$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: 7tVASKGjOya0RXDM0PDoEUc1wmFq1SzCvRi68jD7BVI= Subject key identifier: 0D:C7:71:82:1B:80:9E:9B:5C:86:00:07:ED:C0:AC:F7:47:8A:CE:DE Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019D2B1788056FD9395FEBD0F651DD9C3035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0BEC Signing time: Thu 26 Mar 2026 17:00:55 +0000 Manifest this update: Thu 26 Mar 2026 17:00:55 +0000 Manifest next update: Fri 27 Mar 2026 17:00:55 +0000 Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 3: 7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa (hash: cMX6h6ESvCK8kLWWGv+cii+7hJJzZRIJOKQPIQ2Prc4=) 4: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 5: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=) 6: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 8: Q319puPuZ6pEVFIow6HSoz6aiu4.roa (hash: w5OU1Qsqqe0TAPMfpoTlrKdZQKLeQmRMZSWdZEzQ0ZA=) 9: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 10: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 11: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 12: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: WjvT5kBcFW8LnC/Ll+qoTlvrbioDPjlQqvrpZKC2I2s=) 15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 16: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 17: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:17:88:05:6f:d9:39:5f:eb:d0:f6:51:dd:9c:30:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Mar 26 17:00:55 2026 GMT Not After : Mar 27 17:00:55 2026 GMT Subject: CN=0dc771821b809e9b5c860007edc0acf7478acede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:cb:27:a2:26:14:ad:ad:e3:08:75:8a:2b: 31:2a:b0:21:db:95:8e:b4:95:d1:35:69:c0:d1:40: ac:8e:53:df:dd:0a:e2:7c:9f:ce:ec:22:3d:9e:f6: f5:34:a6:8e:f5:b3:68:9d:2a:69:2b:3a:4b:17:00: 6b:13:38:23:50:4b:06:a3:cb:0f:78:bf:1d:77:be: 30:65:ff:fe:94:0f:16:8d:29:aa:9f:7d:95:07:99: b9:89:56:5b:04:2d:0b:f7:48:15:2f:d6:2a:73:65: fb:b0:6e:61:53:ff:a3:67:fa:c3:83:d9:87:2a:8c: 27:b8:e9:c0:36:11:b5:f2:f7:11:93:81:ea:7b:67: 83:cf:59:d7:13:d8:6e:b9:b9:7d:56:f4:e0:7d:7e: ce:d1:19:34:0a:8a:86:0d:87:c4:c0:35:1d:cb:5b: 26:9f:eb:19:1c:72:a3:26:33:2a:92:9f:6f:83:0d: a4:b1:65:ff:0f:f2:74:f1:6b:65:1f:d7:49:d2:b5: 74:a6:bf:9e:66:24:70:43:f4:0f:2f:42:2c:01:f8: b4:0a:07:ec:14:d3:11:7b:6a:bf:6f:3e:ae:56:af: 5c:4f:a4:39:39:54:92:20:10:f6:bd:b3:39:83:ad: 18:68:42:c3:77:d4:4e:d9:66:c8:7d:65:cc:f1:cb: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C7:71:82:1B:80:9E:9B:5C:86:00:07:ED:C0:AC:F7:47:8A:CE:DE X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:47:e3:62:e6:a9:83:59:93:23:d4:75:8f:2f:8b:99:ef:28: 38:f8:1b:2f:9f:37:0d:d1:5b:d5:c8:67:0b:ee:0e:28:e6:37: 9d:f5:5c:f9:1d:dc:d1:13:f6:5b:2a:2e:a8:aa:62:c4:49:bc: 5f:30:39:b8:2a:df:d5:e2:d3:ae:e5:9e:d7:0b:de:af:6b:7e: 67:78:38:f4:76:8e:c7:e5:f4:d1:f2:79:ad:1d:bd:d3:b3:9e: 86:86:2b:71:03:7f:ad:ab:92:7b:27:e5:df:68:1c:be:30:46: 9b:46:e9:30:f3:79:38:92:8f:c1:b8:a0:a5:32:a5:27:3d:01: 2a:e1:9c:1d:79:0c:53:d6:75:0f:38:5e:8c:3e:f8:af:bc:ec: 98:41:fa:69:28:68:bd:3b:95:ff:db:d8:e0:fc:11:37:b8:3f: 6a:e5:09:da:21:51:b0:a9:9a:e2:cf:8d:b2:66:1c:85:c8:be: e6:03:2a:5d:b8:15:d4:55:cd:5d:48:c9:3a:e6:85:97:aa:94: 53:dd:1d:6a:e4:59:e7:d4:45:ea:dc:89:36:35:17:7b:5e:b2: 52:ca:ff:ff:04:5c:83:33:2f:1b:40:46:44:10:5b:2f:04:47: 4b:10:0f:aa:1f:99:a9:b0:c1:ab:cc:4d:40:28:d0:da:bf:78: 67:f8:aa:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rF4gFb9k5X+vQ9lHdnDA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMzI2MTcwMDU1WhcNMjYwMzI3MTcwMDU1WjAzMTEwLwYDVQQD EygwZGM3NzE4MjFiODA5ZTliNWM4NjAwMDdlZGMwYWNmNzQ3OGFjZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsePLJ6ImFK2t4wh1iisxKrAh25WO tJXRNWnA0UCsjlPf3QrifJ/O7CI9nvb1NKaO9bNonSppKzpLFwBrEzgjUEsGo8sP eL8dd74wZf/+lA8WjSmqn32VB5m5iVZbBC0L90gVL9Yqc2X7sG5hU/+jZ/rDg9mH KownuOnANhG18vcRk4Hqe2eDz1nXE9huubl9VvTgfX7O0Rk0CoqGDYfEwDUdy1sm n+sZHHKjJjMqkp9vgw2ksWX/D/J08WtlH9dJ0rV0pr+eZiRwQ/QPL0IsAfi0Cgfs FNMRe2q/bz6uVq9cT6Q5OVSSIBD2vbM5g60YaELDd9RO2WbIfWXM8cuD3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3HcYIbgJ6bXIYAB+3ArPdHis7eMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkfjYuap g1mTI9R1jy+Lme8oOPgbL583DdFb1chnC+4OKOY3nfVc+R3c0RP2WyouqKpixEm8 XzA5uCrf1eLTruWe1wver2t+Z3g49HaOx+X00fJ5rR2907OehoYrcQN/rauSeyfl 32gcvjBGm0bpMPN5OJKPwbigpTKlJz0BKuGcHXkMU9Z1DzhejD74r7zsmEH6aSho vTuV/9vY4PwRN7g/auUJ2iFRsKma4s+NsmYchci+5gMqXbgV1FXNXUjJOuaFl6qU U90dauRZ59RF6tyJNjUXe16yUsr//wRcgzMvG0BGRBBbLwRHSxAPqh+ZqbDBq8xN QCjQ2r94Z/iqwg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:06:54 2026 by rpki-client