$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: 4GVDK7SaODJe99FEEVZdra3on0W70scqvCjSY21Z8+I= Subject key identifier: 0D:DD:52:42:15:AD:17:74:93:1F:8F:61:C6:E7:22:29:8D:4F:02:54 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019E1D22C2843E57378065B22D4EDAB11D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 127A Signing time: Tue 12 May 2026 17:01:17 +0000 Manifest this update: Tue 12 May 2026 17:01:17 +0000 Manifest next update: Wed 13 May 2026 17:01:17 +0000 Files and hashes: 1: 1-lSK4g6vio4Q2ItVI-Eg5TYRBmw.roa (hash: esM2lFxwgBwPC4gGXM/vlSi23u2YThz7r4cR0F65ak0=) 2: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=) 3: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=) 4: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=) 5: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=) 6: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=) 7: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=) 8: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=) 9: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=) 10: fQbrkFWCEhPNbu1hyR8j_r0b60M.roa (hash: jbrDBJXSw3JZiZBS6EObxYKJvQO6pJEX+TDEGx0U8/g=) 11: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=) 12: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=) 13: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: Ai01Xev+zk/OJAUZg1zxWCFlv/NdscExdr/ghEgDHt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:c2:84:3e:57:37:80:65:b2:2d:4e:da:b1:1d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: May 12 17:01:17 2026 GMT Not After : May 13 17:01:17 2026 GMT Subject: CN=0ddd524215ad1774931f8f61c6e722298d4f0254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:c6:95:12:0c:45:f6:0a:de:1c:2b:8c:90: 61:0e:bd:4c:80:0a:e8:7e:07:c6:74:63:a4:ac:02: 59:2b:df:66:29:37:f7:a6:5c:98:dd:21:ff:5c:bf: 8c:a6:28:e4:e4:b9:d7:50:f9:ef:f8:47:7b:2e:cc: 16:a7:8a:1b:89:72:a1:f9:30:e8:a9:42:07:eb:3c: 62:48:b9:89:83:d5:f4:39:6e:ad:74:57:18:f6:8b: a9:62:63:dc:1a:27:7a:5c:1a:2a:f2:52:da:1c:2b: 94:06:f9:61:d8:fb:d5:5b:1e:c9:5e:54:71:b8:76: 0c:e4:64:a4:af:5e:c4:c0:ba:e8:3f:9f:be:6b:4d: a2:05:c9:a9:96:77:3a:5c:be:45:7d:31:c1:f7:1a: 09:a2:0f:44:13:16:67:fe:3c:af:24:36:14:b3:15: b3:da:65:a5:2e:a2:bc:39:66:05:16:29:d2:7b:93: f0:08:ad:d2:7a:54:2e:78:ae:89:cb:97:36:24:4b: ab:c6:d9:19:ab:af:54:8b:5c:e5:4d:00:3e:1f:26: c9:85:72:52:b7:31:3b:d1:fd:bb:9a:73:8b:fb:83: a6:51:93:81:a7:2f:bf:4d:14:d5:34:2d:c5:94:8f: 4e:e1:f1:e2:e8:50:70:75:1a:87:d2:44:a1:47:7d: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DD:52:42:15:AD:17:74:93:1F:8F:61:C6:E7:22:29:8D:4F:02:54 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5b:a4:f7:d5:99:a3:e5:e8:a8:b3:cb:fd:f6:7f:e6:8f:fc: 7f:61:c5:54:1f:1f:d2:b8:f5:51:1e:3d:75:fb:79:7a:b8:4b: c8:b0:10:49:f7:f6:d5:7c:29:53:9f:85:0e:6a:fd:95:3c:64: 04:36:ab:b9:5c:29:f9:04:10:f7:c8:66:a4:48:d3:78:b7:dc: ed:ce:a0:de:76:7f:39:cc:2c:67:9b:82:ed:9c:cd:a8:bc:7d: ae:6f:d8:53:7e:21:1a:54:57:16:7c:67:c1:20:79:2e:57:5c: b4:7d:ef:9f:46:8c:61:32:39:40:7e:9a:70:47:be:33:94:75: 36:4a:f2:9d:6e:59:67:fb:1b:00:0a:e5:e9:0f:d0:1c:15:6a: 1a:7b:dd:0a:3e:87:4b:30:39:24:d1:4b:ef:1b:7e:20:56:72: e1:9a:36:6f:82:ba:a4:b2:f4:8e:cf:6f:27:cd:03:87:19:ad: 8c:15:56:f8:41:39:c5:f6:de:3a:de:1d:93:c5:ba:1a:f6:22: fe:32:cb:00:c5:58:b4:5a:13:87:1b:7b:e7:7a:42:22:d7:60: 58:a2:ce:a4:fe:13:8d:e9:96:56:ce:c2:0e:f2:f4:f7:81:e7: 0a:af:c7:5d:d2:55:85:d8:f6:6c:79:15:f3:88:8d:f4:cf:76: a2:1d:52:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dIsKEPlc3gGWyLU7asR2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwNTEyMTcwMTE3WhcNMjYwNTEzMTcwMTE3WjAzMTEwLwYDVQQD EygwZGRkNTI0MjE1YWQxNzc0OTMxZjhmNjFjNmU3MjIyOThkNGYwMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtevGlRIMRfYK3hwrjJBhDr1MgAro fgfGdGOkrAJZK99mKTf3plyY3SH/XL+Mpijk5LnXUPnv+Ed7LswWp4obiXKh+TDo qUIH6zxiSLmJg9X0OW6tdFcY9oupYmPcGid6XBoq8lLaHCuUBvlh2PvVWx7JXlRx uHYM5GSkr17EwLroP5++a02iBcmplnc6XL5FfTHB9xoJog9EExZn/jyvJDYUsxWz 2mWlLqK8OWYFFinSe5PwCK3SelQueK6Jy5c2JEurxtkZq69Ui1zlTQA+HybJhXJS tzE70f27mnOL+4OmUZOBpy+/TRTVNC3FlI9O4fHi6FBwdRqH0kShR32FbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3dUkIVrRd0kx+PYcbnIimNTwJUMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVuk99WZ o+XoqLPL/fZ/5o/8f2HFVB8f0rj1UR49dft5erhLyLAQSff21XwpU5+FDmr9lTxk BDaruVwp+QQQ98hmpEjTeLfc7c6g3nZ/OcwsZ5uC7ZzNqLx9rm/YU34hGlRXFnxn wSB5LldctH3vn0aMYTI5QH6acEe+M5R1NkrynW5ZZ/sbAArl6Q/QHBVqGnvdCj6H SzA5JNFL7xt+IFZy4Zo2b4K6pLL0js9vJ80DhxmtjBVW+EE5xfbeOt4dk8W6GvYi /jLLAMVYtFoThxt753pCItdgWKLOpP4TjemWVs7CDvL094HnCq/HXdJVhdj2bHkV 84iN9M92oh1Sxw== -----END CERTIFICATE-----Generated at Wed May 13 01:23:41 2026 by rpki-client