$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: 6YT9vHePqkftjzj2/WQySn5hoCHqXm8ceIurhVyP/Mk= Subject key identifier: FD:E4:F3:A8:82:60:17:B1:74:7C:D9:16:D7:2E:F1:21:F0:CA:41:A9 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019F927F36963A96A421F3BA61C4F7BB008A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 19D7 Signing time: Fri 24 Jul 2026 05:00:38 +0000 Manifest this update: Fri 24 Jul 2026 05:00:38 +0000 Manifest next update: Sat 25 Jul 2026 05:00:38 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: ZIywGPUbfmlT6nhDpL8sSu3elK69j9Bfx+NZkR0otHk=) 11: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (hash: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:36:96:3a:96:a4:21:f3:ba:61:c4:f7:bb:00:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jul 24 05:00:38 2026 GMT Not After : Jul 25 05:00:38 2026 GMT Subject: CN=fde4f3a8826017b1747cd916d72ef121f0ca41a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:65:00:9d:d5:8f:4b:94:0d:68:90:24:85: 2c:65:85:4c:15:1a:f2:b0:d0:34:ac:78:1c:c1:2e: 1f:c8:51:76:f5:48:2c:d0:98:43:07:36:e7:4a:63: 11:98:6b:35:82:5a:ca:e4:4f:b7:ce:d6:af:6f:cc: e9:4c:23:23:e1:ad:d4:b1:4d:16:d2:dc:93:2e:f7: 3c:6c:8f:7b:f1:94:93:dd:11:0a:ef:b0:ea:cb:7c: c0:1c:13:c2:67:ca:1d:8f:2a:af:75:6c:b4:42:c2: e1:f8:95:ee:a6:eb:9f:d0:89:63:8d:db:a5:95:94: 00:22:17:db:f5:49:51:a4:3b:58:38:37:f8:7b:08: e7:32:ac:21:25:34:b5:f4:69:d6:50:c3:38:0a:02: 82:5c:0c:1d:66:c3:e7:23:0c:e8:7b:f6:40:32:07: 21:f6:4e:ff:ab:56:07:84:a5:ba:95:53:23:bc:f1: ce:44:73:4b:2e:eb:bd:cc:34:6b:9f:5a:85:47:81: 46:50:10:8e:ae:0c:dd:a0:5e:db:dd:d9:83:e0:2d: 9d:45:11:ac:7a:7e:37:0a:28:f7:6d:3f:53:19:d6: 09:73:54:cc:f1:83:36:c4:d9:04:51:68:06:b5:a8: 4d:f1:23:ca:ce:61:68:96:25:00:d1:9f:2f:29:7f: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E4:F3:A8:82:60:17:B1:74:7C:D9:16:D7:2E:F1:21:F0:CA:41:A9 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:71:81:07:0b:e1:ac:c3:28:e6:8c:5d:f9:12:f6:61:c4: 15:6a:26:a1:e5:e2:f2:ce:c5:8b:87:33:71:03:a2:05:a1:55: e0:93:39:e6:d1:a1:d1:3b:78:4e:42:e2:70:17:47:2d:7d:ff: 1a:b9:39:d0:1b:9b:4e:b2:92:52:cd:b1:f9:78:b5:d3:8f:69: 3a:cf:2e:3f:40:9a:f8:3e:85:a5:3a:18:62:2a:8c:19:d9:c6: ea:76:d1:cb:f0:7a:94:4a:23:e7:33:74:19:1d:01:1f:38:79: 53:32:80:81:5e:62:3c:e1:83:20:ea:ce:0e:d3:0c:50:ad:9b: c7:c2:1e:ad:ef:33:11:08:0e:4c:29:c5:75:1e:f9:76:dc:51: 5b:67:13:f2:42:00:2f:16:13:08:ba:27:2e:d6:d2:61:08:e7: af:40:22:a5:56:1f:1e:d0:05:a0:39:d8:93:e9:84:d6:3d:a6: 8f:33:1b:ae:ea:f1:29:32:2e:00:e3:1b:98:60:5e:58:a4:5d: ea:c8:b7:35:9c:65:e6:81:fe:94:b7:51:3a:56:7c:4d:5d:2a: 56:f5:3e:0e:71:9e:27:f3:51:85:c2:71:25:b6:ae:e8:48:4a: d8:b7:98:4b:b1:66:8c:b1:d7:c1:79:c7:42:88:61:24:96:73: f1:bb:a5:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SfzaWOpakIfO6YcT3uwCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwNzI0MDUwMDM4WhcNMjYwNzI1MDUwMDM4WjAzMTEwLwYDVQQD EyhmZGU0ZjNhODgyNjAxN2IxNzQ3Y2Q5MTZkNzJlZjEyMWYwY2E0MWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlxlAJ3Vj0uUDWiQJIUsZYVMFRry sNA0rHgcwS4fyFF29Ugs0JhDBzbnSmMRmGs1glrK5E+3ztavb8zpTCMj4a3UsU0W 0tyTLvc8bI978ZST3REK77Dqy3zAHBPCZ8odjyqvdWy0QsLh+JXupuuf0Iljjdul lZQAIhfb9UlRpDtYODf4ewjnMqwhJTS19GnWUMM4CgKCXAwdZsPnIwzoe/ZAMgch 9k7/q1YHhKW6lVMjvPHORHNLLuu9zDRrn1qFR4FGUBCOrgzdoF7b3dmD4C2dRRGs en43Cij3bT9TGdYJc1TM8YM2xNkEUWgGtahN8SPKzmFoliUA0Z8vKX82FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3k86iCYBexdHzZFtcu8SHwykGpMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3FxgQcL 4azDKOaMXfkS9mHEFWomoeXi8s7Fi4czcQOiBaFV4JM55tGh0Tt4TkLicBdHLX3/ Grk50BubTrKSUs2x+Xi1049pOs8uP0Ca+D6FpToYYiqMGdnG6nbRy/B6lEoj5zN0 GR0BHzh5UzKAgV5iPOGDIOrODtMMUK2bx8Iere8zEQgOTCnFdR75dtxRW2cT8kIA LxYTCLonLtbSYQjnr0AipVYfHtAFoDnYk+mE1j2mjzMbrurxKTIuAOMbmGBeWKRd 6si3NZxl5oH+lLdROlZ8TV0qVvU+DnGeJ/NRhcJxJbau6EhK2LeYS7FmjLHXwXnH QohhJJZz8bulOQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:53:24 2026 by rpki-client