$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json) Hash identifier: lGfZuBpbYcWcZ6WWO/A8hoahL8CwjAGG80F+s3BibqA= Subject key identifier: FB:B2:E7:8A:6C:91:EB:66:B0:B4:4C:95:F9:09:C3:D2:45:FE:DF:8B Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019E1CEB548B7A9A536F40DF18DA3AC2B48E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft Manifest number: 032A Signing time: Tue 12 May 2026 16:00:45 +0000 Manifest this update: Tue 12 May 2026 16:00:45 +0000 Manifest next update: Wed 13 May 2026 16:00:45 +0000 Files and hashes: 1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=) 2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=) 3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=) 4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=) 5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=) 6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=) 7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: AkLh2aGnIav0wAEXg7WHZotN4eUC1Fy/pTGbiFTypoA=) 8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=) 9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=) 10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:54:8b:7a:9a:53:6f:40:df:18:da:3a:c2:b4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: May 12 16:00:45 2026 GMT Not After : May 13 16:00:45 2026 GMT Subject: CN=fbb2e78a6c91eb66b0b44c95f909c3d245fedf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:56:22:c8:fc:fa:c0:90:5b:8c:b7:9b:43: e6:5e:66:9e:15:d2:c7:22:b2:29:eb:a5:d3:b4:d0: a2:c5:09:d8:fd:8d:44:a0:06:33:e6:8b:b6:c2:59: 4b:48:bf:58:00:32:aa:55:13:9f:a2:d1:51:01:89: f1:ca:4f:a2:ef:fd:ac:69:fd:a6:6c:36:f1:53:5a: 6d:30:00:ae:ea:e8:17:a5:17:aa:d8:75:eb:29:dc: 68:ae:47:81:9f:c6:7c:28:35:b9:23:8a:2d:2e:17: 71:19:a9:eb:e7:c6:39:ed:97:36:2a:80:48:76:e4: fc:ce:5c:3e:28:a8:6f:8a:48:05:80:6a:4d:59:9e: 1b:c4:4c:8b:b6:bb:9a:2d:84:bb:91:46:59:6a:52: e7:45:d1:0b:54:5a:0b:0e:4d:5a:37:5b:94:b3:12: 8d:63:52:25:03:54:7b:82:8b:6b:f0:d4:4f:da:39: ac:f5:c6:ee:eb:cf:9f:01:79:d6:7e:90:81:f2:3c: 45:a5:65:3f:79:1d:29:52:d3:c5:dd:94:2b:2e:94: b3:21:0d:bb:d8:76:da:2a:8e:43:3c:6c:39:3a:95: 31:94:7f:7e:09:cc:cc:cc:28:3e:35:f0:e9:d9:89: 7a:1d:c0:64:6e:a6:9c:7a:e3:85:bc:a7:93:51:a3: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B2:E7:8A:6C:91:EB:66:B0:B4:4C:95:F9:09:C3:D2:45:FE:DF:8B X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7d:65:b6:9e:2d:3b:a6:0f:59:f7:5c:c0:c9:00:4b:40:72: 61:32:0d:ec:38:b2:04:95:2a:f7:f7:b9:8b:2e:15:06:1e:7c: 14:e2:6c:22:f9:4b:f5:8e:e3:42:b0:ee:39:b2:20:3b:5c:ae: 65:8a:70:b7:3d:5d:84:ae:0b:7a:f7:97:b3:47:ac:8a:aa:69: a2:68:0a:13:cb:fa:60:8a:90:c7:be:b5:41:fe:a7:a3:50:37: b3:0e:24:2d:30:fc:29:3f:d0:a5:a2:2b:66:58:fb:0f:1c:15: 8c:40:b0:b1:47:c0:6b:0e:50:88:28:9c:b4:83:ac:cf:28:e5: 7d:29:2e:67:4e:29:bf:96:e1:4e:89:a6:8d:9e:84:0b:24:73: 31:0e:f7:da:a9:25:e5:42:61:12:ec:dc:cc:7b:3d:2f:45:06: 76:e4:3d:25:5a:36:db:f3:79:36:dd:38:24:af:0a:a5:45:5c: bd:a2:fa:c6:7c:fb:43:17:52:1f:74:19:1b:46:82:bf:e1:bc: 0b:96:1d:94:8c:d9:10:b5:c0:1d:20:25:b3:8d:7f:7d:7a:06: 3e:af:61:48:ea:ae:6b:6b:e8:74:5f:86:d6:4a:f2:a5:10:68: ae:5a:3b:78:12:81:54:8e:73:94:f5:1c:51:fa:23:fc:ba:25: 5b:ec:24:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c61SLeppTb0DfGNo6wrSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwNTEyMTYwMDQ1WhcNMjYwNTEzMTYwMDQ1WjAzMTEwLwYDVQQD EyhmYmIyZTc4YTZjOTFlYjY2YjBiNDRjOTVmOTA5YzNkMjQ1ZmVkZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0VWIsj8+sCQW4y3m0PmXmaeFdLH IrIp66XTtNCixQnY/Y1EoAYz5ou2wllLSL9YADKqVROfotFRAYnxyk+i7/2saf2m bDbxU1ptMACu6ugXpReq2HXrKdxorkeBn8Z8KDW5I4otLhdxGanr58Y57Zc2KoBI duT8zlw+KKhvikgFgGpNWZ4bxEyLtruaLYS7kUZZalLnRdELVFoLDk1aN1uUsxKN Y1IlA1R7gotr8NRP2jms9cbu68+fAXnWfpCB8jxFpWU/eR0pUtPF3ZQrLpSzIQ27 2HbaKo5DPGw5OpUxlH9+CczMzCg+NfDp2Yl6HcBkbqaceuOFvKeTUaO6DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuy54psketmsLRMlfkJw9JF/t+LMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZX1ltp4t O6YPWfdcwMkAS0ByYTIN7DiyBJUq9/e5iy4VBh58FOJsIvlL9Y7jQrDuObIgO1yu ZYpwtz1dhK4LeveXs0esiqppomgKE8v6YIqQx761Qf6no1A3sw4kLTD8KT/QpaIr Zlj7DxwVjECwsUfAaw5QiCictIOszyjlfSkuZ04pv5bhTommjZ6ECyRzMQ732qkl 5UJhEuzczHs9L0UGduQ9JVo22/N5Nt04JK8KpUVcvaL6xnz7QxdSH3QZG0aCv+G8 C5YdlIzZELXAHSAls41/fXoGPq9hSOqua2vodF+G1krypRBorlo7eBKBVI5zlPUc Ufoj/LolW+wk4w== -----END CERTIFICATE-----Generated at Wed May 13 02:52:46 2026 by rpki-client