$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: /Rf2hxPb7HIPTYziqDpm9g782WARfEuZ2aQM7un2eXk= Subject key identifier: 96:03:23:18:CC:76:B4:00:AB:8E:DC:F9:F0:63:CF:F1:08:20:6F:96 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019E1EA35364044F34671EC5C9C6E1DB3519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1A84 Signing time: Wed 13 May 2026 00:01:20 +0000 Manifest this update: Wed 13 May 2026 00:01:20 +0000 Manifest next update: Thu 14 May 2026 00:01:20 +0000 Files and hashes: 1: 2p6X0AtouCzVNKAMw7m3iePnGWs.roa (hash: JTFFGaqq0yiZYLYTUwYMgBzV4FH4zB+/tPL4IXev7Po=) 2: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=) 3: AD2IgnaDcxP-iUrYmaC-dtbyvTQ.roa (hash: YirutIpsNuM7OfsWdL6cUp/DubORpuhrcBem96Hz7EU=) 4: Bq_Yq2JHrAaJJHF9yLAqL5rB7lc.roa (hash: fdB1s5gHlSMOCNBP6f1YeXF7RQ1z3eDBgEt/mLV5PmY=) 5: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=) 6: Fv-ztF2UG5zf6h5b12hXUB2uIfM.roa (hash: vWzxaASZZO87hMUAoCYoH4niRZRjFfP7/pwFauJSL4Q=) 7: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=) 8: Kj0sX5EXk_lnEe1oG9enI-9Uxz8.roa (hash: QsEGqqedvvJfyYegitKnBcVHLqm6NXGbqrN63e4Vj6c=) 9: PNSx2F53VIjde5rolz9OgH_inP4.roa (hash: f/nO3XQOBkwo4NHR95+ZYxmXCgXwhLt6p1vvZdYDs0M=) 10: PisELHxCj9Tij4-2sem6RSDPu4M.roa (hash: oGOd3HB+uRNlF70fF+XYGkQK02LLgQH4jFhzBp8FfFE=) 11: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=) 12: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=) 13: cU6CsVDfHQhJQjFWuDSdWMXOY-Y.roa (hash: yMJ3yAkAsU6jX+mte3bhagIJyR+dnrQ4Zb8Q4qcTWso=) 14: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=) 15: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=) 16: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=) 17: sfIFa_zvIWFeaikhlC8p9lzyiak.roa (hash: JmdJqAk29N9Jb2v4hQ9hbp/VRCQfMA8RIGy2N4vYuEA=) 18: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=) 19: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: lbPYXkTcsyKZUbmzqAmUJu/f0/Ebnz4ijyUOZx9NX+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:53:64:04:4f:34:67:1e:c5:c9:c6:e1:db:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: May 13 00:01:20 2026 GMT Not After : May 14 00:01:20 2026 GMT Subject: CN=96032318cc76b400ab8edcf9f063cff108206f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:61:22:24:42:7b:c1:44:88:88:83:1b:ac: e5:ee:1b:c7:d4:06:12:65:1a:3f:69:73:7e:85:88: 48:92:ba:88:3a:4a:da:fa:69:52:70:c4:98:d6:36: 29:d4:80:58:9d:9a:6f:12:3f:54:c0:f1:3d:74:9b: c7:b5:46:5f:24:56:40:38:a7:51:a7:2a:d1:58:28: 28:01:bd:38:e4:a3:8c:eb:85:24:48:d5:f3:20:b5: 98:36:87:56:14:7d:c0:1d:54:ee:7e:6e:5d:03:b9: 14:f5:05:00:c4:4a:41:49:f9:5a:35:9b:f7:87:5f: aa:b6:8d:80:d1:bc:57:ac:7f:f0:f0:85:12:59:91: 42:84:af:10:32:b7:61:4c:cf:28:64:14:f3:d9:67: 13:e0:08:a5:b2:19:8b:e8:47:bb:97:9c:92:8e:20: d9:04:4b:15:ca:38:c9:ad:0d:33:56:6a:31:6e:54: 1f:37:88:2c:10:0a:83:4e:7f:3a:53:a1:94:f0:bc: 10:ed:ef:cf:33:28:36:e8:8c:76:3a:52:96:37:7d: fc:ca:e5:89:0d:5f:23:6f:12:0f:c7:af:24:b1:e3: ce:3e:e9:7d:fe:62:35:39:a3:b6:b4:0b:ca:a5:fe: 71:8d:c3:ff:5f:a4:55:c6:06:46:11:13:f6:e4:a5: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:03:23:18:CC:76:B4:00:AB:8E:DC:F9:F0:63:CF:F1:08:20:6F:96 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:2b:4d:0e:ba:5a:34:c4:c3:66:dc:6b:b5:22:61:db:ed: f8:2c:63:17:bd:40:2b:8a:fa:6a:35:d3:07:49:99:1e:05:68: b6:5b:58:08:6b:3e:c2:b5:49:65:51:fa:da:c2:0a:70:6a:d8: ab:3a:c6:bf:16:4a:13:7f:91:b3:ed:d2:d0:c9:a4:0e:c7:80: 5d:b2:5c:6a:22:25:54:0b:44:94:95:f0:b2:2b:b9:9d:9c:c7: 20:7b:61:eb:05:15:3b:01:29:0d:0e:3b:4f:f2:a0:9f:68:6b: 85:45:af:f4:1b:95:b8:74:31:ca:01:a8:49:0e:b2:f2:38:21: 72:fa:7b:7a:52:3d:84:5e:3a:e5:88:27:a2:c4:bd:8a:a6:ad: 02:e3:fd:79:42:90:07:7d:64:01:ad:54:84:1d:e7:6d:25:ba: 6a:7f:f0:7e:08:c0:d4:ae:88:a8:f2:75:bd:09:fd:3a:7c:21: b1:5f:51:c3:2d:24:5a:93:b1:82:64:4e:f9:0f:58:ca:70:b0: 73:68:50:d7:28:bb:cc:ba:d9:4f:d2:86:a7:f1:eb:47:05:b5: 6c:c0:75:52:cd:b0:5e:85:bd:eb:be:b9:d2:7a:64:3e:b4:d6: 46:a7:0f:8c:5c:8c:a6:cd:df:84:aa:e1:46:62:56:f7:0c:61: d7:56:c9:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo1NkBE80Zx7Fycbh2zUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwNTEzMDAwMTIwWhcNMjYwNTE0MDAwMTIwWjAzMTEwLwYDVQQD Eyg5NjAzMjMxOGNjNzZiNDAwYWI4ZWRjZjlmMDYzY2ZmMTA4MjA2Zjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qlhIiRCe8FEiIiDG6zl7hvH1AYS ZRo/aXN+hYhIkrqIOkra+mlScMSY1jYp1IBYnZpvEj9UwPE9dJvHtUZfJFZAOKdR pyrRWCgoAb045KOM64UkSNXzILWYNodWFH3AHVTufm5dA7kU9QUAxEpBSflaNZv3 h1+qto2A0bxXrH/w8IUSWZFChK8QMrdhTM8oZBTz2WcT4AilshmL6Ee7l5ySjiDZ BEsVyjjJrQ0zVmoxblQfN4gsEAqDTn86U6GU8LwQ7e/PMyg26Ix2OlKWN338yuWJ DV8jbxIPx68ksePOPul9/mI1OaO2tAvKpf5xjcP/X6RVxgZGERP25KUvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYDIxjMdrQAq47c+fBjz/EIIG+WMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgsrTQ66 WjTEw2bca7UiYdvt+CxjF71AK4r6ajXTB0mZHgVotltYCGs+wrVJZVH62sIKcGrY qzrGvxZKE3+Rs+3S0MmkDseAXbJcaiIlVAtElJXwsiu5nZzHIHth6wUVOwEpDQ47 T/Kgn2hrhUWv9BuVuHQxygGoSQ6y8jghcvp7elI9hF465YgnosS9iqatAuP9eUKQ B31kAa1UhB3nbSW6an/wfgjA1K6IqPJ1vQn9OnwhsV9Rwy0kWpOxgmRO+Q9YynCw c2hQ1yi7zLrZT9KGp/HrRwW1bMB1Us2wXoW967650npkPrTWRqcPjFyMps3fhKrh RmJW9wxh11bJmw== -----END CERTIFICATE-----Generated at Wed May 13 10:58:43 2026 by rpki-client