$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: 45SUS0hPjPyjPFbFnqA9FeyzF+ISq0xdWduPFkccc8g= Subject key identifier: 4B:75:82:66:30:56:1E:AB:75:1D:A6:2D:99:7E:2F:21:0C:ED:4B:97 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019D2A3B75312B1737897ADCE8E98DA95962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1897 Signing time: Thu 26 Mar 2026 13:00:32 +0000 Manifest this update: Thu 26 Mar 2026 13:00:32 +0000 Manifest next update: Fri 27 Mar 2026 13:00:32 +0000 Files and hashes: 1: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=) 2: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=) 3: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=) 4: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=) 5: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=) 6: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=) 7: Lq44h0G4q1e-UoLFf16nF4HM2xg.roa (hash: 8njI491vVK+Ep2tlJdykehE2iLFit02Dsa4DLuRuC40=) 8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=) 9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=) 10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=) 11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=) 12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=) 13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=) 14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=) 15: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=) 16: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=) 17: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=) 18: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=) 19: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=) 20: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=) 21: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=) 22: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=) 23: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: v5RxFJdEHHAB1jmoR+xsKl+a6ALXOyPWmZs7BAE51Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3b:75:31:2b:17:37:89:7a:dc:e8:e9:8d:a9:59:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Mar 26 13:00:32 2026 GMT Not After : Mar 27 13:00:32 2026 GMT Subject: CN=4b75826630561eab751da62d997e2f210ced4b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:80:c1:d1:eb:18:dd:75:de:b8:11:79:c6: 09:c9:73:13:da:a8:56:7c:19:0e:a0:31:c0:72:64: 96:c9:f5:5b:9d:a2:c9:b3:2b:07:d7:02:17:86:c6: 51:07:8c:66:ee:d9:ff:18:01:e9:21:c0:a0:0c:1a: c0:ae:d5:c8:0c:ab:e8:36:5b:ea:cf:2b:f4:63:2f: dc:e8:9f:1e:4f:11:de:66:2c:e9:0c:3f:68:fd:ad: e7:76:99:e8:a1:75:ec:59:d4:b4:bb:4d:d1:c9:c0: a1:84:0d:88:79:09:9d:81:3e:47:3a:14:7c:33:3c: 83:9a:d8:68:9f:64:d0:76:9e:22:c0:03:f7:5e:c3: 50:5d:af:7d:df:04:4e:70:b6:ac:14:60:44:c3:57: 4e:2c:eb:22:b2:c4:41:e2:5a:65:83:63:fe:89:6f: d4:7c:63:f9:1b:43:42:06:b9:32:5e:84:87:f2:0c: 29:33:e9:1f:3c:69:fe:73:75:e5:30:18:49:96:fa: 82:ad:c2:58:de:e4:b8:ec:7c:5c:d4:21:93:fa:05: 87:f5:72:e5:fc:34:9f:10:8d:ba:d7:f6:49:4f:34: 42:ad:fa:7e:3e:4e:de:09:5d:e0:3f:c4:e8:5f:c2: 83:52:d8:91:a0:52:97:54:92:7c:b6:77:15:81:64: f3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:75:82:66:30:56:1E:AB:75:1D:A6:2D:99:7E:2F:21:0C:ED:4B:97 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0c:14:a4:53:7d:47:23:d4:24:24:fe:9b:d9:e4:0e:e6:45: 4f:3d:da:11:9d:f5:9a:b2:f9:fb:d2:0f:af:60:5c:12:da:80: e8:e1:22:79:3b:da:87:fb:62:c4:5a:dd:36:58:bf:eb:5d:e6: f4:bc:59:9b:4f:f8:3b:01:4a:93:a4:0d:3b:9d:85:1f:fe:af: f1:28:1b:fe:f4:d6:9e:5b:31:c7:d8:06:70:66:96:90:53:de: fc:16:8f:f6:d6:8e:ee:4f:b4:82:a2:ce:b6:1d:29:fa:f4:53: 9f:2f:85:a9:63:69:da:07:14:53:57:e9:ba:b6:63:b9:d7:ac: 60:d4:9f:75:a5:4b:93:4a:34:a6:d8:f4:39:de:65:84:f6:95: 2a:45:69:a7:67:1d:ef:d6:6b:26:35:42:88:b7:96:51:eb:11: b5:33:ea:16:e1:a2:16:4d:6a:e9:11:43:d1:9b:71:c4:67:ef: 0d:83:72:28:b4:38:1e:ea:97:fc:82:a7:15:9c:ac:9c:3c:3d: 0c:3b:f0:e9:8a:2b:ad:7e:1a:6a:27:56:9c:1f:e0:28:db:a8: e2:23:79:25:ea:57:df:24:41:aa:c6:08:92:7f:cb:4b:6b:ac: 71:a5:98:73:75:5e:ef:0c:18:f7:b9:12:78:90:ad:d0:17:ab: 56:2e:79:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qO3UxKxc3iXrc6OmNqVliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMzI2MTMwMDMyWhcNMjYwMzI3MTMwMDMyWjAzMTEwLwYDVQQD Eyg0Yjc1ODI2NjMwNTYxZWFiNzUxZGE2MmQ5OTdlMmYyMTBjZWQ0Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruGAwdHrGN113rgRecYJyXMT2qhW fBkOoDHAcmSWyfVbnaLJsysH1wIXhsZRB4xm7tn/GAHpIcCgDBrArtXIDKvoNlvq zyv0Yy/c6J8eTxHeZizpDD9o/a3ndpnooXXsWdS0u03RycChhA2IeQmdgT5HOhR8 MzyDmthon2TQdp4iwAP3XsNQXa993wROcLasFGBEw1dOLOsissRB4lplg2P+iW/U fGP5G0NCBrkyXoSH8gwpM+kfPGn+c3XlMBhJlvqCrcJY3uS47Hxc1CGT+gWH9XLl /DSfEI261/ZJTzRCrfp+Pk7eCV3gP8ToX8KDUtiRoFKXVJJ8tncVgWTzzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt1gmYwVh6rdR2mLZl+LyEM7UuXMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQwUpFN9 RyPUJCT+m9nkDuZFTz3aEZ31mrL5+9IPr2BcEtqA6OEieTvah/tixFrdNli/613m 9LxZm0/4OwFKk6QNO52FH/6v8Sgb/vTWnlsxx9gGcGaWkFPe/BaP9taO7k+0gqLO th0p+vRTny+FqWNp2gcUU1fpurZjudesYNSfdaVLk0o0ptj0Od5lhPaVKkVpp2cd 79ZrJjVCiLeWUesRtTPqFuGiFk1q6RFD0ZtxxGfvDYNyKLQ4HuqX/IKnFZysnDw9 DDvw6YorrX4aaidWnB/gKNuo4iN5JepX3yRBqsYIkn/LS2uscaWYc3Ve7wwY97kS eJCt0BerVi55SA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:07 2026 by rpki-client