$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: BEMUV67W4Vswl/9M8VGmRmDiO9RWwQaHMGHTVeyOQK0= Subject key identifier: CD:AE:5E:93:A7:09:80:7B:73:9C:75:41:34:CA:90:32:77:13:C7:4E Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019D29CE519CF56E2C05889DBFB6387CE889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 189A Signing time: Thu 26 Mar 2026 11:01:20 +0000 Manifest this update: Thu 26 Mar 2026 11:01:20 +0000 Manifest next update: Fri 27 Mar 2026 11:01:20 +0000 Files and hashes: 1: 1-A-7q5MSfEASgOSJsLHqRfzUioE.roa (hash: Za0B6sbWjI78oQmGRktphtY5YZXqOifBcaQfnD50Rt0=) 2: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=) 3: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=) 4: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=) 5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=) 6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=) 7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=) 8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=) 9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=) 10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=) 11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=) 12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: DwCqYSaZlK28MQjGH5s1sFz3YDAPpQua8sOE9M7yNrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:ce:51:9c:f5:6e:2c:05:88:9d:bf:b6:38:7c:e8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Mar 26 11:01:20 2026 GMT Not After : Mar 27 11:01:20 2026 GMT Subject: CN=cdae5e93a709807b739c754134ca90327713c74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:4d:6d:87:6f:94:ba:a3:6c:cf:8b:a6:fe: ea:7b:b4:d6:c9:83:8a:17:a5:b2:6a:35:f4:2f:53: bd:6b:92:de:2b:90:c8:91:7d:cc:44:7e:8c:8b:e0: 49:ec:20:c0:60:3c:3f:14:8e:ca:2d:f0:42:97:21: dd:cd:24:6f:57:23:a5:e6:d5:e6:83:aa:10:e2:3b: 45:3e:52:0b:90:d2:2b:64:0b:53:3d:70:75:3c:8c: 6b:ff:dc:b6:e3:2b:86:67:39:88:31:8b:01:47:5a: 35:e9:b5:2e:54:42:ea:9b:c3:75:b0:b1:fa:68:68: 26:d3:3a:c5:1a:62:60:5d:6d:77:d4:ba:08:c1:a4: c0:07:2e:e1:ff:2b:4e:59:b1:1b:23:22:29:11:ca: 6f:6a:e4:51:6a:12:33:a6:02:19:8b:c9:43:d0:8a: 3e:fe:56:47:bb:dc:51:6f:3b:23:71:11:2f:5e:b3: 59:79:01:31:e1:ba:6b:9a:1c:fb:a9:74:8a:d9:f5: ab:72:b2:e1:c7:ac:95:76:27:1e:17:63:95:6d:3d: 85:66:7c:f2:fd:0b:0d:d5:6a:22:f0:04:8e:f5:0c: 71:b6:80:35:5d:c0:76:5c:d1:9c:4d:98:f7:17:eb: 75:03:6a:20:05:a1:2a:dd:1c:4c:c4:14:5d:2d:bb: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:5E:93:A7:09:80:7B:73:9C:75:41:34:CA:90:32:77:13:C7:4E X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cb:a5:fe:b6:8f:ae:79:48:02:aa:8c:73:1f:4e:4f:a3:d4: 18:f2:fd:da:bd:80:8b:1f:09:16:bd:db:3b:65:64:1d:19:3d: fa:31:cb:52:19:81:c9:c2:cb:9d:cc:cd:d2:1d:3a:b2:81:91: 98:89:eb:f9:99:5f:cf:9f:af:5a:00:fb:ac:f8:ad:58:74:3d: f8:22:79:64:e9:21:4b:ab:1f:36:69:0a:ff:7e:c9:fd:36:10: e9:c4:4f:24:0b:f6:9c:88:15:5e:6c:58:68:89:6d:52:ad:6d: dd:3a:99:ff:a1:ae:58:e9:a2:6f:91:3c:11:56:ca:ed:7a:2f: b1:15:cd:4d:c8:fd:f2:fe:37:f4:66:dc:10:ff:01:5f:62:e1: cf:49:1a:d1:75:a0:c9:93:3c:21:3e:ab:44:9a:1f:3d:c6:91: 86:c8:bc:29:7f:52:84:5b:de:c2:58:78:ca:46:3a:92:9e:ac: 10:93:4c:11:b6:66:ba:53:2f:d2:95:b4:5b:b8:55:1e:f3:2b: 55:d1:1f:a3:2e:d8:11:42:bf:89:9c:3e:6e:51:0f:bf:ce:74: 1f:ce:0e:6f:bf:42:41:08:60:c3:ff:9e:1d:bf:a9:b5:90:9e: 31:f5:f4:9e:42:1c:76:13:74:86:0a:30:77:e9:f7:a2:aa:a5: ac:08:0f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pzlGc9W4sBYidv7Y4fOiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMzI2MTEwMTIwWhcNMjYwMzI3MTEwMTIwWjAzMTEwLwYDVQQD EyhjZGFlNWU5M2E3MDk4MDdiNzM5Yzc1NDEzNGNhOTAzMjc3MTNjNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD9NbYdvlLqjbM+Lpv7qe7TWyYOK F6WyajX0L1O9a5LeK5DIkX3MRH6Mi+BJ7CDAYDw/FI7KLfBClyHdzSRvVyOl5tXm g6oQ4jtFPlILkNIrZAtTPXB1PIxr/9y24yuGZzmIMYsBR1o16bUuVELqm8N1sLH6 aGgm0zrFGmJgXW131LoIwaTABy7h/ytOWbEbIyIpEcpvauRRahIzpgIZi8lD0Io+ /lZHu9xRbzsjcREvXrNZeQEx4bprmhz7qXSK2fWrcrLhx6yVdiceF2OVbT2FZnzy /QsN1Woi8ASO9QxxtoA1XcB2XNGcTZj3F+t1A2ogBaEq3RxMxBRdLbvz+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2uXpOnCYB7c5x1QTTKkDJ3E8dOMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsul/raP rnlIAqqMcx9OT6PUGPL92r2Aix8JFr3bO2VkHRk9+jHLUhmBycLLnczN0h06soGR mInr+Zlfz5+vWgD7rPitWHQ9+CJ5ZOkhS6sfNmkK/37J/TYQ6cRPJAv2nIgVXmxY aIltUq1t3TqZ/6GuWOmib5E8EVbK7XovsRXNTcj98v439GbcEP8BX2Lhz0ka0XWg yZM8IT6rRJofPcaRhsi8KX9ShFvewlh4ykY6kp6sEJNMEbZmulMv0pW0W7hVHvMr VdEfoy7YEUK/iZw+blEPv850H84Ob79CQQhgw/+eHb+ptZCeMfX0nkIcdhN0hgow d+n3oqqlrAgPtQ== -----END CERTIFICATE-----Generated at Thu Mar 26 20:28:48 2026 by rpki-client