$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: fJ6//ZcYaVTo/8EspDKdmEWgfxrZ7Oiffqnh6PETgNE= Subject key identifier: 3F:5E:D3:C2:11:DF:13:BE:AB:72:D3:74:62:38:81:AE:22:91:12:C9 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019D284E0AFE57BA51160486864AED2B2A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1896 Signing time: Thu 26 Mar 2026 04:01:36 +0000 Manifest this update: Thu 26 Mar 2026 04:01:36 +0000 Manifest next update: Fri 27 Mar 2026 04:01:36 +0000 Files and hashes: 1: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=) 2: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=) 3: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=) 4: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=) 5: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=) 6: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=) 7: Lq44h0G4q1e-UoLFf16nF4HM2xg.roa (hash: 8njI491vVK+Ep2tlJdykehE2iLFit02Dsa4DLuRuC40=) 8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=) 9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=) 10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=) 11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=) 12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=) 13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=) 14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=) 15: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=) 16: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=) 17: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=) 18: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=) 19: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=) 20: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=) 21: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=) 22: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=) 23: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: CvXWdpLEyCK1mZIdtDBN1AMLGqO2rGKi+sfyatQwhrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4e:0a:fe:57:ba:51:16:04:86:86:4a:ed:2b:2a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Mar 26 04:01:36 2026 GMT Not After : Mar 27 04:01:36 2026 GMT Subject: CN=3f5ed3c211df13beab72d374623881ae229112c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:6c:da:ad:7a:92:f8:c9:14:6c:4f:ab:8b: a1:73:20:28:8a:ce:86:20:1e:1a:c7:08:1f:cc:02: 3c:7e:8e:0f:2c:45:87:d7:20:26:00:bd:be:cb:21: 84:00:ea:8c:40:e6:a6:98:b2:7d:63:54:b8:c1:64: b2:39:d6:d9:2d:a8:9b:9d:86:8d:7d:56:4d:0b:b0: 1e:89:5a:a9:fb:88:9b:6d:35:c4:f7:b6:b5:ec:61: 80:cc:24:a2:55:8e:49:ba:23:df:b5:c8:0d:6b:42: 50:47:25:45:b4:d0:94:6b:c4:4a:8c:84:51:ca:07: 7a:ef:ca:7f:eb:a1:45:60:93:26:73:a4:ca:4b:14: 9f:68:0e:c4:5d:38:c4:3a:cc:cf:14:e1:68:7a:f9: 13:03:7d:58:77:cd:a4:92:e9:81:ee:2a:ac:b1:b7: 38:24:9f:4e:d4:35:ac:4d:2d:95:03:5b:46:a7:bb: bd:0d:73:8b:ec:25:5a:a1:30:b8:d8:b2:4a:7c:03: 11:68:3b:da:96:54:a6:ca:ad:fe:f9:d3:dc:40:9f: 44:38:8f:97:6b:62:5e:70:9c:6c:32:e7:c3:90:50: 57:1a:e7:e1:ef:1c:35:78:19:3d:2f:13:ee:8f:37: 62:8f:85:e1:76:4d:e0:cc:96:24:df:b9:ea:db:5a: f2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5E:D3:C2:11:DF:13:BE:AB:72:D3:74:62:38:81:AE:22:91:12:C9 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:07:61:ba:18:8c:5c:25:ff:29:69:9d:05:27:ea:b6:28:79: bf:9c:c4:5b:e0:20:9a:e7:f7:72:b0:05:c0:fb:ec:41:47:0b: 73:3d:48:c7:5d:4f:9d:e5:96:34:15:36:59:35:a9:e6:9f:9e: 77:bb:a4:00:15:75:6c:27:8b:07:3a:d3:a5:87:ba:03:29:3f: 10:85:93:d3:47:27:62:8e:ab:99:f9:95:e4:f2:2d:be:14:8a: dd:0a:df:84:cf:bd:80:aa:39:ec:bf:ae:75:13:3d:6a:2c:c3: 0c:4f:a6:05:26:c6:3e:50:3b:de:9b:fa:eb:c9:ca:20:70:67: cd:40:1d:d5:50:6a:68:a1:26:cb:5a:57:16:71:d0:84:6f:43: 1b:d1:51:31:ad:8e:0f:dc:17:75:c8:fa:8f:3c:b0:08:a9:d6: 18:d3:c1:d9:3c:6d:d6:f7:60:ce:c2:ca:61:fc:bb:a8:1e:11: 80:0e:d6:6a:c4:94:a4:aa:48:8f:e5:52:56:9a:18:d9:80:3d: 14:8c:0b:71:e3:14:ad:dc:5b:5b:ba:0b:fc:b2:e3:9b:44:33: 81:19:c6:f2:7e:2d:65:01:6f:ea:e2:09:de:51:42:10:43:4c: ad:a4:9b:37:98:d7:02:4c:46:94:7d:a5:e8:77:c1:94:07:61: 28:93:07:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTgr+V7pRFgSGhkrtKyp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMzI2MDQwMTM2WhcNMjYwMzI3MDQwMTM2WjAzMTEwLwYDVQQD EygzZjVlZDNjMjExZGYxM2JlYWI3MmQzNzQ2MjM4ODFhZTIyOTExMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC5s2q16kvjJFGxPq4uhcyAois6G IB4axwgfzAI8fo4PLEWH1yAmAL2+yyGEAOqMQOammLJ9Y1S4wWSyOdbZLaibnYaN fVZNC7AeiVqp+4ibbTXE97a17GGAzCSiVY5JuiPftcgNa0JQRyVFtNCUa8RKjIRR ygd678p/66FFYJMmc6TKSxSfaA7EXTjEOszPFOFoevkTA31Yd82kkumB7iqssbc4 JJ9O1DWsTS2VA1tGp7u9DXOL7CVaoTC42LJKfAMRaDvallSmyq3++dPcQJ9EOI+X a2JecJxsMufDkFBXGufh7xw1eBk9LxPujzdij4Xhdk3gzJYk37nq21ry+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9e08IR3xO+q3LTdGI4ga4ikRLJMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwdhuhiM XCX/KWmdBSfqtih5v5zEW+Agmuf3crAFwPvsQUcLcz1Ix11PneWWNBU2WTWp5p+e d7ukABV1bCeLBzrTpYe6Ayk/EIWT00cnYo6rmfmV5PItvhSK3QrfhM+9gKo57L+u dRM9aizDDE+mBSbGPlA73pv668nKIHBnzUAd1VBqaKEmy1pXFnHQhG9DG9FRMa2O D9wXdcj6jzywCKnWGNPB2Txt1vdgzsLKYfy7qB4RgA7WasSUpKpIj+VSVpoY2YA9 FIwLceMUrdxbW7oL/LLjm0QzgRnG8n4tZQFv6uIJ3lFCEENMraSbN5jXAkxGlH2l 6HfBlAdhKJMHkQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:37 2026 by rpki-client