$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: 1JEXI3wv7wzAe47OKllJfY4ky6ayaPfLaJzbtJCEjRM= Subject key identifier: 46:C2:35:48:54:57:E9:58:7E:5D:93:92:19:8C:6F:8F:89:B3:EF:84 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 01A087F9C0BC6AAA78B94CC9271F6D8CF1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1ABF Signing time: Wed 09 Sep 2026 21:01:26 +0000 Manifest this update: Wed 09 Sep 2026 21:01:26 +0000 Manifest next update: Thu 10 Sep 2026 21:01:26 +0000 Files and hashes: 1: 3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa (hash: pg5Ed7h72zzvUZD3Dywps0w/tKRJFUdallc5ZvXhwdQ=) 2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=) 4: KuQWIegYdUJMwSsw6LOJEGnWJIU.roa (hash: n1+wc9tP5UGa0heg8onORKo3M069nKjqbj355TvV57s=) 5: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 6: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: Yi+ighWSmfEx7P6NDNIPN4/DYG9Wwy0/dk3m5piGJnQ=) 7: Znvr8yVRDM_W2OeELRoPug4jNeo.roa (hash: YDHfFAu7HsZuyoFaaHX4lgMvQUQm7Z2O0oJuj/96cjI=) 8: hqEA9Qo_WR0t0REBXM7emNlm3G4.roa (hash: VMkkkwfnSlYm+rTnOGrHA34ST1v3Lq1NtC99mXy9b8s=) 9: kHVx3MxOhUHnvGzMhHMTh-h0xao.roa (hash: apdMUVkUsjvxSYU4NdkC22tvpcOKIkS/iIwnp6sgj8E=) 10: kekLC_LpnvrqIQBZmWGo8muks_0.roa (hash: UpEHy9G8oQBNXxDYPyuJ63Wn2y4RLFOVpaoZj+/J53Y=) 11: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 12: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:87:f9:c0:bc:6a:aa:78:b9:4c:c9:27:1f:6d:8c:f1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Sep 9 21:01:26 2026 GMT Not After : Sep 10 21:01:26 2026 GMT Subject: CN=46c235485457e9587e5d9392198c6f8f89b3ef84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:98:1e:4d:49:bc:f8:50:63:91:d2:ba:ea: 64:50:a6:d3:d4:c7:6e:f5:62:f8:3e:e2:c6:fd:f0: 55:31:ed:ed:11:b8:b5:06:a8:ba:f6:e2:1e:84:b3: 11:c2:43:5f:09:1f:0f:00:88:db:4b:20:f9:d5:ee: bf:6b:25:44:d2:07:e7:ca:3d:f3:88:1a:99:c4:64: 9c:a8:a6:3b:71:bf:75:94:f1:43:df:7a:62:50:cc: fd:7f:14:89:19:4b:68:9e:8e:79:f6:26:43:47:de: 3d:c1:57:33:ee:c8:c9:39:69:6b:3e:4f:d9:24:62: 7f:0c:06:81:07:36:0c:36:40:09:6a:0b:29:7a:5d: c2:d9:e3:3f:07:5e:35:7e:03:33:64:23:3b:26:57: 4f:fd:b3:e1:a5:74:24:bb:ee:8a:0b:29:08:6a:c4: 78:d0:77:4b:85:5c:18:c9:04:c6:56:d9:fb:ec:35: 6e:77:ba:26:a8:d5:92:60:87:7d:76:e5:e4:74:57: 70:85:cd:a6:03:c8:c6:dc:5e:fa:20:b1:0a:f3:e9: 23:7c:b3:bb:47:e2:a2:f3:08:96:7e:c4:8c:8f:12: d7:d8:a9:dd:fd:1a:83:69:7d:55:6b:c5:29:ef:df: cb:f6:90:bd:e5:15:24:6c:14:ef:ab:ea:08:dd:5c: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C2:35:48:54:57:E9:58:7E:5D:93:92:19:8C:6F:8F:89:B3:EF:84 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3e:38:b9:d3:89:f0:b1:fc:8f:01:7e:73:76:94:7f:46:68: d6:5d:87:90:1b:a0:1c:08:d6:fb:1d:bc:d3:58:83:95:3e:5f: 91:56:13:af:74:55:41:ad:7f:46:07:21:05:97:96:97:a4:43: 31:da:61:13:69:ec:16:37:87:83:ec:b2:b6:46:c9:f0:16:1f: df:0d:4f:fc:29:f4:4c:a8:c7:f4:60:f4:ff:59:5f:8b:84:37: 2b:9c:0b:65:29:20:2b:15:c2:ff:1f:8a:9c:60:9b:7c:2f:73: cf:a8:cd:d7:a2:c5:42:5f:a2:11:1b:5e:1a:6d:fd:a5:c8:4f: 84:b2:d1:ba:bd:99:9a:f7:1d:19:ad:6f:eb:9e:00:57:13:ef: fb:97:40:26:ac:52:2b:d9:6c:42:d4:72:e5:af:24:1e:85:4b: 33:aa:e4:e5:ab:3c:7d:be:22:44:db:fd:e1:4a:9b:55:1e:cf: 3c:a5:c9:18:8f:c9:49:83:b0:ed:c7:98:cd:0c:a0:54:34:62: d6:e2:06:83:67:24:2a:3b:2b:31:ec:ec:62:57:1f:19:85:63: c8:58:bc:5f:9b:96:80:a6:26:aa:7d:d6:29:f4:62:36:8f:92: 5b:36:21:39:26:42:08:20:94:d0:87:0f:e3:27:84:6e:c1:20: 89:b5:dd:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCH+cC8aqp4uUzJJx9tjPHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwOTA5MjEwMTI2WhcNMjYwOTEwMjEwMTI2WjAzMTEwLwYDVQQD Eyg0NmMyMzU0ODU0NTdlOTU4N2U1ZDkzOTIxOThjNmY4Zjg5YjNlZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWeYHk1JvPhQY5HSuupkUKbT1Mdu 9WL4PuLG/fBVMe3tEbi1Bqi69uIehLMRwkNfCR8PAIjbSyD51e6/ayVE0gfnyj3z iBqZxGScqKY7cb91lPFD33piUMz9fxSJGUtono559iZDR949wVcz7sjJOWlrPk/Z JGJ/DAaBBzYMNkAJagspel3C2eM/B141fgMzZCM7JldP/bPhpXQku+6KCykIasR4 0HdLhVwYyQTGVtn77DVud7omqNWSYId9duXkdFdwhc2mA8jG3F76ILEK8+kjfLO7 R+Ki8wiWfsSMjxLX2Knd/RqDaX1Va8Up79/L9pC95RUkbBTvq+oI3VwhWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbCNUhUV+lYfl2TkhmMb4+Js++EMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT44udOJ 8LH8jwF+c3aUf0Zo1l2HkBugHAjW+x2801iDlT5fkVYTr3RVQa1/RgchBZeWl6RD MdphE2nsFjeHg+yytkbJ8BYf3w1P/Cn0TKjH9GD0/1lfi4Q3K5wLZSkgKxXC/x+K nGCbfC9zz6jN16LFQl+iERteGm39pchPhLLRur2ZmvcdGa1v654AVxPv+5dAJqxS K9lsQtRy5a8kHoVLM6rk5as8fb4iRNv94UqbVR7PPKXJGI/JSYOw7ceYzQygVDRi 1uIGg2ckKjsrMezsYlcfGYVjyFi8X5uWgKYmqn3WKfRiNo+SWzYhOSZCCCCU0IcP 4yeEbsEgibXd9Q== -----END CERTIFICATE-----Generated at Thu Sep 10 06:04:22 2026 by rpki-client