$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: OnQiNzNAJJdf/fs5VYFrGwpZ1sbrjhYyW+XSOa2GtaA= Subject key identifier: B4:1C:8A:90:3A:FE:2B:33:02:14:60:E9:AB:76:78:6D:3A:18:EE:F6 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019E1EDA0C0D48EABF8F0C271FFE9B72D4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1924 Signing time: Wed 13 May 2026 01:01:06 +0000 Manifest this update: Wed 13 May 2026 01:01:06 +0000 Manifest next update: Thu 14 May 2026 01:01:06 +0000 Files and hashes: 1: 1--RggRk_qlH26F-8QTH2ie7muc0.roa (hash: Hqhf4xa2ID1VNwxmhITZqAJ15hDU/4FyBARifnG6Ixc=) 2: 1a7SZTEXLvsY6ZnhEFxz-R8N7uM.roa (hash: VvGo7k75GH/z5NFVgpcLPEpxVLsQm0TzpboPdwFu0Yc=) 3: 3xxSrQX7ikVH9joHH7QsgCEkz0M.roa (hash: wOzTlwIIx8vGJW4532eTCHLypEd105cx24+b6jsBnOE=) 4: 4NONcDvqiCRqgZcQTfcqHeSzpuE.roa (hash: R27IngHDs3jcZqqkBeixBQgUg7p/CUgoVimY+Zoh0rs=) 5: 627RCQbVfaSLEpbqf1uOyStuItI.roa (hash: 2YbdBYQ9z8cknHKKXmc5SgbkxXPdynVrnlyUa/TP6wk=) 6: 9ok7vlhzmI90nPgnO1IgrHdTxZs.roa (hash: KMWs95W+KNbFg3H5cAfW7c/c378ZOgBFSVfOB7Q6xdc=) 7: FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa (hash: /bleCUlTHodFMRUrIClkQu+L3DOefkymAjlInaomTNQ=) 8: PTblVwI2pEuayFVs15O8VzhVtcE.roa (hash: BZMI5kioCtcsLQnN5vspUQmXLq1H6ZDsa+ACcaZ9hIE=) 9: S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa (hash: kgjDYJvzpvvXhGpA6SOSZpPon+c9XSP1iW9dljXHh6I=) 10: St6cINBiYFYzDsvoHQ0HIuhRHRE.roa (hash: TerSeMXT2wx/qxnCAM2X+sHCfRQgQnB7xYChR1RCmTU=) 11: _au0wimjEPCkLk0Si7B4RsrMdt8.roa (hash: /4fqj2Kq6klXf2682gRF7q2tz9MvyCSK5DmjIGN2uPc=) 12: _sJaMgsC9vZYHJ1-sJ2DQDObNds.roa (hash: tdKFcf6lEHJohX/dDC1SKuCr0lFpoQm/9xayJVcBCOc=) 13: fP0g3WG03fRKQvk9nCrI5dbtVbw.roa (hash: iqvY0ZnRaOtLATbSx1mHSetMiM19OQ+QCDRCVXbVWCo=) 14: g5zvUc47daXiwW8MR7Ooy7ZGGhM.roa (hash: VTog9oqmf4YsW9f1RIMMmAHBzttgFZnh44Uy6cLAglk=) 15: iBWI_be6KZTQs8EfQhXMJzUgSHM.roa (hash: ocUnmNt9pPZOeFDjwHl6jCfHOmkeOSrq2u2q/CCROrc=) 16: jWqvEO-jmA-gQShTX85xvehC5Hc.roa (hash: pL69sm9cpEpCR8BKzOZz9JU0vtplAVmf/Mq5uV1wJiY=) 17: mvCrPFk_f-cYnxy32upovMXOSbI.roa (hash: Hvm/Hs4xIKHjkYUXqkI7d2NYIoktj/SKLqPN0YW1qpM=) 18: tYauO89UbkmwK_N9XQExSS1v_Nc.roa (hash: d/1zWN1EmLOyscLiJiM90yzoqktyhFzjpIvKSzKk96Q=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: jZZi5bF5d9JrNwP3sGNon6H8lfbdP6nPcAufc/c8/I4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:da:0c:0d:48:ea:bf:8f:0c:27:1f:fe:9b:72:d4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: May 13 01:01:06 2026 GMT Not After : May 14 01:01:06 2026 GMT Subject: CN=b41c8a903afe2b33021460e9ab76786d3a18eef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:91:71:c1:07:7c:cb:39:1d:8d:8f:d7:cc: bc:89:d1:fd:72:a2:68:11:4b:00:56:e2:f3:57:91: a1:0a:a6:e3:c9:54:9e:e0:58:e7:cf:40:10:72:be: a2:20:7b:ab:9c:58:2d:8a:fa:6c:95:37:87:47:7a: 03:a9:81:f2:e0:aa:0a:bb:3a:ce:27:1c:07:cb:da: 8d:b2:08:66:4e:50:4a:68:6c:28:ee:80:57:64:f1: 1c:93:00:eb:ba:94:9f:4d:38:18:eb:a3:12:c9:c4: be:f5:37:1b:14:0b:7f:4b:98:e5:6c:1e:68:1b:49: aa:02:18:cc:c3:4e:bd:c6:2b:70:e2:28:b2:92:bc: 4a:9e:b6:17:4e:d4:ea:6a:e8:60:b5:32:77:bc:a7: 0f:d4:da:6c:2b:b2:19:73:43:dd:1f:4c:98:a0:96: 0d:cc:1d:ba:a8:f4:b4:8a:97:60:63:f9:38:b4:26: 03:a1:fc:31:74:56:5a:a3:9b:47:6f:63:74:2b:57: 4e:67:2d:4c:a1:d2:d4:78:8a:03:dd:45:8e:88:eb: 96:ac:58:d9:e4:69:81:d4:9e:9a:4f:0f:93:a5:c6: bc:f9:e2:d0:0a:f4:7a:b1:3a:4d:7f:1d:b8:38:a4: 60:9a:c2:65:3d:7e:9e:a1:af:ba:d4:6a:2d:ac:ab: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:8A:90:3A:FE:2B:33:02:14:60:E9:AB:76:78:6D:3A:18:EE:F6 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:39:60:2c:ea:7e:fe:61:40:c0:b8:11:57:ba:71:56:b0:6b: be:82:88:a3:d6:e4:a7:66:b7:ab:51:ee:b9:23:12:3b:88:df: 1f:fb:c8:c5:28:35:47:fc:21:43:05:ce:a9:a3:fe:7b:ca:c5: fd:bd:b6:59:f1:82:d5:59:50:39:fa:13:67:d3:4f:f5:92:ec: 11:87:07:ef:70:9a:02:43:14:36:a2:60:ed:94:f5:a3:66:81: 7a:0c:c9:51:a3:72:48:e5:ff:34:83:c9:9a:3c:8e:b5:8e:84: 85:78:46:da:1f:a1:a7:2d:a0:bc:eb:2c:38:7b:a7:9f:49:b3: 7b:b7:25:f9:39:0d:0f:5c:87:04:be:82:af:7c:a6:22:75:7d: a6:49:90:36:ba:b1:cd:af:00:3b:aa:81:2d:f4:47:82:ee:60: 87:6d:03:d6:ac:c5:5f:5c:e8:e9:42:11:08:13:f3:63:53:ce: b8:02:51:5d:74:1f:f6:5a:74:ff:ab:12:cf:6e:a8:9a:68:6a: 4a:06:ba:bd:31:3a:4c:65:e1:b6:fa:c0:9c:44:4b:b2:6e:cd: c3:e4:0d:30:c7:d5:d1:93:85:36:a6:50:64:4a:81:f7:18:e4: a9:04:01:34:d6:33:f0:1e:77:1f:b8:f8:a7:66:e1:03:5e:be: 23:9a:1c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4e2gwNSOq/jwwnH/6bctSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwNTEzMDEwMTA2WhcNMjYwNTE0MDEwMTA2WjAzMTEwLwYDVQQD EyhiNDFjOGE5MDNhZmUyYjMzMDIxNDYwZTlhYjc2Nzg2ZDNhMThlZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXeRccEHfMs5HY2P18y8idH9cqJo EUsAVuLzV5GhCqbjyVSe4Fjnz0AQcr6iIHurnFgtivpslTeHR3oDqYHy4KoKuzrO JxwHy9qNsghmTlBKaGwo7oBXZPEckwDrupSfTTgY66MSycS+9TcbFAt/S5jlbB5o G0mqAhjMw069xitw4iiykrxKnrYXTtTqauhgtTJ3vKcP1NpsK7IZc0PdH0yYoJYN zB26qPS0ipdgY/k4tCYDofwxdFZao5tHb2N0K1dOZy1ModLUeIoD3UWOiOuWrFjZ 5GmB1J6aTw+Tpca8+eLQCvR6sTpNfx24OKRgmsJlPX6eoa+61GotrKt2ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQcipA6/iszAhRg6at2eG06GO72MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDlgLOp+ /mFAwLgRV7pxVrBrvoKIo9bkp2a3q1HuuSMSO4jfH/vIxSg1R/whQwXOqaP+e8rF /b22WfGC1VlQOfoTZ9NP9ZLsEYcH73CaAkMUNqJg7ZT1o2aBegzJUaNySOX/NIPJ mjyOtY6EhXhG2h+hpy2gvOssOHunn0mze7cl+TkND1yHBL6Cr3ymInV9pkmQNrqx za8AO6qBLfRHgu5gh20D1qzFX1zo6UIRCBPzY1POuAJRXXQf9lp0/6sSz26ommhq Sga6vTE6TGXhtvrAnERLsm7Nw+QNMMfV0ZOFNqZQZEqB9xjkqQQBNNYz8B53H7j4 p2bhA16+I5ocPA== -----END CERTIFICATE-----Generated at Wed May 13 12:26:10 2026 by rpki-client