$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: PHDKCHwvDRzKVMoGbCI/M5hxGCQgeIUPP0eOguZj9dM= Subject key identifier: 12:F1:85:A0:B5:06:FE:36:1C:64:CD:C6:0F:B2:72:5F:2C:05:4C:DE Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019CAB3411DE062BC37540BF145554BDC622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0AE2 Signing time: Sun 01 Mar 2026 21:00:42 +0000 Manifest this update: Sun 01 Mar 2026 21:00:42 +0000 Manifest next update: Mon 02 Mar 2026 21:00:42 +0000 Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=) 2: 0SRirIwsKE3ftAKD4a35MRr_dPA.roa (hash: veCz5+5lA2DIQJsKzs5T1knDyARu7fejsnmOMdvjZwY=) 3: 4Qw48SU09uD09gDzvKJ3ToG3nps.roa (hash: XyehKiSEMoHhyzl149H1r6nIyf0HKY1BvP6ffcAaXaA=) 4: 4Sx5ZBCD2Xo186rzplqlwJ6UC4I.roa (hash: EedOvbINinIPr1nDTQjADXAtFVJTDiOy2bXsDFfK0Ms=) 5: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=) 6: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=) 7: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=) 8: 94IWAiwtIxj1_7vSB68lXR75Qz4.roa (hash: PoUv8ick/XzPCPDkQB4xirKEOxjjjPN5SVmI6BX5nNU=) 9: 9K1LCa_BZxwmFKziFmKg5k9ZSPw.roa (hash: zcfTdUdCdWCGykQ8Ef/AtFMrZXL7riKrfHYVxi7rWFQ=) 10: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=) 11: JqdskFuFmziaPGBY-7Tw9Pq4w38.roa (hash: aCu+I3qlWKZ9XlpWlRNcOlsLioSGa9tu6gGY+pIX418=) 12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=) 13: OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa (hash: Nh/1DT2PYHL73mgdwju8HsKlz3EXBSwiw8LM7YgOmrc=) 14: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=) 15: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=) 16: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=) 17: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: SXrVow8lc1FPfBxKk/t18LKSmfqJV4146Rwhzy8/k4k=) 18: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=) 19: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=) 20: gWUoPtKu4Ygknkyrez4F7XlU7JU.roa (hash: 9nDIkHs65Wge6gpKCtTP63Y9gCXb0tsZlxUtihUCR5E=) 21: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=) 22: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=) 23: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=) 24: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=) 25: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=) 26: xfA0_z8nF9jogJTt8JvDJWiwKd0.roa (hash: 4UoytCa8mc6+13s7j6+TJjXwUJP2qWBxDCO/3czDtbE=) 27: z13Fw4Baa0Cf6jqQgcmcdGaY9lY.roa (hash: N61RklKzFSZ71nW5Q0awQlylDE3NsNVur5bGxsKSODA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:11:de:06:2b:c3:75:40:bf:14:55:54:bd:c6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Mar 1 21:00:42 2026 GMT Not After : Mar 2 21:00:42 2026 GMT Subject: CN=12f185a0b506fe361c64cdc60fb2725f2c054cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:88:58:7c:aa:73:8f:0a:63:63:6a:d2:6b: b6:f0:39:8c:3f:d7:50:b5:4b:96:1b:9b:07:af:06: 75:97:4a:87:4b:61:da:74:fc:cb:0b:c4:9e:e7:dc: 70:05:e4:3a:48:6b:42:53:fc:11:eb:c0:e1:4f:5c: 67:a3:10:92:54:a8:ff:fd:24:66:dd:8e:42:bd:ce: f9:53:12:a6:af:6f:ff:be:d3:30:35:c6:f6:34:4f: c4:00:80:2a:3c:b9:d1:7c:41:95:59:5a:88:ff:26: c9:53:f6:1b:d8:1f:58:8f:09:15:09:ca:37:f7:29: 5a:bc:6f:cb:9b:4d:10:0f:57:df:d5:3e:71:7a:ee: 18:16:7e:34:be:40:97:60:c8:3a:59:3f:ac:77:67: 00:df:40:94:7e:3d:57:68:05:c9:bc:45:d0:14:f2: 50:29:35:49:ae:57:ae:91:c2:88:d7:ce:04:1f:4d: 6e:6f:66:3d:bc:b4:36:9e:f3:63:6c:b7:f0:26:2d: 05:c1:03:17:53:b3:cd:63:66:8c:43:85:c7:e7:95: 05:8f:27:48:23:d5:a8:00:43:df:32:cb:ef:31:f2: e8:2b:71:54:a0:ae:22:31:b2:b2:f4:2a:da:e0:9e: 27:02:66:3b:82:72:74:4d:75:30:4b:f8:4a:8e:2c: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:85:A0:B5:06:FE:36:1C:64:CD:C6:0F:B2:72:5F:2C:05:4C:DE X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:80:9f:8e:d6:af:1e:37:be:96:09:62:7a:4e:08:95:f4:76: 0a:3d:40:d0:fc:5b:bd:ff:fa:e5:a3:25:d2:f4:84:8a:0b:61: ec:72:5c:a5:e8:1e:87:f9:53:0c:97:0d:b5:5a:b7:68:0d:fd: 14:82:55:f4:c3:60:70:d7:99:e3:af:3d:ce:aa:72:e7:b7:ae: 70:9c:ea:eb:6d:6a:16:cd:1f:4b:44:cf:ff:91:11:3b:16:e9: 26:53:15:d6:6a:f3:06:9c:e8:c8:9a:96:14:62:8c:90:46:87: 6f:27:c5:a9:aa:05:ff:f3:65:f7:0e:97:ce:de:b8:a7:1a:03: ed:98:6f:da:a8:15:18:9f:7c:fe:5d:17:8b:c5:e7:22:74:66: 90:eb:e1:06:2b:28:dc:30:88:25:0d:d4:31:f7:1a:2b:96:4c: 66:3f:34:dc:8a:2f:7e:f8:8e:8b:64:a8:55:25:e5:45:cb:2e: 10:52:c4:09:a7:4e:4c:6f:a0:ad:29:f4:cb:2c:01:ee:bc:8d: 44:4a:2b:0c:97:a4:09:bd:93:4f:31:f0:b3:85:eb:3e:df:c1: 27:75:b9:a3:1f:52:67:ea:dd:d0:57:54:91:c3:c2:93:96:2f: cc:3e:d8:e2:a0:db:53:19:5e:2e:46:99:b3:0e:f2:86:96:7b: 97:18:45:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNBHeBivDdUC/FFVUvcYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMzAxMjEwMDQyWhcNMjYwMzAyMjEwMDQyWjAzMTEwLwYDVQQD EygxMmYxODVhMGI1MDZmZTM2MWM2NGNkYzYwZmIyNzI1ZjJjMDU0Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jaIWHyqc48KY2Nq0mu28DmMP9dQ tUuWG5sHrwZ1l0qHS2HadPzLC8Se59xwBeQ6SGtCU/wR68DhT1xnoxCSVKj//SRm 3Y5Cvc75UxKmr2//vtMwNcb2NE/EAIAqPLnRfEGVWVqI/ybJU/Yb2B9YjwkVCco3 9ylavG/Lm00QD1ff1T5xeu4YFn40vkCXYMg6WT+sd2cA30CUfj1XaAXJvEXQFPJQ KTVJrleukcKI184EH01ub2Y9vLQ2nvNjbLfwJi0FwQMXU7PNY2aMQ4XH55UFjydI I9WoAEPfMsvvMfLoK3FUoK4iMbKy9Cra4J4nAmY7gnJ0TXUwS/hKjizvuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLxhaC1Bv42HGTNxg+ycl8sBUzeMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4Cfjtav Hje+lgliek4IlfR2Cj1A0Pxbvf/65aMl0vSEigth7HJcpegeh/lTDJcNtVq3aA39 FIJV9MNgcNeZ4689zqpy57eucJzq621qFs0fS0TP/5EROxbpJlMV1mrzBpzoyJqW FGKMkEaHbyfFqaoF//Nl9w6Xzt64pxoD7Zhv2qgVGJ98/l0Xi8XnInRmkOvhBiso 3DCIJQ3UMfcaK5ZMZj803IovfviOi2SoVSXlRcsuEFLECadOTG+grSn0yywB7ryN REorDJekCb2TTzHws4XrPt/BJ3W5ox9SZ+rd0FdUkcPCk5YvzD7Y4qDbUxleLkaZ sw7yhpZ7lxhFeg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:16 2026 by rpki-client