$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: dBqHpFvI6JfsoEWfF1RSiNRmbiiSl/9h2vMcCZfyPWo= Subject key identifier: 3E:8F:45:D6:02:2D:E5:CB:B4:E2:E6:11:31:C4:D8:46:DD:BE:26:39 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019D3AF85D1B560A83318F64AD2F8F52A50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 189F Signing time: Sun 29 Mar 2026 19:00:48 +0000 Manifest this update: Sun 29 Mar 2026 19:00:48 +0000 Manifest next update: Mon 30 Mar 2026 19:00:48 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 6cugLwcVxIRoEt+jmLEfe/IKz4bNLIGs+Rc6X0kA6aA=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:3a:f8:5d:1b:56:0a:83:31:8f:64:ad:2f:8f:52:a5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Mar 29 19:00:48 2026 GMT Not After : Mar 30 19:00:48 2026 GMT Subject: CN=3e8f45d6022de5cbb4e2e61131c4d846ddbe2639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:b9:5d:d5:de:7f:c7:1e:38:a1:cf:96:66: fb:cd:b1:dd:5c:5d:8e:88:d6:92:98:37:04:bc:f4: ce:b0:ec:32:ba:ab:61:39:92:79:4d:28:4d:b9:0e: 74:16:db:06:8d:39:0e:22:de:55:91:cb:1c:9f:3c: e9:c6:5e:8f:c3:82:c0:76:0b:11:cf:48:a6:52:e8: ca:9c:03:6d:da:35:df:4b:1d:a2:37:55:a6:ce:e7: 74:70:94:c3:09:5f:fe:74:e7:fd:71:0f:16:68:77: fe:0d:fe:8f:8f:d1:f0:68:6a:f5:7d:81:9d:ac:76: 77:e0:fa:e0:9b:30:2b:d1:a1:11:e7:9f:19:30:b8: 78:96:35:80:59:12:d1:f0:ab:e9:73:24:c1:f7:7d: e8:ed:f1:2d:f2:46:0c:6b:51:88:06:4e:7d:01:ac: 39:ef:60:54:14:4c:ba:4c:9f:42:73:01:bb:a1:0f: 6c:c9:d5:67:47:0f:d4:77:b8:39:3d:49:19:16:48: df:ed:e4:a0:0a:9b:48:4f:fe:ab:b3:18:97:ff:4d: 76:89:7b:e1:53:5c:6a:97:3e:74:ef:c4:7f:b2:4a: eb:f2:45:9d:f5:b4:a5:64:95:ed:75:ed:0d:d3:7b: 59:a1:9a:6a:6c:7e:c8:5e:76:05:0c:8d:8b:e5:ce: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8F:45:D6:02:2D:E5:CB:B4:E2:E6:11:31:C4:D8:46:DD:BE:26:39 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:e0:e8:17:f3:ca:6b:99:f0:df:c0:d6:5e:22:f0:fd:0b: e1:06:5d:9d:90:36:e9:b2:b5:3b:a3:dc:0f:bd:6f:79:b6:9e: 10:a4:47:f5:a2:6e:d3:55:5c:92:6b:ad:f3:a6:34:9c:bb:6e: 6e:f5:c7:83:7d:30:17:9a:0a:f2:84:41:58:27:9e:ce:15:79: 24:e9:c7:16:70:03:93:b2:68:0c:3e:ff:1b:04:07:a3:0f:4d: 73:7a:5c:d0:84:b2:14:48:f1:c8:bc:3f:78:7e:cc:e6:cd:5e: 44:2f:a6:06:6a:bc:44:d4:b1:e1:80:72:61:32:02:17:24:5a: db:cc:42:04:6d:59:75:ff:90:69:59:71:ba:a7:04:be:76:21: 20:9f:c3:54:55:ab:f8:9d:eb:ec:6d:bf:10:a0:5f:20:6a:64: 99:f1:af:48:58:0f:d8:b6:90:71:cf:7b:92:74:d0:19:93:bc: 17:71:75:1e:89:da:18:ef:bf:16:64:73:aa:db:27:82:84:1b: 68:44:96:0b:74:2f:54:fe:81:39:80:7e:0e:26:8c:45:5c:e9: d5:ec:04:9c:8f:ec:4f:5d:b3:15:8f:73:26:98:1c:fd:02:33: 9a:39:a3:08:5f:20:bb:4c:52:63:ba:b5:44:36:83:c4:98:11: e8:1e:7f:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ06+F0bVgqDMY9krS+PUqUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMzI5MTkwMDQ4WhcNMjYwMzMwMTkwMDQ4WjAzMTEwLwYDVQQD EygzZThmNDVkNjAyMmRlNWNiYjRlMmU2MTEzMWM0ZDg0NmRkYmUyNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/S5XdXef8ceOKHPlmb7zbHdXF2O iNaSmDcEvPTOsOwyuqthOZJ5TShNuQ50FtsGjTkOIt5Vkcscnzzpxl6Pw4LAdgsR z0imUujKnANt2jXfSx2iN1Wmzud0cJTDCV/+dOf9cQ8WaHf+Df6Pj9HwaGr1fYGd rHZ34PrgmzAr0aER558ZMLh4ljWAWRLR8KvpcyTB933o7fEt8kYMa1GIBk59Aaw5 72BUFEy6TJ9CcwG7oQ9sydVnRw/Ud7g5PUkZFkjf7eSgCptIT/6rsxiX/012iXvh U1xqlz5078R/skrr8kWd9bSlZJXtde0N03tZoZpqbH7IXnYFDI2L5c4+yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6PRdYCLeXLtOLmETHE2EbdviY5MB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVfg6Bfz ymuZ8N/A1l4i8P0L4QZdnZA26bK1O6PcD71vebaeEKRH9aJu01Vckmut86Y0nLtu bvXHg30wF5oK8oRBWCeezhV5JOnHFnADk7JoDD7/GwQHow9Nc3pc0ISyFEjxyLw/ eH7M5s1eRC+mBmq8RNSx4YByYTICFyRa28xCBG1Zdf+QaVlxuqcEvnYhIJ/DVFWr +J3r7G2/EKBfIGpkmfGvSFgP2LaQcc97knTQGZO8F3F1HonaGO+/FmRzqtsngoQb aESWC3QvVP6BOYB+DiaMRVzp1ewEnI/sT12zFY9zJpgc/QIzmjmjCF8gu0xSY7q1 RDaDxJgR6B5/zw== -----END CERTIFICATE-----Generated at Sun Mar 29 20:48:34 2026 by rpki-client