$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft File: Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft (raw, json) Hash identifier: rBNG6D3npr+tKrZzog7w2zduM8yQJXQ2eL03AxsNbL0= Subject key identifier: 4B:1B:FF:42:1A:75:09:66:F3:A3:DA:F1:C4:DE:64:40:8F:90:0C:61 Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 01A0D192D3E172BBBF4461B44024F03E7086 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft Manifest number: 1A8E Signing time: Thu 24 Sep 2026 04:00:55 +0000 Manifest this update: Thu 24 Sep 2026 04:00:55 +0000 Manifest next update: Fri 25 Sep 2026 04:00:55 +0000 Files and hashes: 1: 4fvreBm1fiB96hVA9BShoZzJmBE.roa (hash: sO95QKm92ZKe4lks/TU2kN0OfaoKLa977mvoo4v6O4o=) 2: 7sBhsS3IKRcr33_U1JkKDJW68us.roa (hash: xY1ESwAhrRBt+0rhE/M4HExjqsDPer8OP3/L1PBN508=) 3: 83ipVLDqGfXpUsM1ALOpAd8Y4fI.roa (hash: EvJ+6iXJX0Ai/WiPQLIHCUik0aSQjwMQyqYlXy8gMgM=) 4: GjOqkzTnZSJ2IM-ilXZsSH0BDEs.roa (hash: ViNaPYttrQqtr/yvSEXih8SqVieBReHwf8y6XNPrJX0=) 5: JAaR4jCCnSQLvjrBZZCZLxsQln0.roa (hash: vEKk1FavUKcj+vyn6TLUVpoYaoLPl7KLYR+FhgyFQgw=) 6: SHrDuLu1n_sOrM4QgHdTZEoTAJE.roa (hash: CZGD8h+L9lai75+mnZoqHO1PESA8rXkcIWZSY/P/7rM=) 7: U0-V85hNklnWYB4UKE8-_DQj3cs.roa (hash: avhkr2iR2hmlHJRDxsI7aGnmfDx4nKq3sAK/KOYC9LU=) 8: VOc75q9rZMJA4FXqQscyX1ERS_8.roa (hash: Ry99I0BJCRJbt6jtJzL48yrr1YlnIVfVbDfo1hLRwXY=) 9: Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl (hash: z9/L8stUW3N9Bs26ddUnnN4zSKDEdbwiowVE+LOj0EM=) 10: fqKmITtuuIDpjK-CmwtGTo6Qx2I.roa (hash: zOiW8j04KmVedHVbWP3l5qomPlPBpYoJxiOpFyd0f8s=) 11: fz94s-VUXoVDwH_u7pJCcjEzPzc.roa (hash: SETDMEUFwHfaec63U1CUG7TyGKgVUHcXmHb5uidUG/A=) 12: i-EtNF_kbxrqPtcOw0wZyikQw64.asa (hash: fQ3Bs2aBwCwhKkRI7k0HC8Xwpc6RFlI6Vun+oYE/J7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:92:d3:e1:72:bb:bf:44:61:b4:40:24:f0:3e:70:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Sep 24 04:00:55 2026 GMT Not After : Sep 25 04:00:55 2026 GMT Subject: CN=4b1bff421a750966f3a3daf1c4de64408f900c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:15:23:ac:a1:ef:91:79:6d:c7:47:d8:81: d8:37:98:a5:4e:6e:0e:fe:7c:bc:48:cd:42:a5:8f: 01:69:e8:aa:0a:06:97:9d:62:66:b3:94:8f:53:a2: 52:72:19:15:28:0c:8a:5a:e7:cd:18:89:4c:8d:a1: 4c:89:3e:24:50:53:39:d7:ef:14:b8:73:1b:ac:21: 05:a5:69:0a:b0:fc:9e:2b:df:a6:ab:f9:0f:db:c7: cb:02:ef:f6:bf:7c:19:94:d2:bc:3f:e2:a2:6f:59: a2:72:61:7f:20:98:f4:35:d7:4c:2c:fa:da:28:24: de:6a:1e:da:51:ef:7b:49:9c:24:78:e4:44:67:8e: 30:71:77:7a:80:0b:08:d5:0d:d2:16:4e:d8:b7:2c: 89:54:fd:2f:e2:e6:eb:cd:f6:87:3f:bf:2f:d9:69: ca:f9:02:24:1b:22:05:2c:7c:d0:6c:0d:72:e1:17: 33:80:1c:5d:92:51:f3:74:50:ba:c5:24:48:e6:13: 8c:93:2e:d7:76:ad:c6:3a:1d:98:b9:d4:4b:62:1e: 21:92:ba:2c:2b:45:5c:ef:28:a5:be:3f:c9:50:89: 8a:bc:08:16:ae:b5:8f:c4:0b:ab:cd:07:12:5e:3c: 25:82:02:2a:45:bd:1c:c2:bc:a2:d0:27:f6:04:a3: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:FF:42:1A:75:09:66:F3:A3:DA:F1:C4:DE:64:40:8F:90:0C:61 X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d2:e2:86:c1:7b:a5:73:b6:4d:f5:b8:3e:97:58:c2:49:f3: 43:58:0f:ad:8b:b0:bc:01:f0:55:8b:79:aa:b4:c6:61:5d:f4: 1a:58:53:5e:75:24:3e:a2:86:0d:7b:d4:50:64:55:57:9f:5c: 83:db:0a:67:8e:aa:fb:d6:8c:a3:ea:3c:4d:35:37:78:3f:4a: 67:4d:7a:d8:de:92:77:ab:16:9a:47:9e:0c:76:bc:03:37:24: 3b:a4:5c:58:1d:6b:24:b3:b3:d6:2d:ea:ec:db:50:b3:00:02: f0:06:82:7c:a5:15:b4:6f:3e:94:1c:96:d6:74:d1:60:da:48: 90:1e:bb:17:f9:9b:a4:ed:c8:fe:5c:be:e6:f9:e3:3e:bf:f6: 34:77:e1:7e:0b:ca:52:81:9d:43:96:0a:61:1a:ff:d3:1f:c5: e8:9b:58:68:20:43:28:93:bf:53:16:d3:34:f8:71:aa:d3:f4: 7f:cd:71:b5:9a:74:be:c3:9a:12:94:9e:ec:77:e9:47:ce:37: 34:38:f2:64:00:82:80:9e:76:3f:02:5d:53:5f:6f:77:fd:d6: c9:1f:9d:d7:89:9b:04:f5:8e:ab:99:91:ad:7c:7e:96:16:77: 5d:e2:3b:49:73:9c:35:b0:7a:60:d4:29:e3:c2:d1:82:d2:ea: b4:a3:19:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRktPhcru/RGG0QCTwPnCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjYwOTI0MDQwMDU1WhcNMjYwOTI1MDQwMDU1WjAzMTEwLwYDVQQD Eyg0YjFiZmY0MjFhNzUwOTY2ZjNhM2RhZjFjNGRlNjQ0MDhmOTAwYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVIVI6yh75F5bcdH2IHYN5ilTm4O /ny8SM1CpY8BaeiqCgaXnWJms5SPU6JSchkVKAyKWufNGIlMjaFMiT4kUFM51+8U uHMbrCEFpWkKsPyeK9+mq/kP28fLAu/2v3wZlNK8P+Kib1micmF/IJj0NddMLPra KCTeah7aUe97SZwkeOREZ44wcXd6gAsI1Q3SFk7YtyyJVP0v4ubrzfaHP78v2WnK +QIkGyIFLHzQbA1y4RczgBxdklHzdFC6xSRI5hOMky7Xdq3GOh2YudRLYh4hkros K0Vc7yilvj/JUImKvAgWrrWPxAurzQcSXjwlggIqRb0cwryi0Cf2BKNRnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsb/0IadQlm86Pa8cTeZECPkAxhMB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetLihsF7 pXO2TfW4PpdYwknzQ1gPrYuwvAHwVYt5qrTGYV30GlhTXnUkPqKGDXvUUGRVV59c g9sKZ46q+9aMo+o8TTU3eD9KZ0162N6Sd6sWmkeeDHa8AzckO6RcWB1rJLOz1i3q 7NtQswAC8AaCfKUVtG8+lByW1nTRYNpIkB67F/mbpO3I/ly+5vnjPr/2NHfhfgvK UoGdQ5YKYRr/0x/F6JtYaCBDKJO/UxbTNPhxqtP0f81xtZp0vsOaEpSe7HfpR843 NDjyZACCgJ52PwJdU19vd/3WyR+d14mbBPWOq5mRrXx+lhZ3XeI7SXOcNbB6YNQp 48LRgtLqtKMZig== -----END CERTIFICATE-----Generated at Thu Sep 24 11:22:47 2026 by rpki-client