$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: zsoVfFDRzxMaPqhGQfI6HoCLgR3MNvNRr48Kd203gj4= Subject key identifier: 92:8A:90:CC:4F:C9:2D:29:69:31:03:A3:F0:5C:89:AD:25:6F:9D:21 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019E1DC79513268D938AAFF48D5F9C670390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 19C7 Signing time: Tue 12 May 2026 20:01:19 +0000 Manifest this update: Tue 12 May 2026 20:01:19 +0000 Manifest next update: Wed 13 May 2026 20:01:19 +0000 Files and hashes: 1: 1-7EPNGxFho4197foBmDyRKWOv-M.roa (hash: 4ZhsPd97Hygq3kuERRZTyX2DiX4RdFZXlt/CbP0WNBI=) 2: 1WCWC52zGfwCmY5V-mhdhgDriwQ.roa (hash: IPlYfdDKlG6GcFbb6yt9vpWAAJAp4h7ZVHeTEXhrSfo=) 3: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=) 4: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (hash: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=) 5: 78N1q78KVkb0g5UEjth4sIw2Tmc.roa (hash: Y2TWCAPymtRm0PTcNGCy+NHT+xXdFXN2kEJRuvjajyg=) 6: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=) 7: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=) 8: EdkIr_aloLjy1asrooEt3vPzf5A.roa (hash: gtPxzWeHEIa/RG6GCOlFbr/rigyq2NrvE6Ua39yZA0s=) 9: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=) 10: GVjcU6D8aWZVpw7PDbk3WG3ZDeM.roa (hash: /yPUh4RShIPRU6JRwk4aAlU3tTd7eBKky9bhRB1Hohc=) 11: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=) 12: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=) 13: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=) 14: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=) 15: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=) 16: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: kgl+rMsu8o63eN3eZPb5MLCIm0gFiWQ2/jVVNX5W82E=) 17: b73LYZVOKac6G4il-1ce4PTa138.roa (hash: pZGLRHEPXEVLg+1C0RtMLojmfnurp8HxJqliemmKo/I=) 18: ctbsw4D6oWX-An4odqL9ZPDxCow.roa (hash: EK7BVitWZylgQlJDsbGdNmIJWOPX1XIbssYMftGa4LM=) 19: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=) 20: gZgog54AI7shuLZoy6MmY5v_8U0.roa (hash: JFrF3TKO7r3IxBKr3NhIeM/ZpP4BoiwTvFiqo5pM7T0=) 21: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=) 22: jRC7SDxZqowcGpwaIpWoX9q5Blc.roa (hash: dv26YCMIYxVA1BmLx4nbyabWyLlsh6ES9EV3E7FK0QU=) 23: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=) 24: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=) 25: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=) 26: m0PCCuuKQXgWJqTZSdxwQsBX66s.roa (hash: 606ww6A+IADwULNhMsZB5CNHymRvztMh7JZEr3D5GTw=) 27: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=) 28: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (hash: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=) 29: sjQCjerjRwfah-q2hwwOmAstMTo.roa (hash: N10Zo0ylNZWVNpGxcYshMOYMt1EH12p203A0DA3EChs=) 30: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=) 31: xmMlfa7iRWWb2wsgVQjfEUP18xg.roa (hash: MZHFj2EgqlivJGFIR4zUNFYVY5Bn/cspVbef0X3zPHs=) 32: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:95:13:26:8d:93:8a:af:f4:8d:5f:9c:67:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: May 12 20:01:19 2026 GMT Not After : May 13 20:01:19 2026 GMT Subject: CN=928a90cc4fc92d29693103a3f05c89ad256f9d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8e:3d:95:55:fa:a5:9a:e1:cb:dd:00:37:dc: 61:21:6e:2a:e0:ae:1f:6f:b6:bf:da:30:e1:18:cf: 59:f9:19:15:18:97:56:55:94:5e:3a:16:3d:64:00: 5c:d9:dd:f8:95:db:50:17:01:0b:97:8a:b5:26:9b: 2f:43:4b:92:4a:44:dc:b0:c4:2c:38:c0:be:35:34: 80:7f:81:c2:0d:d3:f4:4f:1b:6b:61:2b:30:2f:e3: 7a:ed:05:37:c1:75:36:8c:a1:ed:44:6e:75:a6:b0: af:a7:f4:fa:cf:c7:b0:23:d1:df:b6:38:bc:76:97: 2b:0c:ef:c6:ff:a1:fb:f8:53:2d:25:e5:0f:b9:2e: e8:a6:ab:b9:b4:7e:a6:f7:06:4c:53:b4:26:9e:3a: 08:a6:5e:35:76:cb:3d:21:3d:b3:cc:52:df:ae:ee: 92:0d:b9:1b:8b:86:6f:df:20:ed:54:a5:19:3a:ca: 27:46:71:b5:68:99:25:8c:fc:6a:0a:e5:91:d5:c5: bf:bf:38:1e:60:b8:69:9b:18:eb:ae:e7:05:a7:8c: 0d:51:44:1d:5f:43:aa:4e:3d:21:54:ec:6e:df:d4: 48:2b:9b:90:71:e5:33:b0:8d:b6:e5:d9:a6:80:c1: b6:f0:61:be:0c:7d:6c:ab:b7:c6:c2:f9:3f:6e:fc: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:90:CC:4F:C9:2D:29:69:31:03:A3:F0:5C:89:AD:25:6F:9D:21 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fe:cd:6e:1f:4f:ef:60:da:a2:1d:ae:6d:b8:1d:43:6c:9c: 72:87:a8:d0:91:3c:bb:a2:30:04:3b:e9:78:54:9a:4a:fb:f4: df:e7:16:6f:86:c0:b1:30:3a:93:02:f5:58:dd:a5:60:53:3f: ce:a0:25:63:72:58:cd:3e:3f:51:e1:f6:82:f4:20:88:2a:30: 08:85:e3:83:58:92:63:c6:7c:34:96:46:d2:63:28:ba:e8:ec: f1:7e:c9:73:95:88:52:03:a9:30:7e:0a:ae:63:c1:ea:f7:58: 8f:db:45:37:1a:b1:cc:ad:5a:ea:bf:92:41:7f:e5:ca:45:fd: 00:af:e7:30:ef:20:69:04:62:85:90:d0:43:91:69:30:09:7f: 73:84:60:c7:46:a7:a4:4d:dd:82:fd:79:10:34:47:68:0d:e6: cc:02:0e:ab:65:65:d7:7b:60:a8:fb:d9:88:e2:f2:34:2e:19: 93:1f:68:e9:78:8c:2b:97:03:12:ab:82:d7:20:32:39:a2:63: 0b:7e:87:da:37:5c:14:fd:50:2a:93:c8:7a:4f:60:58:b5:0c: cf:8b:f1:01:80:19:ea:0f:34:ca:ed:ac:50:68:f9:a7:ca:0f: fa:d9:87:1d:52:4a:4b:99:b5:42:cb:a3:29:51:ce:3d:80:de: 6f:36:c8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx5UTJo2Tiq/0jV+cZwOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwNTEyMjAwMTE5WhcNMjYwNTEzMjAwMTE5WjAzMTEwLwYDVQQD Eyg5MjhhOTBjYzRmYzkyZDI5NjkzMTAzYTNmMDVjODlhZDI1NmY5ZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi449lVX6pZrhy90AN9xhIW4q4K4f b7a/2jDhGM9Z+RkVGJdWVZReOhY9ZABc2d34ldtQFwELl4q1JpsvQ0uSSkTcsMQs OMC+NTSAf4HCDdP0TxtrYSswL+N67QU3wXU2jKHtRG51prCvp/T6z8ewI9Hftji8 dpcrDO/G/6H7+FMtJeUPuS7opqu5tH6m9wZMU7QmnjoIpl41dss9IT2zzFLfru6S Dbkbi4Zv3yDtVKUZOsonRnG1aJkljPxqCuWR1cW/vzgeYLhpmxjrrucFp4wNUUQd X0OqTj0hVOxu39RIK5uQceUzsI225dmmgMG28GG+DH1sq7fGwvk/bvyKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKKkMxPyS0paTEDo/Bcia0lb50hMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiv7Nbh9P 72Daoh2ubbgdQ2yccoeo0JE8u6IwBDvpeFSaSvv03+cWb4bAsTA6kwL1WN2lYFM/ zqAlY3JYzT4/UeH2gvQgiCowCIXjg1iSY8Z8NJZG0mMouujs8X7Jc5WIUgOpMH4K rmPB6vdYj9tFNxqxzK1a6r+SQX/lykX9AK/nMO8gaQRihZDQQ5FpMAl/c4Rgx0an pE3dgv15EDRHaA3mzAIOq2Vl13tgqPvZiOLyNC4Zkx9o6XiMK5cDEquC1yAyOaJj C36H2jdcFP1QKpPIek9gWLUMz4vxAYAZ6g80yu2sUGj5p8oP+tmHHVJKS5m1Qsuj KVHOPYDebzbIAA== -----END CERTIFICATE-----Generated at Wed May 13 01:15:53 2026 by rpki-client