$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: Ytf1EEdPQyTGtNeqlGC8m7nefJFFjZOyZzr2cGAPv5o= Subject key identifier: 9D:91:8A:91:23:3B:D5:13:12:D4:2C:11:B9:42:1D:2D:9D:1F:9E:42 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 01A0FAFCEFC4ED38489CB46222D669542116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1AA0 Signing time: Fri 02 Oct 2026 05:01:15 +0000 Manifest this update: Fri 02 Oct 2026 05:01:15 +0000 Manifest next update: Sat 03 Oct 2026 05:01:15 +0000 Files and hashes: 1: 1--RggRk_qlH26F-8QTH2ie7muc0.roa (hash: Hqhf4xa2ID1VNwxmhITZqAJ15hDU/4FyBARifnG6Ixc=) 2: 3xxSrQX7ikVH9joHH7QsgCEkz0M.roa (hash: wOzTlwIIx8vGJW4532eTCHLypEd105cx24+b6jsBnOE=) 3: 4NONcDvqiCRqgZcQTfcqHeSzpuE.roa (hash: R27IngHDs3jcZqqkBeixBQgUg7p/CUgoVimY+Zoh0rs=) 4: 627RCQbVfaSLEpbqf1uOyStuItI.roa (hash: 2YbdBYQ9z8cknHKKXmc5SgbkxXPdynVrnlyUa/TP6wk=) 5: 9ok7vlhzmI90nPgnO1IgrHdTxZs.roa (hash: KMWs95W+KNbFg3H5cAfW7c/c378ZOgBFSVfOB7Q6xdc=) 6: FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa (hash: /bleCUlTHodFMRUrIClkQu+L3DOefkymAjlInaomTNQ=) 7: PXzU5_88zZGqB5MYPuoWItDUegk.roa (hash: t6l0rd2bl2rTzqA130md4mKx4L2apFlJ7CDxl5Cyq8o=) 8: S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa (hash: kgjDYJvzpvvXhGpA6SOSZpPon+c9XSP1iW9dljXHh6I=) 9: St6cINBiYFYzDsvoHQ0HIuhRHRE.roa (hash: TerSeMXT2wx/qxnCAM2X+sHCfRQgQnB7xYChR1RCmTU=) 10: _au0wimjEPCkLk0Si7B4RsrMdt8.roa (hash: /4fqj2Kq6klXf2682gRF7q2tz9MvyCSK5DmjIGN2uPc=) 11: _sJaMgsC9vZYHJ1-sJ2DQDObNds.roa (hash: tdKFcf6lEHJohX/dDC1SKuCr0lFpoQm/9xayJVcBCOc=) 12: cVB_4KeCtrdsz3IxNlNW0DNt5r0.roa (hash: uqVxjbogMYuriq6WpxC5uiWZfyiDPl2yd7dH40wRIRc=) 13: ejLWW9hcdTmiRpy3iPNqEsUDZ1I.roa (hash: MUAbtqaRgPGx0tUKuCoZV2kCEYIeKpGqbN/13KMxsKE=) 14: fP0g3WG03fRKQvk9nCrI5dbtVbw.roa (hash: iqvY0ZnRaOtLATbSx1mHSetMiM19OQ+QCDRCVXbVWCo=) 15: iBWI_be6KZTQs8EfQhXMJzUgSHM.roa (hash: ocUnmNt9pPZOeFDjwHl6jCfHOmkeOSrq2u2q/CCROrc=) 16: jWqvEO-jmA-gQShTX85xvehC5Hc.roa (hash: pL69sm9cpEpCR8BKzOZz9JU0vtplAVmf/Mq5uV1wJiY=) 17: kHjPRh7XmhI7LO80UO_Sw3QL5M0.roa (hash: TK2zRLWLHWeXjn9ivJ8SsIcmdG48EcU7eMsXeorqa0g=) 18: mvCrPFk_f-cYnxy32upovMXOSbI.roa (hash: Hvm/Hs4xIKHjkYUXqkI7d2NYIoktj/SKLqPN0YW1qpM=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: HrGQ/3yF1trPid/EzLNZZlitIGrZcguQ2zYqw7Sj5/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:fa:fc:ef:c4:ed:38:48:9c:b4:62:22:d6:69:54:21:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Oct 2 05:01:15 2026 GMT Not After : Oct 3 05:01:15 2026 GMT Subject: CN=9d918a91233bd51312d42c11b9421d2d9d1f9e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:8f:43:9d:3c:7c:8d:5b:4a:d8:d4:47:66: 75:7b:cc:f8:9f:47:4f:4e:c1:46:af:45:d3:28:45: 6c:ae:cd:47:7f:a9:a6:8d:ec:6e:ef:92:6f:63:b0: dc:2e:28:8d:03:63:d9:25:65:e7:0d:2e:cb:99:38: b4:54:3b:c9:2e:f6:ca:25:bc:79:5e:1d:78:ef:9e: cd:b0:47:db:dc:c9:04:42:93:80:c0:cf:c1:d7:2d: d6:d3:b0:87:4f:56:6c:59:37:27:12:65:59:79:fa: 19:79:00:7d:3b:7c:5d:ec:10:86:78:6c:49:e0:91: 9d:6f:48:c7:2d:be:30:b6:59:cd:32:52:06:5d:b6: 93:8f:53:cf:99:ef:bd:24:b2:d5:10:53:83:62:dd: 61:bd:65:e2:6e:18:81:21:69:91:27:4b:f1:b0:c5: ac:d5:b3:4c:4e:6e:f9:bc:f2:55:a8:15:f5:e5:93: b3:ee:17:0a:2b:30:85:6b:e7:7d:9c:b9:d2:bf:5e: d9:8c:04:3e:95:b5:df:54:da:9c:58:e9:a3:5f:6c: 1c:f9:18:d9:1d:ba:5b:65:e5:e3:0e:4b:b4:b1:9a: 80:ca:1d:2d:94:0e:f3:ec:24:ac:04:02:18:d7:37: 63:56:f0:fc:ac:9c:04:37:2e:9a:b5:1e:3c:5d:9d: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:8A:91:23:3B:D5:13:12:D4:2C:11:B9:42:1D:2D:9D:1F:9E:42 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a9:2f:9b:7a:eb:7c:05:51:71:48:7b:7c:70:44:91:7a:de: 4f:f6:3d:1e:2e:0c:b7:43:02:e3:5f:10:ed:3d:b2:40:b7:09: c4:13:59:c0:ec:47:f5:81:90:2a:3b:28:2e:5c:90:5c:43:b0: 0c:eb:74:79:26:47:5f:0b:d5:97:3b:0f:f9:d7:58:51:f1:f1: f2:d3:33:d7:89:3b:e1:70:52:0f:0f:ef:15:fb:32:7d:aa:31: 02:dd:08:0e:8e:78:19:4f:7c:8f:c3:ff:5e:ee:06:c8:1b:30: 73:64:ba:3b:f9:a5:7f:0b:33:9c:ab:4b:80:d1:4b:9e:ae:29: 65:a5:7c:bd:63:67:06:f7:82:6c:c7:a8:f6:e7:d7:ee:c8:e3: d1:8f:8a:90:fa:71:26:bd:2e:b3:7b:66:dd:08:e1:01:2a:e8: 91:35:48:04:27:95:ce:e6:78:3f:1b:b0:33:32:41:03:49:6e: 10:49:cb:5f:5b:e3:29:29:8b:0f:93:d1:34:bf:d9:e2:1b:5d: 0d:1b:9e:6a:b7:26:ae:02:70:b1:e8:7a:be:64:b4:54:91:91: ea:e8:ba:b9:ec:e1:de:5c:07:d7:76:9b:4b:42:0f:95:05:70: e4:e4:3a:61:cd:c0:43:d5:0d:2d:4b:ba:41:7e:6b:1b:59:50: 13:e2:ae:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD6/O/E7ThInLRiItZpVCEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYxMDAyMDUwMTE1WhcNMjYxMDAzMDUwMTE1WjAzMTEwLwYDVQQD Eyg5ZDkxOGE5MTIzM2JkNTEzMTJkNDJjMTFiOTQyMWQyZDlkMWY5ZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4uPQ508fI1bStjUR2Z1e8z4n0dP TsFGr0XTKEVsrs1Hf6mmjexu75JvY7DcLiiNA2PZJWXnDS7LmTi0VDvJLvbKJbx5 Xh14757NsEfb3MkEQpOAwM/B1y3W07CHT1ZsWTcnEmVZefoZeQB9O3xd7BCGeGxJ 4JGdb0jHLb4wtlnNMlIGXbaTj1PPme+9JLLVEFODYt1hvWXibhiBIWmRJ0vxsMWs 1bNMTm75vPJVqBX15ZOz7hcKKzCFa+d9nLnSv17ZjAQ+lbXfVNqcWOmjX2wc+RjZ HbpbZeXjDku0sZqAyh0tlA7z7CSsBAIY1zdjVvD8rJwENy6atR48XZ1npQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2RipEjO9UTEtQsEblCHS2dH55CMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqkvm3rr fAVRcUh7fHBEkXreT/Y9Hi4Mt0MC418Q7T2yQLcJxBNZwOxH9YGQKjsoLlyQXEOw DOt0eSZHXwvVlzsP+ddYUfHx8tMz14k74XBSDw/vFfsyfaoxAt0IDo54GU98j8P/ Xu4GyBswc2S6O/mlfwsznKtLgNFLnq4pZaV8vWNnBveCbMeo9ufX7sjj0Y+KkPpx Jr0us3tm3QjhASrokTVIBCeVzuZ4PxuwMzJBA0luEEnLX1vjKSmLD5PRNL/Z4htd DRuearcmrgJwseh6vmS0VJGR6ui6uezh3lwH13abS0IPlQVw5OQ6Yc3AQ9UNLUu6 QX5rG1lQE+KuLw== -----END CERTIFICATE-----Generated at Fri Oct 2 14:35:27 2026 by rpki-client