$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json) Hash identifier: R7DubxRQKtTkw+COvrZ5AalWBTXRCKd2DmLQ8OFNTrI= Subject key identifier: 82:DA:87:F4:E2:A2:83:A6:E3:B6:5D:83:BD:BB:E9:B7:5C:BC:2F:3A Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019FCF70723E1E570F4BC011574B5146D094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft Manifest number: 040B Signing time: Wed 05 Aug 2026 01:01:20 +0000 Manifest this update: Wed 05 Aug 2026 01:01:20 +0000 Manifest next update: Thu 06 Aug 2026 01:01:20 +0000 Files and hashes: 1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=) 2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=) 3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=) 4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=) 5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=) 6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=) 7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: hYajeQrlhOqKBUMsJGD++u8MVe0XjpkHR36DxpyjYBU=) 8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=) 9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=) 10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Aug 2026 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cf:70:72:3e:1e:57:0f:4b:c0:11:57:4b:51:46:d0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Aug 5 01:01:20 2026 GMT Not After : Aug 6 01:01:20 2026 GMT Subject: CN=82da87f4e2a283a6e3b65d83bdbbe9b75cbc2f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:67:2a:f6:fd:4f:a5:24:8c:fe:2d:0a:c6: 15:8e:f4:9c:3a:f5:b5:b0:e9:aa:2a:c6:16:5f:b7: 51:51:5a:a3:53:f2:81:75:d7:bc:d6:3d:2f:d1:c0: 2c:00:71:31:b7:f3:43:96:48:bf:61:2d:d6:07:57: 64:75:12:f7:2a:c2:d2:3f:92:8b:ee:96:26:cc:31: a7:d6:19:21:ee:4b:40:11:d8:0d:b5:86:19:0f:b6: 1e:ac:00:25:ec:02:d1:03:af:6f:b3:e4:8b:38:2a: bf:b5:a2:57:5d:a3:82:d2:b8:68:a8:dd:3c:f3:67: ab:11:55:92:de:d0:12:20:22:5c:8b:a0:82:a2:93: 7e:2d:f7:00:13:d2:93:af:7c:35:db:91:29:c7:7d: b0:69:63:6b:24:c3:ea:31:33:f9:5b:8e:df:40:73: 8a:05:4f:49:06:9e:7e:1e:5d:cc:9d:bc:52:b7:51: 95:f1:fa:de:62:db:c3:10:88:92:7d:7a:f6:9e:1c: 3d:00:cc:89:c9:9b:d3:aa:5e:97:a4:5e:2e:91:c2: 48:d4:97:c6:4e:8b:8f:7b:4d:71:71:c0:f9:c3:98: 0f:26:bb:c3:68:d9:71:5f:7a:c7:ab:1d:ed:47:cf: 37:e2:12:b6:6f:87:4a:bd:a6:a1:ee:b4:01:ba:57: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:87:F4:E2:A2:83:A6:E3:B6:5D:83:BD:BB:E9:B7:5C:BC:2F:3A X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2c:71:f3:5f:81:93:19:98:63:96:6e:7f:8b:7b:3f:95:23: 0d:c8:19:cd:6b:09:68:6c:a3:b5:c1:20:85:79:3b:38:a5:4e: 8f:c3:59:22:a8:bf:0f:29:73:b5:40:66:b1:20:73:06:cb:b4: 48:ee:04:c7:80:00:fd:69:5f:f8:62:a0:e4:86:1e:2b:b5:95: b8:15:a8:af:e5:d6:6f:a1:99:f0:c1:0f:20:20:e6:87:90:70: 7f:94:b0:ca:77:af:50:b8:42:72:68:1e:14:57:07:f5:2a:73: 35:39:8f:e3:d6:c5:22:a9:3d:1a:3c:86:84:ea:84:df:55:5b: 3d:2d:a6:df:89:8e:1b:7d:1d:85:3a:b3:ae:45:cb:80:59:b0: 48:67:07:81:d6:34:49:79:dd:51:38:f7:8a:47:d6:7e:0a:01: 7d:e8:c9:d9:a5:cb:db:8d:dd:9d:8b:45:d4:b1:4f:f3:f8:9e: eb:d8:02:8c:59:54:27:66:c8:69:82:6c:04:d5:71:eb:64:35: 6c:47:33:0c:ef:59:2b:cc:78:b3:f0:99:17:fd:6f:a3:13:6f: 43:e1:bc:bb:c0:e8:54:a8:6c:b1:bc:29:af:bb:79:50:9f:f2: 9b:e5:98:48:81:22:62:ad:7d:c7:cc:66:0c:74:47:bc:dd:79: c6:15:75:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/PcHI+HlcPS8ARV0tRRtCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwODA1MDEwMTIwWhcNMjYwODA2MDEwMTIwWjAzMTEwLwYDVQQD Eyg4MmRhODdmNGUyYTI4M2E2ZTNiNjVkODNiZGJiZTliNzVjYmMyZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvlnKvb9T6UkjP4tCsYVjvScOvW1 sOmqKsYWX7dRUVqjU/KBdde81j0v0cAsAHExt/NDlki/YS3WB1dkdRL3KsLSP5KL 7pYmzDGn1hkh7ktAEdgNtYYZD7YerAAl7ALRA69vs+SLOCq/taJXXaOC0rhoqN08 82erEVWS3tASICJci6CCopN+LfcAE9KTr3w125Epx32waWNrJMPqMTP5W47fQHOK BU9JBp5+Hl3MnbxSt1GV8freYtvDEIiSfXr2nhw9AMyJyZvTql6XpF4ukcJI1JfG TouPe01xccD5w5gPJrvDaNlxX3rHqx3tR8834hK2b4dKvaah7rQBulfVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILah/TiooOm47Zdg7276bdcvC86MB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASixx81+B kxmYY5Zuf4t7P5UjDcgZzWsJaGyjtcEghXk7OKVOj8NZIqi/DylztUBmsSBzBsu0 SO4Ex4AA/Wlf+GKg5IYeK7WVuBWor+XWb6GZ8MEPICDmh5Bwf5SwynevULhCcmge FFcH9SpzNTmP49bFIqk9GjyGhOqE31VbPS2m34mOG30dhTqzrkXLgFmwSGcHgdY0 SXndUTj3ikfWfgoBfejJ2aXL243dnYtF1LFP8/ie69gCjFlUJ2bIaYJsBNVx62Q1 bEczDO9ZK8x4s/CZF/1voxNvQ+G8u8DoVKhssbwpr7t5UJ/ym+WYSIEiYq19x8xm DHRHvN15xhV1uw== -----END CERTIFICATE-----Generated at Wed Aug 5 11:35:39 2026 by rpki-client