$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: YaISs3a2BCgQNsY51PBnqeQZxAaKIOxZVdX0CZewY9Y= Subject key identifier: 10:78:8E:C5:F4:CB:2D:64:5F:5B:DE:B7:4B:C5:30:82:B0:1E:DD:9B Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019F830C0E1895DFF25A9BE7BDA5110A507E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0D27 Signing time: Tue 21 Jul 2026 05:00:33 +0000 Manifest this update: Tue 21 Jul 2026 05:00:33 +0000 Manifest next update: Wed 22 Jul 2026 05:00:33 +0000 Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=) 2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=) 3: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=) 4: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=) 5: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=) 6: GDpxYSLxVItp_NOPYubGX5UYZok.roa (hash: VWyhjhW15PBvlxYZCfYoqEw7FI0WMEXJbvw8jcCf0xQ=) 7: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=) 8: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=) 9: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=) 10: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=) 11: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=) 12: WLD8giJwlV_VlnnPyLzzRGD0ZiI.roa (hash: lZpSSUF3j7oFZ9xvIx9PXEappD+S6NL4/bWk3CCPoR8=) 13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=) 14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: LUTNuCHZCHU+fv58n1n7/SgVQm13JvXiG3IMyoD0P6A=) 15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=) 16: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (hash: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=) 17: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=) 18: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=) 19: vAi4XnPWVuNggeUtAfCEZXDontk.roa (hash: RYl6h4oTJftpVOEqSn4HEPzTH4/b0niM4jxD4+euYtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:0c:0e:18:95:df:f2:5a:9b:e7:bd:a5:11:0a:50:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jul 21 05:00:33 2026 GMT Not After : Jul 22 05:00:33 2026 GMT Subject: CN=10788ec5f4cb2d645f5bdeb74bc53082b01edd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:9e:74:c0:cd:a6:27:28:d4:0a:27:b7:56: 26:a4:6d:15:88:bd:18:94:6a:ff:1b:30:ee:37:38: cd:26:37:d5:ce:a6:25:f5:80:32:27:23:3f:6c:00: 9c:72:5d:2f:01:46:9c:86:bf:55:f7:9b:d2:7d:de: ac:a6:48:6d:0f:27:02:76:16:ce:4e:93:c1:12:77: 46:f4:82:c7:ef:e0:1b:c3:2c:72:f7:cc:b6:ec:d1: 43:81:b0:a6:2e:9b:35:d9:88:67:1d:24:ca:b8:1c: 7f:3f:82:42:97:64:06:da:7b:03:ef:15:59:aa:06: c7:9a:5b:e4:8f:ee:51:6d:d9:4e:32:99:2e:03:0b: 5e:27:46:0d:b7:d3:05:d0:7c:72:74:15:90:12:04: 36:c0:6c:de:47:50:69:79:b3:47:38:5b:eb:a0:43: 65:6b:3b:5d:3b:4b:5b:df:96:65:93:65:dc:aa:c5: c2:21:b3:e8:a6:6f:fa:ad:33:58:ee:0d:a0:cc:34: 29:5f:91:c8:db:a8:65:60:ae:66:f5:af:db:09:1f: 5d:00:21:b8:89:14:db:a8:31:ef:20:56:e3:b6:71: 38:be:6e:e3:b7:68:81:2d:22:dd:cb:d7:66:7d:e7: af:50:7b:1c:05:80:da:77:6c:c8:bb:54:69:0e:35: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:78:8E:C5:F4:CB:2D:64:5F:5B:DE:B7:4B:C5:30:82:B0:1E:DD:9B X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ab:75:d4:b7:5b:85:e8:f8:4c:93:95:5c:1a:5a:46:11:69: 48:14:dd:09:39:50:3d:ce:3c:b1:8d:a5:26:4c:69:81:41:24: 29:ab:a3:ce:a3:e8:67:fc:ac:54:fb:a7:d3:d9:5b:58:61:75: 31:8d:2a:90:25:a0:9d:97:90:03:61:f6:b0:13:d6:49:04:3d: 32:cd:31:83:8a:c4:0d:ac:99:6a:d4:e4:f0:c2:38:21:1d:99: d2:d8:ab:57:44:2d:a2:7c:ce:0e:c7:1c:27:46:61:a2:c7:c7: d7:5c:0d:d6:af:e1:9a:85:b7:83:68:bb:57:e5:bc:de:2e:b1: a5:60:28:22:6e:ab:8a:af:f5:af:e4:fc:f9:b2:b3:4a:ba:8e: 05:37:e7:88:08:d6:bc:2a:ed:f7:39:bc:81:00:a4:f2:89:8b: a8:6c:e6:15:51:77:35:30:39:83:2b:58:88:98:7c:5c:8a:27: 42:0d:fa:d1:33:88:02:6e:09:e2:7f:24:88:24:9e:02:ae:01: 37:a4:17:96:a0:c7:cc:73:7c:30:40:3c:6f:93:84:4f:00:6c: da:1b:dd:18:b9:43:9e:24:80:4c:a2:7f:4a:d5:8e:f4:91:4f: af:cf:f3:48:53:01:cf:0e:02:4e:87:b8:c0:06:69:73:62:a8: 17:33:9b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+DDA4Yld/yWpvnvaURClB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwNzIxMDUwMDMzWhcNMjYwNzIyMDUwMDMzWjAzMTEwLwYDVQQD EygxMDc4OGVjNWY0Y2IyZDY0NWY1YmRlYjc0YmM1MzA4MmIwMWVkZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0yedMDNpico1Aont1YmpG0ViL0Y lGr/GzDuNzjNJjfVzqYl9YAyJyM/bACccl0vAUachr9V95vSfd6spkhtDycCdhbO TpPBEndG9ILH7+Abwyxy98y27NFDgbCmLps12YhnHSTKuBx/P4JCl2QG2nsD7xVZ qgbHmlvkj+5RbdlOMpkuAwteJ0YNt9MF0HxydBWQEgQ2wGzeR1BpebNHOFvroENl aztdO0tb35Zlk2XcqsXCIbPopm/6rTNY7g2gzDQpX5HI26hlYK5m9a/bCR9dACG4 iRTbqDHvIFbjtnE4vm7jt2iBLSLdy9dmfeevUHscBYDad2zIu1RpDjVdNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB4jsX0yy1kX1vet0vFMIKwHt2bMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqt11Ldb hej4TJOVXBpaRhFpSBTdCTlQPc48sY2lJkxpgUEkKaujzqPoZ/ysVPun09lbWGF1 MY0qkCWgnZeQA2H2sBPWSQQ9Ms0xg4rEDayZatTk8MI4IR2Z0tirV0QtonzODscc J0ZhosfH11wN1q/hmoW3g2i7V+W83i6xpWAoIm6riq/1r+T8+bKzSrqOBTfniAjW vCrt9zm8gQCk8omLqGzmFVF3NTA5gytYiJh8XIonQg360TOIAm4J4n8kiCSeAq4B N6QXlqDHzHN8MEA8b5OETwBs2hvdGLlDniSATKJ/StWO9JFPr8/zSFMBzw4CToe4 wAZpc2KoFzObnQ== -----END CERTIFICATE-----Generated at Tue Jul 21 10:04:59 2026 by rpki-client