$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: d/v6PmNpNRKEq/UtoCh1Z9kwRpEzkcrHUxU+OsS7jyo= Subject key identifier: D4:F0:A4:C0:51:33:48:8B:3E:B4:50:EE:C1:8A:69:12:94:29:14:45 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019E2A6FE5687CB07F9D72A66B390634675C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 191B Signing time: Fri 15 May 2026 07:00:36 +0000 Manifest this update: Fri 15 May 2026 07:00:36 +0000 Manifest next update: Sat 16 May 2026 07:00:36 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: t9MxxXRbZ9+3fEyUrwVMM8hCXD0qqHhSWU19/EHWAX8=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:6f:e5:68:7c:b0:7f:9d:72:a6:6b:39:06:34:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: May 15 07:00:36 2026 GMT Not After : May 16 07:00:36 2026 GMT Subject: CN=d4f0a4c05133488b3eb450eec18a691294291445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:13:c0:e1:be:b5:fb:88:a3:1f:5b:66:8f: b4:e8:50:47:b4:c5:b1:62:c2:de:e3:8e:a4:17:8d: 00:c9:8f:4a:2f:75:7d:c3:86:31:7c:60:23:00:66: 70:d3:84:bd:44:f1:10:2b:68:fa:d3:ec:d5:b4:f3: f7:ba:68:f6:90:06:cf:bc:e8:91:4e:26:60:0f:3a: ef:dc:40:bd:c9:51:6e:97:75:46:5c:13:e2:71:e7: 9b:25:b9:e1:db:2a:97:09:c9:2a:9b:1d:6a:25:af: a2:14:a9:46:aa:48:ba:41:8f:61:fc:c7:56:39:e1: cc:06:35:7e:3f:7f:90:bd:03:b7:95:8d:60:a3:50: cd:de:28:cc:17:7f:6b:27:b6:6d:b7:bd:3f:dd:d5: e9:f5:be:cb:0d:fa:73:46:77:b6:9e:9e:94:69:05: 8d:04:cf:e3:ba:50:0c:e3:dd:41:5d:a8:b7:4e:ca: ed:e4:1b:45:5a:35:20:98:48:74:06:8c:c6:8e:02: 8d:aa:46:f5:1e:85:b5:98:8b:b8:47:cf:3c:bb:08: d9:6f:af:9b:65:c5:1b:6a:95:f5:d9:fa:88:2a:d4: 8f:c1:50:65:53:19:3f:a5:e4:9c:df:d1:bc:4c:cc: fb:01:a3:d1:75:75:c3:25:e8:93:14:43:52:fd:3e: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:A4:C0:51:33:48:8B:3E:B4:50:EE:C1:8A:69:12:94:29:14:45 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:03:9c:1d:bf:89:c2:fa:6a:c2:8b:fb:9c:41:a9:5f:4c:06: 11:75:b7:7f:0a:41:f4:12:a4:85:66:22:b4:46:e2:f4:d5:06: d7:b5:14:85:31:74:94:49:29:6f:d3:b3:00:53:6b:93:4b:6a: 4b:d1:c5:bc:b5:54:06:05:7c:ff:34:10:d2:5e:ea:6a:40:e2: 35:da:9d:95:de:8c:28:98:c0:11:66:c6:44:fc:2b:28:56:61: 55:90:59:cb:37:59:16:52:3a:0d:1d:72:c0:9b:a0:d5:a8:66: 4c:4d:af:ff:45:5a:59:27:ce:50:84:31:8c:3c:98:e4:dc:64: 1f:07:ec:6d:67:1d:85:5a:fb:05:fa:a5:65:2a:29:14:3a:50: 8b:36:17:cf:56:a5:d3:87:13:83:8c:8d:a8:d5:16:b1:6f:f8: 17:8c:d4:a1:02:d1:b4:1c:01:ad:06:53:cb:70:35:8f:ad:02: fc:e4:29:65:cd:9f:80:ce:75:43:05:a3:cc:98:7e:52:b0:1e: 6c:52:2b:23:b4:0e:fe:16:36:04:01:20:bd:d9:2a:69:60:1e: 11:ac:c7:5a:19:59:e8:d5:c2:a1:67:ee:20:92:5b:32:47:80: 3d:c1:c2:d6:34:7d:34:f0:ec:86:85:18:7a:be:ed:fe:1b:9f: 3b:0c:90:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4qb+VofLB/nXKmazkGNGdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwNTE1MDcwMDM2WhcNMjYwNTE2MDcwMDM2WjAzMTEwLwYDVQQD EyhkNGYwYTRjMDUxMzM0ODhiM2ViNDUwZWVjMThhNjkxMjk0MjkxNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfUTwOG+tfuIox9bZo+06FBHtMWx YsLe446kF40AyY9KL3V9w4YxfGAjAGZw04S9RPEQK2j60+zVtPP3umj2kAbPvOiR TiZgDzrv3EC9yVFul3VGXBPiceebJbnh2yqXCckqmx1qJa+iFKlGqki6QY9h/MdW OeHMBjV+P3+QvQO3lY1go1DN3ijMF39rJ7Ztt70/3dXp9b7LDfpzRne2np6UaQWN BM/julAM491BXai3Tsrt5BtFWjUgmEh0BozGjgKNqkb1HoW1mIu4R888uwjZb6+b ZcUbapX12fqIKtSPwVBlUxk/peSc39G8TMz7AaPRdXXDJeiTFENS/T5o+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTwpMBRM0iLPrRQ7sGKaRKUKRRFMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgOcHb+J wvpqwov7nEGpX0wGEXW3fwpB9BKkhWYitEbi9NUG17UUhTF0lEkpb9OzAFNrk0tq S9HFvLVUBgV8/zQQ0l7qakDiNdqdld6MKJjAEWbGRPwrKFZhVZBZyzdZFlI6DR1y wJug1ahmTE2v/0VaWSfOUIQxjDyY5NxkHwfsbWcdhVr7BfqlZSopFDpQizYXz1al 04cTg4yNqNUWsW/4F4zUoQLRtBwBrQZTy3A1j60C/OQpZc2fgM51QwWjzJh+UrAe bFIrI7QO/hY2BAEgvdkqaWAeEazHWhlZ6NXCoWfuIJJbMkeAPcHC1jR9NPDshoUY er7t/hufOwyQSw== -----END CERTIFICATE-----Generated at Fri May 15 12:43:23 2026 by rpki-client