$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft File: zRMnjr9PSbQk-9SpxwB9J0du0wc.mft (raw, json) Hash identifier: hOXPFVdzAQY1MveJp7Yfk0T+EXiP66YAJcIrAD0DRGs= Subject key identifier: 4C:9B:E6:4A:6F:2A:D1:62:43:89:AA:53:C5:EB:1D:C9:06:78:5B:F7 Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Certificate serial: 019F84C3E26778F71CE43C67D0EB0BE7BBEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft Manifest number: 3A Signing time: Tue 21 Jul 2026 13:00:57 +0000 Manifest this update: Tue 21 Jul 2026 13:00:57 +0000 Manifest next update: Wed 22 Jul 2026 13:00:57 +0000 Files and hashes: 1: 04r64BSfgd-5PgS5nj1HGaTj520.roa (hash: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=) 2: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (hash: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=) 3: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (hash: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=) 4: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (hash: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=) 5: GoLAkvzsvB7zQDm_UIY2Yd-30Ck.roa (hash: bHM9/hEE2Yt9AtCFKUObnNhRfqUs2TKz2K8Vkkf2E90=) 6: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (hash: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=) 7: P_bsl56DtaIF1lt9rp-k5VLQWvY.roa (hash: c6m/3V7o5WSGGv1khR9dZE4zuxjrXjOt9iPFZZshU40=) 8: SuMlhQ-HB-UaOsy8czwHQqmRnqU.roa (hash: vr52aTXoFenQGQFoUChoI3VkTqBxutI1h8R96i3qxIo=) 9: W4KN4SDNmRYOwyhHxjuSolYafls.roa (hash: BQApeMUmBw8ONYahKVhEqtOAad+aaUlEyEzjh8Jh3Ok=) 10: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (hash: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=) 11: dQdXBh5qhRJrah76vMAURqhRRLA.roa (hash: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=) 12: iFB3vJXEOGgtNdYb9TDQ3i1eSqo.roa (hash: aUgkab/Sy+ZB9wWqa8R/ZDM6rtQ1FrjWvsIE5FIMj3E=) 13: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (hash: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=) 14: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (hash: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=) 15: zRMnjr9PSbQk-9SpxwB9J0du0wc.crl (hash: 5yhQaxM65t8I0VKs5fK4Dtmo89loB2265ZC1rnkpDwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:c3:e2:67:78:f7:1c:e4:3c:67:d0:eb:0b:e7:bb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307 Validity Not Before: Jul 21 13:00:57 2026 GMT Not After : Jul 22 13:00:57 2026 GMT Subject: CN=4c9be64a6f2ad1624389aa53c5eb1dc906785bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:47:f8:f3:41:9b:fa:cb:42:4c:9b:37:78: 1f:7d:65:b6:28:a5:67:3e:67:72:83:42:29:8f:20: 0e:b9:f2:a9:1a:fc:5b:ed:c3:1d:e9:87:d3:bb:c3: a1:dc:af:48:29:12:d0:6f:cf:44:c5:b7:f3:40:52: 38:50:d3:cf:0c:40:bf:44:7e:0c:88:a3:70:c3:b6: 4c:f6:72:59:29:9e:bf:4c:44:9e:78:f0:47:ce:7f: ad:3b:38:bc:38:ba:ef:d0:eb:ed:83:d8:0c:17:ea: 9e:cd:12:a6:d9:ec:96:e7:dc:d6:a6:85:0e:2e:2e: e6:fd:ff:08:9a:08:b7:a0:62:bb:27:3f:92:9f:97: 02:46:b4:71:0e:d1:ea:9c:f9:2a:c5:1c:47:d5:fb: 59:4d:89:81:2d:ad:55:84:6e:02:69:28:48:51:25: 84:2b:7e:36:aa:6b:45:f1:ac:6f:a3:4f:15:a4:ff: fc:fd:b6:4a:76:31:42:05:ab:49:1b:e1:8a:bd:1c: 0d:71:1a:0f:63:9c:f1:79:d9:8d:1b:1b:07:83:a8: 96:af:ca:f9:aa:92:31:f2:da:90:c6:32:f4:a9:99: bb:77:ab:57:3d:63:dd:94:7e:d9:ad:24:18:52:80: 05:22:ba:e8:4d:3b:7d:7b:08:3e:2b:90:8f:90:cb: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:E6:4A:6F:2A:D1:62:43:89:AA:53:C5:EB:1D:C9:06:78:5B:F7 X509v3 Authority Key Identifier: keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7a:f9:be:e9:97:4f:8f:bd:c4:97:6e:89:c4:65:4f:57:9a: 54:d1:5d:fa:3d:37:33:75:7c:36:91:21:9f:52:99:a1:f3:2c: 02:32:d6:b5:44:a6:c5:bf:63:91:e7:cc:01:85:f6:46:cc:01: 52:b5:44:d7:e4:98:2e:8a:33:a2:c4:7e:12:af:c5:80:f3:f8: 2e:a2:3f:a4:73:ee:30:7d:30:30:09:cc:30:c0:5f:8c:79:59: 8e:bd:e7:e8:a2:2f:2e:af:5d:a8:f2:27:44:34:bb:94:eb:b0: 80:2c:e5:2c:88:d7:42:5c:55:e7:88:e5:17:ef:23:d8:9c:47: 68:b6:93:01:2a:ea:00:b5:14:dc:03:98:38:f5:96:24:8c:dc: 9a:0a:99:c0:87:48:80:df:70:1b:8a:7e:7a:ae:37:77:27:6a: 35:61:5c:fc:ae:4f:f8:0a:10:63:e2:99:32:a8:76:17:4c:86: bd:5d:73:2a:fb:0e:1d:76:af:dc:0c:a2:78:c4:84:90:48:f7: cd:0c:a0:73:20:bf:64:e0:60:8b:eb:2f:9a:87:33:41:1b:69: c9:e0:fa:59:2d:47:3c:ee:0f:12:12:e0:b2:d4:bc:4d:86:0d: 6c:ef:46:77:85:94:81:55:be:95:c6:28:2f:27:48:10:b2:33: 5e:55:7e:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ew+JnePcc5Dxn0OsL57vvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2 ZWQzMDcwHhcNMjYwNzIxMTMwMDU3WhcNMjYwNzIyMTMwMDU3WjAzMTEwLwYDVQQD Eyg0YzliZTY0YTZmMmFkMTYyNDM4OWFhNTNjNWViMWRjOTA2Nzg1YmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4tH+PNBm/rLQkybN3gffWW2KKVn Pmdyg0IpjyAOufKpGvxb7cMd6YfTu8Oh3K9IKRLQb89ExbfzQFI4UNPPDEC/RH4M iKNww7ZM9nJZKZ6/TESeePBHzn+tOzi8OLrv0Ovtg9gMF+qezRKm2eyW59zWpoUO Li7m/f8Imgi3oGK7Jz+Sn5cCRrRxDtHqnPkqxRxH1ftZTYmBLa1VhG4CaShIUSWE K342qmtF8axvo08VpP/8/bZKdjFCBatJG+GKvRwNcRoPY5zxedmNGxsHg6iWr8r5 qpIx8tqQxjL0qZm7d6tXPWPdlH7ZrSQYUoAFIrroTTt9ewg+K5CPkMvCKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyb5kpvKtFiQ4mqU8XrHckGeFv3MB8GA1UdIwQY MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHr5vumX T4+9xJduicRlT1eaVNFd+j03M3V8NpEhn1KZofMsAjLWtUSmxb9jkefMAYX2RswB UrVE1+SYLoozosR+Eq/FgPP4LqI/pHPuMH0wMAnMMMBfjHlZjr3n6KIvLq9dqPIn RDS7lOuwgCzlLIjXQlxV54jlF+8j2JxHaLaTASrqALUU3AOYOPWWJIzcmgqZwIdI gN9wG4p+eq43dydqNWFc/K5P+AoQY+KZMqh2F0yGvV1zKvsOHXav3AyieMSEkEj3 zQygcyC/ZOBgi+svmoczQRtpyeD6WS1HPO4PEhLgstS8TYYNbO9Gd4WUgVW+lcYo LydIELIzXlV+Sg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:38 2026 by rpki-client