$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: 0W5x7+30VeQeSk15IlWuCYltmLANda61RltiiX7Vu7Y= Subject key identifier: 0B:ED:4E:9F:F9:4C:09:A6:E3:D7:D8:03:8A:41:9E:ED:BB:E1:8A:52 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019D31F521BC528BDDDD6A8093C8BA1A7415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 1947 Signing time: Sat 28 Mar 2026 01:00:41 +0000 Manifest this update: Sat 28 Mar 2026 01:00:41 +0000 Manifest next update: Sun 29 Mar 2026 01:00:41 +0000 Files and hashes: 1: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=) 2: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (hash: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=) 3: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=) 4: EdkIr_aloLjy1asrooEt3vPzf5A.roa (hash: gtPxzWeHEIa/RG6GCOlFbr/rigyq2NrvE6Ua39yZA0s=) 5: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=) 6: GVjcU6D8aWZVpw7PDbk3WG3ZDeM.roa (hash: /yPUh4RShIPRU6JRwk4aAlU3tTd7eBKky9bhRB1Hohc=) 7: Iqn2a1TzD5OARZGuXM6CI4N8Wtg.roa (hash: vh8lJd60NCX8IZI5qkAhTHaew5W6iPSaQYte6UCjL9E=) 8: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=) 9: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=) 10: RwRbsf_6_s1yWi7p-eL75QDFgPs.roa (hash: DgI/Jb/NnWPeaSYtffRytB12Xe456guJHdCzLMefKE8=) 11: V7bJldrOAC9AMnsBmLTIjKty43o.roa (hash: WOizHLdOu1fR+MAOiOCP8R1TI24LkdNXvt93DZ1xalw=) 12: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: K5/qacWuQO/ey2GD4IECcJv3yucjihMhxySqOvBr3mw=) 13: b73LYZVOKac6G4il-1ce4PTa138.roa (hash: pZGLRHEPXEVLg+1C0RtMLojmfnurp8HxJqliemmKo/I=) 14: ctbsw4D6oWX-An4odqL9ZPDxCow.roa (hash: EK7BVitWZylgQlJDsbGdNmIJWOPX1XIbssYMftGa4LM=) 15: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=) 16: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=) 17: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=) 18: l_M-qcELBfH_HuI6aghWUFDtxOw.roa (hash: z2cHGTv3tLxgFFvet0Fzm8aB5Q9uQ06+bb/TW2RJpDc=) 19: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=) 20: lr69ZnSsfxxuk1vODKFRiBaL2To.roa (hash: 37NPtx8graaK5aNHzHeeZP1iUIdHIbfvmo4GsLdMi0s=) 21: m0PCCuuKQXgWJqTZSdxwQsBX66s.roa (hash: 606ww6A+IADwULNhMsZB5CNHymRvztMh7JZEr3D5GTw=) 22: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=) 23: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (hash: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=) 24: sjQCjerjRwfah-q2hwwOmAstMTo.roa (hash: N10Zo0ylNZWVNpGxcYshMOYMt1EH12p203A0DA3EChs=) 25: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=) 26: xmMlfa7iRWWb2wsgVQjfEUP18xg.roa (hash: MZHFj2EgqlivJGFIR4zUNFYVY5Bn/cspVbef0X3zPHs=) 27: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:f5:21:bc:52:8b:dd:dd:6a:80:93:c8:ba:1a:74:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Mar 28 01:00:41 2026 GMT Not After : Mar 29 01:00:41 2026 GMT Subject: CN=0bed4e9ff94c09a6e3d7d8038a419eedbbe18a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:d7:87:09:68:a8:04:00:99:ba:9d:b0:5d: 94:67:ea:2c:14:8c:4f:23:fc:9c:8a:ad:ac:c8:4e: bc:d0:df:86:80:dc:60:e9:94:0a:9c:ee:da:95:a5: 9b:ca:f8:d9:1a:f2:ed:3c:02:78:6e:12:08:39:45: 5d:f5:3e:43:4f:e7:22:96:7a:20:c8:21:b9:cd:41: 0c:04:58:f6:a9:4f:5b:2c:48:c8:20:a0:30:77:86: db:a0:85:14:b3:bd:bc:32:04:ba:eb:cd:29:f2:e7: d6:ab:46:c5:88:74:db:59:2e:00:80:1a:c6:77:28: bd:af:5d:22:78:df:0e:5a:bc:9a:f1:82:93:cc:b5: 00:39:3b:37:43:39:6b:71:f5:68:63:62:94:fc:ce: a8:a0:e7:40:19:7b:72:5c:29:d2:b0:b5:d9:d4:13: 13:ae:99:fa:3d:59:03:8a:e6:d3:9d:8a:38:c1:5f: c1:b6:f7:73:01:83:36:0c:19:31:cb:fc:a6:85:79: 66:0b:7e:be:d7:9c:15:83:f2:69:43:e1:ca:c2:de: ed:be:4a:39:1d:21:1a:87:27:cc:34:49:e5:d3:d2: 41:5a:07:f5:32:14:c4:38:46:30:1a:ef:39:88:d0: be:eb:b4:a1:c4:ef:c4:37:5b:17:57:0d:0c:b1:60: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:ED:4E:9F:F9:4C:09:A6:E3:D7:D8:03:8A:41:9E:ED:BB:E1:8A:52 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a4:dc:7d:ec:f4:09:35:87:8c:d5:7c:b5:13:93:25:37:d3: ea:61:14:5f:d5:ec:42:0c:3e:43:e2:aa:57:a2:eb:6b:41:49: 49:01:33:0b:d4:b1:23:6d:8c:32:51:c7:c0:2f:c8:d2:a8:a8: 36:6e:d0:04:a9:b8:da:c5:6f:16:30:78:62:c6:3d:fe:2a:dd: 16:2d:c1:d9:69:b9:99:65:2a:70:b6:01:65:ae:2f:4c:7c:75: 4b:f1:9f:b3:41:23:86:f4:2c:63:95:5a:bf:72:b8:0f:33:75: c6:05:1d:d5:ba:b5:36:ca:d9:eb:0e:b9:80:9a:1f:fb:b7:44: 5d:0b:2f:d2:67:f6:e5:a6:67:13:f5:e2:27:fa:56:d1:65:ac: fd:a5:99:0a:b1:fc:87:f2:2b:33:e5:28:08:e0:33:52:75:3f: ea:94:6c:44:ff:79:65:51:24:54:7a:53:ec:d9:cb:b0:dc:a5: 4a:67:40:00:96:b6:34:12:33:aa:3c:06:9e:6d:85:97:d7:0a: 16:10:06:36:e8:2d:99:f6:52:ac:a4:be:59:2d:e7:1b:d3:0c: 35:3a:12:a1:29:b4:aa:b8:6d:8e:92:35:08:e9:c6:9f:98:13: 32:76:5f:59:4e:25:6b:aa:73:9e:53:f3:57:2f:5e:cc:9e:eb: cd:18:21:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0x9SG8Uovd3WqAk8i6GnQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMzI4MDEwMDQxWhcNMjYwMzI5MDEwMDQxWjAzMTEwLwYDVQQD EygwYmVkNGU5ZmY5NGMwOWE2ZTNkN2Q4MDM4YTQxOWVlZGJiZTE4YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08fXhwloqAQAmbqdsF2UZ+osFIxP I/yciq2syE680N+GgNxg6ZQKnO7alaWbyvjZGvLtPAJ4bhIIOUVd9T5DT+cilnog yCG5zUEMBFj2qU9bLEjIIKAwd4bboIUUs728MgS6680p8ufWq0bFiHTbWS4AgBrG dyi9r10ieN8OWrya8YKTzLUAOTs3QzlrcfVoY2KU/M6ooOdAGXtyXCnSsLXZ1BMT rpn6PVkDiubTnYo4wV/BtvdzAYM2DBkxy/ymhXlmC36+15wVg/JpQ+HKwt7tvko5 HSEahyfMNEnl09JBWgf1MhTEOEYwGu85iNC+67ShxO/EN1sXVw0MsWD2+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvtTp/5TAmm49fYA4pBnu274YpSMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaTcfez0 CTWHjNV8tROTJTfT6mEUX9XsQgw+Q+KqV6Lra0FJSQEzC9SxI22MMlHHwC/I0qio Nm7QBKm42sVvFjB4YsY9/irdFi3B2Wm5mWUqcLYBZa4vTHx1S/Gfs0EjhvQsY5Va v3K4DzN1xgUd1bq1NsrZ6w65gJof+7dEXQsv0mf25aZnE/XiJ/pW0WWs/aWZCrH8 h/IrM+UoCOAzUnU/6pRsRP95ZVEkVHpT7NnLsNylSmdAAJa2NBIzqjwGnm2Fl9cK FhAGNugtmfZSrKS+WS3nG9MMNToSoSm0qrhtjpI1COnGn5gTMnZfWU4la6pznlPz Vy9ezJ7rzRghJg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:31 2026 by rpki-client