$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: zZ28nfTpf3ds9WuZzBq5bCB+kACnfKIEk2o/dTwCJjk= Subject key identifier: 95:87:6E:26:6C:9D:11:A4:DC:7B:2C:DF:C1:92:E7:09:0A:1B:2A:BF Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 01A06CB9424E336B75EDDCEA70E348D269C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: B4 Signing time: Fri 04 Sep 2026 14:01:15 +0000 Manifest this update: Fri 04 Sep 2026 14:01:15 +0000 Manifest next update: Sat 05 Sep 2026 14:01:15 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: NwxeeQ6vWLNv6_56WeekWnnIs9Q.roa (hash: 9SKp96P9zUqo/VKiBAf/OZS4gFdHPgagZHjvDhYmLNs=) 7: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 8: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (hash: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=) 9: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 10: cwOZOPf1MyphxuXvKQp27pPkqQ8.roa (hash: 0v93fhmCCza1wBzfMhmM1+l4sin/jZshqNxzucWDwgI=) 11: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 12: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 13: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 14: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (hash: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=) 15: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 16: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: 3mUcK7ESWlTphCiBckfbv6S94wdw7nGfZvhCVNqQQa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6c:b9:42:4e:33:6b:75:ed:dc:ea:70:e3:48:d2:69:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Sep 4 14:01:15 2026 GMT Not After : Sep 5 14:01:15 2026 GMT Subject: CN=95876e266c9d11a4dc7b2cdfc192e7090a1b2abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:87:26:5d:28:f6:d9:f9:60:3e:51:21:49: 0b:75:63:3e:c1:5a:f4:0a:49:95:73:99:e2:89:f8: 1b:0d:42:7c:ba:fb:72:0d:69:c0:08:15:2e:82:62: 2b:a0:d8:34:56:5f:54:2e:bd:71:42:9c:58:f0:14: 53:fa:72:c8:f3:ec:70:4a:d3:9a:17:d9:4f:53:ba: e4:93:2b:19:9a:59:03:54:70:1f:bc:ae:48:69:0c: c6:3d:72:40:ae:4e:65:88:68:1d:8f:00:8d:8b:a1: ec:40:99:9b:87:ea:24:a0:b2:2b:e7:05:1a:80:27: 93:4f:f8:63:71:ad:26:aa:83:d1:11:68:c4:6e:89: 46:2a:5c:28:88:7f:29:51:2f:d6:d4:e6:26:be:d4: 5c:bb:a8:b8:0b:7d:d5:82:11:b5:14:68:8d:97:23: 1a:ef:3b:25:d1:6a:09:47:ab:9d:fe:45:a7:c9:91: 20:cc:79:6d:ec:a3:81:03:7f:83:b5:bd:31:39:73: 3c:a2:f5:63:a2:22:46:f2:30:3f:67:21:81:3c:62: 91:fe:ce:4d:37:9d:f6:b4:d1:ab:c4:a3:5b:b5:1c: 00:50:9f:df:c7:90:42:bf:8d:45:78:59:5d:e3:4f: bc:b2:b4:25:de:69:74:6a:42:48:be:a5:cc:4b:f9: 39:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:6E:26:6C:9D:11:A4:DC:7B:2C:DF:C1:92:E7:09:0A:1B:2A:BF X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b1:ca:f6:71:a9:35:28:fa:71:fa:66:b8:fc:41:44:91:ae: 50:8e:b5:b7:41:dc:7b:a9:7a:bc:86:3f:bb:1b:98:a0:bf:98: 7d:cf:c3:44:fe:52:8c:b8:89:77:8e:c5:cf:34:7f:23:8b:21: 3c:07:b7:a3:7c:c2:75:5e:6a:cc:2e:3e:cd:67:2d:9d:58:e3: f0:fc:8e:ca:d9:46:bd:99:a2:91:90:ab:02:fa:c2:4d:5a:b1: 33:b3:91:fa:4f:19:3f:19:d9:1e:c1:0f:42:10:87:df:06:0e: 70:52:b1:2b:2f:da:dc:1e:85:54:8f:9d:4d:3f:23:60:f7:43: e4:0a:6d:79:47:73:cc:f2:8c:f6:b1:8e:dc:e0:7a:af:02:fc: 7f:34:b5:df:ee:bc:e2:dc:bb:c7:83:5d:8b:d2:3b:48:22:7b: 21:c1:81:8e:8b:53:ff:08:e1:72:aa:72:ed:44:b9:c8:94:18: 5a:2c:bb:92:ab:7d:be:a8:dd:40:e8:e3:3b:4b:ea:36:5b:45: 79:0f:8b:4f:b5:45:97:fb:5b:74:9e:68:f5:53:9e:5b:74:f2: 39:e3:b7:ca:73:54:07:82:e5:71:a5:46:db:20:eb:00:8c:22: 72:1b:df:ed:8f:d6:cf:f2:73:76:e2:da:d7:c9:b3:e0:ce:4c: 18:d1:fd:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBsuUJOM2t17dzqcONI0mnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYwOTA0MTQwMTE1WhcNMjYwOTA1MTQwMTE1WjAzMTEwLwYDVQQD Eyg5NTg3NmUyNjZjOWQxMWE0ZGM3YjJjZGZjMTkyZTcwOTBhMWIyYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc2HJl0o9tn5YD5RIUkLdWM+wVr0 CkmVc5niifgbDUJ8uvtyDWnACBUugmIroNg0Vl9ULr1xQpxY8BRT+nLI8+xwStOa F9lPU7rkkysZmlkDVHAfvK5IaQzGPXJArk5liGgdjwCNi6HsQJmbh+okoLIr5wUa gCeTT/hjca0mqoPREWjEbolGKlwoiH8pUS/W1OYmvtRcu6i4C33VghG1FGiNlyMa 7zsl0WoJR6ud/kWnyZEgzHlt7KOBA3+Dtb0xOXM8ovVjoiJG8jA/ZyGBPGKR/s5N N532tNGrxKNbtRwAUJ/fx5BCv41FeFld40+8srQl3ml0akJIvqXMS/k5MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWHbiZsnRGk3Hss38GS5wkKGyq/MB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULHK9nGp NSj6cfpmuPxBRJGuUI61t0Hce6l6vIY/uxuYoL+Yfc/DRP5SjLiJd47FzzR/I4sh PAe3o3zCdV5qzC4+zWctnVjj8PyOytlGvZmikZCrAvrCTVqxM7OR+k8ZPxnZHsEP QhCH3wYOcFKxKy/a3B6FVI+dTT8jYPdD5ApteUdzzPKM9rGO3OB6rwL8fzS13+68 4ty7x4Ndi9I7SCJ7IcGBjotT/wjhcqpy7US5yJQYWiy7kqt9vqjdQOjjO0vqNltF eQ+LT7VFl/tbdJ5o9VOeW3TyOeO3ynNUB4LlcaVG2yDrAIwichvf7Y/Wz/JzduLa 18mz4M5MGNH9mw== -----END CERTIFICATE-----Generated at Fri Sep 4 22:22:23 2026 by rpki-client