$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: aruE7eAIgDLbmqB9GawnzWw5K5Gn4bXQhzOlx6lk4y0= Subject key identifier: 37:E0:AD:72:B4:EE:BE:D1:AB:F7:22:A1:9B:66:5B:52:48:DF:E0:95 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019D9AAC1E183F91A7290DDD18322D8098FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1A3D Signing time: Fri 17 Apr 2026 09:01:04 +0000 Manifest this update: Fri 17 Apr 2026 09:01:04 +0000 Manifest next update: Sat 18 Apr 2026 09:01:04 +0000 Files and hashes: 1: 2p6X0AtouCzVNKAMw7m3iePnGWs.roa (hash: JTFFGaqq0yiZYLYTUwYMgBzV4FH4zB+/tPL4IXev7Po=) 2: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=) 3: AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa (hash: YirutIpsNuM7OfsWdL6cUp/DubORpuhrcBem96Hz7EU=) 4: A_mkzIEnEpz9WHJ6sBYtcPziHnM.roa (hash: IkCl1Un54u/G2EbgGGSpCdlDfdCqID7BmUK3v/PN75k=) 5: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=) 6: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=) 7: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=) 8: Kj0sX5EXk_lnEe1oG9enI-9Uxz8.roa (hash: QsEGqqedvvJfyYegitKnBcVHLqm6NXGbqrN63e4Vj6c=) 9: LrcbVo71YyrQCC8jxOvbkP8UOjk.roa (hash: F+TSYhcW05rJokBrE9N3pQGL1hIp19xpgRk/atbwlDo=) 10: PisELHxCj9Tij4-2sem6RSDPu4M.roa (hash: oGOd3HB+uRNlF70fF+XYGkQK02LLgQH4jFhzBp8FfFE=) 11: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=) 12: XVuJp7ALAXytVwSk0zaqxxzUAno.roa (hash: NqxrsMUQO+pc1G0DVIfP8opMJHuo3MUxN1e9ARpPw3E=) 13: XbZUxjF6er6AIYfuTf_SYoXj0T4.roa (hash: EU2xDMefpjL7XoPYAukKa0Xo42kHY6dXwLP+3AmR/q4=) 14: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=) 15: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=) 16: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=) 17: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=) 18: sfIFa_zvIWFeaikhlC8p9lzyiak.roa (hash: JmdJqAk29N9Jb2v4hQ9hbp/VRCQfMA8RIGy2N4vYuEA=) 19: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=) 20: vjp69wI-uf-qQ3lAEHlJYb3cyoI.roa (hash: 2takcfm8SJ1IG9E6kF9K6s3hfjJSIwGI+MPRQecw4xM=) 21: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: TvPK6iuZcpS4SWbmh8XnVdNchZgX3bPrnIKh/lpAhbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ac:1e:18:3f:91:a7:29:0d:dd:18:32:2d:80:98:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Apr 17 09:01:04 2026 GMT Not After : Apr 18 09:01:04 2026 GMT Subject: CN=37e0ad72b4eebed1abf722a19b665b5248dfe095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:b7:40:45:cd:e1:d8:9e:e1:2e:80:91:e4: 59:fe:23:aa:67:9c:77:67:3d:fb:f0:28:c6:18:b1: 49:a2:75:61:a9:02:63:41:fa:18:e6:ba:35:b6:24: 07:59:58:e6:6f:69:b8:28:b8:f3:f9:61:71:2d:b8: b4:ed:b4:60:9b:28:af:74:85:fe:5c:7c:36:67:3c: 08:1a:e5:b2:ea:96:09:a2:c5:a3:b1:40:06:22:61: de:ca:a0:25:06:55:e2:ce:5d:64:b5:16:66:87:d0: 48:ce:9f:24:5e:61:bf:51:f6:d2:38:33:22:37:03: f9:73:fa:a9:28:fe:9c:a8:8b:ca:1c:db:2a:2b:ed: 69:43:ec:a6:f2:d3:d5:eb:3b:73:b7:9b:b0:f9:1b: 38:26:e8:1c:b2:86:33:2e:3d:4d:56:c7:06:db:c0: c7:69:24:84:fe:33:df:4a:f9:74:07:69:7f:3e:2b: b0:6b:bd:a0:03:3e:d3:fb:4e:56:41:92:93:f8:98: 9f:f2:b5:67:92:5c:1b:16:08:6c:bb:2c:da:0f:1f: 25:11:41:9b:1f:dc:f7:51:fc:1b:c3:11:e7:3a:38: e1:aa:42:ac:54:99:18:38:a5:ae:86:db:d8:45:08: 09:51:0e:20:68:d4:f6:2d:e2:e3:74:33:07:0e:e1: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:AD:72:B4:EE:BE:D1:AB:F7:22:A1:9B:66:5B:52:48:DF:E0:95 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:06:f8:4e:aa:2c:e5:8f:28:d9:78:f0:d7:41:93:07:90:6d: 38:2f:d1:68:b5:93:38:3f:f3:a0:cd:8f:ff:ca:e5:9b:e5:42: ad:4b:87:32:97:5b:9d:01:8a:64:e4:92:23:54:44:cd:c4:62: f9:a2:45:43:57:e7:c8:a3:ad:31:b7:b6:de:e7:87:8c:87:90: 8d:91:15:ce:67:95:68:3d:5c:4e:fa:ba:a4:7a:ac:cc:72:56: 6e:0d:5b:27:d7:47:47:39:a2:f2:ef:86:46:66:5a:be:f3:3e: 47:64:76:00:17:b9:f7:f5:0d:af:4c:3a:b5:18:55:da:a6:37: e9:dc:6c:0a:5b:ec:4f:77:28:d4:de:c2:c2:da:3c:39:97:02: 0b:ff:46:20:56:03:62:d4:92:d5:c5:71:2b:40:45:38:53:12: 1c:d6:5e:80:bb:8e:81:39:51:36:5a:61:78:d0:82:d6:1c:0c: fa:c1:26:7e:23:05:a0:97:67:6a:46:bd:c2:08:ef:6b:45:ef: 3f:d4:6c:eb:c6:21:48:cf:7d:c2:d8:36:c3:ef:2f:24:d6:7c: 19:85:16:a8:f1:69:ec:db:ce:76:7d:0d:01:c8:17:49:9e:f2: db:a1:8f:9d:37:34:e1:63:23:66:e8:ba:2e:e5:b4:ac:c4:ad: 25:8d:de:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2arB4YP5GnKQ3dGDItgJj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwNDE3MDkwMTA0WhcNMjYwNDE4MDkwMTA0WjAzMTEwLwYDVQQD EygzN2UwYWQ3MmI0ZWViZWQxYWJmNzIyYTE5YjY2NWI1MjQ4ZGZlMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxku3QEXN4die4S6AkeRZ/iOqZ5x3 Zz378CjGGLFJonVhqQJjQfoY5ro1tiQHWVjmb2m4KLjz+WFxLbi07bRgmyivdIX+ XHw2ZzwIGuWy6pYJosWjsUAGImHeyqAlBlXizl1ktRZmh9BIzp8kXmG/UfbSODMi NwP5c/qpKP6cqIvKHNsqK+1pQ+ym8tPV6ztzt5uw+Rs4JugcsoYzLj1NVscG28DH aSSE/jPfSvl0B2l/Piuwa72gAz7T+05WQZKT+Jif8rVnklwbFghsuyzaDx8lEUGb H9z3UfwbwxHnOjjhqkKsVJkYOKWuhtvYRQgJUQ4gaNT2LeLjdDMHDuEq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfgrXK07r7Rq/cioZtmW1JI3+CVMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAb4Tqos 5Y8o2Xjw10GTB5BtOC/RaLWTOD/zoM2P/8rlm+VCrUuHMpdbnQGKZOSSI1REzcRi +aJFQ1fnyKOtMbe23ueHjIeQjZEVzmeVaD1cTvq6pHqszHJWbg1bJ9dHRzmi8u+G RmZavvM+R2R2ABe59/UNr0w6tRhV2qY36dxsClvsT3co1N7Cwto8OZcCC/9GIFYD YtSS1cVxK0BFOFMSHNZegLuOgTlRNlpheNCC1hwM+sEmfiMFoJdnaka9wgjva0Xv P9Rs68YhSM99wtg2w+8vJNZ8GYUWqPFp7NvOdn0NAcgXSZ7y26GPnTc04WMjZui6 LuW0rMStJY3elw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:51:41 2026 by rpki-client