$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: a4jrCTBeyk48dr3+sVFsanwyZ25CB+KEiMEhr7t67gY= Subject key identifier: 34:94:AB:70:83:7E:20:0C:03:A1:E6:B7:00:85:78:B9:F6:EC:33:63 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 01A1746F8EED99EDF3C109FC451FB6039EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1B43 Signing time: Sun 25 Oct 2026 19:00:30 +0000 Manifest this update: Sun 25 Oct 2026 19:00:30 +0000 Manifest next update: Mon 26 Oct 2026 19:00:30 +0000 Files and hashes: 1: 3Cc7zYr4wdMCZUe9g6dW_2i0ML8.roa (hash: pg5Ed7h72zzvUZD3Dywps0w/tKRJFUdallc5ZvXhwdQ=) 2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 3: KuQWIegYdUJMwSsw6LOJEGnWJIU.roa (hash: n1+wc9tP5UGa0heg8onORKo3M069nKjqbj355TvV57s=) 4: S97f4H7Jcp_RS4iCoVA-_mD7rh4.roa (hash: rVemoVktMuhGynI9BUyXTqgwlzxx1oDBdpcFqhQcXpo=) 5: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 6: WrzqxUbHWF7HcxsL8cQxuxpNdmY.roa (hash: WlfUvOzQ5YqMfbAGnnKjEm1gW/UCmNr5ct407GHIsZc=) 7: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: V32eJapWGkS+S8SzGOgWsefuMOF3Wb0TXOj9FR5s5B4=) 8: cnyVAm6n-mPk7D9NoefcfJS4h-I.roa (hash: hg++FUgze8SJYZRhrwDxmY/icpo7b2MPk9WotmoOGz0=) 9: iNpfv2H8aBWlKXZF26UnnW9pbIg.roa (hash: QvFWxjKcfe2bGZQbuqD0AHyjjwdonraBq3f/+QRF0aM=) 10: kHVx3MxOhUHnvGzMhHMTh-h0xao.roa (hash: apdMUVkUsjvxSYU4NdkC22tvpcOKIkS/iIwnp6sgj8E=) 11: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 12: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) 13: tant_iw39C5s5eHSo-fWpKRJVZI.roa (hash: 3Mfj9MzM5Fq754ib0F7hoqH7ufiZ177wLskV+BMlC5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:74:6f:8e:ed:99:ed:f3:c1:09:fc:45:1f:b6:03:9e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Oct 25 19:00:30 2026 GMT Not After : Oct 26 19:00:30 2026 GMT Subject: CN=3494ab70837e200c03a1e6b7008578b9f6ec3363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:01:c9:89:ae:d5:05:26:9c:85:ec:67:0a: fe:e3:c2:c2:fd:6e:82:f6:80:e9:21:ae:53:cb:0f: 74:60:c3:13:01:94:8d:05:04:8d:e2:04:c3:55:5f: 39:fe:a4:de:c0:07:9f:4d:5e:85:64:ec:fd:73:84: 3b:6d:ea:a5:78:1e:30:88:7d:a9:d8:29:54:72:cc: 52:ed:c0:f4:41:73:c4:dc:62:2a:e4:9f:31:43:f0: 88:36:92:6c:8d:2e:98:eb:23:78:bc:2c:78:d2:b7: 4a:63:b9:76:a5:91:4a:ef:af:35:0b:9a:4f:8c:f9: 40:8b:ae:e6:07:de:cd:3f:51:0e:f2:a8:78:bb:b7: 5b:97:21:29:6a:e7:9e:6f:55:0e:88:bc:07:ad:30: c9:f4:d7:53:9e:e9:42:ae:71:b4:b3:c7:8a:3d:ac: 27:d5:ec:c8:77:b7:27:17:d3:eb:d5:a5:7a:08:04: 89:18:f5:9e:15:be:52:f5:b1:4f:ec:9d:8b:79:56: b2:49:b1:43:91:27:f5:89:dc:2b:9d:e9:ac:84:7d: 0c:1f:36:c7:6f:ba:7a:8c:07:53:06:30:09:bf:56: 9c:a4:e4:47:72:e9:f1:7d:8d:33:43:50:e0:e5:9f: 86:bd:12:e0:b1:7c:73:f4:a2:fb:4b:3e:5b:a6:6d: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:94:AB:70:83:7E:20:0C:03:A1:E6:B7:00:85:78:B9:F6:EC:33:63 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7f:3a:ea:17:db:71:1c:03:c5:59:2d:6f:00:c5:25:54:56: 46:d4:1f:f6:a9:6e:93:18:10:67:83:f7:37:cc:da:b5:47:f9: 9f:b9:7f:ae:4a:a4:fc:08:19:4e:46:a0:ee:44:d6:7e:e2:c8: f5:ee:e6:35:c1:be:ba:0b:d9:62:00:77:b1:3d:86:be:82:41: ac:d0:51:43:22:8f:95:ce:44:c4:ec:62:a7:7b:3d:e2:42:9e: 5f:f1:f9:df:9c:e9:df:3a:3a:90:ff:fd:50:e1:1c:ea:23:f4: 7a:ba:ce:e1:98:fa:7c:75:29:84:1e:db:1c:51:21:a1:5e:70: 6b:b9:fb:a3:44:8e:72:7b:fd:04:4f:06:f1:02:fb:93:25:29: 92:b5:16:6f:c7:ac:5a:45:23:54:39:04:39:45:ae:ec:94:e7: 7a:4e:2f:f4:fc:ab:80:ea:d7:c6:69:40:0c:ab:f4:de:7c:f8: fd:d2:45:a9:13:6c:16:6b:99:1b:e2:98:bf:52:76:0e:32:42: 4d:34:7a:58:dc:15:cd:18:5f:70:28:d0:69:bb:1d:37:d5:38: e5:87:29:ac:54:a5:82:66:60:a0:a9:13:69:ee:d4:5f:59:c3: e8:50:72:07:eb:86:b6:24:c0:7c:ea:0a:32:a4:fa:e7:ad:2c: 55:09:f5:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF0b47tme3zwQn8RR+2A568MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYxMDI1MTkwMDMwWhcNMjYxMDI2MTkwMDMwWjAzMTEwLwYDVQQD EygzNDk0YWI3MDgzN2UyMDBjMDNhMWU2YjcwMDg1NzhiOWY2ZWMzMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvoByYmu1QUmnIXsZwr+48LC/W6C 9oDpIa5Tyw90YMMTAZSNBQSN4gTDVV85/qTewAefTV6FZOz9c4Q7beqleB4wiH2p 2ClUcsxS7cD0QXPE3GIq5J8xQ/CINpJsjS6Y6yN4vCx40rdKY7l2pZFK7681C5pP jPlAi67mB97NP1EO8qh4u7dblyEpaueeb1UOiLwHrTDJ9NdTnulCrnG0s8eKPawn 1ezId7cnF9Pr1aV6CASJGPWeFb5S9bFP7J2LeVaySbFDkSf1idwrnemshH0MHzbH b7p6jAdTBjAJv1acpORHcunxfY0zQ1Dg5Z+GvRLgsXxz9KL7Sz5bpm1YFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSUq3CDfiAMA6HmtwCFeLn27DNjMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX866hfb cRwDxVktbwDFJVRWRtQf9qlukxgQZ4P3N8zatUf5n7l/rkqk/AgZTkag7kTWfuLI 9e7mNcG+ugvZYgB3sT2GvoJBrNBRQyKPlc5ExOxip3s94kKeX/H535zp3zo6kP/9 UOEc6iP0errO4Zj6fHUphB7bHFEhoV5wa7n7o0SOcnv9BE8G8QL7kyUpkrUWb8es WkUjVDkEOUWu7JTnek4v9PyrgOrXxmlADKv03nz4/dJFqRNsFmuZG+KYv1J2DjJC TTR6WNwVzRhfcCjQabsdN9U45YcprFSlgmZgoKkTae7UX1nD6FByB+uGtiTAfOoK MqT6560sVQn1Tg== -----END CERTIFICATE-----Generated at Mon Oct 26 06:21:42 2026 by rpki-client