$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: cQNO+HsNzHgsmOecBG7UB8UZHOdbiDd2vUc53wMM1bs= Subject key identifier: 5A:E9:17:9E:C5:94:A5:3A:67:25:6B:BD:2C:16:DB:8F:AC:AB:42:9E Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019F927F1B946A748210D1D39C8CEFBD03DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 133D Signing time: Fri 24 Jul 2026 05:00:31 +0000 Manifest this update: Fri 24 Jul 2026 05:00:31 +0000 Manifest next update: Sat 25 Jul 2026 05:00:31 +0000 Files and hashes: 1: C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (hash: cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=) 2: HLHqvk87Ei7Rb8vncCXmuWA4l5w.roa (hash: qoKJ0OJaCDjYFA4CcCaaIa7Qb7ARu8S3G8wQDaTgwyY=) 3: IPuHLZBymKRXYx-YnfPe_MhR0yA.roa (hash: yDZxC0qnt1slcECmxYfcCYbXQ2iv0xHTebHw2m4awwA=) 4: IuTc0D5cqqVRFXq-RLQjTdtK6t4.roa (hash: N7kuEXPqq2dxL/74FimXDyw5h1aaFIYNRarT9mB1gww=) 5: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (hash: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=) 6: W_Ul3KlfZZAZTwhKXluxrjuY6M4.roa (hash: snU7qHYKC5pKjBymlSHVqbxFqXGFJcMqdpyod8cQYhI=) 7: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (hash: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=) 8: a_baIkGFreZCkQEDrTUpOc9RljI.roa (hash: oCF0GgcCbPHk3wbbPuSP852CME0/FbCGLSMKdZU6cDI=) 9: ajeYQ1Raf387pPpOh5fVK7OUAGw.roa (hash: +WqH+LSYozAREni0VQmnGX2gwrhFnW8Z5hrcBS2MhtI=) 10: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (hash: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=) 11: lP0gYz-W1ovfpkmjcjSdNrUJxIQ.roa (hash: L4mLka0+J2eAetfCFGY56nD40J5l29wgcwJKHDZ8NEY=) 12: q4kW0iz1-xCx1rCC3Q5buZRP_nQ.roa (hash: /LZ/55ZcvlNKCTvLv/6z/+QEwO6/nIaHAOm8aSJ7fUI=) 13: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: Q/Np/f0SXWyh8ge2O0dhxlI+AifcyC2qtS4yYqiOzw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:7f:1b:94:6a:74:82:10:d1:d3:9c:8c:ef:bd:03:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jul 24 05:00:31 2026 GMT Not After : Jul 25 05:00:31 2026 GMT Subject: CN=5ae9179ec594a53a67256bbd2c16db8facab429e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:ca:e4:a0:c6:dd:80:5d:d1:25:14:81:4e: 80:e7:43:03:ac:6d:a1:73:1b:77:6c:e1:9c:dd:cd: 4a:2d:26:63:a0:e4:f6:e9:4d:be:27:1f:7c:25:53: bb:bf:7c:29:bd:31:46:5f:cf:04:05:f2:ac:73:f5: 7a:52:4e:85:e8:f7:82:7f:58:08:e7:8c:18:e9:a8: 3a:67:d9:60:6c:10:fd:d5:f2:0c:68:a0:97:90:25: 6f:56:bb:99:9f:ba:f9:67:39:9b:54:57:37:b1:a4: 02:3a:50:af:34:dc:67:e3:5b:30:fe:af:a1:03:64: 8e:bc:62:54:df:fb:78:39:23:c8:75:a0:0a:b3:bb: 34:31:11:3f:b8:6f:ce:9f:9f:64:20:1e:41:68:47: 6e:f1:aa:2b:8b:35:66:ad:05:16:93:82:c3:c3:98: f8:4c:4d:16:ab:81:63:9d:c2:0c:32:71:7c:ca:0f: 1a:01:7d:5e:95:ff:4e:58:86:c7:01:6d:42:77:2f: a2:6c:ce:86:01:29:27:fd:9d:24:17:12:26:06:ff: 28:7c:a4:6f:b2:e1:32:11:c9:83:88:ca:fe:24:88: 9c:f0:c7:54:f8:f5:cb:5f:fb:e8:e8:72:39:a2:a7: b7:16:30:67:67:5f:6c:68:07:17:b3:19:27:94:ab: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:17:9E:C5:94:A5:3A:67:25:6B:BD:2C:16:DB:8F:AC:AB:42:9E X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:df:e0:52:13:3d:fa:ad:44:16:9f:5a:9b:a5:32:a1:1b:03: 39:93:65:db:45:0f:f1:0c:ce:61:5e:c8:9c:7b:8e:9b:9a:de: d4:32:0c:f3:d2:64:0c:8a:78:ad:bc:d2:42:96:f5:74:c8:7e: de:53:9e:16:6c:06:6e:ee:ba:b4:22:e2:a6:a0:c9:23:cc:01: 1a:06:53:4b:19:37:51:31:21:92:14:64:39:a7:90:42:4d:ff: 0a:66:e6:bd:5d:8b:34:53:c4:75:38:9d:79:f3:d3:8a:65:e9: c7:09:7e:b3:31:a2:d0:9f:1e:2a:48:af:2c:25:9b:73:49:7b: 0d:4d:f9:95:3d:9f:cc:ad:b9:8f:db:06:84:a2:e2:55:88:d6: 7f:4f:95:f6:92:06:51:3e:d0:5a:e1:e3:79:71:67:64:16:0d: c2:c3:be:91:a4:a5:0c:80:f6:04:73:6a:9e:b8:ed:fb:7a:6d: 83:1d:c2:90:ef:d6:f3:5c:07:85:51:b7:8c:7e:fd:07:3b:7b: 36:e4:3b:e5:2d:5d:31:85:c1:5e:dc:33:0a:d0:af:4d:f6:bc: b3:46:61:94:06:51:be:0e:5f:b3:06:65:95:78:24:c5:e8:a0: 93:20:7a:b4:27:6a:97:ae:6d:e5:bd:6c:ae:a2:31:fc:0b:b1: bb:02:b9:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SfxuUanSCENHTnIzvvQPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjYwNzI0MDUwMDMxWhcNMjYwNzI1MDUwMDMxWjAzMTEwLwYDVQQD Eyg1YWU5MTc5ZWM1OTRhNTNhNjcyNTZiYmQyYzE2ZGI4ZmFjYWI0MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JHK5KDG3YBd0SUUgU6A50MDrG2h cxt3bOGc3c1KLSZjoOT26U2+Jx98JVO7v3wpvTFGX88EBfKsc/V6Uk6F6PeCf1gI 54wY6ag6Z9lgbBD91fIMaKCXkCVvVruZn7r5ZzmbVFc3saQCOlCvNNxn41sw/q+h A2SOvGJU3/t4OSPIdaAKs7s0MRE/uG/On59kIB5BaEdu8aorizVmrQUWk4LDw5j4 TE0Wq4FjncIMMnF8yg8aAX1elf9OWIbHAW1Cdy+ibM6GASkn/Z0kFxImBv8ofKRv suEyEcmDiMr+JIic8MdU+PXLX/vo6HI5oqe3FjBnZ19saAcXsxknlKtNWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrpF57FlKU6ZyVrvSwW24+sq0KeMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9/gUhM9 +q1EFp9am6UyoRsDOZNl20UP8QzOYV7InHuOm5re1DIM89JkDIp4rbzSQpb1dMh+ 3lOeFmwGbu66tCLipqDJI8wBGgZTSxk3UTEhkhRkOaeQQk3/CmbmvV2LNFPEdTid efPTimXpxwl+szGi0J8eKkivLCWbc0l7DU35lT2fzK25j9sGhKLiVYjWf0+V9pIG UT7QWuHjeXFnZBYNwsO+kaSlDID2BHNqnrjt+3ptgx3CkO/W81wHhVG3jH79Bzt7 NuQ75S1dMYXBXtwzCtCvTfa8s0ZhlAZRvg5fswZllXgkxeigkyB6tCdql65t5b1s rqIx/AuxuwK5aA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:15:33 2026 by rpki-client