$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: 3VsBp1Dq9FigYeLvOUf3tTg6lbazMpLPhWaO6EQ2yxA= Subject key identifier: 1F:AC:D6:28:DA:6F:FF:09:6F:DC:D7:48:D0:A0:C5:9E:CC:DC:80:82 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 01A10F281707334A3A2E6463C8B0D4FE3E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 1AA0 Signing time: Tue 06 Oct 2026 03:00:47 +0000 Manifest this update: Tue 06 Oct 2026 03:00:47 +0000 Manifest next update: Wed 07 Oct 2026 03:00:47 +0000 Files and hashes: 1: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=) 2: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=) 3: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=) 4: LBK2m0x43uiy3CDrXewo6CElebE.roa (hash: Melk19K0g3bAymWD/+lvWlNHh7zUQK9z4QHwwE2U65g=) 5: NOCmADB0YfK3LWDGeRgeFYCfPBE.roa (hash: xAuAZnTz2KJs/xd23BdN6vcZ5UZS82kmFT5uSD3/ME4=) 6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=) 7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=) 8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=) 9: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=) 10: c3bKBXQu79Jy3dO_Hl07eYXslQQ.roa (hash: lJGAiR7fMIYg94I1p5YOTlfAqnFVCGIz11XSv3uLwPE=) 11: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=) 12: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: msjCWMFth5i+dlWufw9g+oeMhXVvT0tCr2i41hL9C9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 23:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:0f:28:17:07:33:4a:3a:2e:64:63:c8:b0:d4:fe:3e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Oct 6 03:00:47 2026 GMT Not After : Oct 7 03:00:47 2026 GMT Subject: CN=1facd628da6fff096fdcd748d0a0c59eccdc8082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:a9:5d:74:f5:b2:89:0d:0d:dc:1a:78:9a: 69:e6:0c:8d:7f:a0:a5:98:40:bb:13:a4:3b:9e:fa: d9:6b:ec:52:0c:d9:46:9d:11:90:f3:ee:5f:4a:ff: 54:63:6f:5e:be:4f:b0:d9:a6:9e:fd:6b:09:34:eb: b5:1d:dd:92:68:3c:62:ad:40:87:01:d1:2d:2e:ac: 72:72:11:07:81:c9:87:c7:dc:dd:2f:0d:00:d8:37: e3:f7:2a:1f:d4:ba:65:45:37:cf:71:bb:bd:b6:72: 0a:c8:8d:0c:82:04:74:b7:34:1d:77:d5:43:a6:eb: 2e:a6:85:4e:4c:b5:46:bc:e4:bb:dd:58:8d:f2:0b: b6:23:e5:b5:58:3a:fc:2e:f6:6c:f3:af:9c:61:00: 5e:e4:cc:5a:b2:ce:c3:31:b1:81:98:ea:40:e3:47: 96:e0:c2:43:0e:28:be:6c:5a:95:1f:61:61:55:25: 5b:0c:0c:84:aa:e9:a1:c6:21:85:c5:29:d4:57:94: 50:b8:48:df:36:aa:1f:d2:40:61:68:f5:86:ca:4f: 77:32:fe:fd:90:28:83:d5:80:64:32:49:ee:d3:01: aa:a7:52:61:fa:38:21:9a:5a:7b:b3:2e:0f:fd:62: 3a:40:80:59:09:54:7f:07:20:9b:77:2f:29:8c:ba: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:D6:28:DA:6F:FF:09:6F:DC:D7:48:D0:A0:C5:9E:CC:DC:80:82 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:36:2a:2b:48:19:52:39:39:c5:f5:77:10:b1:fc:2f:2d:22: 74:0d:09:df:47:d5:07:68:33:c4:ef:7e:46:30:a1:1b:3f:54: b1:e0:81:3f:11:64:94:78:a7:58:19:72:dc:25:a2:b1:e9:c7: dd:69:26:23:01:80:e4:be:44:e9:8a:91:d5:de:ce:7d:40:40: da:91:c2:92:fd:fe:69:e0:be:2c:1a:4a:ec:ee:f6:3e:e2:26: 24:6d:5d:36:d7:66:23:70:30:db:c4:9c:cb:7e:dd:e4:d6:7d: e6:77:c8:c8:fe:59:88:6f:56:b6:5e:03:33:6a:2e:eb:8d:7a: a3:71:fb:ff:6b:79:07:89:a0:97:20:ee:d7:c2:d3:30:45:92: 20:e0:c8:42:d7:46:ae:fe:51:21:13:e6:a6:7a:33:50:ae:5e: 99:38:de:ce:02:1c:d1:2f:73:a9:7c:7d:54:17:c9:dc:89:65: 83:b7:62:38:ed:b0:c2:6a:69:83:ce:14:84:e0:da:c5:43:93: c8:e8:01:0d:c3:e3:ca:c6:11:00:b7:ad:13:91:ee:07:fe:e6: da:4e:18:44:31:31:d5:c4:a5:1c:bf:c6:1d:1f:83:99:31:b4: 8a:ec:75:fa:32:20:b4:5d:1c:4d:18:3c:bf:d7:66:0b:d0:a1: dc:81:9b:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEPKBcHM0o6LmRjyLDU/j4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYxMDA2MDMwMDQ3WhcNMjYxMDA3MDMwMDQ3WjAzMTEwLwYDVQQD EygxZmFjZDYyOGRhNmZmZjA5NmZkY2Q3NDhkMGEwYzU5ZWNjZGM4MDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MCpXXT1sokNDdwaeJpp5gyNf6Cl mEC7E6Q7nvrZa+xSDNlGnRGQ8+5fSv9UY29evk+w2aae/WsJNOu1Hd2SaDxirUCH AdEtLqxychEHgcmHx9zdLw0A2Dfj9yof1LplRTfPcbu9tnIKyI0MggR0tzQdd9VD pusupoVOTLVGvOS73ViN8gu2I+W1WDr8LvZs86+cYQBe5Mxass7DMbGBmOpA40eW 4MJDDii+bFqVH2FhVSVbDAyEqumhxiGFxSnUV5RQuEjfNqof0kBhaPWGyk93Mv79 kCiD1YBkMknu0wGqp1Jh+jghmlp7sy4P/WI6QIBZCVR/ByCbdy8pjLq6kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+s1ijab/8Jb9zXSNCgxZ7M3ICCMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTYqK0gZ Ujk5xfV3ELH8Ly0idA0J30fVB2gzxO9+RjChGz9UseCBPxFklHinWBly3CWisenH 3WkmIwGA5L5E6YqR1d7OfUBA2pHCkv3+aeC+LBpK7O72PuImJG1dNtdmI3Aw28Sc y37d5NZ95nfIyP5ZiG9Wtl4DM2ou6416o3H7/2t5B4mglyDu18LTMEWSIODIQtdG rv5RIRPmpnozUK5emTjezgIc0S9zqXx9VBfJ3Illg7diOO2wwmppg84UhODaxUOT yOgBDcPjysYRALetE5HuB/7m2k4YRDEx1cSlHL/GHR+DmTG0iux1+jIgtF0cTRg8 v9dmC9Ch3IGbAw== -----END CERTIFICATE-----Generated at Tue Oct 6 08:21:38 2026 by rpki-client