$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: yLlWhcH0wVd5D9NErkkeFY2XcEXiq4ByGGZoVXdYOOc= Subject key identifier: 0E:31:4B:CB:A2:3D:4D:DD:08:81:21:34:E1:11:48:1E:DE:C5:09:CD Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019E9BF272BFFF5C88FD10F71D26DE8618AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 167F Signing time: Sat 06 Jun 2026 08:00:17 +0000 Manifest this update: Sat 06 Jun 2026 08:00:17 +0000 Manifest next update: Sun 07 Jun 2026 08:00:17 +0000 Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=) 2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=) 3: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=) 4: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=) 5: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=) 6: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: TVzFRN0g8E6YV52BIBHETRlBuPikXJMz6O6fqefzUbM=) 7: aL6bUGTHkpcHHWs-Po3_bkcw8N0.roa (hash: ri9rtr5v6mxkEnUcDShGl6eVFOsXr78RXTrqI9KwgSM=) 8: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=) 9: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=) 10: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=) 11: yzmd_JEtqQaKvD_qUTrgrsVF79c.roa (hash: SuudBezS9EbRtIE8Jk/JrcwtPiUJuIx7iCJ1s3wsLjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9b:f2:72:bf:ff:5c:88:fd:10:f7:1d:26:de:86:18:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jun 6 08:00:17 2026 GMT Not After : Jun 7 08:00:17 2026 GMT Subject: CN=0e314bcba23d4ddd08812134e111481edec509cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:ca:ee:a9:14:9e:df:79:b7:86:87:f2:98: 03:ef:a9:01:26:2b:12:f6:4d:2b:97:b3:4f:57:20: 63:c6:fa:25:91:d2:44:fd:0f:f7:c3:68:21:05:39: 9f:20:5b:c7:c2:76:e0:79:ac:05:13:fa:13:63:e7: 4c:5c:6a:02:d4:1e:90:b4:d2:4f:80:b9:22:dd:9c: 94:5b:75:01:6a:1a:2c:ea:d9:9b:46:eb:ea:6f:3e: 0e:85:e0:77:ff:c9:20:5b:18:d8:a6:9a:bd:4b:02: de:99:be:fd:64:46:a7:62:5b:27:df:58:20:ce:76: 6e:ff:21:ca:25:be:4d:24:e5:56:fc:96:7b:b7:25: 13:6f:6b:83:10:44:d5:fe:e0:69:ac:b4:37:80:b0: b6:89:63:84:2a:26:8e:ef:74:7a:55:2e:41:82:6f: b1:82:bd:47:65:00:cd:bc:ae:26:8b:2b:ca:78:ab: 7b:d7:25:7a:37:87:0f:3f:70:52:63:f9:9b:e6:99: 54:a2:07:9f:ed:07:ef:6c:1b:48:b6:83:90:8e:4d: 69:b4:a8:db:9e:3c:d1:95:2e:49:d2:8d:27:cb:e1: ab:37:09:11:8a:30:d3:98:43:97:fc:96:fd:e4:27: cf:0f:d9:36:3f:14:39:7b:70:90:b8:3d:ff:a6:eb: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:4B:CB:A2:3D:4D:DD:08:81:21:34:E1:11:48:1E:DE:C5:09:CD X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:53:da:07:a8:a4:f7:77:1d:b3:c6:f6:23:77:71:d7:d8:9a: 25:5d:e4:11:82:d0:7f:13:75:80:bb:f4:df:b7:b3:c1:62:74: 08:5d:6b:11:f8:6c:6c:a9:d5:3b:f4:a3:f6:84:99:a7:86:b8: 15:80:cb:16:f3:d5:42:05:f3:26:14:65:2a:a2:95:c6:a1:15: 74:58:db:fd:0c:14:12:80:94:97:20:4d:4b:84:96:f4:54:bc: 5a:c1:03:3d:a5:cf:bf:ba:0b:31:c4:b1:d8:81:fb:92:e5:dd: ab:55:1c:0d:85:51:b5:d3:9b:b4:9d:dd:70:3e:3a:48:ba:c3: 13:ff:0a:7d:cd:7e:f4:10:8a:8a:60:cc:34:b6:78:4b:76:36: 86:cf:09:0e:01:20:6b:4f:3e:53:16:35:bb:9e:73:6f:66:6d: c4:d8:c2:f6:30:91:0f:e2:18:d7:fb:66:a3:48:b8:cf:cb:cc: a1:ca:8a:a4:d3:c7:60:6b:74:4d:4f:b1:9c:2e:3f:b1:a6:be: 38:b4:b6:84:1d:f8:26:ec:3b:36:0c:92:b2:cf:be:2a:42:50: a4:05:dc:c9:57:4c:80:da:76:5b:4b:d7:d7:29:e1:aa:d5:32: 59:0d:bb:71:0a:34:f0:aa:e3:6f:b5:82:d4:dd:99:b3:27:51: 17:92:5b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6b8nK//1yI/RD3HSbehhiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwNjA2MDgwMDE3WhcNMjYwNjA3MDgwMDE3WjAzMTEwLwYDVQQD EygwZTMxNGJjYmEyM2Q0ZGRkMDg4MTIxMzRlMTExNDgxZWRlYzUwOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+TK7qkUnt95t4aH8pgD76kBJisS 9k0rl7NPVyBjxvolkdJE/Q/3w2ghBTmfIFvHwnbgeawFE/oTY+dMXGoC1B6QtNJP gLki3ZyUW3UBahos6tmbRuvqbz4OheB3/8kgWxjYppq9SwLemb79ZEanYlsn31gg znZu/yHKJb5NJOVW/JZ7tyUTb2uDEETV/uBprLQ3gLC2iWOEKiaO73R6VS5Bgm+x gr1HZQDNvK4miyvKeKt71yV6N4cPP3BSY/mb5plUogef7QfvbBtItoOQjk1ptKjb njzRlS5J0o0ny+GrNwkRijDTmEOX/Jb95CfPD9k2PxQ5e3CQuD3/puth0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4xS8uiPU3dCIEhNOERSB7exQnNMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlPaB6ik 93cds8b2I3dx19iaJV3kEYLQfxN1gLv037ezwWJ0CF1rEfhsbKnVO/Sj9oSZp4a4 FYDLFvPVQgXzJhRlKqKVxqEVdFjb/QwUEoCUlyBNS4SW9FS8WsEDPaXPv7oLMcSx 2IH7kuXdq1UcDYVRtdObtJ3dcD46SLrDE/8Kfc1+9BCKimDMNLZ4S3Y2hs8JDgEg a08+UxY1u55zb2ZtxNjC9jCRD+IY1/tmo0i4z8vMocqKpNPHYGt0TU+xnC4/saa+ OLS2hB34Juw7NgySss++KkJQpAXcyVdMgNp2W0vX1ynhqtUyWQ27cQo08Krjb7WC 1N2ZsydRF5Jbtw== -----END CERTIFICATE-----Generated at Sat Jun 6 12:09:23 2026 by rpki-client