$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json) Hash identifier: YWkpc03YGE9Ay6IrqMtkV/3w9MCM78qBPKpwQYWCZK8= Subject key identifier: 35:A1:04:0B:DD:FA:D6:8A:3E:32:2A:E6:9B:C5:02:9D:FA:8D:B2:62 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019CAA216528AA9745CC71978719BE47768A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft Manifest number: 1593 Signing time: Sun 01 Mar 2026 16:00:41 +0000 Manifest this update: Sun 01 Mar 2026 16:00:41 +0000 Manifest next update: Mon 02 Mar 2026 16:00:41 +0000 Files and hashes: 1: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (hash: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw=) 2: 17C_vnF79Z0SjoScCQYs0Qbx30M.roa (hash: 8O33ZZG4CQkBtT5Vng3e75/g1VOrRLzBwAenPZwIQiA=) 3: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (hash: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU=) 4: 33HmxX5laer88g91bQT40p7G6N8.roa (hash: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI=) 5: 3ytiWjmFt3rYZft34LBPp9IPn8M.roa (hash: t6Z85iFlhPkY9Mi/GJk5DDB2tSPS3ygni+I6/1lEoxk=) 6: 6Dm3L1A6fwNf5cdJCg_KzTtfF4U.roa (hash: JWGAhkB/RVPvN6u4alw1RrRc1axraV68/7+Pht7ruCE=) 7: 6qoBSrrhi2VKQ2-x91iDJmcoOhQ.roa (hash: urnXFLFxbktUpf/FnGonIt+QH0Pj4s4eEnHDC6hX/xw=) 8: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (hash: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE=) 9: 9T5_OTvwktW8zRDsIc_oghwfJK4.roa (hash: DN/iAPUdkXHSXPrEJqQVCF4jzwo8vDZFSIr5wO/Xikc=) 10: B60g_m0QJwYIuA9KKm-uF1NhLIM.roa (hash: 9NtMYll9Etxivck/4newooAS+FDFrk33e9AIEWgcc8E=) 11: BjY0UIUDYHmtHwBNhaObIWAI358.roa (hash: OvPE9LHEEN/9/jOSuoQZt3aJ0JqPRafOAp/r5JidHtY=) 12: EHgktTf6m7_fov1qGoLd_G4GBHE.roa (hash: qTES87h7tbtM80VYUBu7n7wmyWPsetKC04PB5cOHzdk=) 13: HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa (hash: rohOtLkiJZ2lqEQyOwpJqZMVus71D3p6WIHeG55/DBA=) 14: KdL2r09wZul28eEPN4dewnB7ukk.roa (hash: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q=) 15: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (hash: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ=) 16: LoYqb50w0fBtfcHsb6vmg_Jp5HM.roa (hash: 5JEsLkJAmr1UNeD7WuJILvN07Z2E4VXvHyU2P3noRJQ=) 17: LtPnBk6NSxo0XNLt66J042Sgc0I.roa (hash: Ss/KW/qryEzrYA7hPSNoI8jm1o8wvpp7Ys+hj0l/oCk=) 18: OfxjuwiEKWgdwrg-K1K-c5_VgLQ.roa (hash: UWtmb6ZbxoAUabXWP2QO5S1E8N0sWVkGkKY+3/ZZOw8=) 19: OwThGODJImZhpEQ6VocAEXk08Wk.roa (hash: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE=) 20: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (hash: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg=) 21: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (hash: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc=) 22: UE_hgXeXCUPJYDw6I06aW1aAkJ0.roa (hash: B5wHSL8kle+kiYR4U2yvdOPBll+rksc+6BTwGU5+ZZw=) 23: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (hash: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4=) 24: WmaJm0jDrpyJX9Q-LqqqCt-uwIA.roa (hash: eCuLoI4rD6y1bR6VEKccwXQk5/tx5hypqNKOEMMl80A=) 25: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (hash: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs=) 26: ZI085fx17wglNov032bXlk10RTg.roa (hash: j5Ko4ezz0l/Zfw3a/ZhaxENbSPKBPqajPZNL6E/+Gv0=) 27: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (hash: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs=) 28: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (hash: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc=) 29: bEtFnc7rnzCNJYBVd6ns7_KpUB4.roa (hash: PfuSivsRFYIl84wqTHOi1o/Y41ISwKTYQsUGOVnvA8c=) 30: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (hash: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo=) 31: cMPrRmSojB9SkGby8eR98Ete7yU.roa (hash: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8=) 32: cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa (hash: kafroNNbYDnc2h6nBm4gxZIlVlKGznDzvdAVuH5RGlI=) 33: evRG__ex8JGxNVzyfa2c0uYKq_0.roa (hash: 93Yx357YevAnWmJ/tXlOKW8HTJL/2XO97iLj27xdMN4=) 34: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (hash: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4=) 35: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (hash: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE=) 36: fv_FIWsQ6j6A0tVez5uEd3louso.roa (hash: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k=) 37: hAJCIirAsZk8GUXF7WubyM8TjKI.roa (hash: j6pH65MDKZ3nETHCyHm0OLZKv7Eb9miovENp+54ETCc=) 38: iarmlWK_D1F2Y519OMWB6VCc31g.roa (hash: WFVbmq4d03vzZGnbmXlce/4IUJO9Lw5GHMqxL1YbJaE=) 39: j9orTwG1Vgweag4E9VIs_WouzoE.roa (hash: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is=) 40: jD6mM0pl55Gkfup6YBb23hzuzk0.roa (hash: gYpmzgS3WeGkMeLq1vK2W75gJCmA3gbQBsEJ6rVnTeg=) 41: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (hash: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc=) 42: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (hash: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14=) 43: n0NR6OiiSRVLpNipRarNfvBQVBQ.roa (hash: x7+Hnm6izCIj5uo7DZZ8rAC8clBtC3HKKYVdoqJqJww=) 44: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (hash: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0=) 45: o0zFW0tgu0SNCajq1-Pj04reASE.roa (hash: XI8Y+MP7U7GXabQcnglenR9AR3VDKkEoKmwdTMvnwSA=) 46: pP92nXUgnFxyzmxr642WITYfjR8.roa (hash: TqxUp210JvwrsHlKUxm5AHk6pYYpaSVTd52yZrfvpuk=) 47: s9bHtYw6qGInBE6Pd4y6dDNszho.roa (hash: DuL4nvwJ3GhqWQoioLF44KGKjnyU3aqouWmY/jU6w4Q=) 48: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (hash: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E=) 49: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (hash: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI=) 50: vxHiN8XYZlqNx9pegdEwtdXJzX4.roa (hash: DRRytWcqFbSlVtkcmI8YNqgxFW5pXUdMhy1Q5V9THDo=) 51: x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa (hash: T+4iofAbDpf5avC4l/+tJIoT9rhbeVtFuRCldw4lWGM=) 52: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (hash: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs=) 53: xREJbZysiuR_7AfAbkb-_mvdCJU.roa (hash: ge+uzdtNTlkRHujnITIjJNysWOPLtwdYoaqf4cikYBQ=) 54: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (hash: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58=) 55: yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa (hash: 8kj3LqF1iVRGrMYtJSTCYp1IezJP4n7oP1W8pfH6tR0=) 56: ytt2iIs36bszj8mftd5slrzDQco.roa (hash: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY=) 57: zGv39sxT-IgxK9wQigpzw1dL81k.roa (hash: +TgYlQl9Z+mDQd/s9Yb0REr9Dx/C5mDs1i0ouWI4Pcw=) 58: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: XjGi4wE6iDy6cqVESWSiiSiRfeGhoiyjbJVt2QAhx+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:65:28:aa:97:45:cc:71:97:87:19:be:47:76:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Mar 1 16:00:41 2026 GMT Not After : Mar 2 16:00:41 2026 GMT Subject: CN=35a1040bddfad68a3e322ae69bc5029dfa8db262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:6f:9e:b7:8f:d9:3d:26:69:50:62:77:e9: 75:b4:11:28:51:c4:9c:36:f0:38:2d:c5:af:ea:5a: 9c:eb:f3:45:85:db:f5:e4:6e:68:6a:11:22:db:eb: ed:66:b1:48:e9:93:0f:41:c0:d1:c9:57:cf:9b:8e: 59:3b:89:5a:2e:34:e3:b7:1f:f1:93:11:0a:e5:39: b1:b0:2c:d8:0d:48:8b:ec:1f:42:15:0b:e4:bb:3b: db:24:92:2b:cd:df:bb:4d:1b:86:b7:d8:b6:83:bf: 31:a8:5e:6e:cd:e0:fa:8f:27:61:64:b7:7c:9d:00: 5b:14:64:71:c0:a3:82:78:0d:d9:bf:b6:34:56:20: 3e:47:5a:bb:ba:a1:7d:d5:1c:95:75:1b:51:47:51: 61:c6:8e:04:bd:1c:93:57:76:d1:70:55:23:65:49: bd:cf:bc:15:ad:dc:57:98:c9:0d:48:21:a6:fb:e9: fb:c7:8f:ad:de:d5:49:18:bc:45:42:bf:f6:85:92: 69:ed:7b:9d:46:e6:f6:e5:bf:8e:67:b1:b3:35:e6: 2e:62:39:1f:6e:e2:60:9a:fc:17:2f:28:83:1a:49: 8b:fa:c7:41:54:84:4d:44:6b:e5:46:63:74:e6:5f: 1a:d6:ad:62:b6:7b:e5:38:97:f1:44:05:79:a9:d2: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:04:0B:DD:FA:D6:8A:3E:32:2A:E6:9B:C5:02:9D:FA:8D:B2:62 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:3f:4c:d4:52:dc:ec:99:db:96:26:f9:9e:8d:af:9c:cb: a6:65:c4:26:58:1f:1c:02:1c:2c:3b:34:a0:66:36:b3:49:af: 58:c0:3b:c1:47:a0:d1:2a:55:67:81:78:dc:e7:9d:25:c8:6a: 4d:13:6f:11:d1:35:c7:3b:59:be:b1:b9:34:7d:98:5d:0f:4f: bc:65:28:02:16:c6:6f:57:41:fd:0a:99:8b:8a:e6:ae:16:f4: e4:ef:5a:3f:f5:08:d5:41:9d:56:43:d3:06:ab:7a:60:63:e3: 05:bb:9f:d8:39:26:18:24:07:bb:ce:15:82:eb:75:53:ca:1d: fe:23:2c:88:90:b8:78:b3:11:2b:f1:ef:55:a1:1f:c8:4a:8f: a5:03:88:c7:82:27:c0:0e:b4:93:97:85:6b:c7:45:eb:98:45: 77:07:98:92:c8:6b:4d:66:87:dd:37:5c:84:40:2c:b1:5f:85: c4:59:c4:9c:37:81:7f:68:88:18:0f:47:1f:8f:1e:74:74:98: 82:4b:1c:60:e0:f3:62:38:32:94:1b:b1:cc:79:37:a3:9b:3d: a7:af:39:f9:27:de:68:ab:1b:73:5c:3d:07:02:43:0d:30:e2: c8:84:bf:51:cd:4a:20:a6:ea:57:61:e9:94:7a:cf:c3:7a:72: 82:17:01:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIWUoqpdFzHGXhxm+R3aKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMzAxMTYwMDQxWhcNMjYwMzAyMTYwMDQxWjAzMTEwLwYDVQQD EygzNWExMDQwYmRkZmFkNjhhM2UzMjJhZTY5YmM1MDI5ZGZhOGRiMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0xvnreP2T0maVBid+l1tBEoUcSc NvA4LcWv6lqc6/NFhdv15G5oahEi2+vtZrFI6ZMPQcDRyVfPm45ZO4laLjTjtx/x kxEK5TmxsCzYDUiL7B9CFQvkuzvbJJIrzd+7TRuGt9i2g78xqF5uzeD6jydhZLd8 nQBbFGRxwKOCeA3Zv7Y0ViA+R1q7uqF91RyVdRtRR1Fhxo4EvRyTV3bRcFUjZUm9 z7wVrdxXmMkNSCGm++n7x4+t3tVJGLxFQr/2hZJp7XudRub25b+OZ7GzNeYuYjkf buJgmvwXLyiDGkmL+sdBVIRNRGvlRmN05l8a1q1itnvlOJfxRAV5qdIeTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWhBAvd+taKPjIq5pvFAp36jbJiMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANug/TNRS 3OyZ25Ym+Z6Nr5zLpmXEJlgfHAIcLDs0oGY2s0mvWMA7wUeg0SpVZ4F43OedJchq TRNvEdE1xztZvrG5NH2YXQ9PvGUoAhbGb1dB/QqZi4rmrhb05O9aP/UI1UGdVkPT Bqt6YGPjBbuf2DkmGCQHu84Vgut1U8od/iMsiJC4eLMRK/HvVaEfyEqPpQOIx4In wA60k5eFa8dF65hFdweYkshrTWaH3TdchEAssV+FxFnEnDeBf2iIGA9HH48edHSY gkscYODzYjgylBuxzHk3o5s9p685+SfeaKsbc1w9BwJDDTDiyIS/Uc1KIKbqV2Hp lHrPw3pyghcBaw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:32:10 2026 by rpki-client