$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: g5TXuuwiezipxHVlzXMhOdzqw7D4gJTncPwEQBSHPDg= Subject key identifier: 86:B0:EE:C4:88:7A:76:56:5B:15:31:D4:27:1D:40:2B:ED:A1:18:6C Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019FCB5DA1DF0BA36854C4BFCAED043C9500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 19EF Signing time: Tue 04 Aug 2026 06:02:18 +0000 Manifest this update: Tue 04 Aug 2026 06:02:18 +0000 Manifest next update: Wed 05 Aug 2026 06:02:18 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: vSsWMQeV52LvEelB898EFIQzhNqSefP1fiuvFMfPIK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 06:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cb:5d:a1:df:0b:a3:68:54:c4:bf:ca:ed:04:3c:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Aug 4 06:02:18 2026 GMT Not After : Aug 5 06:02:18 2026 GMT Subject: CN=86b0eec4887a76565b1531d4271d402beda1186c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3a:8d:dc:bd:b1:80:29:d4:e3:42:e0:12:b9: a1:01:ab:6e:e0:89:ee:13:0e:93:5f:f9:d5:11:31: 43:f4:f5:af:46:1b:b8:dd:6f:36:7c:62:d5:9d:33: 9b:44:d9:5c:20:d1:5f:2f:c2:b0:43:17:30:21:e5: bd:f1:28:fd:ce:4f:0d:da:2c:1f:e0:dd:a2:67:cf: aa:b3:d0:05:13:76:34:17:3d:78:f4:8f:b5:e6:d6: 93:c4:2e:14:f7:e6:cf:17:21:57:ce:9b:3b:40:81: 23:a3:b8:21:09:62:36:e3:3f:0e:25:f5:1c:20:eb: 85:db:4d:cd:f2:46:c9:71:48:83:f6:6c:bc:15:15: 21:05:36:b4:55:00:f1:d2:cd:f6:ae:0f:f4:5b:51: e4:d1:6c:06:0e:d3:cb:3c:fc:ee:9f:c0:51:c7:42: b9:98:c2:a2:af:03:a6:f4:28:d5:0e:35:87:46:aa: 0e:3b:1d:9e:7c:18:67:18:32:41:5e:ef:d6:2a:c2: 2b:97:f9:ff:0a:9f:94:a8:86:51:13:b7:5c:a9:6e: df:73:0a:5a:a8:eb:e2:91:c4:39:8e:ad:61:16:26: 8c:47:74:ac:f2:54:df:76:b2:38:b5:7c:8c:f5:7b: a4:9c:22:c3:18:8b:af:b3:e7:69:11:54:76:35:45: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B0:EE:C4:88:7A:76:56:5B:15:31:D4:27:1D:40:2B:ED:A1:18:6C X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f5:e8:48:f9:16:08:31:9b:a2:32:e0:e7:9c:c5:38:13:12: 8f:d0:af:fa:88:ad:3c:0f:15:cd:95:b7:e9:f5:b7:a1:05:24: 07:46:8d:51:4b:17:77:1c:69:77:58:56:1e:b6:35:8f:25:51: 62:37:c2:ba:d7:5c:08:86:0f:f6:5b:3d:2a:67:29:7c:59:16: a1:47:98:49:6d:c8:38:ae:fc:d0:64:f3:ee:2a:e0:a2:07:d9: 2b:5d:d5:c6:39:2c:d2:d6:22:58:30:28:8f:d5:b0:d3:ab:6f: 17:db:92:a8:22:d9:d3:87:ae:34:07:44:3a:27:01:e0:dc:37: 4f:15:fb:39:f5:ef:93:c1:67:c7:c5:a6:53:d5:3d:fc:71:29: c5:63:ca:54:10:90:c5:9e:c4:d2:0c:76:17:5f:d9:ad:97:1b: bd:82:dc:da:b9:bc:e2:49:be:50:e8:e6:a4:73:7a:22:8a:7d: 04:0e:f9:45:9d:b9:4d:95:3d:85:2f:af:79:f0:e0:9b:41:5e: a9:c9:be:a7:a0:03:4f:41:2c:29:36:2a:a6:dd:7f:22:f5:be: 12:38:84:82:9d:6b:2f:68:cd:a8:95:c1:45:17:44:ce:91:76: 00:26:a5:83:2a:72:fd:96:9b:f0:f1:77:39:dc:cd:25:79:22: 7c:7e:cc:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/LXaHfC6NoVMS/yu0EPJUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwODA0MDYwMjE4WhcNMjYwODA1MDYwMjE4WjAzMTEwLwYDVQQD Eyg4NmIwZWVjNDg4N2E3NjU2NWIxNTMxZDQyNzFkNDAyYmVkYTExODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DqN3L2xgCnU40LgErmhAatu4Inu Ew6TX/nVETFD9PWvRhu43W82fGLVnTObRNlcINFfL8KwQxcwIeW98Sj9zk8N2iwf 4N2iZ8+qs9AFE3Y0Fz149I+15taTxC4U9+bPFyFXzps7QIEjo7ghCWI24z8OJfUc IOuF203N8kbJcUiD9my8FRUhBTa0VQDx0s32rg/0W1Hk0WwGDtPLPPzun8BRx0K5 mMKirwOm9CjVDjWHRqoOOx2efBhnGDJBXu/WKsIrl/n/Cp+UqIZRE7dcqW7fcwpa qOvikcQ5jq1hFiaMR3Ss8lTfdrI4tXyM9XuknCLDGIuvs+dpEVR2NUX4LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaw7sSIenZWWxUx1CcdQCvtoRhsMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfXoSPkW CDGbojLg55zFOBMSj9Cv+oitPA8VzZW36fW3oQUkB0aNUUsXdxxpd1hWHrY1jyVR YjfCutdcCIYP9ls9KmcpfFkWoUeYSW3IOK780GTz7irgogfZK13Vxjks0tYiWDAo j9Ww06tvF9uSqCLZ04euNAdEOicB4Nw3TxX7OfXvk8Fnx8WmU9U9/HEpxWPKVBCQ xZ7E0gx2F1/ZrZcbvYLc2rm84km+UOjmpHN6Iop9BA75RZ25TZU9hS+vefDgm0Fe qcm+p6ADT0EsKTYqpt1/IvW+EjiEgp1rL2jNqJXBRRdEzpF2ACalgypy/Zab8PF3 OdzNJXkifH7MCg== -----END CERTIFICATE-----Generated at Tue Aug 4 13:38:42 2026 by rpki-client