$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: IEYW1nhTUbDEAfvW/DFTb7Nn2Cvwr3H+Wau6g4Z+xgk= Subject key identifier: 98:86:7C:92:67:D6:84:45:C2:8E:3E:58:B0:5D:37:CF:62:C1:FD:53 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019E1D596F3727802DD1AC7E62DCCFAC740D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 163C Signing time: Tue 12 May 2026 18:01:00 +0000 Manifest this update: Tue 12 May 2026 18:01:00 +0000 Manifest next update: Wed 13 May 2026 18:01:00 +0000 Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=) 2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=) 3: 1nhxPQG32vcSIjQSneD3Rx0UPrY.roa (hash: 7bTW2ORci72OzWYoeWMSPEDiNsHnos2acJbGJlZR0To=) 4: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=) 5: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=) 6: HdjsvuGngyQVaPI5fw1lo5MVCyY.roa (hash: 0CGNcQROu66TMRCGsRz+KuSUMZeH1aS1RfY+HTTw7Bg=) 7: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=) 8: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: k1jaNjP15VZrEQfZAgZ9H3GPnbDGidBkFcLtzA0f2fM=) 9: a_MXwN7MuegnVCIAkZ6clu1iX4o.roa (hash: 8VPNVVCKyMOejDUVqp4xHvLzU1vxgcPn/f9Z8nB1/Bk=) 10: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=) 11: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=) 12: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:6f:37:27:80:2d:d1:ac:7e:62:dc:cf:ac:74:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: May 12 18:01:00 2026 GMT Not After : May 13 18:01:00 2026 GMT Subject: CN=98867c9267d68445c28e3e58b05d37cf62c1fd53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:e8:b3:5e:0a:fd:18:78:33:72:17:2c:9d: ae:9d:71:2b:f3:93:57:6c:55:4d:24:07:21:23:76: a7:ed:9d:01:d4:f3:d2:49:86:6b:9e:2f:3f:06:29: fd:1f:b7:3a:89:ee:db:6a:18:da:5d:50:f7:ce:44: ae:75:0d:54:60:c1:f0:ad:23:f4:2c:b6:52:60:95: 9c:c9:bb:46:30:e8:9e:74:df:25:87:7c:b7:27:69: 54:c4:71:1e:0a:fc:f4:48:5a:3b:ed:c0:59:96:03: 82:85:de:d5:bc:c0:74:65:d8:19:00:19:9c:b1:0b: 5d:ae:87:de:f1:ab:49:e5:7a:6b:ec:f1:a1:0b:a9: 44:1d:80:00:4d:d7:1c:77:23:f0:5d:be:75:ca:05: c8:ee:e6:32:7d:31:f6:73:5d:b4:5f:76:e7:ba:33: 09:88:f7:45:5c:9d:e5:09:1c:af:2d:b3:ff:3d:7d: c8:b7:e3:c1:11:19:4f:f9:76:e0:6f:38:67:e7:55: 99:89:79:2e:9d:9e:63:d6:cb:9d:b4:22:08:3d:cb: 58:b4:94:0e:b9:0a:00:44:60:d5:0b:9d:c4:72:e8: 21:9f:26:4d:4e:b3:d7:ec:b0:e8:21:8b:8b:20:4b: 85:c2:e3:6c:3c:96:e2:31:1c:72:f7:30:08:e7:14: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:86:7C:92:67:D6:84:45:C2:8E:3E:58:B0:5D:37:CF:62:C1:FD:53 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:03:9d:b1:8c:0a:b1:63:1f:ba:88:27:d0:40:3f:56:79:d4: 8a:88:30:66:5c:23:b0:ac:ae:0e:99:ac:41:29:52:aa:bf:2b: 83:9c:5d:5f:58:8d:71:8d:a6:31:56:ca:2e:16:b5:4a:2f:61: 4a:76:f2:c6:bf:bb:bd:6c:c5:11:53:dc:9b:b8:e9:de:08:2f: f3:f7:23:2a:45:d2:21:74:45:bc:7f:e6:e6:f9:71:a0:e9:ac: ab:b9:19:73:06:64:a6:af:8e:13:30:ac:68:96:94:b3:a6:8d: e3:56:15:62:55:08:43:de:a3:bb:7c:d3:68:b9:50:a8:08:bd: b2:c8:8d:22:f6:3a:ff:d1:15:56:96:51:23:a2:59:ee:da:ba: 66:6a:a8:f7:db:2c:a2:61:20:25:3c:66:bb:55:48:7c:f9:72: 98:8d:44:c0:8f:98:51:03:3d:33:26:08:2e:bf:1b:a2:7f:6f: 99:c7:b5:4a:e0:db:a9:2d:c9:d4:7e:cd:7e:9d:16:a2:41:81: 62:9c:44:54:77:28:3f:0e:86:84:75:30:78:85:13:3d:44:23: 1c:ec:33:86:61:4b:89:53:4b:f1:ef:45:fb:94:d9:62:01:66: 14:d7:89:0a:f3:50:9f:a7:fe:6e:e7:98:ee:ba:b5:2b:d2:f1: 3f:c5:cc:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWW83J4At0ax+YtzPrHQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwNTEyMTgwMTAwWhcNMjYwNTEzMTgwMTAwWjAzMTEwLwYDVQQD Eyg5ODg2N2M5MjY3ZDY4NDQ1YzI4ZTNlNThiMDVkMzdjZjYyYzFmZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MDos14K/Rh4M3IXLJ2unXEr85NX bFVNJAchI3an7Z0B1PPSSYZrni8/Bin9H7c6ie7bahjaXVD3zkSudQ1UYMHwrSP0 LLZSYJWcybtGMOiedN8lh3y3J2lUxHEeCvz0SFo77cBZlgOChd7VvMB0ZdgZABmc sQtdrofe8atJ5Xpr7PGhC6lEHYAATdccdyPwXb51ygXI7uYyfTH2c120X3bnujMJ iPdFXJ3lCRyvLbP/PX3It+PBERlP+Xbgbzhn51WZiXkunZ5j1sudtCIIPctYtJQO uQoARGDVC53EcughnyZNTrPX7LDoIYuLIEuFwuNsPJbiMRxy9zAI5xTXFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiGfJJn1oRFwo4+WLBdN89iwf1TMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQOdsYwK sWMfuogn0EA/VnnUiogwZlwjsKyuDpmsQSlSqr8rg5xdX1iNcY2mMVbKLha1Si9h Snbyxr+7vWzFEVPcm7jp3ggv8/cjKkXSIXRFvH/m5vlxoOmsq7kZcwZkpq+OEzCs aJaUs6aN41YVYlUIQ96ju3zTaLlQqAi9ssiNIvY6/9EVVpZRI6JZ7tq6Zmqo99ss omEgJTxmu1VIfPlymI1EwI+YUQM9MyYILr8bon9vmce1SuDbqS3J1H7Nfp0WokGB YpxEVHcoPw6GhHUweIUTPUQjHOwzhmFLiVNL8e9F+5TZYgFmFNeJCvNQn6f+bueY 7rq1K9LxP8XMqw== -----END CERTIFICATE-----Generated at Wed May 13 03:37:18 2026 by rpki-client