$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: GtR8/jDBFTr8mSoq88TVTl90ZxNA995TgWew87PyJqM= Subject key identifier: 66:B8:15:77:5E:E2:B5:77:80:A6:DE:C2:A2:E5:19:33:25:78:B9:72 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 01A0E7AEE48714F25E2B374F45307339B32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1A96 Signing time: Mon 28 Sep 2026 11:03:13 +0000 Manifest this update: Mon 28 Sep 2026 11:03:13 +0000 Manifest next update: Tue 29 Sep 2026 11:03:13 +0000 Files and hashes: 1: 1--RggRk_qlH26F-8QTH2ie7muc0.roa (hash: Hqhf4xa2ID1VNwxmhITZqAJ15hDU/4FyBARifnG6Ixc=) 2: 3xxSrQX7ikVH9joHH7QsgCEkz0M.roa (hash: wOzTlwIIx8vGJW4532eTCHLypEd105cx24+b6jsBnOE=) 3: 4NONcDvqiCRqgZcQTfcqHeSzpuE.roa (hash: R27IngHDs3jcZqqkBeixBQgUg7p/CUgoVimY+Zoh0rs=) 4: 627RCQbVfaSLEpbqf1uOyStuItI.roa (hash: 2YbdBYQ9z8cknHKKXmc5SgbkxXPdynVrnlyUa/TP6wk=) 5: 9ok7vlhzmI90nPgnO1IgrHdTxZs.roa (hash: KMWs95W+KNbFg3H5cAfW7c/c378ZOgBFSVfOB7Q6xdc=) 6: FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa (hash: /bleCUlTHodFMRUrIClkQu+L3DOefkymAjlInaomTNQ=) 7: PXzU5_88zZGqB5MYPuoWItDUegk.roa (hash: t6l0rd2bl2rTzqA130md4mKx4L2apFlJ7CDxl5Cyq8o=) 8: S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa (hash: kgjDYJvzpvvXhGpA6SOSZpPon+c9XSP1iW9dljXHh6I=) 9: St6cINBiYFYzDsvoHQ0HIuhRHRE.roa (hash: TerSeMXT2wx/qxnCAM2X+sHCfRQgQnB7xYChR1RCmTU=) 10: _au0wimjEPCkLk0Si7B4RsrMdt8.roa (hash: /4fqj2Kq6klXf2682gRF7q2tz9MvyCSK5DmjIGN2uPc=) 11: _sJaMgsC9vZYHJ1-sJ2DQDObNds.roa (hash: tdKFcf6lEHJohX/dDC1SKuCr0lFpoQm/9xayJVcBCOc=) 12: cVB_4KeCtrdsz3IxNlNW0DNt5r0.roa (hash: uqVxjbogMYuriq6WpxC5uiWZfyiDPl2yd7dH40wRIRc=) 13: ejLWW9hcdTmiRpy3iPNqEsUDZ1I.roa (hash: MUAbtqaRgPGx0tUKuCoZV2kCEYIeKpGqbN/13KMxsKE=) 14: fP0g3WG03fRKQvk9nCrI5dbtVbw.roa (hash: iqvY0ZnRaOtLATbSx1mHSetMiM19OQ+QCDRCVXbVWCo=) 15: iBWI_be6KZTQs8EfQhXMJzUgSHM.roa (hash: ocUnmNt9pPZOeFDjwHl6jCfHOmkeOSrq2u2q/CCROrc=) 16: jWqvEO-jmA-gQShTX85xvehC5Hc.roa (hash: pL69sm9cpEpCR8BKzOZz9JU0vtplAVmf/Mq5uV1wJiY=) 17: kHjPRh7XmhI7LO80UO_Sw3QL5M0.roa (hash: TK2zRLWLHWeXjn9ivJ8SsIcmdG48EcU7eMsXeorqa0g=) 18: mvCrPFk_f-cYnxy32upovMXOSbI.roa (hash: Hvm/Hs4xIKHjkYUXqkI7d2NYIoktj/SKLqPN0YW1qpM=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: pKghz42SEtk2RZwQtdeRdr2hgudBZQrj1NpogMcNKU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 11:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:ae:e4:87:14:f2:5e:2b:37:4f:45:30:73:39:b3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Sep 28 11:03:13 2026 GMT Not After : Sep 29 11:03:13 2026 GMT Subject: CN=66b815775ee2b57780a6dec2a2e519332578b972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:52:50:4c:f8:0b:7f:7b:2a:92:c7:73:b2: 0d:7a:3e:05:d2:95:fa:fb:d7:82:7e:b5:b2:e1:87: 92:92:35:be:38:4e:a3:3d:a3:36:56:10:74:9c:91: a2:bc:5c:fb:6a:eb:bb:ff:a0:d4:75:5b:c1:51:1c: 39:90:80:ef:f7:c5:33:68:19:d4:da:d2:b4:f9:56: a1:43:2e:c8:12:f2:79:ca:87:b8:f8:33:75:b4:67: 02:8d:82:96:05:87:13:ec:5f:7e:d3:7c:00:75:0f: 39:a7:6d:bb:44:23:1e:13:7d:6c:97:fa:21:69:23: 03:ce:6e:76:9a:e1:56:f1:bd:56:82:6d:90:5d:23: e3:d5:0b:6a:10:13:64:a1:76:e5:de:c1:1d:f6:88: 4c:95:ce:18:6f:5b:12:45:d9:a2:c2:67:2e:b4:ec: 18:ed:c7:6b:b4:3f:47:7d:c9:43:b3:3e:6d:86:5f: d1:44:d8:a0:b6:a6:19:32:c3:4c:cf:bd:64:b4:d0: 24:04:da:9d:64:15:75:57:49:d4:83:cf:df:ce:41: 10:96:5c:d2:34:ca:33:b8:51:2a:98:a4:ed:7a:a8: 90:f9:47:c7:cb:33:7a:95:4d:30:1f:b7:98:a6:ba: 27:b9:f6:c8:27:f7:16:49:3b:f3:07:e3:52:76:91: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B8:15:77:5E:E2:B5:77:80:A6:DE:C2:A2:E5:19:33:25:78:B9:72 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:50:96:1f:88:d9:b3:5a:9f:03:d4:76:d9:2a:b2:fa:e5:c9: 28:08:c0:fe:94:8e:c5:9f:80:cb:b6:71:f9:42:64:29:a7:0f: 5d:fa:91:07:74:6d:24:6c:e2:14:8f:81:77:cc:84:7f:a3:40: 13:34:14:d6:b9:e4:cd:29:9c:b9:4c:88:63:f3:5c:29:ba:a8: 6b:7d:30:95:bb:e8:7f:a0:83:fd:42:fe:76:e5:f6:79:c2:cb: b9:d8:78:6b:d9:e0:25:9e:5f:fb:50:8a:2e:4f:ea:0c:6e:1f: 40:50:a9:7c:f7:fe:9a:60:ae:fd:68:3b:5a:02:d3:08:d4:bf: 84:2c:65:a7:8b:83:77:22:a2:da:7d:52:d4:17:26:6b:31:db: 65:ed:d3:40:8e:ef:20:ac:d9:e8:b6:bf:f4:fc:5a:fa:75:7e: ae:fe:d5:ea:ca:56:d1:58:f2:89:f0:07:a0:12:49:1d:fe:f7: a4:0a:13:6c:7d:f5:4e:de:46:35:1c:8c:84:35:81:86:88:d4: a6:1f:de:f8:c9:67:c2:d0:d4:fb:cb:6b:76:f5:70:13:1d:bb: 30:a6:c9:c1:01:df:82:cb:e8:5e:d9:5d:9f:7d:f1:59:f7:02: ef:2a:c9:f1:f6:e8:bd:5e:bb:0e:57:4d:81:b7:7b:24:91:f3: 3f:38:d6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDnruSHFPJeKzdPRTBzObMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwOTI4MTEwMzEzWhcNMjYwOTI5MTEwMzEzWjAzMTEwLwYDVQQD Eyg2NmI4MTU3NzVlZTJiNTc3ODBhNmRlYzJhMmU1MTkzMzI1NzhiOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaZSUEz4C397KpLHc7INej4F0pX6 +9eCfrWy4YeSkjW+OE6jPaM2VhB0nJGivFz7auu7/6DUdVvBURw5kIDv98UzaBnU 2tK0+VahQy7IEvJ5yoe4+DN1tGcCjYKWBYcT7F9+03wAdQ85p227RCMeE31sl/oh aSMDzm52muFW8b1Wgm2QXSPj1QtqEBNkoXbl3sEd9ohMlc4Yb1sSRdmiwmcutOwY 7cdrtD9HfclDsz5thl/RRNigtqYZMsNMz71ktNAkBNqdZBV1V0nUg8/fzkEQllzS NMozuFEqmKTteqiQ+UfHyzN6lU0wH7eYpronufbIJ/cWSTvzB+NSdpHVQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa4FXde4rV3gKbewqLlGTMleLlyMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1CWH4jZ s1qfA9R22Sqy+uXJKAjA/pSOxZ+Ay7Zx+UJkKacPXfqRB3RtJGziFI+Bd8yEf6NA EzQU1rnkzSmcuUyIY/NcKbqoa30wlbvof6CD/UL+duX2ecLLudh4a9ngJZ5f+1CK Lk/qDG4fQFCpfPf+mmCu/Wg7WgLTCNS/hCxlp4uDdyKi2n1S1BcmazHbZe3TQI7v IKzZ6La/9Pxa+nV+rv7V6spW0VjyifAHoBJJHf73pAoTbH31Tt5GNRyMhDWBhojU ph/e+MlnwtDU+8trdvVwEx27MKbJwQHfgsvoXtldn33xWfcC7yrJ8fbovV67DldN gbd7JJHzPzjW7w== -----END CERTIFICATE-----Generated at Mon Sep 28 21:38:29 2026 by rpki-client