$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json) Hash identifier: ejf+1hNMEeGgt5HO+MqgOhE8ZoczyvlnpKFSuA4MzuA= Subject key identifier: DD:49:DE:0B:B1:8C:DB:53:43:EF:B1:D3:70:0B:E9:ED:69:30:8A:1C Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019DF865C6328C3B4A47235EDE3BE38EB918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft Manifest number: 0317 Signing time: Tue 05 May 2026 13:48:32 +0000 Manifest this update: Tue 05 May 2026 13:48:32 +0000 Manifest next update: Wed 06 May 2026 13:48:32 +0000 Files and hashes: 1: 1-slrJI7IrkjucojDL3PSM-QhQn8.roa (hash: xzBm5rmTZ/YhoTedM66on08Pubr3LWJMwPe9XwQcqH8=) 2: NoZSWhmqqJ-jT-gIkmjqQ8qYPhs.roa (hash: 4FtInJpoGkk+Vb1c+RGpJW0LjEHsFBBNSGv4WPMtxTI=) 3: OPTZ--metoE31gQg_Kb2TtGMPZs.roa (hash: 5B9mvxolESAWRrjNgHOj1iuu7ztWWoCrEFq+GFHk69s=) 4: Olv6LJNY9--jk7Z4zsGLgF8cOqQ.roa (hash: Y+xcg8pb9fawoZIv9oQkXj/C2Ip7behg0aES9y4Lr60=) 5: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (hash: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0=) 6: Xyfw_F7Al_ClRr8-ihHfuJGwEGI.roa (hash: FySK//s6n3h8RIZFxfbkqJJANJBH7/F4as5E6MlREIw=) 7: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: Y9qwXm41phOyzwWTyoPDEFytjZ3LVNekGirimiWomMY=) 8: a5VVVz2Ui_9h3mW5WZQg--lrU_Y.roa (hash: 5VX7qNlklX2fuW/gRGQLSag3AdckFK4/ZchDNd6NNIc=) 9: bjot4b3E6nFOB3m3PoYlSW85ajQ.roa (hash: CtA6MMmy0n2/AhNaEa3R53oBEYwsN+optXLqB6oS7ic=) 10: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (hash: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 13:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f8:65:c6:32:8c:3b:4a:47:23:5e:de:3b:e3:8e:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: May 5 13:48:32 2026 GMT Not After : May 6 13:48:32 2026 GMT Subject: CN=dd49de0bb18cdb5343efb1d3700be9ed69308a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dc:71:be:83:f8:65:17:98:52:59:35:2d:e7: a5:a8:80:1f:fe:ca:7b:fc:43:4a:21:7e:9c:13:97: 07:95:5b:62:de:50:32:a1:65:7a:51:73:67:38:d8: fa:e6:20:66:3e:88:3b:ea:d2:2c:e8:a6:2c:de:2e: f1:58:b7:a1:46:a1:56:9d:ac:7d:09:be:f2:6a:c4: cf:c8:06:fe:13:52:12:f7:52:ed:20:e4:30:89:e1: db:f6:9b:24:96:21:c6:13:dd:9d:be:a8:95:d1:e2: 30:4e:6f:95:ff:6e:36:2d:36:0a:db:1f:09:4c:1c: 16:31:e4:6a:05:4a:3e:24:69:b6:da:8e:7f:4d:be: 91:5a:c4:d0:fe:1c:f1:8e:86:23:15:fd:e7:c6:a4: 60:be:d0:ae:29:d5:96:86:ad:93:aa:f8:86:a0:fd: 42:ca:6b:ec:af:ac:19:a4:0d:f4:fe:dc:a3:99:f1: 4f:06:1f:90:17:be:94:b3:76:0b:bf:a6:59:52:f6: ce:18:3b:c1:16:48:4a:04:9d:da:a4:9b:b0:a1:6b: b6:8a:60:ff:b6:8b:40:a5:7e:cc:b2:28:05:7c:75: d9:12:f6:b1:8b:8d:ac:b0:1f:de:76:fc:cd:65:d3: 9e:2b:e9:de:93:76:03:7b:aa:25:89:e1:43:a4:c6: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:49:DE:0B:B1:8C:DB:53:43:EF:B1:D3:70:0B:E9:ED:69:30:8A:1C X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:64:6a:d9:99:a0:2a:e9:b7:cd:20:cd:3d:d9:19:c0:5c:37: f4:8a:1a:72:56:aa:35:f5:62:25:d5:09:98:b5:dd:02:fb:af: 6a:cd:b6:83:6c:48:33:ca:d9:4c:2a:da:01:82:57:75:7b:87: 84:da:57:72:d7:49:c1:af:09:2c:bb:be:13:1d:b6:81:1a:71: ee:d3:38:85:8f:bb:23:53:0d:1e:23:60:9e:19:e9:63:0b:ce: d5:0a:a9:60:f2:68:c2:42:f4:48:45:c3:42:1e:7e:e2:63:32: 65:7d:c9:30:01:7e:d6:53:bf:ca:b7:2a:dd:90:59:95:13:50: 23:f1:bd:08:5a:a5:ba:c6:52:40:36:f3:88:74:5b:1d:2a:df: 6c:cf:be:90:da:f3:55:dd:58:12:fb:d0:41:f0:a7:1d:11:f7: f8:a2:fd:46:d5:47:98:31:66:b2:9d:71:90:88:62:b2:84:f3: 4f:04:2c:ef:bf:97:eb:f9:8d:12:ea:43:c6:15:57:c3:5e:05: 30:95:51:f0:c5:ca:52:bd:9a:95:98:ec:50:31:3c:2d:85:ef: 53:51:f7:62:71:f2:cd:49:51:34:ae:c5:7f:48:f9:d7:7c:a8: 71:73:e2:c3:77:60:da:41:39:f0:b0:cd:d3:27:ff:ca:49:f3: cc:c2:78:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ34ZcYyjDtKRyNe3jvjjrkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwNTA1MTM0ODMyWhcNMjYwNTA2MTM0ODMyWjAzMTEwLwYDVQQD EyhkZDQ5ZGUwYmIxOGNkYjUzNDNlZmIxZDM3MDBiZTllZDY5MzA4YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NxxvoP4ZReYUlk1LeelqIAf/sp7 /ENKIX6cE5cHlVti3lAyoWV6UXNnONj65iBmPog76tIs6KYs3i7xWLehRqFWnax9 Cb7yasTPyAb+E1IS91LtIOQwieHb9pskliHGE92dvqiV0eIwTm+V/242LTYK2x8J TBwWMeRqBUo+JGm22o5/Tb6RWsTQ/hzxjoYjFf3nxqRgvtCuKdWWhq2TqviGoP1C ymvsr6wZpA30/tyjmfFPBh+QF76Us3YLv6ZZUvbOGDvBFkhKBJ3apJuwoWu2imD/ totApX7MsigFfHXZEvaxi42ssB/edvzNZdOeK+nek3YDe6olieFDpMYiJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1J3guxjNtTQ++x03AL6e1pMIocMB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2Rq2Zmg Kum3zSDNPdkZwFw39IoaclaqNfViJdUJmLXdAvuvas22g2xIM8rZTCraAYJXdXuH hNpXctdJwa8JLLu+Ex22gRpx7tM4hY+7I1MNHiNgnhnpYwvO1QqpYPJowkL0SEXD Qh5+4mMyZX3JMAF+1lO/yrcq3ZBZlRNQI/G9CFqlusZSQDbziHRbHSrfbM++kNrz Vd1YEvvQQfCnHRH3+KL9RtVHmDFmsp1xkIhisoTzTwQs77+X6/mNEupDxhVXw14F MJVR8MXKUr2alZjsUDE8LYXvU1H3YnHyzUlRNK7Ff0j513yocXPiw3dg2kE58LDN 0yf/yknzzMJ41g== -----END CERTIFICATE-----Generated at Tue May 5 20:11:02 2026 by rpki-client