$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: j6C9gH9kvGeDBlZBYWchc43E5i+nb0YJRzrMyQ6nvv8= Subject key identifier: F3:80:6B:5E:B9:16:3B:98:D9:16:8B:0C:5A:66:F0:47:8C:FC:D6:98 Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 019F905A29FD05A0BD83DB0F6AFFB12DBEFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: 40 Signing time: Thu 23 Jul 2026 19:00:55 +0000 Manifest this update: Thu 23 Jul 2026 19:00:55 +0000 Manifest next update: Fri 24 Jul 2026 19:00:55 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 7: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (hash: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=) 8: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 9: W4KN4SDNmRYOwyhHxjuSolYafls.roa (hash: BQApeMUmBw8ONYahKVhEqtOAad+aaUlEyEzjh8Jh3Ok=) 10: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 11: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 12: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 13: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (hash: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=) 14: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 15: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: F8omUh66ZlAYxOz+PMwSCplAEgqsGeLEU739ZrQeTaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:29:fd:05:a0:bd:83:db:0f:6a:ff:b1:2d:be:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Jul 23 19:00:55 2026 GMT Not After : Jul 24 19:00:55 2026 GMT Subject: CN=f3806b5eb9163b98d9168b0c5a66f0478cfcd698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:3e:27:c1:ac:6f:66:8b:96:c5:32:16:ef: 01:a6:77:42:a5:30:ca:41:2c:34:b8:05:42:93:c8: 4b:60:9c:e6:03:ec:96:f3:0e:e5:31:b7:e1:01:05: dc:a8:a1:9e:06:80:cc:12:84:05:5b:10:86:e9:da: fd:b4:de:10:24:45:d1:38:79:a1:ce:51:9d:2c:ef: 45:a6:6c:14:65:bb:57:54:98:9d:d6:06:06:4d:6f: 1d:e4:36:34:fd:03:a8:c8:89:a5:ef:91:9f:0a:01: ea:b0:e1:95:1f:78:87:1d:fc:0a:b7:09:b5:57:f7: 4e:07:e5:71:9e:ff:82:e4:e0:0a:09:7b:ef:de:da: 90:f3:9c:82:df:9e:af:a7:7f:bd:a4:f4:4a:25:47: 5c:ac:07:eb:1d:eb:df:74:1e:b4:84:f4:e9:81:54: 14:d4:f5:a0:1c:59:cf:9e:1e:5f:3f:83:2f:14:54: fb:24:9d:96:27:bf:4d:93:98:0d:84:56:c3:e9:a9: 89:7c:1b:ae:9a:30:d1:59:01:2d:ea:36:d5:14:31: 1a:e5:a9:07:aa:df:23:8d:29:3b:fc:7a:5f:24:37: cd:ab:8b:d8:1a:f1:89:b9:67:e5:3c:8d:1b:c0:01: ba:56:cc:7d:65:86:af:ef:ea:97:b3:3c:b6:e8:d2: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:80:6B:5E:B9:16:3B:98:D9:16:8B:0C:5A:66:F0:47:8C:FC:D6:98 X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5a:8d:51:7c:a9:1c:2d:16:ab:a3:51:f0:bc:a4:a2:fa:13: 4e:7b:cd:18:1e:94:2f:2d:a8:73:56:0d:3f:0f:08:74:27:1a: e5:5f:d4:9e:4c:a7:fa:ed:0d:bf:9d:89:34:0d:a6:da:e4:4c: 44:10:c9:c5:16:11:3a:21:15:af:bb:a8:15:29:1c:dd:69:42: a7:3f:f3:c5:bb:12:6c:ad:f0:e9:f1:7c:be:c1:18:06:44:83: 67:75:a3:41:2a:c7:df:a9:06:8f:26:76:93:a8:2d:59:f7:4b: 2a:ca:5f:8a:32:40:6b:40:ac:ad:79:71:8e:a4:ae:4e:40:e2: 5c:04:83:df:e1:26:0e:46:2d:3f:51:6a:b6:f7:86:85:f8:78: 98:7f:32:50:24:0d:b6:dc:90:e2:c7:e7:10:40:54:cc:7a:39: f0:d6:4b:0f:cc:fc:e6:ce:e1:87:ba:93:5c:bc:3f:51:56:83: 04:5d:0a:23:4c:6d:ad:46:6a:a2:0e:c3:cd:df:26:19:83:f1: 8a:68:bd:36:74:0f:a9:60:f7:22:63:5c:d5:ed:99:6b:22:45: f4:ef:47:6d:3d:e4:56:51:c1:21:a0:c0:58:bb:d0:b2:69:11: e5:7c:b0:26:b1:1d:4c:a1:30:ca:74:07:6e:d4:1b:c0:2c:60: ae:91:1c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWin9BaC9g9sPav+xLb77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYwNzIzMTkwMDU1WhcNMjYwNzI0MTkwMDU1WjAzMTEwLwYDVQQD EyhmMzgwNmI1ZWI5MTYzYjk4ZDkxNjhiMGM1YTY2ZjA0NzhjZmNkNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorI+J8Gsb2aLlsUyFu8BpndCpTDK QSw0uAVCk8hLYJzmA+yW8w7lMbfhAQXcqKGeBoDMEoQFWxCG6dr9tN4QJEXROHmh zlGdLO9FpmwUZbtXVJid1gYGTW8d5DY0/QOoyIml75GfCgHqsOGVH3iHHfwKtwm1 V/dOB+Vxnv+C5OAKCXvv3tqQ85yC356vp3+9pPRKJUdcrAfrHevfdB60hPTpgVQU 1PWgHFnPnh5fP4MvFFT7JJ2WJ79Nk5gNhFbD6amJfBuumjDRWQEt6jbVFDEa5akH qt8jjSk7/HpfJDfNq4vYGvGJuWflPI0bwAG6Vsx9ZYav7+qXszy26NI1mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOAa165FjuY2RaLDFpm8EeM/NaYMB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFqNUXyp HC0Wq6NR8LykovoTTnvNGB6ULy2oc1YNPw8IdCca5V/Unkyn+u0Nv52JNA2m2uRM RBDJxRYROiEVr7uoFSkc3WlCpz/zxbsSbK3w6fF8vsEYBkSDZ3WjQSrH36kGjyZ2 k6gtWfdLKspfijJAa0CsrXlxjqSuTkDiXASD3+EmDkYtP1FqtveGhfh4mH8yUCQN ttyQ4sfnEEBUzHo58NZLD8z85s7hh7qTXLw/UVaDBF0KI0xtrUZqog7Dzd8mGYPx imi9NnQPqWD3ImNc1e2ZayJF9O9HbT3kVlHBIaDAWLvQsmkR5XywJrEdTKEwynQH btQbwCxgrpEc6Q== -----END CERTIFICATE-----Generated at Fri Jul 24 03:26:34 2026 by rpki-client