$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: OydTjl+b2T+AYBgHA+ELf2ez3xlNwRwhwlZ82efpVzE= Subject key identifier: 40:A9:1F:8E:45:9A:C3:6B:CD:C3:A6:32:93:DE:2C:87:EC:D0:CE:69 Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 01A1DD5DFA69670316F875EF18B935B5728A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: 0178 Signing time: Sun 15 Nov 2026 04:01:25 +0000 Manifest this update: Sun 15 Nov 2026 04:01:25 +0000 Manifest next update: Mon 16 Nov 2026 04:01:25 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 7: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 8: _bscvb9F5YOkNinfAMloHB_BrEo.roa (hash: d0kBFyVzMpcFxAN6QAtTkY3wGD2zhl/QNVYcFslA7FE=) 9: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 10: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 11: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 12: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 13: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: hmE7VFhbeeyqZwWwdLxQW3Q68/BXY6pYK/9PMMJ0/C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:5d:fa:69:67:03:16:f8:75:ef:18:b9:35:b5:72:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Nov 15 04:01:25 2026 GMT Not After : Nov 16 04:01:25 2026 GMT Subject: CN=40a91f8e459ac36bcdc3a63293de2c87ecd0ce69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:b8:0f:fa:e2:69:bb:b4:b7:f1:a7:d9:6c: 7a:de:c3:b6:c0:62:e9:b6:73:d6:68:ce:eb:a4:28: 8d:9f:8b:4a:1f:b2:e0:b4:01:1f:ce:70:28:5d:42: 3c:81:78:19:f9:28:b4:20:b3:fa:22:05:11:58:78: 65:91:80:a6:b7:95:20:21:dd:5c:26:76:95:9d:9e: f3:4a:7e:1a:85:30:a9:37:a4:cb:d4:43:85:e2:3a: f8:43:52:ba:ac:eb:64:99:de:14:45:05:85:8c:5b: 10:e5:fb:94:f8:5c:cf:ef:d9:d4:97:d7:2f:81:68: 41:69:78:9a:09:e8:7d:ea:7f:d4:13:dd:63:28:f5: e6:c0:89:e0:fa:51:d3:56:1b:0d:69:f9:ab:10:ab: a3:8d:92:49:54:a0:52:02:cb:43:5d:a4:3c:c5:fd: fb:8a:5c:5e:39:b5:25:a9:45:de:9c:84:e9:7a:d1: 71:9d:7e:dd:49:bf:ba:b3:17:70:54:9a:44:7e:a7: bd:af:fd:e4:4d:a2:bc:ed:dc:f0:95:03:eb:43:6f: 10:50:d2:cc:a0:f6:88:19:7f:60:5c:7e:ec:48:35: 8b:5b:0a:ab:03:e9:7f:f8:e1:84:2f:bf:6b:71:74: 48:4d:88:94:91:2a:a3:44:40:3a:f2:ea:d3:10:8b: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:1F:8E:45:9A:C3:6B:CD:C3:A6:32:93:DE:2C:87:EC:D0:CE:69 X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b9:cc:7f:58:ce:57:1a:7c:1e:8e:d6:b1:01:ef:cc:1d:ff: 40:fd:ec:c2:a2:7b:10:37:7b:e0:d8:1d:91:e3:e2:53:e9:8b: f6:66:32:ae:c6:d2:c2:e4:2d:93:24:c5:ff:21:65:c0:5c:26: f0:38:2b:9f:a2:c3:34:41:9c:9e:63:2a:37:f4:d0:09:66:5a: 60:f6:a7:57:97:f9:39:73:40:ba:30:b6:73:43:b0:8b:04:0d: 4a:3d:99:71:0d:99:39:21:57:16:d9:d0:8c:c7:41:91:f1:fd: e8:92:21:09:3d:9a:fa:3c:e1:02:26:b5:15:d6:d0:29:54:48: a9:6c:42:95:5e:0e:b0:7b:1f:98:a3:5c:b4:07:ef:ee:23:9c: 86:10:17:ee:19:05:66:4f:69:e8:cc:46:e6:47:22:ba:77:33: 58:8e:c8:ad:fd:25:c3:76:a8:d4:98:18:57:c3:17:a3:68:5b: 14:06:18:81:4a:ad:d4:87:5e:30:cf:6d:3d:24:05:66:3f:6e: e6:11:40:c7:ee:05:be:61:99:e3:fa:fd:10:02:bb:7b:8f:41: b8:88:80:19:b1:7a:ab:a9:de:10:95:52:62:f1:8e:99:4b:34: ad:82:7e:4f:f7:66:a0:08:e4:e3:79:67:1a:b9:53:27:00:07: 58:09:31:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdXfppZwMW+HXvGLk1tXKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYxMTE1MDQwMTI1WhcNMjYxMTE2MDQwMTI1WjAzMTEwLwYDVQQD Eyg0MGE5MWY4ZTQ1OWFjMzZiY2RjM2E2MzI5M2RlMmM4N2VjZDBjZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip24D/riabu0t/Gn2Wx63sO2wGLp tnPWaM7rpCiNn4tKH7LgtAEfznAoXUI8gXgZ+Si0ILP6IgURWHhlkYCmt5UgId1c JnaVnZ7zSn4ahTCpN6TL1EOF4jr4Q1K6rOtkmd4URQWFjFsQ5fuU+FzP79nUl9cv gWhBaXiaCeh96n/UE91jKPXmwIng+lHTVhsNafmrEKujjZJJVKBSAstDXaQ8xf37 ilxeObUlqUXenITpetFxnX7dSb+6sxdwVJpEfqe9r/3kTaK87dzwlQPrQ28QUNLM oPaIGX9gXH7sSDWLWwqrA+l/+OGEL79rcXRITYiUkSqjREA68urTEIstewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECpH45FmsNrzcOmMpPeLIfs0M5pMB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrnMf1jO Vxp8Ho7WsQHvzB3/QP3swqJ7EDd74NgdkePiU+mL9mYyrsbSwuQtkyTF/yFlwFwm 8Dgrn6LDNEGcnmMqN/TQCWZaYPanV5f5OXNAujC2c0OwiwQNSj2ZcQ2ZOSFXFtnQ jMdBkfH96JIhCT2a+jzhAia1FdbQKVRIqWxClV4OsHsfmKNctAfv7iOchhAX7hkF Zk9p6MxG5kciunczWI7Irf0lw3ao1JgYV8MXo2hbFAYYgUqt1IdeMM9tPSQFZj9u 5hFAx+4FvmGZ4/r9EAK7e49BuIiAGbF6q6neEJVSYvGOmUs0rYJ+T/dmoAjk43ln GrlTJwAHWAkxxw== -----END CERTIFICATE-----Generated at Sun Nov 15 08:36:04 2026 by rpki-client