$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: aJIOybDX7KP6UNBVFAw3vrIz7x59N3kEhpFrNkDzUx8= Subject key identifier: E1:13:FA:5F:C1:52:AC:83:DD:AB:12:3D:5C:83:23:4E:34:00:EA:DD Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019D25BA04DB606DB2676FDB61F42AAF99AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1894 Signing time: Wed 25 Mar 2026 16:00:41 +0000 Manifest this update: Wed 25 Mar 2026 16:00:41 +0000 Manifest next update: Thu 26 Mar 2026 16:00:41 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: UdE2bNBh+AGATZIqAmaOh6VBXYEv1Q9oiTVg/FHhOAc=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:04:db:60:6d:b2:67:6f:db:61:f4:2a:af:99:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Mar 25 16:00:41 2026 GMT Not After : Mar 26 16:00:41 2026 GMT Subject: CN=e113fa5fc152ac83ddab123d5c83234e3400eadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c3:4c:d5:16:08:b8:24:19:5f:8f:d9:9a:d8: 2a:47:9b:cb:7f:7e:42:ac:0b:e4:44:50:65:3d:b5: cf:1f:4a:e1:a5:55:c4:e9:61:0d:98:9a:b3:20:e3: a5:74:ea:0a:55:e0:cf:10:57:ed:56:a2:7d:d3:9d: 5a:5a:15:cf:c2:db:02:6e:e4:ce:0b:4f:1b:25:60: 9e:74:5f:18:f5:8d:db:4e:70:c5:65:e2:3c:c3:5d: 90:9d:eb:6c:3c:41:c9:41:41:3d:e8:29:32:1c:45: 4d:fa:dc:19:28:e8:fa:d8:e0:3b:c2:9f:54:bb:8d: 2a:73:01:90:54:47:ef:2b:3c:4a:04:af:5c:5e:1c: 0a:c3:03:2c:d0:9e:ea:a5:5d:45:56:0c:3f:be:f7: cf:5f:cf:cd:79:d4:75:0a:3a:29:52:7d:b7:20:eb: 5f:b9:c7:1e:ad:2c:be:4a:a9:35:3e:08:23:bf:60: dc:e0:a6:37:51:20:e1:1d:b2:c2:c0:ec:1d:30:fb: 1e:fd:46:e4:09:af:4e:af:80:8d:eb:86:3a:38:5b: 22:94:6a:ab:ee:eb:66:52:53:3c:35:48:0e:b0:74: 42:ff:e8:99:4d:61:33:9d:4c:2e:c1:59:06:b4:55: 14:15:c9:83:6c:e1:ff:e9:0e:11:54:f8:d6:72:80: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:FA:5F:C1:52:AC:83:DD:AB:12:3D:5C:83:23:4E:34:00:EA:DD X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:29:6d:1b:a0:08:68:da:e8:28:91:95:ba:0f:9d:42:56:e8: c7:79:8c:ef:fc:95:0a:28:19:28:e3:52:5e:ac:76:da:ef:0c: 68:06:b4:79:0e:66:79:85:3b:c3:53:85:e1:19:18:b1:7e:1c: 88:f8:f8:b0:5a:31:7b:f9:47:8c:bc:6a:18:f5:5f:95:af:a5: 74:73:de:bf:76:1e:93:70:03:d0:cf:f6:df:a0:f9:e3:1b:78: da:e5:95:03:8f:71:32:58:fb:c0:a3:a2:3c:0d:51:cd:74:82: 84:49:1e:d5:df:07:91:a2:a1:3d:34:b6:51:5f:6a:1d:4c:8a: 3c:05:f4:d7:79:e5:59:97:88:8a:47:3a:33:79:5d:7d:f8:d0: a8:7e:c0:28:ab:ac:f4:6c:26:50:8d:25:36:8b:cc:a2:33:db: 7b:ec:cf:38:0b:5c:fb:fa:23:5c:d8:7a:62:83:dd:08:46:11: 80:de:ae:a5:b4:96:27:84:b7:e8:5b:80:5d:1e:ff:53:57:2d: b0:4b:c0:ac:20:08:f8:77:7d:25:5d:0f:a1:07:0b:da:7a:5b: 24:0d:1b:c3:4f:7c:f4:a5:7b:22:9d:43:94:cf:c4:36:01:43: cc:1d:06:ef:8a:72:a5:f9:69:6a:6e:83:66:84:a9:bd:e7:ae: 57:10:d3:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lugTbYG2yZ2/bYfQqr5mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMzI1MTYwMDQxWhcNMjYwMzI2MTYwMDQxWjAzMTEwLwYDVQQD EyhlMTEzZmE1ZmMxNTJhYzgzZGRhYjEyM2Q1YzgzMjM0ZTM0MDBlYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8NM1RYIuCQZX4/ZmtgqR5vLf35C rAvkRFBlPbXPH0rhpVXE6WENmJqzIOOldOoKVeDPEFftVqJ9051aWhXPwtsCbuTO C08bJWCedF8Y9Y3bTnDFZeI8w12QnetsPEHJQUE96CkyHEVN+twZKOj62OA7wp9U u40qcwGQVEfvKzxKBK9cXhwKwwMs0J7qpV1FVgw/vvfPX8/NedR1CjopUn23IOtf uccerSy+Sqk1Pggjv2Dc4KY3USDhHbLCwOwdMPse/UbkCa9Or4CN64Y6OFsilGqr 7utmUlM8NUgOsHRC/+iZTWEznUwuwVkGtFUUFcmDbOH/6Q4RVPjWcoBmsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOET+l/BUqyD3asSPVyDI040AOrdMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyltG6AI aNroKJGVug+dQlbox3mM7/yVCigZKONSXqx22u8MaAa0eQ5meYU7w1OF4RkYsX4c iPj4sFoxe/lHjLxqGPVfla+ldHPev3Yek3AD0M/236D54xt42uWVA49xMlj7wKOi PA1RzXSChEke1d8HkaKhPTS2UV9qHUyKPAX013nlWZeIikc6M3ldffjQqH7AKKus 9GwmUI0lNovMojPbe+zPOAtc+/ojXNh6YoPdCEYRgN6upbSWJ4S36FuAXR7/U1ct sEvArCAI+Hd9JV0PoQcL2npbJA0bw0989KV7Ip1DlM/ENgFDzB0G74pypflpam6D ZoSpveeuVxDTEA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:23 2026 by rpki-client