$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: 876RTO9HrjcdHbjQTJFn4i7CUMohpJ0ZnCUeGJz7oZE= Subject key identifier: C8:3E:32:46:3F:15:1C:71:2C:B6:DC:A8:13:22:76:1B:59:08:60:67 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019E1CEB3E591E6A2F000B9E2D1EC9054666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1914 Signing time: Tue 12 May 2026 16:00:39 +0000 Manifest this update: Tue 12 May 2026 16:00:39 +0000 Manifest next update: Wed 13 May 2026 16:00:39 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 5k7075XLwg5MHL3/Igs7Vg2tTLfmkFdjPP51t7itIh4=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:3e:59:1e:6a:2f:00:0b:9e:2d:1e:c9:05:46:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: May 12 16:00:39 2026 GMT Not After : May 13 16:00:39 2026 GMT Subject: CN=c83e32463f151c712cb6dca81322761b59086067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:73:25:78:20:6e:bb:54:6b:b8:66:54:62: 49:5e:44:9d:9c:78:62:cb:1b:af:4d:88:84:e4:43: 20:b4:93:cc:b9:1d:bb:98:8a:09:b5:d4:1c:9a:35: 5a:4d:ea:91:4d:e2:8b:ec:de:c2:bf:1e:0d:3d:48: cd:9b:01:b6:8a:68:0b:b7:25:15:d3:e0:9d:3d:e5: 40:15:f0:dc:c0:e3:54:6b:ba:b8:b7:a4:45:7f:9c: 60:0d:f2:c0:d3:3c:7f:e8:1d:22:70:b8:cb:99:16: b6:7b:f5:f1:a2:47:90:c7:fd:dc:a3:a4:4c:05:60: b5:ad:e5:21:f3:4f:9f:82:0e:ba:e8:55:21:16:07: c3:c4:13:6d:9c:97:e8:40:6b:69:23:57:27:bb:9a: ff:da:e3:ed:7b:76:07:a3:a0:7f:73:8d:e5:7c:33: 13:d2:27:68:51:80:ee:e9:11:29:05:6a:c5:3b:e7: c4:38:cd:50:4d:2f:43:16:71:f8:9e:0e:8b:38:fc: 31:df:39:a1:85:23:d8:04:e8:07:e7:aa:eb:65:be: 9e:d7:f6:2d:14:bc:18:b5:2e:43:36:25:77:b1:0d: c5:b4:54:ed:d9:b0:ab:d7:96:2d:74:f5:c0:e5:5c: 51:26:b2:f6:56:a6:1e:c3:08:79:5a:fb:32:31:00: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3E:32:46:3F:15:1C:71:2C:B6:DC:A8:13:22:76:1B:59:08:60:67 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:83:c8:74:ed:9e:d0:47:5d:70:7c:7b:f7:49:85:0d:11:87: c7:57:ac:80:cf:af:2d:01:9f:bd:d8:11:42:93:13:c6:41:75: 43:fa:a0:04:67:0a:07:7d:2d:81:92:32:69:7f:37:c6:d9:80: a1:59:50:e3:57:66:50:bc:ba:4f:2a:85:b9:2b:51:79:38:46: e2:6b:75:f4:d9:56:ad:3a:15:4a:d6:48:98:62:cb:47:59:29: c7:52:7f:9a:aa:ae:8f:22:2d:9c:62:8a:df:59:3a:d4:95:c3: 18:04:2a:ed:35:5c:1e:de:48:37:aa:83:ac:3b:2d:51:ac:51: a2:4e:ea:20:b3:d8:4b:10:85:8d:b5:f2:e4:c9:a5:cb:d6:57: f1:41:72:af:fd:8f:eb:63:73:5e:88:f3:ba:6b:05:8e:f9:30: 14:cd:92:2b:da:b4:ca:35:f8:e9:c6:7f:27:d0:22:4a:ae:ff: bc:1d:9b:f4:0d:45:36:6e:69:1f:97:cc:1f:5c:db:8a:e9:7e: 1e:39:79:41:51:fd:63:02:1b:6e:3e:6b:cb:ba:75:a6:4d:a6: 60:1d:83:9d:0b:9c:ce:ed:ac:86:bb:f9:ea:8b:d3:8f:7b:b1: 6e:26:c7:3d:10:4b:77:14:07:16:fc:41:a4:94:20:e0:fb:84: 7f:b6:50:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c6z5ZHmovAAueLR7JBUZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwNTEyMTYwMDM5WhcNMjYwNTEzMTYwMDM5WjAzMTEwLwYDVQQD EyhjODNlMzI0NjNmMTUxYzcxMmNiNmRjYTgxMzIyNzYxYjU5MDg2MDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG1zJXggbrtUa7hmVGJJXkSdnHhi yxuvTYiE5EMgtJPMuR27mIoJtdQcmjVaTeqRTeKL7N7Cvx4NPUjNmwG2imgLtyUV 0+CdPeVAFfDcwONUa7q4t6RFf5xgDfLA0zx/6B0icLjLmRa2e/XxokeQx/3co6RM BWC1reUh80+fgg666FUhFgfDxBNtnJfoQGtpI1cnu5r/2uPte3YHo6B/c43lfDMT 0idoUYDu6REpBWrFO+fEOM1QTS9DFnH4ng6LOPwx3zmhhSPYBOgH56rrZb6e1/Yt FLwYtS5DNiV3sQ3FtFTt2bCr15YtdPXA5VxRJrL2VqYewwh5WvsyMQB2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg+MkY/FRxxLLbcqBMidhtZCGBnMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYPIdO2e 0EddcHx790mFDRGHx1esgM+vLQGfvdgRQpMTxkF1Q/qgBGcKB30tgZIyaX83xtmA oVlQ41dmULy6TyqFuStReThG4mt19NlWrToVStZImGLLR1kpx1J/mqqujyItnGKK 31k61JXDGAQq7TVcHt5IN6qDrDstUaxRok7qILPYSxCFjbXy5Mmly9ZX8UFyr/2P 62NzXojzumsFjvkwFM2SK9q0yjX46cZ/J9AiSq7/vB2b9A1FNm5pH5fMH1zbiul+ Hjl5QVH9YwIbbj5ry7p1pk2mYB2DnQuczu2shrv56ovTj3uxbibHPRBLdxQHFvxB pJQg4PuEf7ZQJg== -----END CERTIFICATE-----Generated at Wed May 13 03:04:49 2026 by rpki-client