$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: BrvkUelcREPL/z4C/IHg0wpLNfe6xGhvxrlMVq2G/DU= Subject key identifier: 43:63:E7:CA:4D:9F:04:31:98:FE:A2:87:BB:3B:20:4F:BA:DE:4A:9C Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 01A1803D700C9AF0674ABF6C31838AA6996E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0E36 Signing time: Wed 28 Oct 2026 02:01:12 +0000 Manifest this update: Wed 28 Oct 2026 02:01:12 +0000 Manifest next update: Thu 29 Oct 2026 02:01:12 +0000 Files and hashes: 1: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 2: 6B6G2JKfebeDFN1P175OJ6aWis8.roa (hash: swWXMAtzWWgazaHMQDxgqtKidJX8kJHeuQhoAietQl4=) 3: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 4: CBwxi-z29liij9px9hBFoOE8prQ.roa (hash: vy+ClL1AInwRnVKsETKcUFeJqYJRpFMzwjKVs1M12fw=) 5: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 6: CSmKTNAvawh8XsEkgkrFERa_yiY.roa (hash: uAIJ9ALdwfJ9g4zl3CS6Ug1EGzr6MThwz4GVhjHfCeo=) 7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 8: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 9: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 10: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: Si5mID97qlm2mZMqOnCKNKd2nj8aAlvihQ1mKPKkSWg=) 11: _KOoXuIy-JpSDDCszJO9wC3Bn4o.roa (hash: ev27sZHARHUebbK4YGLxKKHuyDx3oCAJQZgHXUBVYKk=) 12: bR37DnenWx1rEQmioevSL7wYG5s.roa (hash: ayZGBp8DGvJ1hkIfs0Ou2WRbIpc0G/PLWWzE22MPsfE=) 13: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 14: l2IgZg0d0_JKN1ewzVfxUJWZvzk.roa (hash: 8p3Ow1BC3IyEN6V4cKS/NtLbfcoj764XTp5t/qdy/ck=) 15: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (hash: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=) 16: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 17: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) 18: w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa (hash: NfeOWBwkuTv2O7eYqPzr/8E7DBvsLk+YN3z1wBrs2GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:3d:70:0c:9a:f0:67:4a:bf:6c:31:83:8a:a6:99:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Oct 28 02:01:12 2026 GMT Not After : Oct 29 02:01:12 2026 GMT Subject: CN=4363e7ca4d9f043198fea287bb3b204fbade4a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:79:fe:27:d9:43:eb:4d:25:29:9e:06:e8:8e: fa:4b:21:9c:69:21:4a:9f:e6:ff:da:45:51:32:72: 81:88:a0:8c:1f:e6:bf:16:d9:e8:d9:3c:6d:a9:7c: 59:09:27:4d:a8:82:ee:e8:7e:54:69:d1:03:5d:f2: b0:89:54:14:3e:6a:f0:e7:29:1e:7a:a7:7b:7b:06: de:08:12:e0:44:e0:e8:11:81:cd:16:ad:27:da:db: ad:8e:d7:3c:a3:cb:3f:ba:ee:94:d3:f9:84:ee:ef: b7:1f:b9:e0:18:4c:f3:78:5b:aa:ca:d2:ae:56:3c: 0d:ac:8e:8a:23:55:36:f2:49:3d:8e:e7:2b:12:a0: 79:5b:c0:ee:9c:de:7c:92:1d:13:0f:1f:3e:2e:68: 44:7f:0e:92:17:17:5c:9b:69:98:4f:6d:2b:48:e1: 19:cb:6c:35:58:c5:39:34:e7:49:e7:d9:4c:3c:62: b6:35:df:5f:37:6b:b2:fb:d0:02:5c:a9:64:f5:b9: d5:5f:de:0c:8c:58:70:d0:ef:30:8f:35:ab:50:a1: 90:5a:c5:23:8b:1a:4a:32:fa:82:e7:a3:e4:7f:ce: 9e:ec:ec:27:d3:da:f8:5b:dd:e4:ed:14:d0:3e:71: f0:bf:8a:0d:6a:fd:b3:6d:ee:2d:f8:ba:f6:a5:ad: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:E7:CA:4D:9F:04:31:98:FE:A2:87:BB:3B:20:4F:BA:DE:4A:9C X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1e:63:99:78:31:62:95:78:37:20:c8:65:d6:3c:06:43:a5: 5e:77:55:59:24:3e:c5:f1:bb:8a:31:4f:d9:b7:a3:c2:4a:d2: 40:bb:a4:fd:8a:42:32:06:d5:89:04:38:7c:dc:a1:cc:e4:1a: 82:6a:00:77:92:cd:19:b4:9d:22:e8:83:b4:52:8c:56:72:80: 5e:a1:9f:fc:53:0d:4c:8c:ab:a7:d1:40:fe:22:b6:a7:35:fc: 34:8e:24:56:aa:58:fe:40:df:b8:82:08:77:92:ba:fb:0e:9c: 3e:13:68:f7:0f:b1:e4:c0:a0:dd:6f:c9:2f:a3:76:f4:fc:0f: eb:79:2f:9d:11:12:a3:1f:28:b5:a7:e0:9f:95:1e:2c:4c:66: 7c:0e:13:29:79:97:fc:a0:62:ef:68:61:0d:b8:8a:da:b8:40: da:f6:51:a9:b5:48:2f:63:14:7c:ca:44:c8:fe:7c:9a:15:98: 39:a2:67:a3:f7:1d:1b:cc:38:03:1f:08:e0:af:99:76:7f:0e: ee:42:34:45:05:e3:68:49:74:66:5e:3d:df:82:2d:7c:80:09: c2:3d:9f:77:b8:ca:a4:ea:f8:7b:44:b5:2e:f6:7d:91:3d:6d: a1:e2:b1:ef:01:7c:6c:39:57:2a:0e:ae:de:06:78:03:f4:d3: 8c:93:7d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGAPXAMmvBnSr9sMYOKppluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYxMDI4MDIwMTEyWhcNMjYxMDI5MDIwMTEyWjAzMTEwLwYDVQQD Eyg0MzYzZTdjYTRkOWYwNDMxOThmZWEyODdiYjNiMjA0ZmJhZGU0YTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93n+J9lD600lKZ4G6I76SyGcaSFK n+b/2kVRMnKBiKCMH+a/Ftno2TxtqXxZCSdNqILu6H5UadEDXfKwiVQUPmrw5yke eqd7ewbeCBLgRODoEYHNFq0n2tutjtc8o8s/uu6U0/mE7u+3H7ngGEzzeFuqytKu VjwNrI6KI1U28kk9jucrEqB5W8DunN58kh0TDx8+LmhEfw6SFxdcm2mYT20rSOEZ y2w1WMU5NOdJ59lMPGK2Nd9fN2uy+9ACXKlk9bnVX94MjFhw0O8wjzWrUKGQWsUj ixpKMvqC56Pkf86e7Own09r4W93k7RTQPnHwv4oNav2zbe4t+Lr2pa2xxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENj58pNnwQxmP6ih7s7IE+63kqcMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmh5jmXgx YpV4NyDIZdY8BkOlXndVWSQ+xfG7ijFP2bejwkrSQLuk/YpCMgbViQQ4fNyhzOQa gmoAd5LNGbSdIuiDtFKMVnKAXqGf/FMNTIyrp9FA/iK2pzX8NI4kVqpY/kDfuIII d5K6+w6cPhNo9w+x5MCg3W/JL6N29PwP63kvnRESox8otafgn5UeLExmfA4TKXmX /KBi72hhDbiK2rhA2vZRqbVIL2MUfMpEyP58mhWYOaJno/cdG8w4Ax8I4K+Zdn8O 7kI0RQXjaEl0Zl4934ItfIAJwj2fd7jKpOr4e0S1LvZ9kT1toeKx7wF8bDlXKg6u 3gZ4A/TTjJN9lA== -----END CERTIFICATE-----Generated at Wed Oct 28 11:42:25 2026 by rpki-client