$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: jaL57j8U3T/RAb8RcN+hQtBQVtvb9wCelD8eRoSXt0A= Subject key identifier: 90:45:A4:B7:4E:9E:8A:18:8D:AC:CE:96:6D:A4:5B:AF:27:74:DD:27 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019D9886962CBFA5E732DE7DA3F94131454E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1911 Signing time: Thu 16 Apr 2026 23:00:50 +0000 Manifest this update: Thu 16 Apr 2026 23:00:50 +0000 Manifest next update: Fri 17 Apr 2026 23:00:50 +0000 Files and hashes: 1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=) 2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=) 3: H3tBAn476s18gPJKTSL87Rv5Hfw.roa (hash: K4eLaR9vBqA4AN5CoJGHX6K3zIZNHj23kEJNlCUBq5o=) 4: H7xAtviqUTTZ-2BturV__GojEYU.roa (hash: 7y/cFcrHkaXFHOFisDiq8TbDYWThg68s7xHeQ5K5iWc=) 5: R8F1DSddbUmoi5Lvz7GVdblbDkk.roa (hash: ti1BqLXIAMU2z5zdrrvdHJM6DJeICOfg1NjS+8ZVzTI=) 6: TRm4u9w4aHluG_xWq8D3WD9cjE0.roa (hash: t+LJY16hYEjvyFHAQ5NgBP7TAysJCOIWTLbr8ofTjqA=) 7: U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa (hash: EnK49cFtZphk+Uu4vq0sYXSzWqCtB8Omy8Rc0kmt4Ts=) 8: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: ptMWFVc+VMbWmxeb6ObP/qsAIiqcaA5E19xpItyHwm4=) 9: _0309cZ1kikOxbfzcD2XJAY-ldA.roa (hash: cZXM6KU83tIxyiRuWRs4jXSNFO8qUxYJiHjRIWvBrHc=) 10: dLSSiZeltba729G3UFGH0XwLSho.roa (hash: 4MsOLvl+y1vyg93nB2nnBksXqFnl7fNEnQs0xIF73hU=) 11: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=) 12: vngvIz2KaFj8ZKtPi7_fxlNZjyQ.roa (hash: SSRAx6tIqP5pWWJsGfEi1oQj/WWXNPjtWbIrNaJW0nU=) 13: yHx7U3h6JZL7GjJtXadc-tvTWag.roa (hash: bHjlqHL1rl0Vu0vK21UaruHUNcXQbTCMAh8NovcebO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:96:2c:bf:a5:e7:32:de:7d:a3:f9:41:31:45:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Apr 16 23:00:50 2026 GMT Not After : Apr 17 23:00:50 2026 GMT Subject: CN=9045a4b74e9e8a188dacce966da45baf2774dd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:bc:30:3f:19:0d:63:de:a6:04:99:88:73: 25:6d:28:7c:5a:d9:66:bc:ea:c4:00:5b:2c:41:e6: d4:74:a2:08:31:be:27:b8:76:91:8b:ab:d1:dc:09: 21:21:70:ab:ec:a9:dc:a9:68:d2:b0:10:27:ce:d3: e4:56:1e:0d:fc:da:7d:6e:f4:56:a7:86:c1:4b:dc: 59:54:03:15:2a:ff:49:a5:e6:74:13:1a:f4:5e:c8: 51:c8:89:c6:37:0e:fd:5e:26:58:0e:3f:a2:e7:0b: 61:08:c7:aa:85:39:38:79:fa:a5:88:c3:fe:ee:6e: 9c:0b:87:60:37:fe:38:a6:0f:3e:42:88:15:7a:af: f6:be:d1:4d:18:e2:26:75:dc:2e:5a:c1:0c:6c:27: ef:64:0e:2d:ea:35:69:ee:1a:70:e0:2a:64:eb:d5: a1:b0:a2:57:96:13:bc:e4:fb:6d:28:be:ec:bc:82: b7:66:86:fe:de:92:6d:81:d5:76:52:ad:d9:56:36: 80:4a:a3:ae:38:56:07:96:db:8f:38:8f:31:07:c8: 6a:51:44:97:81:a7:05:aa:cb:b4:26:c6:a4:83:0d: bb:ed:af:4a:d0:b3:94:0d:01:c2:d7:b7:66:b7:0a: 39:1d:6a:f4:19:1a:4c:19:85:fa:e8:49:74:bf:f6: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:A4:B7:4E:9E:8A:18:8D:AC:CE:96:6D:A4:5B:AF:27:74:DD:27 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0f:52:f1:dc:c1:74:08:5f:8e:d6:98:9e:80:e6:23:2f:48: 25:85:77:07:5e:4f:3d:7a:35:4f:54:a6:1b:16:79:49:69:42: 23:40:dd:fc:d5:11:ea:20:4b:b5:bc:0a:2b:b9:0b:c2:5f:11: 91:6b:38:f7:e5:7d:a3:c8:a3:dc:74:a9:dc:24:df:f2:22:94: 96:6b:25:1e:d8:78:cf:ee:c6:5e:4e:7e:c3:5b:56:3f:25:dd: af:75:f8:84:7f:73:21:dc:7d:f3:87:9b:fc:9b:e0:fa:dc:82: d4:eb:39:68:82:b9:21:50:d5:80:91:78:38:95:1e:bb:1d:7d: b8:f0:07:e3:dc:41:e2:0d:a5:a3:c9:b4:22:cf:aa:2c:b4:88: de:ec:ce:4f:ec:0f:53:89:98:56:4f:c5:32:f2:fd:79:66:e3: 41:39:14:37:07:00:e5:5c:5c:d6:29:bc:42:99:bd:5c:25:b1: 1b:0b:48:e7:e6:57:0c:a1:95:a8:1c:9e:a8:a0:34:04:fb:d0: a0:da:5e:de:88:3f:d5:b5:73:01:71:0b:9d:f9:ef:7d:50:76: 26:d8:78:b6:9c:b6:10:35:a0:b0:b4:f0:0e:fc:62:42:12:b1: bf:25:6e:64:e4:31:ef:ba:17:bf:e5:7f:d1:72:65:b3:36:f6: bc:41:01:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhpYsv6XnMt59o/lBMUVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwNDE2MjMwMDUwWhcNMjYwNDE3MjMwMDUwWjAzMTEwLwYDVQQD Eyg5MDQ1YTRiNzRlOWU4YTE4OGRhY2NlOTY2ZGE0NWJhZjI3NzRkZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LC8MD8ZDWPepgSZiHMlbSh8Wtlm vOrEAFssQebUdKIIMb4nuHaRi6vR3AkhIXCr7KncqWjSsBAnztPkVh4N/Np9bvRW p4bBS9xZVAMVKv9JpeZ0Exr0XshRyInGNw79XiZYDj+i5wthCMeqhTk4efqliMP+ 7m6cC4dgN/44pg8+QogVeq/2vtFNGOImddwuWsEMbCfvZA4t6jVp7hpw4Cpk69Wh sKJXlhO85PttKL7svIK3Zob+3pJtgdV2Uq3ZVjaASqOuOFYHltuPOI8xB8hqUUSX gacFqsu0Jsakgw277a9K0LOUDQHC17dmtwo5HWr0GRpMGYX66El0v/bh/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBFpLdOnooYjazOlm2kW68ndN0nMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg9S8dzB dAhfjtaYnoDmIy9IJYV3B15PPXo1T1SmGxZ5SWlCI0Dd/NUR6iBLtbwKK7kLwl8R kWs49+V9o8ij3HSp3CTf8iKUlmslHth4z+7GXk5+w1tWPyXdr3X4hH9zIdx984eb /Jvg+tyC1Os5aIK5IVDVgJF4OJUeux19uPAH49xB4g2lo8m0Is+qLLSI3uzOT+wP U4mYVk/FMvL9eWbjQTkUNwcA5Vxc1im8Qpm9XCWxGwtI5+ZXDKGVqByeqKA0BPvQ oNpe3og/1bVzAXELnfnvfVB2Jth4tpy2EDWgsLTwDvxiQhKxvyVuZOQx77oXv+V/ 0XJlszb2vEEBMw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:22:06 2026 by rpki-client