme/d16UAfnCN5Qq5mWCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwNzI5MDIwMDIwWhcNMjYwNzMwMDIwMDIwWjAzMTEwLwYDVQQD EyhjMTEyNWFjN2ZkM2RhZjViMmU0ZTllZDJmYzVlMDUyZjBlODY1NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswLxOADJvkx7nVRvmUBPdFQLqG1S FK9kJy+CDkiBKEjoSdGIVmXXq+inoKHRAfZ2CP68CN3GAjyugMiZvKbLmeOEEtG9 YdYF5G1kKBH1NNtR3nAgBQmri/dSvnRH+btyuwUEbR/kZwY6dyKzx+Dp2KBhMqu+ rO9K/w0uDycVY6NY/VUs8vdYTIosQfP4Cy8HWPEBCwr3mV86QbCKsfsDyWRFt3dr C+EpYJhnjDqLnCQTKVwciQJgH/xTjkm/Pepcj1e/FOUxZcgEtZs5cFRI07kp5bFq I0NVBB07rcUDBgVtRgO7aBdCWAZb4Ugp8AzUPBDVWp9hPEAN0RMEg3wwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMESWsf9Pa9bLk6e0vxeBS8OhlRKMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArsx3QDa 2OzXwhpCM1hsPQsaRVTfIh4eiRGMwuyLksNSRj7VCGJbTtPAn0g3rp0c4zrRN1pd JHq7ldqg0GnYuBtb7VqccpibLyAkLBmTKdI2h64o9Ln3PtM34YA7eYaY1/NOV/IB 6TBlNXDreWNsY48CWhmOZmJqK0nepJ/n537eGG00+bHlxzsmdgiTrvJnLxWn/3Il 7QWsrVr8DPXoH4KKr5HRHwFe24H6SGuPrcmn7mPbClZOkyj/MxauQCm1Tb6wk/Dc Ix4riJm4gVVKKtp3fQmJUEgnq5Ool/XnaMsAD6/LmmG1U3xYLDmZ3LxsNpK2FHiI czBtan9H3+dGVw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:08:51 2026 by rpki-client