$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: PMNfTyvnOTsEw3+Y0Dg7UAvHwJqK78RxHAbN9MHYJRo= Subject key identifier: 23:75:2C:86:5B:65:61:56:4F:2C:F5:15:D8:00:E7:06:5B:40:F3:62 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 01A0D9BB9536E5FDE2D2BAEBB3EB55B81B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 17A9 Signing time: Fri 25 Sep 2026 18:02:24 +0000 Manifest this update: Fri 25 Sep 2026 18:02:24 +0000 Manifest next update: Sat 26 Sep 2026 18:02:24 +0000 Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=) 2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=) 3: 1-DJULH3ZwYfARcWJFOAy7L08L0o.roa (hash: uzSvKMA/ek9jjzwiFTQKtBUiZnp+CdlB8u/4bLmjAWk=) 4: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=) 5: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=) 6: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: 4CYiiqej2Lb1BLMSsflLNElXq8VOSgn5EdEVt5yHvcY=) 8: aL6bUGTHkpcHHWs-Po3_bkcw8N0.roa (hash: ri9rtr5v6mxkEnUcDShGl6eVFOsXr78RXTrqI9KwgSM=) 9: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=) 10: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=) 11: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:bb:95:36:e5:fd:e2:d2:ba:eb:b3:eb:55:b8:1b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Sep 25 18:02:24 2026 GMT Not After : Sep 26 18:02:24 2026 GMT Subject: CN=23752c865b6561564f2cf515d800e7065b40f362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:2f:ef:77:d4:b5:97:fc:22:06:ac:35:33: 65:5e:3d:f7:2a:b1:f2:25:d9:76:44:56:c8:59:34: 25:c6:07:45:e8:c6:0a:78:6c:5c:c9:8e:26:23:52: 31:d4:a6:31:67:6a:20:2d:0d:e3:57:e0:1c:08:8d: 6c:ad:e1:50:e9:e0:77:69:ad:8e:28:e9:29:11:39: 03:d6:98:e2:7b:5a:2d:6a:73:27:67:e3:a3:97:69: 96:be:0e:21:2a:10:a1:a1:3e:c6:b4:d0:38:a2:48: 68:9a:4a:71:c2:cf:03:0d:1d:74:b7:c0:8f:16:3d: 29:2d:8c:69:9e:53:83:4a:89:e0:0c:48:9e:1c:fc: 2c:1e:89:fb:14:64:43:9b:dd:16:97:60:5e:68:bf: b6:2b:af:a3:51:82:15:25:9d:af:8d:88:3d:77:18: fa:45:1d:cb:5d:cc:f4:f1:d6:5d:33:54:f9:ce:84: c3:16:4c:d4:1a:fa:d5:8f:f7:40:e8:8a:c3:2e:5d: a1:ea:51:30:b7:82:b6:41:24:6b:97:8b:a2:b4:c4: 99:31:b1:a0:48:b6:da:48:45:60:53:b3:87:41:9d: 0e:24:81:64:ab:20:d5:c3:d6:b3:bf:1f:fe:9a:bd: fd:0f:fe:a2:32:b9:23:32:ae:0c:81:4d:9a:d9:3a: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:75:2C:86:5B:65:61:56:4F:2C:F5:15:D8:00:E7:06:5B:40:F3:62 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4e:48:88:95:88:02:0f:0e:9f:fa:d2:33:6b:3e:bb:10:a9: 4d:d2:db:1d:56:d1:ee:95:17:6b:be:74:65:00:0b:cd:57:09: 5f:a4:c7:e2:b5:41:07:ef:6c:ad:9d:42:41:fb:14:e6:1f:a9: 8e:a4:ec:06:77:15:25:3e:53:f3:c0:f8:2e:41:16:4d:94:fe: 5c:78:d0:33:de:e2:50:73:0c:57:8b:dc:5c:3d:5e:e0:aa:0e: 7f:07:28:e1:0c:ef:56:62:02:32:37:b3:37:d0:1d:e2:a7:03: 01:4f:a4:d1:91:83:91:65:91:94:eb:2f:1a:7b:75:66:0f:cd: f2:bd:29:be:61:30:13:f4:2b:b1:2b:4f:39:97:6a:97:ef:0e: 77:fa:19:87:23:73:10:58:85:38:b3:67:4c:83:ba:61:be:69: ee:fc:29:aa:6c:55:d5:03:90:fc:12:42:dd:27:f8:ee:4c:a9: bc:b5:a3:04:e2:5d:ed:2b:a8:f7:8a:29:67:53:11:82:5d:78: 48:ac:1d:69:2e:40:ab:f3:60:2a:29:c7:42:81:db:63:49:d7: b7:aa:c0:65:83:e8:0a:3e:3b:56:e6:aa:49:32:90:cc:e3:43: 06:c8:00:74:96:6f:38:1c:42:98:f8:23:f2:3b:09:d6:6a:af: c9:90:43:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZu5U25f3i0rrrs+tVuBtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwOTI1MTgwMjI0WhcNMjYwOTI2MTgwMjI0WjAzMTEwLwYDVQQD EygyMzc1MmM4NjViNjU2MTU2NGYyY2Y1MTVkODAwZTcwNjViNDBmMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFEv73fUtZf8IgasNTNlXj33KrHy Jdl2RFbIWTQlxgdF6MYKeGxcyY4mI1Ix1KYxZ2ogLQ3jV+AcCI1sreFQ6eB3aa2O KOkpETkD1pjie1otanMnZ+Ojl2mWvg4hKhChoT7GtNA4okhomkpxws8DDR10t8CP Fj0pLYxpnlODSongDEieHPwsHon7FGRDm90Wl2BeaL+2K6+jUYIVJZ2vjYg9dxj6 RR3LXcz08dZdM1T5zoTDFkzUGvrVj/dA6IrDLl2h6lEwt4K2QSRrl4uitMSZMbGg SLbaSEVgU7OHQZ0OJIFkqyDVw9azvx/+mr39D/6iMrkjMq4MgU2a2ToqIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN1LIZbZWFWTyz1FdgA5wZbQPNiMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU5IiJWI Ag8On/rSM2s+uxCpTdLbHVbR7pUXa750ZQALzVcJX6TH4rVBB+9srZ1CQfsU5h+p jqTsBncVJT5T88D4LkEWTZT+XHjQM97iUHMMV4vcXD1e4KoOfwco4QzvVmICMjez N9Ad4qcDAU+k0ZGDkWWRlOsvGnt1Zg/N8r0pvmEwE/QrsStPOZdql+8Od/oZhyNz EFiFOLNnTIO6Yb5p7vwpqmxV1QOQ/BJC3Sf47kypvLWjBOJd7Suo94opZ1MRgl14 SKwdaS5Aq/NgKinHQoHbY0nXt6rAZYPoCj47VuaqSTKQzONDBsgAdJZvOBxCmPgj 8jsJ1mqvyZBDBw== -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:26 2026 by rpki-client