$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: +aXLfukp5+m9tQ4nxNbgcNZ5XtlQKts8LSmJqthZ4Us= Subject key identifier: 73:5E:5B:C2:A0:8B:B6:59:3F:EB:54:A2:F8:3B:8C:A8:BC:53:3A:14 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 01A0D2375B63AD4A1D973318FA255D7AE63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 13E4 Signing time: Thu 24 Sep 2026 07:00:38 +0000 Manifest this update: Thu 24 Sep 2026 07:00:38 +0000 Manifest next update: Fri 25 Sep 2026 07:00:38 +0000 Files and hashes: 1: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=) 2: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=) 3: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=) 4: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=) 5: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=) 6: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=) 7: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=) 8: a_baIkGFreZCkQEDrTUpOc9RljI.roa (hash: oCF0GgcCbPHk3wbbPuSP852CME0/FbCGLSMKdZU6cDI=) 9: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=) 10: dOwr2B8WnphDIXpwhxX7hEeAXoc.roa (hash: avK0kgve7pfAgs0RWzv3wt9hc94t2lmnhaoGfrVsWwI=) 11: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=) 12: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=) 13: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: bd225aZAEXnsLB1pz3OC3TBvPJOg5e3HvKZ1abuDE1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:37:5b:63:ad:4a:1d:97:33:18:fa:25:5d:7a:e6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Sep 24 07:00:38 2026 GMT Not After : Sep 25 07:00:38 2026 GMT Subject: CN=735e5bc2a08bb6593feb54a2f83b8ca8bc533a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:b4:e0:0b:12:5e:96:fa:76:df:c1:23:5f: ac:59:b4:58:a4:7d:62:d9:e1:47:48:1c:d0:12:0d: 22:86:a3:26:45:6b:e3:79:87:68:72:bb:32:d6:85: 78:d1:40:71:89:f1:8a:11:44:2c:d1:82:e2:40:d9: 5f:41:86:bd:3a:e5:6c:1d:eb:2c:ca:f0:91:98:d7: 25:d4:d1:b6:a1:c0:02:bc:18:a5:11:20:7d:8b:c1: bd:71:70:3b:87:88:7c:66:64:a5:e4:c3:53:5b:3c: 5b:91:29:0a:08:35:f1:4d:84:9b:d7:e4:c5:ff:9c: a2:1b:d2:ca:5c:07:cb:34:ff:a9:e3:36:0d:d2:42: 40:11:ab:54:9b:52:8c:7a:f8:2f:fe:eb:2c:a7:85: d1:8b:03:e5:7e:cf:2e:ed:c9:d5:3e:64:71:be:dd: 1e:95:c8:ff:21:94:1d:86:66:d7:e8:a3:4d:e4:3c: d9:d9:3d:04:ff:79:f8:1c:c4:f7:ba:65:75:7f:2a: 37:17:e7:66:43:92:aa:77:cb:da:00:40:60:e6:d0: bc:c1:83:e5:ea:19:65:16:6c:7c:9c:df:55:cb:41: 74:b2:f7:44:02:b0:32:5b:6e:9b:b1:07:3b:79:aa: b6:c8:46:ee:0f:0a:8d:e9:2a:2d:6a:b0:92:79:bb: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5E:5B:C2:A0:8B:B6:59:3F:EB:54:A2:F8:3B:8C:A8:BC:53:3A:14 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bc:ca:2e:84:4f:7d:57:b7:ed:d6:9d:e8:54:06:dc:e8:76: 84:dc:be:d2:e9:b5:b7:53:d0:cc:a9:20:a8:16:dd:8c:ef:f0: b4:50:30:ba:4f:cb:a1:5d:80:7d:c9:fd:bb:88:8b:44:7b:21: 57:b6:dc:17:50:cc:a2:8a:2a:6e:91:28:01:ac:be:a1:1f:76: 4e:82:39:56:40:43:e1:f2:29:77:47:74:d3:2b:e7:3a:01:66: a0:05:97:dd:73:b2:7a:1e:c1:d4:20:ee:f6:f1:3d:fa:c2:71: 52:b3:6c:a6:aa:a7:b4:0f:4b:e6:6b:5d:e2:d7:5a:b5:07:84: f1:42:2c:e6:b1:70:5d:17:ef:f2:36:89:91:d6:0d:39:dc:34: 23:ce:7f:7b:f8:b6:f2:40:23:79:ee:75:b1:80:88:08:8e:2e: bc:ba:d4:b3:54:81:fd:ee:81:96:c2:80:8f:09:d7:c9:dc:48: 7b:ed:e8:22:5f:37:4a:05:ea:2b:df:f3:17:48:88:77:90:c3: a2:91:8a:6b:f7:1c:95:d4:8b:7d:08:9d:6c:04:09:49:e5:46: f1:89:0f:e6:b4:da:14:f5:ca:4a:4b:39:8c:34:99:15:a7:3b: f9:a5:f2:40:33:5a:ba:d4:47:70:fb:34:ab:25:5f:4d:2e:ab: 25:3f:71:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSN1tjrUodlzMY+iVdeuY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwOTI0MDcwMDM4WhcNMjYwOTI1MDcwMDM4WjAzMTEwLwYDVQQD Eyg3MzVlNWJjMmEwOGJiNjU5M2ZlYjU0YTJmODNiOGNhOGJjNTMzYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qi04AsSXpb6dt/BI1+sWbRYpH1i 2eFHSBzQEg0ihqMmRWvjeYdocrsy1oV40UBxifGKEUQs0YLiQNlfQYa9OuVsHess yvCRmNcl1NG2ocACvBilESB9i8G9cXA7h4h8ZmSl5MNTWzxbkSkKCDXxTYSb1+TF /5yiG9LKXAfLNP+p4zYN0kJAEatUm1KMevgv/ussp4XRiwPlfs8u7cnVPmRxvt0e lcj/IZQdhmbX6KNN5DzZ2T0E/3n4HMT3umV1fyo3F+dmQ5Kqd8vaAEBg5tC8wYPl 6hllFmx8nN9Vy0F0svdEArAyW26bsQc7eaq2yEbuDwqN6SotarCSebsbSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNeW8Kgi7ZZP+tUovg7jKi8UzoUMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbzKLoRP fVe37dad6FQG3Oh2hNy+0um1t1PQzKkgqBbdjO/wtFAwuk/LoV2Afcn9u4iLRHsh V7bcF1DMoooqbpEoAay+oR92ToI5VkBD4fIpd0d00yvnOgFmoAWX3XOyeh7B1CDu 9vE9+sJxUrNspqqntA9L5mtd4tdatQeE8UIs5rFwXRfv8jaJkdYNOdw0I85/e/i2 8kAjee51sYCICI4uvLrUs1SB/e6BlsKAjwnXydxIe+3oIl83SgXqK9/zF0iId5DD opGKa/ccldSLfQidbAQJSeVG8YkP5rTaFPXKSks5jDSZFac7+aXyQDNautRHcPs0 qyVfTS6rJT9xhA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:35:04 2026 by rpki-client