$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: dyM05uf8DNrfHrcavIUliEIpc4EeqzEG5iSx/G+up9c= Subject key identifier: AC:31:98:E4:CE:68:91:7B:5E:94:69:AC:09:DA:39:9C:FC:EF:10:55 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01A0D6F0C80DA3A918D130407D0D946C4BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1A7F Signing time: Fri 25 Sep 2026 05:01:39 +0000 Manifest this update: Fri 25 Sep 2026 05:01:39 +0000 Manifest next update: Sat 26 Sep 2026 05:01:39 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 4W+yVM4tWP0DWggzIUgaq4YWh0HBJ5Y3ySjKimXIfQ4=) 11: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (hash: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:f0:c8:0d:a3:a9:18:d1:30:40:7d:0d:94:6c:4b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Sep 25 05:01:39 2026 GMT Not After : Sep 26 05:01:39 2026 GMT Subject: CN=ac3198e4ce68917b5e9469ac09da399cfcef1055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:57:29:a7:a2:c0:3b:63:da:de:4d:02:d7: 1b:12:d8:a7:63:71:7a:04:af:56:46:7c:55:43:f3: 01:49:2d:be:92:e5:e4:cf:8e:a9:d3:18:b9:cf:d7: 0d:f6:f7:83:b6:a5:9e:37:f7:8f:da:17:79:2a:1d: df:1b:6c:40:bd:5e:1e:03:3b:b8:32:ac:5a:64:75: 5a:5d:bf:ea:8c:30:de:b6:5f:70:c7:10:18:bd:87: 14:d8:b9:e4:e7:13:c2:a6:11:c3:1e:f3:51:a5:25: 5a:4e:15:5c:4b:a0:b6:1a:14:10:0a:dc:86:f9:af: 22:e5:6b:d3:16:a6:7c:a3:4c:0d:c7:21:d7:e2:81: 1b:1b:fd:f1:b7:90:02:b1:92:9b:23:83:5d:8d:ef: 53:1c:5c:2a:04:39:c6:bd:7f:1e:b0:8f:34:22:9e: 34:74:4a:ab:64:a2:cd:e0:2c:53:dc:ab:c2:60:be: 33:d6:5a:ba:67:f1:3f:5f:48:ac:0f:3c:0e:70:32: 79:ca:93:f5:e2:15:4f:47:e5:40:30:f8:9c:eb:0a: 9d:bf:2b:6c:e8:f7:a7:41:65:71:10:52:86:ce:7d: 13:ab:46:5d:5e:b0:a1:fb:0b:06:b3:d0:76:6d:05: 71:51:bb:8f:76:4a:3a:c6:d1:fa:ac:a6:69:dc:a6: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:98:E4:CE:68:91:7B:5E:94:69:AC:09:DA:39:9C:FC:EF:10:55 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0f:01:6f:61:a9:45:a2:77:54:a1:09:cf:12:5b:aa:ae:0c: 4c:60:35:23:4f:36:b4:55:04:44:52:cc:7d:b5:ca:50:9f:2a: 80:33:d6:d9:fe:6a:89:1b:de:c0:66:de:8a:27:7a:5e:b1:58: 13:49:83:b8:be:98:c8:a2:38:f0:ae:13:d1:3a:93:61:d0:70: 83:8f:45:91:cc:22:47:cf:f0:29:1e:17:bb:64:23:e5:5e:3b: 76:e2:68:0c:d6:4e:a2:1a:2e:57:28:96:c4:98:1e:88:42:02: 55:c3:44:43:90:03:b3:1a:dd:3a:b1:c4:88:8b:54:19:1b:83: 06:bb:e8:83:e8:3f:90:76:39:ac:1d:c4:1f:ba:e2:e9:02:3d: 16:77:5d:2e:d9:f3:c5:f4:db:1d:99:ea:fd:cc:79:f6:70:dd: 19:fd:36:e8:4a:1e:6c:ef:8c:2d:6b:2e:60:e8:d0:00:9b:5a: dd:ac:e2:c3:f8:d2:66:ed:36:19:14:2e:de:97:2a:dd:77:a4: ce:00:32:b4:c4:43:5c:0a:a7:88:77:43:39:da:1b:40:69:6a: 45:35:5f:61:86:bd:05:f2:fe:1f:bc:c2:de:ef:f5:89:20:48: c5:87:8c:37:5b:a3:8d:d3:6a:b3:a1:ad:f7:e2:aa:72:07:a2: 75:3e:ed:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDW8MgNo6kY0TBAfQ2UbEulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwOTI1MDUwMTM5WhcNMjYwOTI2MDUwMTM5WjAzMTEwLwYDVQQD EyhhYzMxOThlNGNlNjg5MTdiNWU5NDY5YWMwOWRhMzk5Y2ZjZWYxMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmNXKaeiwDtj2t5NAtcbEtinY3F6 BK9WRnxVQ/MBSS2+kuXkz46p0xi5z9cN9veDtqWeN/eP2hd5Kh3fG2xAvV4eAzu4 MqxaZHVaXb/qjDDetl9wxxAYvYcU2Lnk5xPCphHDHvNRpSVaThVcS6C2GhQQCtyG +a8i5WvTFqZ8o0wNxyHX4oEbG/3xt5ACsZKbI4Ndje9THFwqBDnGvX8esI80Ip40 dEqrZKLN4CxT3KvCYL4z1lq6Z/E/X0isDzwOcDJ5ypP14hVPR+VAMPic6wqdvyts 6PenQWVxEFKGzn0Tq0ZdXrCh+wsGs9B2bQVxUbuPdko6xtH6rKZp3KYmkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwxmOTOaJF7XpRprAnaOZz87xBVMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw8Bb2Gp RaJ3VKEJzxJbqq4MTGA1I082tFUERFLMfbXKUJ8qgDPW2f5qiRvewGbeiid6XrFY E0mDuL6YyKI48K4T0TqTYdBwg49FkcwiR8/wKR4Xu2Qj5V47duJoDNZOohouVyiW xJgeiEICVcNEQ5ADsxrdOrHEiItUGRuDBrvog+g/kHY5rB3EH7ri6QI9FnddLtnz xfTbHZnq/cx59nDdGf026EoebO+MLWsuYOjQAJta3aziw/jSZu02GRQu3pcq3Xek zgAytMRDXAqniHdDOdobQGlqRTVfYYa9BfL+H7zC3u/1iSBIxYeMN1ujjdNqs6Gt 9+KqcgeidT7tAA== -----END CERTIFICATE-----Generated at Fri Sep 25 10:58:31 2026 by rpki-client