$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: T0nMXcrF806McOXvcrneJX9mbKJ2okkKNC2At3901HQ= Subject key identifier: EE:E7:BE:EF:B7:D6:51:33:B7:31:83:5B:F1:10:97:97:17:66:23:66 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019DC038B0CA65CEC2C79D5C5738D291684E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 1249 Signing time: Fri 24 Apr 2026 16:00:33 +0000 Manifest this update: Fri 24 Apr 2026 16:00:33 +0000 Manifest next update: Sat 25 Apr 2026 16:00:33 +0000 Files and hashes: 1: 7uUkarpoLSKXZb8KKU7nGbdWub4.roa (hash: hF20KKlkDu1aUaMBzEWT8eh/FFNRjKjjLp20EJvOzNk=) 2: 8EH8XojvTl59fMj28V15lI3rA6o.roa (hash: i/MZ1nWymwFA/vv9I9GDpd/nHPWEr35DQR2JO9bzttA=) 3: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=) 4: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=) 5: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=) 6: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=) 7: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=) 8: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=) 9: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=) 10: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=) 11: fQbrkFWCEhPNbu1hyR8j_r0b60M.roa (hash: jbrDBJXSw3JZiZBS6EObxYKJvQO6pJEX+TDEGx0U8/g=) 12: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=) 13: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: WpDCxaFjIjbvLCXhdTZqsW7OYW0ng8SLJkqDAMP0k2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:c0:38:b0:ca:65:ce:c2:c7:9d:5c:57:38:d2:91:68:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Apr 24 16:00:33 2026 GMT Not After : Apr 25 16:00:33 2026 GMT Subject: CN=eee7beefb7d65133b731835bf110979717662366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6f:be:44:4b:b8:7e:3a:b3:df:15:cf:1b:52: 52:4f:f4:22:1e:ea:ae:db:e9:65:ed:51:a0:44:49: 4b:f2:be:9b:af:5b:9d:c0:8f:b9:eb:e5:c4:a5:be: 84:83:0b:40:3b:eb:8b:ad:89:06:4e:f4:71:0e:79: 32:5d:0c:c7:6e:8d:07:43:51:db:7d:22:41:83:6f: ea:0c:84:b9:2c:01:24:f7:96:24:1d:26:0d:cb:ca: 46:4c:6e:df:f4:e7:6b:58:76:a0:7d:34:47:b7:0b: 5f:aa:47:ea:75:75:b7:9a:6b:31:59:f9:66:9c:d4: 58:63:be:d7:20:5a:22:11:55:1d:88:b8:a4:f7:ae: 64:d9:3a:7c:7b:d6:11:46:ed:12:bd:ce:cc:1e:50: c9:95:3c:ab:db:f1:a9:f3:81:6f:a6:1a:8c:e1:4e: bc:4a:aa:20:b3:d0:48:58:17:c3:bc:48:b9:00:88: 8b:ac:b1:72:64:bf:7e:6b:aa:9e:60:cb:c4:41:17: a5:43:88:e8:c3:33:41:a1:d8:18:17:37:6e:d0:eb: 71:1d:dd:d2:84:14:ec:29:03:3f:69:8c:b1:15:86: f4:b9:98:83:83:04:fc:b8:67:c6:97:2d:5c:52:63: b1:21:ec:2e:ae:cc:44:64:4c:82:6e:3f:fd:85:24: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E7:BE:EF:B7:D6:51:33:B7:31:83:5B:F1:10:97:97:17:66:23:66 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2a:76:2e:48:bf:7e:2c:47:63:05:42:f8:e9:81:33:15:43: 27:df:4b:7b:fb:c0:10:0f:2b:e7:cf:93:a5:d1:d4:0b:1c:83: ba:6f:4d:24:7c:11:3e:54:e1:91:26:c9:85:3d:32:67:33:9f: fc:de:cf:3c:24:60:f4:3a:48:45:12:67:ee:37:42:aa:4e:d4: b5:67:52:e4:b1:60:40:55:21:53:25:f2:ae:c1:66:fe:66:7f: 58:44:aa:6e:b7:ec:8d:05:5e:83:18:cc:5e:38:42:25:bb:e4: 09:91:42:6a:5a:39:e1:3a:2d:26:d8:5e:84:5e:12:06:0b:ad: 38:55:78:35:98:3e:96:d3:d3:5e:02:80:67:f3:3c:f7:ae:3f: 9f:c8:bc:eb:a0:5a:10:c2:90:df:7f:04:32:5e:c5:d6:a9:05: da:cd:a7:ee:2b:b1:d1:9b:9a:4d:1b:dc:7a:3f:51:b6:39:84: 01:65:ca:1e:4d:45:96:35:15:e5:08:39:8f:90:5e:2d:6e:80: 6d:b9:13:a2:ec:e3:d3:01:1e:4b:49:ee:a1:52:c7:94:0a:9e: 8a:12:50:69:ee:86:55:db:41:e0:8a:57:f3:2d:ad:f6:81:23: f0:48:53:f5:ef:77:26:e7:55:f8:1f:54:a2:77:fb:08:f2:9f: ce:e8:50:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3AOLDKZc7Cx51cVzjSkWhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwNDI0MTYwMDMzWhcNMjYwNDI1MTYwMDMzWjAzMTEwLwYDVQQD EyhlZWU3YmVlZmI3ZDY1MTMzYjczMTgzNWJmMTEwOTc5NzE3NjYyMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72++REu4fjqz3xXPG1JST/QiHuqu 2+ll7VGgRElL8r6br1udwI+56+XEpb6EgwtAO+uLrYkGTvRxDnkyXQzHbo0HQ1Hb fSJBg2/qDIS5LAEk95YkHSYNy8pGTG7f9OdrWHagfTRHtwtfqkfqdXW3mmsxWflm nNRYY77XIFoiEVUdiLik965k2Tp8e9YRRu0Svc7MHlDJlTyr2/Gp84FvphqM4U68 Sqogs9BIWBfDvEi5AIiLrLFyZL9+a6qeYMvEQRelQ4jowzNBodgYFzdu0OtxHd3S hBTsKQM/aYyxFYb0uZiDgwT8uGfGly1cUmOxIewursxEZEyCbj/9hSTnXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7nvu+31lEztzGDW/EQl5cXZiNmMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeip2Lki/ fixHYwVC+OmBMxVDJ99Le/vAEA8r58+TpdHUCxyDum9NJHwRPlThkSbJhT0yZzOf /N7PPCRg9DpIRRJn7jdCqk7UtWdS5LFgQFUhUyXyrsFm/mZ/WESqbrfsjQVegxjM XjhCJbvkCZFCalo54TotJthehF4SBgutOFV4NZg+ltPTXgKAZ/M8964/n8i866Ba EMKQ338EMl7F1qkF2s2n7iux0ZuaTRvcej9RtjmEAWXKHk1FljUV5Qg5j5BeLW6A bbkTouzj0wEeS0nuoVLHlAqeihJQae6GVdtB4IpX8y2t9oEj8EhT9e93JudV+B9U onf7CPKfzuhQBg== -----END CERTIFICATE-----Generated at Fri Apr 24 20:32:53 2026 by rpki-client