$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: L7FBQfU8fD6xegj5eIag2nEEicxSmC9tCKOb2nQyXNs= Subject key identifier: E2:90:9A:CA:6E:1D:2C:D6:9F:4B:46:F2:86:81:76:83:83:91:9B:05 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01A116AAA6820271A1F2823C48CC7EAA6DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1AA0 Signing time: Wed 07 Oct 2026 14:00:44 +0000 Manifest this update: Wed 07 Oct 2026 14:00:44 +0000 Manifest next update: Thu 08 Oct 2026 14:00:44 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 266VIf+regzFADCfpo7bDAJVJ3v9Z0saz7pNa0QNtzk=) 11: agg93eycwc-rvB8nPNTMouvL620.roa (hash: l8IOgucjfyhI1MIQqB2bBjj26oEwYULnXCLG+tC+0UY=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: fhggUi6tfoaIeacDMVh7ucBgWEs.roa (hash: dgqS8/QzcpGNir6kNNn3rNs+Fs305XRQP/rvNZT21e0=) 14: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 13:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:16:aa:a6:82:02:71:a1:f2:82:3c:48:cc:7e:aa:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Oct 7 14:00:44 2026 GMT Not After : Oct 8 14:00:44 2026 GMT Subject: CN=e2909aca6e1d2cd69f4b46f28681768383919b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:51:d5:3b:cc:c9:83:d2:2c:6f:6a:d1:fb:bb: 2b:da:ee:2b:78:eb:92:57:fa:ea:86:a6:db:b6:cd: 80:f4:e4:84:8a:ea:47:7c:a7:e7:08:c1:d4:52:2a: 09:01:59:58:93:e9:f0:d7:88:89:33:66:2e:72:a8: 89:91:34:51:7a:c8:7b:67:60:39:ad:b5:14:55:98: 5f:1f:70:26:f9:97:84:dc:5c:e7:3e:67:07:c4:31: cf:6a:f5:ae:cc:a1:1e:9b:f2:9b:71:a4:cc:4f:2d: cc:b6:fe:aa:ad:43:91:72:0a:e4:a3:af:61:a8:b1: f1:94:95:5e:8b:dc:78:d4:b1:1d:38:78:e2:84:83: 71:04:d7:2a:5f:14:70:c9:bf:82:a5:03:87:71:b5: 6f:93:80:6e:d9:fb:f6:60:8d:c4:5b:cb:64:bc:09: d5:60:44:6f:a9:6f:54:26:24:bb:96:cf:ef:93:07: 0d:b5:d9:94:17:c9:e0:45:f3:ab:95:3b:17:96:1e: d8:b1:58:6d:6e:30:35:e2:52:17:ed:9f:49:96:2d: d5:5b:07:83:b5:0e:39:7f:ae:73:63:2c:fb:98:b1: 7b:2c:81:18:ff:b5:73:ec:df:02:20:b4:99:1d:e8: fa:20:d0:db:f9:6d:f6:34:b1:07:ea:49:7c:02:84: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:90:9A:CA:6E:1D:2C:D6:9F:4B:46:F2:86:81:76:83:83:91:9B:05 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1a:70:04:87:63:6a:d7:2c:7a:e1:5b:b6:91:5b:10:86:61: ef:8a:48:aa:b2:12:fe:2f:5e:80:26:b1:e9:2d:a0:a4:21:2a: 8f:89:52:66:0a:e1:44:42:4f:2e:e8:47:01:37:6c:1b:ae:71: 43:da:14:f0:8c:76:1a:9c:8b:0d:15:1a:81:8d:a4:55:bd:5f: ed:8a:56:f7:31:ab:f7:00:93:be:c4:a1:21:11:ef:17:52:b5: da:e9:6d:86:9b:56:8e:9c:1c:20:d7:e5:0c:a6:71:c7:ba:d1: 6b:41:2d:2c:04:a0:17:06:04:af:30:ed:e4:07:39:e0:76:48: 7b:3c:9d:2f:94:d0:ab:5b:85:71:d9:e4:a4:95:85:3a:89:7d: e7:a7:2c:b9:03:98:e2:cd:16:8f:ea:57:c0:fa:f3:00:4e:9b: 8a:94:c1:4b:48:5a:4e:b3:5f:20:2f:83:96:ea:e2:b8:b6:d2: 34:26:e9:65:7f:d8:cb:7f:1d:5b:e0:c3:ab:64:f6:99:ff:fe: 96:c5:b3:ac:e2:1d:e0:8a:91:df:1f:b1:d8:95:59:ba:ac:ab: 9b:54:dd:8e:8b:8d:65:ce:01:fb:17:4b:34:e7:ad:1b:f9:03: 86:5d:85:b6:17:44:36:c6:4c:ca:a7:29:71:b0:58:da:19:8a: f5:a5:27:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEWqqaCAnGh8oI8SMx+qm3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYxMDA3MTQwMDQ0WhcNMjYxMDA4MTQwMDQ0WjAzMTEwLwYDVQQD EyhlMjkwOWFjYTZlMWQyY2Q2OWY0YjQ2ZjI4NjgxNzY4MzgzOTE5YjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VHVO8zJg9Isb2rR+7sr2u4reOuS V/rqhqbbts2A9OSEiupHfKfnCMHUUioJAVlYk+nw14iJM2YucqiJkTRResh7Z2A5 rbUUVZhfH3Am+ZeE3FznPmcHxDHPavWuzKEem/KbcaTMTy3Mtv6qrUORcgrko69h qLHxlJVei9x41LEdOHjihINxBNcqXxRwyb+CpQOHcbVvk4Bu2fv2YI3EW8tkvAnV YERvqW9UJiS7ls/vkwcNtdmUF8ngRfOrlTsXlh7YsVhtbjA14lIX7Z9Jli3VWweD tQ45f65zYyz7mLF7LIEY/7Vz7N8CILSZHej6INDb+W32NLEH6kl8AoRrKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKQmspuHSzWn0tG8oaBdoODkZsFMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxpwBIdj atcseuFbtpFbEIZh74pIqrIS/i9egCax6S2gpCEqj4lSZgrhREJPLuhHATdsG65x Q9oU8Ix2GpyLDRUagY2kVb1f7YpW9zGr9wCTvsShIRHvF1K12ulthptWjpwcINfl DKZxx7rRa0EtLASgFwYErzDt5Ac54HZIezydL5TQq1uFcdnkpJWFOol956csuQOY 4s0Wj+pXwPrzAE6bipTBS0haTrNfIC+DluriuLbSNCbpZX/Yy38dW+DDq2T2mf/+ lsWzrOId4IqR3x+x2JVZuqyrm1TdjouNZc4B+xdLNOetG/kDhl2FthdENsZMyqcp cbBY2hmK9aUnQQ== -----END CERTIFICATE-----Generated at Wed Oct 7 19:23:25 2026 by rpki-client