$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json) Hash identifier: Y+fyfXM+uw3ShHNm2vYk1JBrjYmH+cDujH0thOH8EjE= Subject key identifier: C8:A4:19:8F:A4:50:AF:D2:FC:1A:27:10:A2:41:7E:18:90:0E:1B:8A Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019F8FEC1D448F19C8B81CE55D1621A76B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft Manifest number: 0C7E Signing time: Thu 23 Jul 2026 17:00:43 +0000 Manifest this update: Thu 23 Jul 2026 17:00:43 +0000 Manifest next update: Fri 24 Jul 2026 17:00:43 +0000 Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=) 2: 0hivMId7QyV_J-baQe-LpP04A_E.roa (hash: 4wskR4bGB2kTBEPb3U0Ndo9Z+ReWqtwzIpeVVcyolq4=) 3: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=) 4: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=) 5: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=) 6: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=) 7: BLbEGnHlodnp79q9soB7X47HKdw.roa (hash: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=) 8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=) 9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=) 10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=) 11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=) 12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=) 13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=) 14: P7ZgWKI1Wrjsz9VU4DTzCLAgheI.roa (hash: x5YukDSUF+4txhRHDoxZY/oWruu1mketabTf55p1uXU=) 15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=) 16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=) 17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=) 18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=) 19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: lCRpyLogaC6W/ufSXIyHvt4+ydB7G0bXa4osZ8i+kNk=) 20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=) 21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=) 22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=) 23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=) 24: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=) 25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=) 26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=) 27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=) 28: r5xSrq13TBSiblkLCkk6aKWkSPM.roa (hash: Jqrbgb6N2ntUjpORqhuL9e7bWx13rYWpNNGtwo5PVmQ=) 29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=) 30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=) 31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:1d:44:8f:19:c8:b8:1c:e5:5d:16:21:a7:6b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jul 23 17:00:43 2026 GMT Not After : Jul 24 17:00:43 2026 GMT Subject: CN=c8a4198fa450afd2fc1a2710a2417e18900e1b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:1b:b3:8e:86:ea:5c:e9:13:8b:1b:44:ea: 51:3b:ba:8d:33:f4:39:56:2a:91:2b:b3:fa:a4:27: b6:b6:b8:e2:b2:84:6a:cf:7f:96:1d:90:d5:da:f7: 9f:9a:6f:e6:8f:f3:d8:6f:28:fe:7e:0b:24:4d:53: da:c3:5c:10:0d:5e:e8:bd:6a:f0:7e:af:7e:f7:b9: c3:e0:47:25:6f:d8:e1:22:6b:27:87:2d:cd:28:9c: 19:7b:36:ed:29:b0:85:b3:5b:8e:91:67:32:be:a6: e7:3a:0a:ba:18:86:95:d9:a8:99:94:e2:6c:4b:33: 00:3e:f1:27:89:2e:0a:eb:ee:3a:34:45:ff:f0:a8: fb:d8:51:4b:2d:68:53:85:d3:eb:47:cb:8b:54:56: cf:cd:94:48:4f:51:99:4c:ca:20:c3:da:32:64:02: f2:7c:7a:c1:6c:f5:6a:52:94:72:7a:ab:43:8f:45: 4d:0d:1c:65:04:f1:a0:a7:a4:44:cd:2f:a9:22:fd: e8:e7:94:4f:2b:56:10:08:fc:b6:14:3a:a0:90:6b: d2:b3:c8:1e:7c:38:ba:ad:5d:1d:dd:45:f1:b8:85: fa:89:69:ef:58:07:a0:8a:e4:3a:d3:a1:a6:68:15: 24:01:56:97:08:da:1a:da:18:97:df:74:4c:4a:07: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A4:19:8F:A4:50:AF:D2:FC:1A:27:10:A2:41:7E:18:90:0E:1B:8A X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:64:2f:89:e5:9e:88:4e:21:2d:f7:da:85:ce:21:56:6f:43: 51:13:4b:23:dc:9c:a6:45:d6:88:4a:92:59:0a:f5:5e:08:18: d9:9f:8f:2b:60:63:2b:b2:6f:ef:24:47:76:d2:44:e0:cf:4d: 42:9a:a9:ed:7a:24:5b:17:1b:7e:0f:40:3a:2d:14:e7:0a:d5: b5:a0:fa:ad:05:13:1b:84:82:cc:3b:cb:5b:c7:30:ec:99:30: 21:d5:79:32:a1:19:99:3e:52:b0:b4:2c:8c:9f:97:e6:31:cf: c6:5b:ac:34:b8:93:33:5a:1a:2d:98:bc:e8:64:f9:87:6e:cc: dd:68:12:99:10:e2:f9:d5:2e:a0:10:e8:9e:9b:86:e0:d2:01: a3:2d:e4:67:56:a4:a2:0f:79:e3:ae:00:36:f7:1f:b1:f2:a5: d6:20:88:29:e2:82:7c:ba:ed:a6:df:45:91:48:e0:66:30:47: f7:44:d0:f1:54:13:b6:17:b8:73:aa:1c:82:f0:6f:ca:98:77: ce:d6:da:2f:c5:23:6e:8c:10:8c:5e:1a:42:47:57:4b:c7:5e: d8:b9:b7:24:98:57:04:0d:4c:7f:8b:b2:13:1e:e0:39:6c:50: 81:d1:07:15:af:d3:2b:92:44:c6:2e:f6:ba:98:0e:f9:a3:29: aa:30:96:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7B1EjxnIuBzlXRYhp2tTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwNzIzMTcwMDQzWhcNMjYwNzI0MTcwMDQzWjAzMTEwLwYDVQQD EyhjOGE0MTk4ZmE0NTBhZmQyZmMxYTI3MTBhMjQxN2UxODkwMGUxYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bsbs46G6lzpE4sbROpRO7qNM/Q5 ViqRK7P6pCe2trjisoRqz3+WHZDV2vefmm/mj/PYbyj+fgskTVPaw1wQDV7ovWrw fq9+97nD4Eclb9jhImsnhy3NKJwZezbtKbCFs1uOkWcyvqbnOgq6GIaV2aiZlOJs SzMAPvEniS4K6+46NEX/8Kj72FFLLWhThdPrR8uLVFbPzZRIT1GZTMogw9oyZALy fHrBbPVqUpRyeqtDj0VNDRxlBPGgp6REzS+pIv3o55RPK1YQCPy2FDqgkGvSs8ge fDi6rV0d3UXxuIX6iWnvWAegiuQ606GmaBUkAVaXCNoa2hiX33RMSgceMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMikGY+kUK/S/BonEKJBfhiQDhuKMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGQvieWe iE4hLffahc4hVm9DURNLI9ycpkXWiEqSWQr1XggY2Z+PK2BjK7Jv7yRHdtJE4M9N Qpqp7XokWxcbfg9AOi0U5wrVtaD6rQUTG4SCzDvLW8cw7JkwIdV5MqEZmT5SsLQs jJ+X5jHPxlusNLiTM1oaLZi86GT5h27M3WgSmRDi+dUuoBDonpuG4NIBoy3kZ1ak og95464ANvcfsfKl1iCIKeKCfLrtpt9FkUjgZjBH90TQ8VQTthe4c6ocgvBvyph3 ztbaL8UjbowQjF4aQkdXS8de2Lm3JJhXBA1Mf4uyEx7gOWxQgdEHFa/TK5JExi72 upgO+aMpqjCWQw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:42:21 2026 by rpki-client