$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: urwAwkv8tAYG/SlI12ZASMAhrfy62AQ1K1VmTjdQE08= Subject key identifier: EB:66:4D:67:64:55:8E:3D:74:72:F9:27:CE:A0:34:F4:9F:D7:A7:5E Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019D333E888604BF2AB2BB751884CBFF04EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 1200 Signing time: Sat 28 Mar 2026 07:00:29 +0000 Manifest this update: Sat 28 Mar 2026 07:00:29 +0000 Manifest next update: Sun 29 Mar 2026 07:00:29 +0000 Files and hashes: 1: 7uUkarpoLSKXZb8KKU7nGbdWub4.roa (hash: hF20KKlkDu1aUaMBzEWT8eh/FFNRjKjjLp20EJvOzNk=) 2: 8EH8XojvTl59fMj28V15lI3rA6o.roa (hash: i/MZ1nWymwFA/vv9I9GDpd/nHPWEr35DQR2JO9bzttA=) 3: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=) 4: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=) 5: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=) 6: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=) 7: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=) 8: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=) 9: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=) 10: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=) 11: fQbrkFWCEhPNbu1hyR8j_r0b60M.roa (hash: jbrDBJXSw3JZiZBS6EObxYKJvQO6pJEX+TDEGx0U8/g=) 12: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=) 13: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: uYKxc3LoniAsTn2a1J/X/+g3liOxonCB1rEdlHgITiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:33:3e:88:86:04:bf:2a:b2:bb:75:18:84:cb:ff:04:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Mar 28 07:00:29 2026 GMT Not After : Mar 29 07:00:29 2026 GMT Subject: CN=eb664d6764558e3d7472f927cea034f49fd7a75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:7d:2b:86:83:0b:67:5f:c9:42:a0:ef:50: 58:36:ee:10:00:ed:1d:e3:8c:68:60:d2:f5:cb:b9: d0:ec:60:28:c2:d7:c2:0e:40:ed:ca:10:b6:08:28: 21:fb:c1:1c:e5:b1:e0:6f:3e:cb:5a:64:82:4c:b7: 38:f2:1a:b7:ad:a0:f5:12:8c:a8:0f:b4:c2:7a:35: ae:c0:d3:4f:47:ca:52:6f:4c:7b:ee:90:12:0f:98: 7c:5d:0f:8e:94:f6:a1:2c:d4:17:39:09:c1:19:f5: 10:f6:a0:2d:8b:91:25:99:d0:d9:e0:1f:4f:dc:bc: fc:ab:21:c8:86:bd:5c:87:9f:8e:23:53:cd:1f:61: 72:50:70:40:6c:56:bc:5d:d0:bf:c8:f2:1f:31:5d: 7e:5c:c8:ba:e3:4e:df:95:fc:99:63:24:cf:06:a8: 41:df:7a:04:36:31:2a:ed:84:b9:34:31:cb:68:67: 32:50:5d:25:ed:0a:1c:e0:7f:b8:53:1f:7d:9b:8e: e0:95:64:42:e5:3e:79:61:99:71:9d:d2:84:e6:a7: 24:2c:ad:7c:19:ac:30:c8:3f:df:45:47:19:c5:c8: b7:32:77:53:ce:0e:a2:5d:48:ba:da:e9:8f:cc:c2: e7:4d:8e:9a:c5:94:7d:e9:ec:27:5d:dc:44:34:16: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:66:4D:67:64:55:8E:3D:74:72:F9:27:CE:A0:34:F4:9F:D7:A7:5E X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:87:e2:4c:85:9d:31:50:96:1d:2f:24:93:7e:78:c5:a9:d9: b6:03:4b:6d:80:87:13:ac:ed:d4:0c:e4:67:5b:3f:6a:38:d7: 16:7f:ad:e3:b2:99:22:8d:52:f7:fa:c6:47:bd:0e:6c:01:c4: c9:f6:dc:73:fe:a4:34:f7:86:7d:5f:a7:27:08:56:31:c0:01: d1:3b:ef:53:87:a2:18:33:50:cf:cb:3b:ea:17:8b:b5:1d:b0: e8:4d:b4:a3:f4:0e:63:4b:4e:e6:e2:40:db:ac:b7:2b:92:ef: da:26:3c:53:a0:b1:49:05:ba:7b:93:29:b6:c0:6a:18:5e:cc: df:ac:82:1d:cf:ca:b1:22:92:fc:51:a8:88:ed:4f:60:fc:17: c8:ee:7f:06:60:bd:dd:2c:08:e2:a8:2f:f9:f1:93:cd:03:32: 57:2e:13:be:90:8d:d7:d4:7a:2a:d0:4f:e2:91:5f:ec:13:5f: 5a:0b:31:24:dd:4a:60:12:72:35:ff:96:68:49:5f:33:af:ce: b4:ef:08:cd:b3:5f:7e:04:f9:65:0b:c1:1e:6c:0e:8e:02:c8: e3:5e:38:f0:6a:3f:02:1d:b8:35:95:01:4a:f5:10:0b:f4:a0: d8:9b:e1:dc:ab:b6:e9:86:69:f3:94:0f:10:64:2e:1d:eb:de: b2:3a:da:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0zPoiGBL8qsrt1GITL/wTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwMzI4MDcwMDI5WhcNMjYwMzI5MDcwMDI5WjAzMTEwLwYDVQQD EyhlYjY2NGQ2NzY0NTU4ZTNkNzQ3MmY5MjdjZWEwMzRmNDlmZDdhNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps99K4aDC2dfyUKg71BYNu4QAO0d 44xoYNL1y7nQ7GAowtfCDkDtyhC2CCgh+8Ec5bHgbz7LWmSCTLc48hq3raD1Eoyo D7TCejWuwNNPR8pSb0x77pASD5h8XQ+OlPahLNQXOQnBGfUQ9qAti5ElmdDZ4B9P 3Lz8qyHIhr1ch5+OI1PNH2FyUHBAbFa8XdC/yPIfMV1+XMi6407flfyZYyTPBqhB 33oENjEq7YS5NDHLaGcyUF0l7Qoc4H+4Ux99m47glWRC5T55YZlxndKE5qckLK18 GawwyD/fRUcZxci3MndTzg6iXUi62umPzMLnTY6axZR96ewnXdxENBaCqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtmTWdkVY49dHL5J86gNPSf16deMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4fiTIWd MVCWHS8kk354xanZtgNLbYCHE6zt1AzkZ1s/ajjXFn+t47KZIo1S9/rGR70ObAHE yfbcc/6kNPeGfV+nJwhWMcAB0TvvU4eiGDNQz8s76heLtR2w6E20o/QOY0tO5uJA 26y3K5Lv2iY8U6CxSQW6e5MptsBqGF7M36yCHc/KsSKS/FGoiO1PYPwXyO5/BmC9 3SwI4qgv+fGTzQMyVy4TvpCN19R6KtBP4pFf7BNfWgsxJN1KYBJyNf+WaElfM6/O tO8IzbNffgT5ZQvBHmwOjgLI41448Go/Ah24NZUBSvUQC/Sg2Jvh3Ku26YZp85QP EGQuHevesjra+Q== -----END CERTIFICATE-----Generated at Sat Mar 28 10:37:01 2026 by rpki-client