$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: XeTsWZ2WvNHhv/V8lRbrGf8u2WkcCytnrE2Ty/HXxYo= Subject key identifier: 95:3E:B5:A0:CA:8F:C7:07:98:BF:72:FD:36:37:29:28:76:CA:2C:6B Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019FAAF5588743505BDE1ED9B3663A484CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1B64 Signing time: Tue 28 Jul 2026 23:00:33 +0000 Manifest this update: Tue 28 Jul 2026 23:00:33 +0000 Manifest next update: Wed 29 Jul 2026 23:00:33 +0000 Files and hashes: 1: 1NVBkiK8MN4W_PnXz3aeA8aFAkM.roa (hash: 6zxdJskkxsqRpb8fRppryCGKLMHxOLaG/zgapohPrIY=) 2: 1YYlM4ouGP3n966YQQJD1J8Ht1c.roa (hash: S2bt8De1mjKmpnVjdK4IwIG1kVZf0VST4BMHZsJGgJk=) 3: 2p6X0AtouCzVNKAMw7m3iePnGWs.roa (hash: JTFFGaqq0yiZYLYTUwYMgBzV4FH4zB+/tPL4IXev7Po=) 4: 47CsFOJriBbo1mq0-ajVp1jYEUI.roa (hash: aGrtYJNVgjYu/HsVE+4iU/oLDMmucqYc8rXRFsYsUHc=) 5: 4vO5G-wfZdVxm3yeJ3emVayU0WY.roa (hash: VRz5kXiX9FtIqi13SIfCiqxoJtkx/09urxUblvekxP0=) 6: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=) 7: 7Xre036woZ8vcol8k5XmEu1iA1I.roa (hash: eyn3q3PLjDTVu84Akp3ffRdOxB2vaXhFGWuStQOY2t4=) 8: AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa (hash: YirutIpsNuM7OfsWdL6cUp/DubORpuhrcBem96Hz7EU=) 9: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=) 10: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=) 11: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=) 12: Kj0sX5EXk_lnEe1oG9enI-9Uxz8.roa (hash: QsEGqqedvvJfyYegitKnBcVHLqm6NXGbqrN63e4Vj6c=) 13: PisELHxCj9Tij4-2sem6RSDPu4M.roa (hash: oGOd3HB+uRNlF70fF+XYGkQK02LLgQH4jFhzBp8FfFE=) 14: RAdaDsAL6uT6QOjQ8Sv22EVFnsE.roa (hash: ZNDdDY/LbCEeHweol2m/OdT3bO0M0+NtKGLn9lmBaqk=) 15: XKYROkzGwTyyDG91-58FmJfM3wQ.roa (hash: QKZm9Lorw22YkJQK/FA7wF+bUvpk7hqUaQ0ETpIoCsg=) 16: _TmPbtum-1iw-ZfgGQbHW01SDVI.roa (hash: QIFgUvSVToYQ6kIo/bZvBqmU12ppvif5hiLpO42V1z4=) 17: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=) 18: a7sIykuS_-ADC4xMZBjceeM9nU8.roa (hash: Ijty+qmFJVMZ4WZ2L6tVO4G2nHxdltVE36Aw6ugRkLY=) 19: btO9hLa6HmAsx6PYNcVrDBoRaWM.asa (hash: EFy0cS5RL0yE5HslthDSl4NK8OHxpNS8uriBzGgyqq4=) 20: f36GlzMla5osimpxs3lgIkA66yk.roa (hash: YrgRBjmcaowaUy4yVymb0T3RPuHkIzogqh9xzv5zkck=) 21: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=) 22: gXSSh2uNtFv405rW43HW70r7Dnw.roa (hash: PvakYlJ+y7g9x9Bd47alry51yVypAm1SZG5okHVCAgo=) 23: k0yZ1_53kOjS3t13dFhCBHkiUpc.roa (hash: z0eUUX0DNdogvuqSHAwD1uMDcP4HGdPgaWvuUrxV/0E=) 24: pdibwb27SbD9nJ2QiIqkUFv8C7w.roa (hash: vs2FNSAr8OCSQfoLGO4wc++pGndif3uqr7gndMMbCoA=) 25: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=) 26: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=) 27: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: OQdil0V8cC5C8wL9BQH3ayl4D5poqxRpY6rlJ5e/hf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:58:87:43:50:5b:de:1e:d9:b3:66:3a:48:4c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jul 28 23:00:33 2026 GMT Not After : Jul 29 23:00:33 2026 GMT Subject: CN=953eb5a0ca8fc70798bf72fd3637292876ca2c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8d:d8:7b:1a:6f:89:9c:29:e8:14:4a:e2:84: d5:05:2b:f2:7f:dd:83:4a:ce:cc:9b:e8:b3:e7:a2: 5f:bf:48:0b:4e:dc:17:5b:1e:04:ae:53:04:ba:45: ab:fc:58:36:93:34:6e:de:82:e0:61:7b:78:ca:7a: 95:5c:99:68:eb:2c:b6:5f:88:65:a2:21:e7:80:c6: 68:1c:78:97:6a:3b:29:39:24:b6:47:22:4b:56:03: be:23:78:e6:57:98:1d:94:7b:df:f2:84:7f:d8:78: 86:e3:a4:4d:1e:04:3e:73:3a:e1:c4:40:49:7c:17: 92:97:d0:c6:06:e0:76:f6:1e:d7:b2:be:65:db:b1: df:d3:89:53:6e:fa:f0:a5:12:a5:a5:4e:4c:00:cf: 51:b4:65:13:bc:f6:da:3b:72:56:3b:72:c3:c4:e8: 39:75:7c:e3:5f:50:8a:db:96:dd:93:f5:d6:58:bc: d9:42:07:20:86:8a:29:ed:c3:3f:f9:5d:83:30:75: f0:a6:18:ce:fd:d9:f0:3c:7d:0f:8a:03:a4:53:6a: 95:15:0b:8c:d2:02:f8:24:10:7b:a3:3b:a6:9c:75: f4:42:08:e8:74:08:90:9f:39:e2:17:cc:53:3f:b7: 44:ad:df:6d:bb:16:fa:bf:2b:c3:fa:21:6f:37:1f: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:B5:A0:CA:8F:C7:07:98:BF:72:FD:36:37:29:28:76:CA:2C:6B X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a8:65:7a:c3:a8:a8:51:c9:f8:0c:95:94:64:eb:60:80:32: e8:69:06:50:67:2a:89:ec:52:c6:5e:da:d9:19:f0:f6:8f:01: b0:bf:97:51:51:cf:e9:c2:f4:5e:0e:01:2d:b6:75:1f:02:00: 92:6a:ab:69:3e:b6:e8:ac:bf:cf:c4:45:31:bf:6b:72:f5:41: b1:ec:6f:ac:82:7d:f7:3e:79:07:29:f9:b9:47:cb:32:1c:26: b6:e9:a3:e8:c8:96:20:95:c8:e2:38:2c:f3:c8:2d:47:bb:81: 93:50:ea:dc:2f:d3:1b:91:ea:d8:31:27:d1:24:61:0c:1f:01: e4:37:92:76:3d:73:4f:c0:8e:ed:fb:41:00:ab:3a:1c:39:15: 12:07:e2:9b:33:4b:41:3c:eb:7a:b0:82:f8:a9:81:79:10:9f: 0f:65:a8:b7:41:ad:5c:cc:fc:98:42:bb:3b:4e:ff:8f:99:ae: 0e:90:4b:bd:7b:b5:68:ea:15:8a:e1:d9:e6:53:d1:23:a7:29: 7e:87:df:ea:a5:f7:09:0a:e7:47:b2:43:cc:f1:b7:43:67:1b: 66:50:5d:61:85:5c:9b:8b:a4:0f:8e:e8:0a:d2:ac:a7:40:1b: 8a:be:cc:3c:b6:87:af:c0:58:fc:21:bc:ec:aa:96:3d:bc:a9: a1:60:23:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9ViHQ1Bb3h7Zs2Y6SEy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwNzI4MjMwMDMzWhcNMjYwNzI5MjMwMDMzWjAzMTEwLwYDVQQD Eyg5NTNlYjVhMGNhOGZjNzA3OThiZjcyZmQzNjM3MjkyODc2Y2EyYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9I3YexpviZwp6BRK4oTVBSvyf92D Ss7Mm+iz56Jfv0gLTtwXWx4ErlMEukWr/Fg2kzRu3oLgYXt4ynqVXJlo6yy2X4hl oiHngMZoHHiXajspOSS2RyJLVgO+I3jmV5gdlHvf8oR/2HiG46RNHgQ+czrhxEBJ fBeSl9DGBuB29h7Xsr5l27Hf04lTbvrwpRKlpU5MAM9RtGUTvPbaO3JWO3LDxOg5 dXzjX1CK25bdk/XWWLzZQgcghoop7cM/+V2DMHXwphjO/dnwPH0PigOkU2qVFQuM 0gL4JBB7ozumnHX0QgjodAiQnzniF8xTP7dErd9tuxb6vyvD+iFvNx9RIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU+taDKj8cHmL9y/TY3KSh2yixrMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKhlesOo qFHJ+AyVlGTrYIAy6GkGUGcqiexSxl7a2Rnw9o8BsL+XUVHP6cL0Xg4BLbZ1HwIA kmqraT626Ky/z8RFMb9rcvVBsexvrIJ99z55Byn5uUfLMhwmtumj6MiWIJXI4jgs 88gtR7uBk1Dq3C/TG5Hq2DEn0SRhDB8B5DeSdj1zT8CO7ftBAKs6HDkVEgfimzNL QTzrerCC+KmBeRCfD2Wot0GtXMz8mEK7O07/j5muDpBLvXu1aOoViuHZ5lPRI6cp foff6qX3CQrnR7JDzPG3Q2cbZlBdYYVcm4ukD47oCtKsp0Abir7MPLaHr8BY/CG8 7KqWPbypoWAjjQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:14:15 2026 by rpki-client